last executing test programs: 35m58.469812527s ago: executing program 32 (id=89): rt_sigqueueinfo(0xffffffffffffffff, 0x17, &(0x7f0000000000)={0x3, 0x0, 0x8}) (async) rt_sigtimedwait(&(0x7f0000000080)={[0x7]}, &(0x7f00000000c0), &(0x7f0000000140)={0x77359400}, 0x8) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x4, 0x181400) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000001c0)={0x2389, 0x17, [{0x2, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0xa, 0x1}, {0xa, 0x1}, {}, {0x1, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0xf}, {0xe, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0xf, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0xc, 0x1}, {0xe, 0x1}, {0x6}, {0x9, 0x1}, {0x1}, {0x0, 0x1}]}) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) ptrace$getsig(0x4202, r1, 0x6, &(0x7f0000000240)) rmdir(&(0x7f00000002c0)='./file0\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000340)='+%-\x00') (async) ptrace$peeksig(0x4209, r1, &(0x7f0000000380)={0x4, 0x0, 0x1}, &(0x7f00000003c0)=[{}]) (async, rerun: 64) r3 = syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 64) syz_usb_ep_read(r3, 0xa3, 0xf, &(0x7f0000000480)=""/15) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000021c0)=[{{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f0000000700)=""/31, 0x1f}], 0x4}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/219, 0xdb}, {&(0x7f0000000900)=""/41, 0x29}, {&(0x7f0000000940)=""/45, 0x2d}, {&(0x7f0000000980)=""/195, 0xc3}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/145, 0x91}, {&(0x7f0000001b40)}], 0x7, &(0x7f0000001c00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000001c80), 0x6e, &(0x7f0000002080)=[{&(0x7f0000001d00)=""/33, 0x21}, {&(0x7f0000001d40)=""/213, 0xd5}, {&(0x7f0000001e40)=""/164, 0xa4}, {&(0x7f0000001f00)=""/66, 0x42}, {&(0x7f0000001f80)=""/234, 0xea}], 0x5, &(0x7f0000002100)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xb0}}], 0x3, 0x40010040, &(0x7f0000002280)={0x0, 0x989680}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f00000022c0)={"739e8709e6ca077207c09f3105d542d4", 0x0, 0x0, {0x856, 0x6}, {0x45, 0x9}, 0x0, [0x7a8d, 0xffffffffadd76b2f, 0x9, 0x7, 0x4, 0x4, 0x10001, 0xfffffffffffffffb, 0x0, 0x8, 0x1ff, 0x3, 0x80, 0x3, 0x3ce00edb, 0x2]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000002440)={{r9}, r12, 0x2, @inherit={0x68, &(0x7f00000023c0)={0x0, 0x4, 0x1, 0x1ff, {0x21, 0x7, 0x7, 0x0, 0x2}, [0x8, 0x2, 0x10, 0xa]}}, @subvolid=0x8}) (async) pidfd_send_signal(r7, 0x1f, &(0x7f0000003440)={0x3b, 0x9}, 0x0) (async, rerun: 64) r13 = open_tree(r6, &(0x7f00000034c0)='./file0\x00', 0x0) (rerun: 64) ioctl$AUTOFS_IOC_CATATONIC(r13, 0x9362, 0x0) (async) write$selinux_validatetrans(r10, &(0x7f0000003500)={'system_u:object_r:smartcard_device_t:s0', 0x20, 'system_u:object_r:setrans_var_run_t:s0', 0x20, 0x7fffffff, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x7b) (async, rerun: 32) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000003640)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x1c, 0x0, 0x9, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003680)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r14, 0x10f, 0x80, &(0x7f00000036c0), &(0x7f0000003700)=0x4) (async) dup(0xffffffffffffffff) waitid(0x1, r11, &(0x7f0000003740), 0x80000000, &(0x7f00000037c0)) (async) renameat(r4, &(0x7f0000003880)='./file0\x00', r4, &(0x7f00000038c0)='./file0\x00') (async) waitid$P_PIDFD(0x3, r5, &(0x7f0000003900), 0x40000000, &(0x7f0000003980)) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r15, &(0x7f0000004180)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004140)={&(0x7f0000003ac0)={0x668, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xc, 0x24, 0x5, 0x60, 0x2, 0xb, 0x4, 0x6, 0x9, 0x12, 0x12, 0x3, 0x12, 0x23, 0x16, 0x0, 0x1b, 0x3, 0x48, 0x6, 0xb, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x6, 0x9}, {0x4, 0x5}, {0x0, 0x8}, {0x4, 0x3}, {0x4, 0x2}, {0x7, 0x6}, {0x6, 0x8}, {0x1, 0x7}, {0x3, 0xa}, {0x1, 0x4}, {}, {0x5, 0x2}, {0x3, 0x2}, {0x7, 0x7}, {0x3, 0x7}, {0x2, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x3, 0x5}, {0x5, 0x8}, {0x2}, {0x4, 0x6}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x1}, {0x0, 0x6}, {0x5, 0x8}, {}, {0x4, 0x2}, {0x6, 0x7}, {0x4}, {0x6, 0x3}, {0x1, 0xa}, {0x3, 0x4}, {0x0, 0x2}, {0x2, 0x8}, {0x4, 0x7}, {0x1, 0x8}, {0x5}, {0x4, 0x7}, {0x0, 0x8}, {0x7, 0xa}, {0x1, 0x4}, {0x6, 0x2}, {0x4, 0xa}, {0x4, 0x1}, {0x5, 0x8}, {0x5}, {0x4, 0x4}, {0x7, 0x2}, {0x3, 0x9}, {0x5, 0x3}, {0x7, 0x2}, {0x7, 0x9}, {0x6, 0x5}, {0x3, 0x9}, {0x4, 0x4}, {0x7, 0x8}, {0x7, 0x4}, {0x5, 0x1}, {0x2, 0x7}, {0x5, 0x2}, {0x7, 0x8}, {0x1, 0x3}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x9, 0x5, 0x2, 0x0, 0x30, 0xb]}]}]}, @NL80211_ATTR_TX_RATES={0xb0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x1b, 0x36, 0x9, 0x6c, 0x16, 0x60, 0x2, 0x24, 0x6, 0x48, 0x5, 0x2, 0x30, 0x60, 0xb, 0x48, 0x4, 0xf, 0xb, 0x1, 0x6c, 0x0, 0x36, 0x24, 0xb, 0x1, 0x1b, 0x48, 0xc, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x101, 0x5, 0x2, 0xfffb, 0x8, 0x9]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x3}, {0x0, 0x1}, {0x3, 0x8}, {0x2, 0x6}, {0x7, 0x2}, {0x0, 0x2}, {0x0, 0x9}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x6, 0x8, 0x40, 0xcdd, 0x40, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x1, 0xe9, 0x0, 0x72ba, 0xd, 0xd65]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x12, 0x6, 0x12, 0xb, 0x16, 0xc, 0x1, 0x4c, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x5, 0x2, 0x8, 0xd025, 0x5, 0xfff8]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x5, 0x5}, {0x1, 0x7}, {0x0, 0xa}, {0x7, 0x1}, {0x0, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x5, 0x2}, {0x4}, {0x3, 0x4}, {0x4, 0x2}, {0x6, 0x4}, {0x6}, {0x1, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x4, 0xa}, {0x2}, {0x0, 0xa}, {0x2}, {0x3, 0xa}, {0x7, 0xa}, {0x2, 0xa}, {0x1, 0x1}, {0x5, 0x8}, {0x1, 0x4}, {0x2}, {0x7, 0x7}, {0x3, 0x5}, {0x3, 0x4}, {0x5, 0x5}, {0x1, 0x9}, {0x6, 0x5}, {0x7, 0x8}, {0x1, 0x1}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0x1}, {0x4, 0x6}, {0x5, 0x3}, {0x1, 0x1}, {0x4, 0x8}, {0x4, 0x9}, {0x5}, {0x4, 0x6}, {0x1, 0x2}, {0x4, 0x6}, {0x3}, {0x7, 0x1}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x1}, {0x0, 0x5}, {0x3, 0x2}, {0x2, 0x3}, {0x4, 0x6}, {0x5, 0x7}, {0x0, 0x5}, {0x7, 0xa}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0xfffc, 0x100, 0x6, 0x500, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x12, 0x5]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x64c4, 0xfffe, 0x4, 0xfffc, 0x4, 0x3, 0xc, 0xe9]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x2}, {0x0, 0x6}, {0x2, 0xa}, {0x5, 0x5}, {0x4, 0x5}, {0x7, 0x8}, {0x3, 0x7}, {0x1, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1}, {0x1, 0x6}, {0x1, 0x9}, {0x1, 0x9}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x7}, {0x3, 0x3}, {0x4, 0x5}, {0x1, 0x2}, {0x6, 0x2}, {0x4, 0x7}, {0x4, 0x6}, {0x3, 0x1}, {0x7, 0x6}, {0x7, 0x7}, {0x0, 0x5}, {0x6, 0xa}, {0x2, 0x8}, {0x1}, {0x7, 0x7}, {0x0, 0x9}, {0x1, 0x6}, {0x2, 0x1}, {0x0, 0x3}, {}, {0x6, 0x8}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0xa}, {0x2, 0x9}, {0x5, 0xa}, {0x2, 0x2}, {}, {0x1, 0x9}, {0x0, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x2}, {0x4, 0x6}, {0x0, 0x3}, {0x7}, {0x7, 0x5}, {0x5, 0xf}, {0x2, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x1}, {0x0, 0x5}, {0x5}, {0x4}, {0x0, 0x3}, {0x0, 0x1}, {0x7, 0x6}, {0x6, 0xa}, {0x2, 0x7}, {0x4, 0x1}, {0x1, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x8, 0x4, 0x5, 0x6, 0x6, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x3, 0xffb0, 0x652e, 0x1, 0x4, 0x5]}}]}]}, @NL80211_ATTR_TX_RATES={0x80, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x8, 0x1, 0x9, 0xfffb, 0xd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7fff, 0x9, 0x1e62, 0x9, 0x4, 0x3, 0x3]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0xc, 0x1b, 0x6, 0x60, 0x36, 0x2, 0x6c, 0x5, 0x24, 0x5, 0xb, 0x5, 0x36, 0x5, 0x30, 0x36, 0x24, 0x30, 0x60, 0x28d7d1757411cd96, 0x30, 0x24, 0x6, 0x6c, 0x30, 0xc, 0x24, 0x9, 0x1, 0x16, 0x9]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x8, 0x2, 0x6, 0x5c2, 0x5, 0x40]}}]}]}, @NL80211_ATTR_TX_RATES={0x1d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x6, 0x9b6, 0x400, 0x0, 0x1, 0xffef]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x18, 0xb5d6fe8a67cc6d9b, 0x9, 0x12, 0x30, 0x24]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x2}, {0x5, 0x7}, {0x4, 0x9}, {0x6, 0x1}, {0x5, 0x9}, {0x3, 0x7}, {0x1, 0x5}, {0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x8b9, 0x5dc, 0xf, 0x1, 0x101, 0x7ff, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0xc, 0x3, 0x3, 0x1b, 0xc, 0x3, 0x1, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x224, 0x4, 0x3, 0x5, 0x5, 0x1, 0x9, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x7, 0x1, 0x400, 0x4, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x9}, {0x1, 0x8}, {0x3, 0x2}, {0x2, 0x3}, {0x1, 0x7}, {0x5, 0x3}, {0x6, 0x6}, {0x2, 0xa}, {0x2, 0x9}, {0x0, 0x8}, {0x2, 0x2}, {0x1}, {0x0, 0x4}, {0x0, 0x2}, {0x7, 0x2}, {0x3, 0x9}, {0x0, 0x7}, {0x0, 0x9}, {0x5, 0x8}, {0x6, 0x2}, {0x4, 0x7}, {0x2, 0x2}, {0x0, 0x3}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0xa}, {0x4, 0x5}, {0x0, 0x5}, {0x7, 0x5}, {0x7, 0x1}, {0x4, 0x2}, {0x0, 0x9}, {0x2, 0xf}, {0x6, 0x2}, {0x5}, {0x1, 0x5}, {0x7, 0x3}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x2, 0x8}, {0x4, 0x2}, {0x2, 0x7}, {0x5, 0x3}, {0x4, 0x7}, {0x5, 0x8}, {0x2, 0x4}, {0x2, 0x8}, {0x7, 0x2}, {0x3}, {0x7, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x3, 0x6}, {0x5, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xffff, 0x9, 0x4, 0x2, 0x3, 0x5, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x6, 0x800, 0x400, 0x7, 0x3, 0x34e]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x36, 0x9, 0x9, 0x24, 0x18, 0x0, 0x2f, 0x9, 0x0, 0xb, 0x74, 0x36, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x7, 0x9, 0x8, 0x3, 0x3, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x80, 0x1671, 0x0, 0x8, 0x5, 0x8]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0xf68a, 0x3, 0xf9, 0x3, 0x6, 0x6, 0x62]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x40, 0x7d, 0x20, 0x8, 0x1, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x6}, {0x4, 0x9}, {0x3, 0x9}, {0x4, 0x1}, {0x1, 0x4}, {0x5, 0x3}, {0x2, 0x5}, {0x6, 0x6}, {0x2, 0x9}, {0x1}, {0x4, 0x8}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xf4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xe20, 0x6, 0x2, 0x0, 0x200, 0x4, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x3, 0x18, 0x16, 0x60, 0x6c, 0x6c, 0x4, 0x5, 0x48, 0x16, 0x5, 0x18, 0x24, 0x9, 0x18]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x9, 0x60, 0x6c, 0xb, 0x12, 0x48, 0x5, 0x48, 0x9, 0x48, 0x30, 0x30, 0x60, 0x30, 0x1b, 0x6, 0x14, 0x12, 0x1b, 0x48]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x18, 0xe, 0x0, 0x24, 0x16, 0x24, 0x6c, 0x24, 0x3, 0x60, 0x6, 0x6c, 0x9, 0x16, 0x48, 0x16, 0xb, 0x4, 0x12, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0xd, 0xffff, 0xa, 0xf, 0x4, 0xfff7]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x5, 0x4}, {0x1, 0x5}, {0x5}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x8}, {0x5, 0x5}, {0x2, 0x3}, {0x6, 0x8}, {0x2, 0x9}, {0x0, 0xa}, {0x1}, {0x2, 0x7}, {0x5}, {0x5}, {0x4}, {0x5, 0x2}, {0x0, 0x6}, {0x3, 0x4}, {0x4, 0x2}, {0x7, 0x5}, {0x5, 0x5}, {0x5, 0xa}, {0x6, 0x9}, {0x1, 0x2}, {0x3, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x5}, {0x1, 0x8}, {0x2, 0x7}, {}, {0x1, 0x1}, {0x6, 0x8}, {0x4, 0x6}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x3}, {0x5, 0x7}, {0x3, 0x2}, {0x3, 0x8}, {0x6, 0x6}, {0x4, 0x1}, {0x6, 0x5}, {0x0, 0x2}, {0x3, 0x1e}, {0x4, 0xa}, {0x7, 0x6}, {0x3, 0x6}, {0x3, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x4, 0x6}, {0x1, 0xa}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0x4}, {0x4, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x4}, {0x4, 0xa}, {0x5, 0x3}, {0x1, 0x6}, {0x7, 0x2}, {0x6, 0xa}, {0x1, 0x2}, {0x0, 0x4}, {0x3}, {0x2}, {0x4, 0x1}, {0x5, 0x2}, {0x3, 0x4}, {0x6, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfff7, 0xa, 0x4, 0x1, 0x6, 0x2, 0x9]}}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x9}, {0x3, 0x7}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x5, 0x2}, {0x2, 0x2}, {0x2, 0x9}, {0x7}, {0x7, 0x8}, {0x6, 0x4}, {0x7, 0x9}, {0x2}, {0x1, 0x5}, {0x3, 0x1}, {0x3, 0x4}, {0x2}, {0x0, 0x7}, {0x7, 0x9}, {0x2, 0x2}, {0x5, 0x4}, {0x5, 0x6}, {0x4, 0x1}, {0x3, 0x4}, {0x0, 0x2}, {0x3, 0x6}, {0x4, 0x7}, {0x3, 0xa}, {0x3, 0x6}, {0x5, 0x3}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0x1}, {0x0, 0x7}, {0x7, 0x3}, {0x0, 0x4}, {0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x9}, {0x4, 0x5}, {0x3, 0x2}, {0x7, 0x2}, {0x7, 0x6}, {0x1, 0x5}, {0x2, 0x8}, {0x2, 0x9}, {0x0, 0x1}, {0x2, 0x8}, {0x0, 0x4}, {0x4, 0x4}, {0x1}, {0x0, 0x3}, {0x3, 0x2}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x3}, {0x6, 0x6}, {0x7, 0x5}, {0x6, 0x8}, {0x3, 0x2}, {0x1, 0x4}, {0x1, 0xa}, {0x5, 0x9}, {0x4, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0x5}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0x6, 0xb, 0x30, 0x6, 0x2, 0x48, 0x6, 0x36, 0x0, 0x48, 0x24, 0x4, 0x2]}]}]}]}, 0x668}, 0x1, 0x0, 0x0, 0x8081}, 0x40) 34m6.961182751s ago: executing program 33 (id=1333): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r2, &(0x7f00000001c0)='m', 0x1, 0x1}]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 33m49.291326923s ago: executing program 34 (id=1525): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0xa8d58000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0xa8d58000) syz_io_uring_setup(0x40000f00, &(0x7f0000000080)={0x0, 0x0, 0x20000, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) getpid() (async) r3 = getpid() ioprio_set$pid(0x3, r3, 0x0) (async) ioprio_set$pid(0x3, r3, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r4, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d48751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af", 0xbc}], 0x1) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r4, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000002780)=""/143, 0xffffffffffffff68}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000001080)=""/4110, 0x1000}], 0x7) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000000c0)=0xffffffff, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 33m47.275341652s ago: executing program 35 (id=1551): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000006a0b00000100000000000000000000000200000006000004"]) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RNDADDENTROPY(r2, 0x40045201, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)={0x40, 0x13, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x4f}, @nested={0x4, 0x71}, @nested={0x28, 0xbc, 0x0, 0x1, [@nested={0x4, 0xc3}, @nested={0x8, 0x13, 0x0, 0x1, [@generic="3a48ad04"]}, @nested={0x18, 0x2e, 0x0, 0x1, [@typed={0x14, 0x10b, 0x0, 0x0, @ipv6=@local}]}]}]}, 0x40}], 0x1, 0x0, 0x0, 0x8800}, 0x8880) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000080)={'vlan0\x00', 0x100}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000340)={'wg1\x00', 0x200}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000200)) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000007c0)=@newtclass={0x24, 0x28, 0x1d, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xb, 0xf}, {0x8, 0xf}, {0xf, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=@deltclass={0x58, 0x29, 0x8, 0xff, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xd, 0xfff1}, {0xb, 0xe}, {0xfff2, 0xd}}, [@c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_FD={0x8, 0x1, r10}, @TCA_ATM_FD={0x8, 0x1, r8}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x9}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="0903023cee0d000000252a"], 0x14}, 0x1, 0x0, 0x0, 0x4008915}, 0x20040000) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0022120000005698f20b45501814b2cf992584839e3ce07906b426d2887f06598d555540e926a017ca30f8f1f416fb8a2a3569bacbc079c42519afe110d8020fe66252644f094cbc1507ce4b188f747370fe58aae15aa08636e1ccb3c27ff4fb343692632e807dbbba93a03b78894416f8aeab81583f8c47e8c589c7e33705f261580626b8fe86463219f21a754cd5b13aa169a178978a4d362f09589cc8ed2b68cc31179e860f85779d785cd2570db87718c25545ef7e"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 29m50.976939727s ago: executing program 36 (id=5305): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x1802, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (rerun: 32) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101840, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x80, 0x8, '\x00', 0x1, &(0x7f0000000000)=[0x0]}) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000040000000030100c0"]) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x50, 0x0, &(0x7f0000000800)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 27m50.64679449s ago: executing program 37 (id=7014): openat$kvm(0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 22m56.834978146s ago: executing program 38 (id=10858): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) waitid(0x2, r1, 0x0, 0x8, 0x0) (async) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/llc/core\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x94022, 0x0) (async, rerun: 32) ppoll(&(0x7f0000000100)=[{r4, 0x1008}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) setsockopt$inet6_buf(r3, 0x29, 0xd3, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) (async, rerun: 64) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000200)='fdinfo/3\x00') (async) read$eventfd(r2, &(0x7f0000000080), 0x8) (async, rerun: 64) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) (rerun: 64) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x55c, 0x20100) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$EVIOCSKEYCODE_V2(r5, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ipvlan0\x00', 0x10) 19m5.834789787s ago: executing program 1 (id=13904): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="0200c123bd7000"/16], 0x10}}, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x8, 0x0, &(0x7f0000000080)) (async) getsockopt$inet6_tcp_int(r2, 0x6, 0x8, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) (async) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="04e0d6", 0x3}], 0x1}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x94b7777fd1709e3a, 0xffffffffffffffff, 0x2fde4000) read(r3, &(0x7f0000000040)=""/98, 0x3a) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 19m5.66787686s ago: executing program 1 (id=13906): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) r1 = socket(0x2, 0x3, 0xfe) sendmmsg$inet(r1, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001140)="281effe935fdce249bd774480a584b135c556eabe1a3f2724200a50e8002a6e5", 0x20}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000054c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0xc, 0xaa, 0x0, 0xf, [0x5f0f, 0x400]}, @ra={0x94, 0x4, 0x1}]}}}], 0x48}}], 0x2, 0x4800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x0, {{@in6=@private2, @in=@multicast1, 0x0, 0x6, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x2c}, {0x0, 0x4, 0x1000000, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x1d}, {0x7f, 0xc99, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x40044) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 19m5.66700582s ago: executing program 1 (id=13907): r0 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x3470ddce98b6037b, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x30, 0x3, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x3, 0xfc, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x3, 0x55, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x210, 0x0, 0xc5, 0xfa}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xc4, 0xd0, 0xf2, 0xff, 0xf}, 0x3d, &(0x7f0000000080)={0x5, 0xf, 0x3d, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x1, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x0, 0x7a}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x7, 0xff00, 0xe, [0xc03f, 0x1f80, 0x3fc0, 0xff00, 0xffffde, 0xc000]}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x400a}}, {0x3a, &(0x7f00000002c0)=@string={0x3a, 0x3, "4dfa85e7b1abd5a55b395f70ac89ecc8fbc7a7748ebbd85779d9e4e44a0550dc099d78e68376aeeda8656fb5c3ad377766e1cd5dfe025c4b"}}]}) syz_usb_ep_write(r0, 0x4, 0xad, &(0x7f00000001c0)="131105cbaf8174faf239d02e2a499da6992240aa8916db52fc8303dd1027f92464b6de3b8bf7e45953c1536f045a17538bd56d2f757f9b011048a926f7e1840fa7e98eb5316d0c429d184796a22fc1d78ca0e0018bdb4f775f75722a40abb87be361d9d3f6d442da657c5558d36e21dee0b106063d73cc2f10f4019c1eb0fe51744b18f47fcb90eda4bb4c359d68f86f66536a51887ef8868bed0ac22061c476e3ef6685f87d4b8ad47f629593") r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002400b74c26bd7000fcdbdf250600000006000400009fec"], 0x1c}, 0x1, 0x0, 0x0, 0x8805}, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r4 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r4, 0x40084504, 0x0) 19m5.052006922s ago: executing program 1 (id=13914): syz_usb_connect$cdc_ecm(0x2, 0x73, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0x1, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0xff, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4, 0x24, 0x13, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x800}, @mdlm_detail={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x0, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x0, 0x75}}}}}]}}]}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 19m4.548603062s ago: executing program 1 (id=13918): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) r4 = fsmount(0xffffffffffffffff, 0x0, 0x84) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000080), &(0x7f0000000140)=0x4) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0xe4e770d38a54a7cb, 0x800, 0x0, 0x1}, 0x20) syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d0001c94080010904f90403c0da26ff0905f10f40000300bf"], 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 19m4.422169814s ago: executing program 1 (id=13919): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd9f, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e9546a58de45a57545563322ee20bc43f7fe47218a02ff8ba942478a7b69462fc2d196137252587ab17948adf2dcc5a03d2f3e276400"/79}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x18, r3, 0x1, 0x81}, 0x14) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x9be3e105aa94a1b8, r6, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x5, r9, 0x1, 0x3, 0x6, @multicast}, 0x14) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x700, 0x8000, 0xa2, 0x7, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x68, 0x0, 0x2, 0x4, 0x0, @multicast1, @local, {[@generic={0x0, 0xe, "6f2e66b07db2642573e964a5"}, @noop, @generic={0xd7, 0x8, "25eb5a932423"}]}}}}}) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0xa) sendto$packet(r14, &(0x7f0000000240)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1bc5b8431bb01c8200f4c3087489be91d3b08f48bdd6c1107607257711da807e", 0x40, 0x0, &(0x7f0000000540)={0xc9, 0x0, r15, 0x1, 0x0, 0x6, @multicast}, 0x14) r16 = socket(0x11, 0x3, 0x0) r17 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r16, &(0x7f0000000180)={0x11, 0x5, r18, 0x1, 0x3, 0x6, @multicast}, 0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ac070000", @ANYRES16=0x0, @ANYBLOB="020026bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="6801028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004002b01000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400050000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000100000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="280102803c000100240001007573657265640000000000000000000000000005000300060000000400040008000600"/60, @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400050000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="74000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004400040008000887070000000800010c02000000030001020001000016000880fbffffff050005020800000000040803000000003b00010d03000000bb6500010700000008000100", @ANYRES32=0x0, @ANYBLOB="8402028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004000000080001000000010002ae02000000dff40108e191000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000008000100", @ANYRES32=0x0, @ANYBLOB="b40002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r3, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="a801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB], 0x7ac}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) 19m4.377979096s ago: executing program 39 (id=13919): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd9f, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e9546a58de45a57545563322ee20bc43f7fe47218a02ff8ba942478a7b69462fc2d196137252587ab17948adf2dcc5a03d2f3e276400"/79}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x18, r3, 0x1, 0x81}, 0x14) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x9be3e105aa94a1b8, r6, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x5, r9, 0x1, 0x3, 0x6, @multicast}, 0x14) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x700, 0x8000, 0xa2, 0x7, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x68, 0x0, 0x2, 0x4, 0x0, @multicast1, @local, {[@generic={0x0, 0xe, "6f2e66b07db2642573e964a5"}, @noop, @generic={0xd7, 0x8, "25eb5a932423"}]}}}}}) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0xa) sendto$packet(r14, &(0x7f0000000240)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1bc5b8431bb01c8200f4c3087489be91d3b08f48bdd6c1107607257711da807e", 0x40, 0x0, &(0x7f0000000540)={0xc9, 0x0, r15, 0x1, 0x0, 0x6, @multicast}, 0x14) r16 = socket(0x11, 0x3, 0x0) r17 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r16, &(0x7f0000000180)={0x11, 0x5, r18, 0x1, 0x3, 0x6, @multicast}, 0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ac070000", @ANYRES16=0x0, @ANYBLOB="020026bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="6801028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004002b01000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400050000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000100000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="280102803c000100240001007573657265640000000000000000000000000005000300060000000400040008000600"/60, @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400050000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="74000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004400040008000887070000000800010c02000000030001020001000016000880fbffffff050005020800000000040803000000003b00010d03000000bb6500010700000008000100", @ANYRES32=0x0, @ANYBLOB="8402028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004000000080001000000010002ae02000000dff40108e191000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000008000100", @ANYRES32=0x0, @ANYBLOB="b40002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r3, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="a801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB], 0x7ac}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) 18m46.674664815s ago: executing program 7 (id=14004): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000180)=@sha1={0x1, "91ca0b3e0b845e55cfd2c11c14b9f86397109b69"}, 0x15, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) r2 = gettid() kcmp(r2, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b40)="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", 0x16b}], 0x1, 0x0, 0x0, 0x11000000}, 0x40005) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r3, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xee00}}]}) pread64(r0, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) 18m46.454447789s ago: executing program 7 (id=14006): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x4, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1f54220a580ca10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000001200)={'#! ', './file0', [{0x20, '\x98\xe1Cvg\x9cO\x16\xc0TC\xe8\xb8\x91W\xb8\x84\xdf\xbe\xbd\x8f\x81!\xf2V[\x03V\xba/\xb9+\xd2\x95\xe0t\x0f<}T\v\x0f\xe8\xae\x89\xfa^\xce\xae[t/\x12\x1f\x02\x85\xbd\xbc\r(\xfd\xf2\xeeB\x12\xdc\x06\x1d\xd8\x86g\xcf\xb6\xde\xeb\xfc\xfc~A\x95\x8a6'}, {0x20, '5\xed\xe9\xe8\f\xcb\x82;\xc5\x98\"\x1c\x8d\xbb,X})@\xe5\xf0\x1f\x02\a\x0e\xe09\x17\xa9\xdbXP\x94}L\x17WTLRc\xe5\xd3\x9a\xcfGr3\xbaf\x8aS\xc6Q\x16\xf4\x9f\x02u.\xaf\xf3\xb8\x0e\x85a8\x03\x02\xf4\xf1\\b\x1ew\xd4F\xf1\xf9I\xe4\xca\xb1\xa51Sk\xdf\xc7\xd2\x87.b\xb9|+\x9f3@\xdfs\xa0\x01\x8fV/\x00\x8bo\xccQ\x9c\x9e\xae!b\xa0 \xea\xa4(C\n\x96\xdf\xd2\xd6\x91\x90\x83 \xb2\xb4\xac{\x02\xde,Ff\x98\x84\x16\x1b\x96\xac\x9e\x17\xf0\x13\xfa\xd1+\xcc\x19\x81ZZ\xa0\xde\xeb\xf3`\x0e\x87:` \x1b\xec\xeb1\xb7\x91\xfdcL\xdcH/0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x60000000, 0x0, 0x0, 0x7, 0x7f, 0x0, 0x0, 0x80, 0x6}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x200002e6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_TIMERSLACK(0x1d, 0x800000000001) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f000000a200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x1, {0x1, 0x0, 0x1000000, 0x105, 0x80000001, 0x3, {0x0, 0xffffffffffffffff, 0x0, 0x200000000fe2b2dd, 0x4362d09f, 0x0, 0xff, 0xa920, 0x0, 0xf000, 0x4007, r5, r6, 0x8, 0xdffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r7, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080), 0x4) 18m46.161344044s ago: executing program 7 (id=14009): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000001c0)="0f380bb7149066b9800000c00f326635000100000f300f20c06635000000800f22c00f5fc8660fda3064feca0f01c276c264803b48c4e205dd885ba9", 0x3c}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000001c0)="0f380bb7149066b9800000c00f326635000100000f300f20c06635000000800f22c00f5fc8660fda3064feca0f01c276c264803b48c4e205dd885ba9", 0x3c}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x8000, 0x13}}) (async) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x8000, 0x13}}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/205, 0xcd, 0x1, &(0x7f0000000380)=""/253, 0xfd}, &(0x7f0000000480)=0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/112, 0x70, 0x1, 0x3}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 18m45.941659449s ago: executing program 7 (id=14012): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000020301010000000000000000000000000800010002"], 0x1c}}, 0x814) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x8000001a}) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x6c) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r5 = openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mount_setattr(r5, &(0x7f0000000100)='./file0\x00', 0x8000, &(0x7f0000000200)={0x3, 0x82, 0x1c0000, {r5}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ptrace(0x10, r6) ptrace$poke(0x4, r6, &(0x7f0000000380), 0x10000) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x40106726, &(0x7f00000000c0)) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000010c0)={{0x0, 0xe0, 0x2d2e, 0x5, 0x4dc6bb49, 0x0, 0x58, 0x1, 0x9, 0x6, 0xc88, 0xffffffff, 0x55, 0x100000000, 0x4}}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00ffff000000000000000000000000000000000000000100010000200002000a05000000000000fe8000000000000000000000000000aa000000000d0001007564703a73"], 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18m45.793564522s ago: executing program 7 (id=14013): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x1002, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000800)={0x30, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00'}) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r5, &(0x7f00000072c0), 0x0, 0x40088c0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0xd, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYRES32=r8], 0x290) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0xf) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x800, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x4) ioctl$TCFLSH(r9, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18m45.676084324s ago: executing program 7 (id=14014): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x2]}, 0x8) write$P9_RGETLOCK(r1, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 18m45.603666885s ago: executing program 40 (id=14014): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x2]}, 0x8) write$P9_RGETLOCK(r1, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 16m41.892530648s ago: executing program 2 (id=15768): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) sendmsg$inet6(r1, &(0x7f0000001740)={&(0x7f0000000140)={0xa, 0x9, 0x0, @loopback, 0x9}, 0x1c, 0x0}, 0x80090) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000300)) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x90, &(0x7f0000000100)={[{@size={'size', 0x3d, [0x6d]}}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r8 = fcntl$dupfd(r7, 0x406, r7) write$cgroup_pid(r8, &(0x7f0000000240), 0xfdef) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) 16m41.851240009s ago: executing program 2 (id=15771): ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000080)={0x0, 0x100000}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) (async) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000004500)='./file1\x00', 0x101200, 0x110) (async) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) (async) write(r0, &(0x7f0000000400)="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", 0x1f000) 16m41.731972581s ago: executing program 2 (id=15775): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, 0x0, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r2, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) statx(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x400, 0x10, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000004800)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x1, &(0x7f00000004c0)=[0xee01]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002740)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000002640)=0xffffff95) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000006980)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000002600)=0xe8) getgroups(0xa, &(0x7f0000006ac0)=[0xee00, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01, 0x0, 0xffffffffffffffff, 0x0]) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000006b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002000)=ANY=[@ANYBLOB="a805000000000000", @ANYRES64=0x0, @ANYBLOB="010000000000000001000000000000000000000000000000040000000000000009000000080000000500000000000000090000000000000008000000000000008f04000000000000020000000000000004000000000000000002000006000000050000000020000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000080f2ffffff000000000300000000000000040000000000000001000000060000000000000000000000010000000000000000000000000000000000000001000000df0000000000000001000000030000000300000000000000050000000000000009000000000000000000000000000000010000000000000001000000000000003a18000000000000faffffff00c0000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000001e07000000000000030000000000000006000000000000000000000007000000060000000000000003000000000000000e0000000000000008000000000000646b00010000000100000004000000000000003a07000000000000070000000000000001000000000000263740f904eb58f300008000000000000002000000020000000200000000a0000000000000a17ceea6e5668cd3e62856113a928a1a42f914fe4a50b383a4f6d245351d3abbe375bbe8f0c311b1e1be20d15c3ca764dd56f2ec24d3193eb7bc438c6e5a86d4dc44dad291ab585045192324a70bb8c20e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff7f000002000000000000000100000000000000f7dd792a0000000002000000080000007d0000000000000006000000000000000100000000000000faffffffffffffff0600000000000000040000000400000003000000000000000600000000000000080000000000000009000000000000000a0000000000000008000000000000000300000004000000a40d00000020000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000900000000000000000000000000000000000000000000000300000024000000746c7300000000000400000000000000000000000000000067ffffffffffffff080000000000000081000000000000000600000000000000ff7f0000000000000900000000000000030000000000000009000000000000000800000000000000040000000080f2100100000000c0000009420000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="090000003c0c000000000000000000000000000009000000000000000b000000010000002140247b2fd85e265d322f000000000002000000000000000300000000000000400000000000000001000000000000000900000004000000000000000000000007000000000000000900000000000000c200000000000000030000000000000000020000000000000000000038200000100000000080000006000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0200000032030000000000000600000000000000ff07000000000000000000007cef000003000000000000000300000000000000ea020000000000005b040000000000000100000043360000030000000000000000100000000000002f1d28570000000007000000000000000000000000000000030000000000000009000000a7040000000000000040000001000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000050000000000000002000000000000000c0000000000ffff5c5b2d5e232b29267d5d2a2100000000060000000000000002000000000000000200000000000000040000000000000005000000040000000000000000000000fd05000000000000000000007e000000050000000000000000000000000000800b00000000000000ff07000001000000050000000080000007000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="010001000700000000000000020000000000000008000000000000000300000008000000746c73000000000003000000000000000200000000000000bce90000000000000300000000000000080000000e00000005000000000000000900000000000000ce0400000000000005000000000000000f000000000000000300000000000000000000000d000000080000000020000008000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="030000000000000000000000050000000000000008000000000000000000000007000000"], 0x5a8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x11a, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0x7}}}], 0x38}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0x8001}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @flat=@handle={0x73682a85, 0x110a, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) 16m41.664165523s ago: executing program 2 (id=15777): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000002c0)={'veth0_vlan\x00', @random="0100"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904fffffd0000000009"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) syz_usb_connect$uac1(0x3, 0xd8, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0xb8, 0x20, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3800, 0x7}, [@feature_unit={0xf, 0x24, 0x6, 0x3, 0x4, 0x4, [0x7, 0xa, 0x7, 0x8], 0xf}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x2, 0x4, 0xe5, "ab22", "102f3e"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x3, 0x7, 0xd, "d43cdfaa"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xfd, 0x4, 0x10, 0x4, "", "8583fc"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x1, 0x4, 0x1, "b909d0", "82a5"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x0, 0x5, "b242c6f15f3bfec423"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xd7, 0xb, 0x0, {0x7, 0x25, 0x1, 0x0, 0x40, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x3, 0x1, '\n'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa2, 0x4, 0x2, 0x4, "1ab1e7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x10, {0x7, 0x25, 0x1, 0x80, 0x3, 0xf000}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0xa, 0x7, 0xc0, 0x8, 0x4}, 0x19, &(0x7f00000002c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "bc2bdd317c940a9981f9f8852ad90bab"}]}, 0x9, [{0x76, &(0x7f0000000300)=@string={0x76, 0x3, "c1de42ca41a052b9eb3a711d36bc23d978769cb662ffc3d067c5c39b81553683eb638310fdc2d950f06498c20ce9f4c118f3c6edad80e771c1a4afddef1d73cd47b52a46f86503e51eff672be807d85cff86aee0f399ac17eec22d0cbcedc34901d6cd20394c0cd0577178e66373a021592c727c"}}, {0xaf, &(0x7f0000000440)=@string={0xaf, 0x3, "91e29e2da09bef9875d686b0d8b7892cee5360340c83ad2475ec6fd98d71c35482eb025081e94ede60ca1d562a7bbe3372c86d6a9be71d1db8f7d1f104122e9fd2c9e59f59b28573ea6ac44f8de92a1662175a971ff37b93cbccf2bf93988e0b90fc0f8a600bfb8dbb310e9f3275fe7a4c2fad37952cbd33562f82ba9609df6326ce0e16442da99d40e262bdb3a4a0842edb72c8d2f927074247fb221a7d9463c921f4916e34eb928b91faa8e2"}}, {0xe4, &(0x7f0000000580)=@string={0xe4, 0x3, "007b2baf4ca23c28f06968489a4096866da485ebfff9675fa8eaf72a43c4a95c604ef2a3f7ca743240094673b5e9cba308d0f01f8e07da9da1500bed6f4314bde6158cf25d5b847c686a9d6ea796b683b8fbb934836f9f552ed97e23e506a2cce0635166aff382d43ca70403236d61c26dbfdf1aa46663cc2e04794458b96988825648d331f79ad7d1e095ccdf99ce0b9d498111b457ec8d904a27a9a2f1a9e7f2210fd8f622c3624775ec11d9b4f318e850e4b0138f450f240c707a03bb239cf6e280920940576d186c3e7b9eb04cf756c8001e867a5af94438083d2e1f93a90bf9"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x423}}, {0xa9, &(0x7f0000000680)=@string={0xa9, 0x3, "5c5b9cea68f4e4369063a84fbf80ba4bf455992196ed252c59fcc4711ae29ee87fcc17b9d733e43a8b5f67de75936d9831fcc1639f211af5997b60572e14d036eed1891e2a371c64d50c3f74e05bff5ff05ae8dac4f3ca9705a49000a113dc543407af3e3c4b10dec1df95792a44ee5f0b2e798fa2ef7a4d77368d02aec1efe589b67fbcfed61fae641dc8cca1abe92222d58cab75973c1a2b1543bfc8b091321ae77544701991"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x22, &(0x7f0000000740)=@string={0x22, 0x3, "b56e11e9a26be1c9695972693cec33d4481493bcff716cf84a121f2d763dc707"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x416}}]}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10f) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 16m41.120581193s ago: executing program 2 (id=15786): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', '\x00'}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 16m41.003627555s ago: executing program 2 (id=15787): setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x40, 0x9, 0xf7, {0xf7, 0xc, "a443cb322335679a497a854b75bf9efa1d20311ec067705b529f5b95f2e1218e1a0be1a8848daf786b9aa82b9263b49c4347b23acbd4ab860fb74c5a03f12959b793762edc2dc710cb187c2f1556eda89b64df7e68c11efae00561d288a5479798fb61ebd56df9bdd78102d89b8f22d182fe15e60c763e4dd676e1594f651838af578a2ebb4489e924c90c451202acb69d9c7b015bc8541df02eda1f44ac4364197f8a9051c14abc06600df0a3644370c0350cccf39b10863e3d5ef3784dc62a58f4ad9815db17af1fc715a46ae0ddb88994f08e0864312515f9b35f4c3efe7e7a61f1860cb4afb5969aa3c95585e63f587c0bc276"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, &(0x7f0000000140)={0x0, 0xf, 0xf9, {0x5, 0xf, 0xf9, 0x4, [@generic={0xd8, 0x10, 0x4, "935365e1f4a286c447a0f2f6d8015e01ace2831ec21be7716480c73ac50a86901174c103b73310e6bdd49de4efb54a7f7df9e9572f7260baa3a7d1a0c9c7cfbb5dc973172bfb20cbd5d60041d128d8b76ba3d37ca69adde3b39032117ee8527519c008dc08934a0380587168af4370307cbec9cf6e587c26f944405a17fefa11a4d350579e5109d4f71fe458a9e933eca5a1f95b531a3a08870347a33f7f71cad83dffc1043dbacf02af9b09b39744cc4b395242061ae10823d511c082bc906e9b0502c110f40c1a4252dfc965704681d0cc33b3cd"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x3, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xdb, 0xcd, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa3, 0x1, 0x3, 0x4, 0x8}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x60, 0x5, 0x2, "c386fd14", "82571480"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x1, 0xd8, 0x5c, 0xe9, 0x8, 0x9}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000300)={0x20, 0x16, 0x32, "637799eae0da9587880c52c9cfbd2be207a3f854fafe51d777ced8c660b3b56d11d8822f91f52f9fab83bde732e9d21e0423"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x50}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x5}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x1c00, 0x2, [0x110]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "8af0"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0xc}, 0x0, &(0x7f0000000540)={0x40, 0x17, 0x6, @random="8bc1ee384194"}, &(0x7f0000000580)={0x40, 0x19, 0x2, "dc7d"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x6c}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x5}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x90004180}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x80, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x180000}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfa}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2bb6b08}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4040080) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r3) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xac, r4, 0xfa7f9446ce5ba6c, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x55129a42}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}}]}, 0xac}}, 0x80) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000c00)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x874, 0x0, 0x168, 0x1, 0x8001, "d979db376057e217058acbb0eea360c899ae63fb1454ae6db62134db649beaa3a05cb323b1217639e42b9d62b34d51a32b1be8c11651ada7b330f08551d9760bc6e0ed9fbdf1efd4ae3bf442d05643d83176a66f53c5d82fad7c28bf9c97cc85b1a4771fdecd03990e31efc391a4e9c76803d5ad300e01720ebdcb98df121860"}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d40)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000d80)={'macsec0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e40)={'gre0\x00', &(0x7f0000000dc0)={'tunl0\x00', 0x0, 0x7800, 0x1, 0x4, 0x2, {{0x18, 0x4, 0x2, 0x3c, 0x60, 0x68, 0x0, 0xff, 0x4, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@generic={0x94, 0xa, "563e7d59b0c0205e"}, @end, @timestamp_addr={0x44, 0x3c, 0x77, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x9}, {@multicast1}, {@broadcast, 0xfffffffc}, {@local, 0x8}, {@rand_addr=0x64010102, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x878}, {@multicast2, 0x584}]}, @noop, @noop]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000e80)={@loopback, 0x0}, &(0x7f0000000ec0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000f00)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000001140)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001100)={&(0x7f0000000f40)={0x1ac, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8b}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2f}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6a}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2429}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4100}, 0x10000840) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_usb_connect$uac1(0x1, 0x10a, &(0x7f0000001180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x3, 0x1, 0x18, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff62, 0xfe}, [@selector_unit={0x6, 0x24, 0x5, 0x4, 0x6, 'h'}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x6, 0x5, 0xf}, @processing_unit={0xb, 0x24, 0x7, 0x2, 0x0, 0xc, "6dab6211"}, @extension_unit={0x9, 0x24, 0x8, 0x3, 0x4, 0x5, "7317"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x6, 0x1, 0x81}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x6, "0e479fc57d90"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x81, 0x7, 0x4}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xfb, 0x4, 0x1, 0xe, "4f11a2059d87"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x0, 0x4}, @as_header={0x7, 0x24, 0x1, 0x40, 0x2, 0x1}, @as_header={0x7, 0x24, 0x1, 0x6a, 0x19}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x100, 0x4, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x81, 0xf8, 0x8, {0x7, 0x25, 0x1, 0x1, 0xfd, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4, 0x4, 0xc, 0x9, "95a904d7b855d6"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0xe, 0x8, "bf5032f0e7"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0xf7, 0xc, "9b702f68"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x4, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x0, 0x7, {0x7, 0x25, 0x1, 0x80, 0x5, 0x7856}}}}}}}]}}, &(0x7f0000001480)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x200, 0x8, 0x8, 0x9, 0x10, 0x1}, 0x2b, &(0x7f0000001300)={0x5, 0xf, 0x2b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x2, 0xf00f, 0x3, [0xc01e, 0xff3fc0, 0x3ff0, 0xff0000]}, @ptm_cap={0x3}]}, 0x2, [{0x6, &(0x7f0000001340)=@string={0x6, 0x3, 'MXQX'}}, {0xc8, &(0x7f0000001380)=@string={0xc8, 0x3, "1396498e451d8197fec4cbead84b9a2e2cad5cfd2c0a4de7d036a648792d4170423802de1eb3ee171598683b59de6f7fdb2d215edd1b33df0c6d127f3761a24278a741930827f76e33f11160e72970e13b31c9efcd437367ab28b68376f3dbf80d01a4bdd3f28afad93cbf7b0442a027fd72ed73ae3eaa716e26a2fc28ec079b5407a126d732e1ae52a96647d0d8bd1e291e8afa4820f7036aea24a1407e3d26ab4e8d72d26a38a34b5aa055a828efad7d97ea8f5a53d2fff688d6d354a7578fa7918aafcae0"}}]}) syz_usb_control_io$uac1(r10, &(0x7f0000001680)={0x14, &(0x7f00000014c0)={0x0, 0x26, 0xd1, {0xd1, 0xa, "c89a45e6d95be0b0fd4ec1213c9e16ebb4325b9c0c2155a46fa3ff627685bb07e4b053d3aea16b80cca1b16ea1a94f7f99f7b3048799b987055ba93ea8163685f865935d18455c660cd1515d77edbf8e78050d3f7c0a05747788dca847ff63e9ae82abe5cc731fcdc25a6bee36e2dce4ad55e923f90d61e06762273c14d4f4846a1ca2d0dbcec7869849cdd8bac34cae282b4e64dfd9d75ff8f43ea8ea3adaafbaa7e64ea4de5a81abfcc155d706e3c345650aac9cb1ebe5ab7365b197097c49d3b33682b9fb2ab1f4431796baf1f4"}}, &(0x7f00000015c0)={0x0, 0x3, 0x98, @string={0x98, 0x3, "41e722b4772ad87a97b475fc09cdbbd2e42e59bd7a59dc7520c65508b1d42456141d54d477311d1e8d1696ce3d2bd6352ad5b986c27f040c0d4ec1dd65190ea372ab3a18f98312c9d7776c6655911b8251b5a9da252afa52a7270f32cefec40bfd3d345e32f74e8c2cf1e1057a4cf8073b82e5d308ca58e0cb51fe36baabc2deaac7384963a3ad99e92ad2fec8a0d498c994ce1385a6"}}}, &(0x7f0000001940)={0x44, &(0x7f00000016c0)={0x0, 0xe, 0xb3, "da2e82730fb2bd47cc18ae51c1eb32b23f2ae3776526f227ed1f8fb296c9fece08d8146d697f742134f18d1e6a645043fd8cc5770d8ca6e34418492f95d508ad82fa8e61b869d4d40e678606bd0d4b3fa5d9e253df6576117e32ed2a0fe4ff71863e9d18a06cce1931e5cf54e31dc70c15daacaf506698f69bf616230740a945936d032fe97f7f7249b35ca306dcc67ceb4f3683cada83665def53ec6749603073f5b0892d6929ad4dcdff0410679b15451672"}, &(0x7f0000001780)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0x37}, &(0x7f0000001800)={0x20, 0x81, 0x3, "d91bb2"}, &(0x7f0000001840)={0x20, 0x82, 0x1, 'f'}, &(0x7f0000001880)={0x20, 0x83, 0x2, "bbc8"}, &(0x7f00000018c0)={0x20, 0x84, 0x1, '2'}, &(0x7f0000001900)={0x20, 0x85, 0x3, "bbc112"}}) r11 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x800) sendmsg$inet(r11, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001a00)="b91f393eb68509f8d7e3df397553d38a4f845bfa23257e5367964cb1a505c572cb6cc7303e21a4ce095d7218f545f4e2432b6ee4e6bfc6f762e1c36a932baae05a4972044e53b6d4a6472dc7cbda7aa27bcd50bce8cca6a0b6b1f315dbefe10759a18640457a1c7a4b06039c09cce0c0ce380dd7e6e679279266e00dfba247fca0e374d2a0edf851d3d04bb0be0a55e587a0141900f13e5685550df8c2adb2797767d0fba9e87b718ce3a6c30623e9035b5a24eaf4a1c3241aa1a9a31b265fa98237f98d9d95bf7567947ca82ad0a50d346b6a83d6b690d3977b03803be5cba46b", 0xe1}, {&(0x7f0000001b00)="aaa4f3bf0c840891e69747b29ac3f84453b5c7071370240ddfdfa3044774a372b8abee9b61a5666b194da58f9763f95f68b0d8b020e615ae38395ed1c884e28df272b2aa45489cc6fe9e0c01f4b13fd0fa9701702007942dc3b7249eaa7c74d2889359af2134e08b0b67c47375295cf8aacfa5deadfb0c2cc7a788937ca94fc4cc9b8aee6dce5f45d6c62293468384fda66c6d4367", 0x95}, {&(0x7f0000001bc0)="33d3cbaec8a64d7a40665b9b5c83f4fe775ff38bfa2da9ece02d93dc95eb1a7b4693120367812e75d16ac51365ecdb13b6cff8f21e504a24da0f5f8cf0bfd0d1d2eb235b8a9af73d8b6170dd56ff71fd8638ed6bbf5de3a9de032db5115eaba0af6a79eba1a16e996c5535031d4ad8a78717ac4890bb46205f84285a1dfcd7f4f830f8782590748171bddf7455e06f281e477ab84a5ee760b7965e0d1b01017a3e4252b73b9fe0d37b1a80fdabef4dd623c8881a9a", 0xb5}, {&(0x7f0000001c80)="6124689fe499035ed8856417737684f18af55cb0b7c8cd652d55535e2922b10cf74c7d91af37bb11af49497e92ae67127db4c77cc28c35817f9b32d818d7a473e94aeff185b980054a9c39edff0db4c31f4a3a76a0d9838bfb27b50fd9378b333a075ebd7c1fee872a22", 0x6a}, {&(0x7f0000001d00)="6d31f73f97013923c3b3e655c1358ed0b73e1742770a7bc45802b70297d75294a4918f9ff689ab92f35cda9db2acf1939771de2404880243360d6ca0ce358e4f34308396d75400865d0e69aa054f018bb5bb6f8aabacba582a439b55399123af61b7f009daf6b43dc4bfde18e23353d34a7a682335e1f916fe838b4f7df1fdf044ec84f6770cc5a297a92b4ae4508722a622b6890cee1779af7089bcef6cf42a377ba70e55e37523ec2aeaf62037feda6bbbd7a752fc6f20dbd5ad44d05a9bd2cc946ab7e5e7de3615a3d45e54d8e0e18c0ecfc2", 0xd4}, {&(0x7f0000001e00)="63d73b6dbbde6cfa5cfa6496e59bf53439217f7ea4569e2e9e3fddaf5a20bb5a7e350747431fc55f8b4e0913c693b780f15cabf9efee95b5773165dcc6e576ae3530ef7b8ede54b2371f7b0ab2cc667749249dd97e242a1dd618a237fc0d3af01629a98fad69607498e011b145809fe586373485cc945930bbf82010b029b4eaeca0d855fdbd09b783ba2b8cd950be12a7343df96b4e2caf74fa8691ff6967e6730e9591ca3b3dbdedca8806c9931238f988fc09c43ce9b05bd3edcb88232d1d234d375996c4d0f12991408f0cbe0f0b625156f7a16837fdaf7058db2c37af0171fbe1231aee985d", 0xe8}], 0x6, &(0x7f0000001f80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x55}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x2e, 0x0, 0x6, [0x1, 0x200, 0x80000001, 0x1, 0x7, 0x324822e9, 0x4, 0xb, 0x2]}, @cipso={0x86, 0x10, 0x0, [{0x6, 0x2}, {0x5, 0x8, "16c0b76c89db"}]}, @timestamp_addr={0x44, 0x44, 0x1a, 0x1, 0xd, [{@empty, 0x50}, {@multicast1, 0xe7}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x5}, {@rand_addr=0x64010100, 0x8}, {@private=0xa010102, 0x4}, {@loopback, 0x8}, {@local, 0xfffffffe}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @private=0xa010100, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x118}, 0x4000001) ioctl$sock_SIOCGSKNS(r11, 0x894c, &(0x7f0000002100)) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x4, &(0x7f0000002140)=0x6, 0x4) syz_usb_connect(0x0, 0x7a3, &(0x7f0000002180)={{0x12, 0x1, 0x200, 0x18, 0xf9, 0x88, 0x10, 0x1b3d, 0x1f1, 0x5ec8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x791, 0x3, 0x30, 0x2, 0xb0, 0x0, [{{0x9, 0x4, 0xec, 0xb4, 0x7, 0x52, 0x1, 0x90, 0x70, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "3e14e5b1"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0x2, 0x3}, {0x6, 0x24, 0x1a, 0x91f, 0x14}}], [{{0x9, 0x5, 0x80, 0x8, 0x18, 0x4, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6d, 0x4}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x8, 0x3, 0x3, [@generic={0xfd, 0x31, "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"}, @generic={0x29, 0x22, "9de7ec410c0ae84174bee67c36ca88b3319a991e36066b0a81e8df18e42fe48d061c6115608fe0"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x4, 0xb0}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x8, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1}, @generic={0x7b, 0x7, "8414490c24b40470e68cf7e704ffb7eae93d88fb9272a459c595b02724afe86bc9f66f40d0cc899bea9d5d027f87ddf4a2ead0722c7e14a4fead488b0c75c1902759e8f69ee0415f52385eb3baca00091a99e7a91f4fbc6c6614db275bb68ed73f5dd203516cfdf1633c269e300c062951933aeb9bfe4ebaae"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x8, 0x2, 0xc6, [@generic={0x67, 0x1, "8e08cc703af7d66d7cdf1afb23404cf219edf90ff72e43f23e44620a3c688f792aaa0726c7c7a0d00cc60b5758c10c1c1ce703e1c5803fad06ac6b7df7f9b94e55ab7eae0ad3b79ae067093fa88d0463bacdf05e4ee24855c50c5cf6b3bf28d9d5659cd6b3"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x10, 0x0, 0x0, [@generic={0xea, 0xd, "37566278dcd38bfaaa4fd0ff602e9eeb9b6cbef592b99f669020738c0d7660d1ae718b26509a382a9b11ef9b10bb901f782c44f35e75f63176f99a192e9680f3ac550ae223eae9d8a24029450b12ffc98e90a226ef447275dc3291feec0417d94fae0308591c235e2b00fd5c4a05b9bf9711957826f8aee30bd7b6a763b0961e51b8baadf21e00c352e03acfc547f8947535a7d9f331451391d48410ace704aff5e2a5ce148fa67240889f0f8d7a6b63788d48e7a5c440e93048ca55e7e5836918dcdf2fd27b563542ed8ab8f3142b59c7e44009314135fd54eb2665baedc93ea5254025974d2ef5"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x9, 0x9d, 0x3}}]}}, {{0x9, 0x4, 0x77, 0x9, 0x6, 0xa, 0x0, 0x0, 0x1, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "59174d"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xa55, 0x0, 0x3, 0x9}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x0, 0x3, 0x5e}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x2, 0x5, 0x0, 0x4, 0x1}]}], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x2, 0xf, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x87, 0xc}]}}, {{0x9, 0x5, 0xf, 0x0, 0x79f, 0x2, 0x4, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x8e}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x7, 0x4, 0x8}}, {{0x9, 0x5, 0x6, 0x2, 0x48, 0x8, 0x43, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x8}]}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0x9, 0x4, 0x2}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x7f, 0xff, 0x5, [@generic={0x2, 0x8}]}}]}}, {{0x9, 0x4, 0xf7, 0x3, 0x10, 0x49, 0xd8, 0xfa, 0x7, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "1d6171d2b1"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xd6, 0xb, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x1d}}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0xf}, [@extension_unit={0xd, 0x24, 0x8, 0x1, 0x3, 0xa3, "619c6ccf3e71"}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x4, "4ddb13d2"}, @processing_unit={0xc, 0x24, 0x7, 0x6, 0x1, 0x33, "e5adfbb11d"}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x6, "c84855"}, @processing_unit={0x7, 0x24, 0x7, 0x3, 0x5, 0xeb}]}], [{{0x9, 0x5, 0x3, 0x10, 0x400, 0x3, 0x5, 0x53}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x0, 0x40}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0xaf, 0x4, 0x4}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x8, 0x5, 0x3}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x0, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x9}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xf8, 0xf, 0x1}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x7, 0x5, 0x21, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x1a}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x39, 0x49, 0x6}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x1, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0xff, 0x4}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x37, 0x8, 0xed}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x2, 0x3, 0x7}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x5, 0x2, 0x9, [@generic={0xf5, 0x1, "73fc612fb1209792625b896dd98b9e58d1d9c88b7d88ebefcd9676de5b13519060d0af82fb8199be61da04bffe69c75fe5ae3c632669e5d78eefb12dc7fd77861b59856c427328693171f4256eae350db3930acecac0835b3efa4ea4dfe85828b314f50d1744b83250c8dce22293d30a9fdfa7ce14bee04e97e399aef68cd19bc3f37456824bd8abe31dce7a79fb448cd4e68e79762d391612a6c6b7cc2eb4d9f674a160d5c0daf896ea0968e34b658f79ba591190c57aa514045404e5ae0974532af73c3156ba67dfb02cb8c0478735a300fca8a96e51801bbf2abd4f452b752d1c87f4f084ec5eb625495ce57ef3cb96d63e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x2}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x9, 0xd, 0xd0}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x0, 0x74, 0x44}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0x9, 0x0, 0xb6, [@generic={0xa9, 0x23, "714ebff992cacb4ec8f40552c609b84825263845c4143d89bde50cb463c9f8faef90b0aeaca1f93a23ca8b04219253212ccf4e3b2ad373dd33fa4d3bcb8c2c89e92ad2a507093e0a05346da468f61457cbe69e68e3b98fd3918d33c834a4bbe1f0d4764bcc8a8f118a17eb4a98ba4bad040c5fa57bc7509b8fbd8d0767ddc57adb6d3c3d05944d6324b86c2d0af6cca010bb5106c12ff4ddb3fde932a413f41ac465176c0e0719"}]}}, {{0x9, 0x5, 0x7, 0x63d18226bafb7036, 0x10, 0x6, 0xfc, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}, @generic={0xdf, 0xd, "f09e21b569f42acbf0dbce02256512352b40c6175c512d5fc58e689f642a9586ddc2204d721f7917bee8909a30b806a4febc0783e0c3de20c9424dc7cf62b2662dcbc8b6b1ed851df3017764f3a2bd9aa414f6c0f86716cc08310e3cae4b33bc7615b8c1d061dc02ce35a13e9db6568b3519310c72425385b9fc16564fbd66be6d44d836ea9ff03e488a87a39171dccaacce53b26ec16f393f40e1115c63c2ce676735c4a94998348c0a40c6c8c8d4a0ad2d9491a8904733b2a7f52324ffb00318145fafec764acac11a4185a32da3fd36f918dac9ced96b9706434b30"}]}}]}}]}}]}}, &(0x7f0000002c40)={0xa, &(0x7f0000002940)={0xa, 0x6, 0x300, 0x8, 0x5, 0xa, 0xff, 0x9}, 0x5, &(0x7f0000002980)={0x5, 0xf, 0x5}, 0x4, [{0x6a, &(0x7f00000029c0)=@string={0x6a, 0x3, "5894ec86604d9f2cd7438f2ee779089f7d21ed47ec555e262f23334b17ad97ad3d92908c1296b1c0007ea4fb1bc748d760b4118618c9a93cd08b6b62756192ed480f02019362b19be3304304f676a13ed2cd6d70e9fd39e21547fb07ebdd6d54741e9cb45de7a35a"}}, {0x95, &(0x7f0000002a40)=@string={0x95, 0x3, "4bde4a54102dc7258cfe5c23e4b552861344899e263f94a5c942421e6f1bdb387b04dce868e361ba886294f784c207ffe774c115049f2cd9b77dbc7b364f3cf0b2fa5892a318f92c6b2b968bdf2e8350eed212d6f6d8a2f2db08ae3f19a6f52617ce621b95b1b3d400069c4c6e5bc251ac077337fe29269e75d3db928f975f02638b78ddb04a7249f87d65a4030d0e6abe105a"}}, {0xf1, &(0x7f0000002b00)=@string={0xf1, 0x3, "2dd616624eca0193b886812831bb3556058e4983d7575e3b221e4acd96f12665fc7c7bc3c79ba61a0343797295a0a150e89f3307a020cd72d631bd763ca5afa7ce329e679c7c46317787f7ff7e3b43c7abbe03c843f5d26d96daccd458aa3091376f595c2c05e498860e255a191c58bce0c766395205279d4d1a41fcbb3df990dc3eebe241d7b6c9ea06e64639ca548a65c1aa59ea784dea752a4f0fa4def91a7c58c470f952f7a83d852b18a139b95ee52ac01001ef4c534701b8bf50115dd16356cb86c927b80bf48044eea1a3a6f5a449ca1e7959e6d738743225eafd18e999a94f3580fa66021874d047d7ab57"}}, {0x4, &(0x7f0000002c00)=@lang_id={0x4, 0x3, 0x4ff}}]}) r13 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000002cc0), 0x800) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000002d00), 0x4) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r14, 0x89f3, &(0x7f0000002d80)={'gretap0\x00', &(0x7f0000002d40)={'sit0\x00', r9, 0x7800, 0x7, 0x8, 0x7f, {{0x6, 0x4, 0x0, 0xf, 0x18, 0x65, 0x0, 0x8, 0x4, 0x0, @local, @broadcast, {[@ra={0x94, 0x4}]}}}}}) 16m41.001692095s ago: executing program 41 (id=15787): setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x40, 0x9, 0xf7, {0xf7, 0xc, "a443cb322335679a497a854b75bf9efa1d20311ec067705b529f5b95f2e1218e1a0be1a8848daf786b9aa82b9263b49c4347b23acbd4ab860fb74c5a03f12959b793762edc2dc710cb187c2f1556eda89b64df7e68c11efae00561d288a5479798fb61ebd56df9bdd78102d89b8f22d182fe15e60c763e4dd676e1594f651838af578a2ebb4489e924c90c451202acb69d9c7b015bc8541df02eda1f44ac4364197f8a9051c14abc06600df0a3644370c0350cccf39b10863e3d5ef3784dc62a58f4ad9815db17af1fc715a46ae0ddb88994f08e0864312515f9b35f4c3efe7e7a61f1860cb4afb5969aa3c95585e63f587c0bc276"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, &(0x7f0000000140)={0x0, 0xf, 0xf9, {0x5, 0xf, 0xf9, 0x4, [@generic={0xd8, 0x10, 0x4, "935365e1f4a286c447a0f2f6d8015e01ace2831ec21be7716480c73ac50a86901174c103b73310e6bdd49de4efb54a7f7df9e9572f7260baa3a7d1a0c9c7cfbb5dc973172bfb20cbd5d60041d128d8b76ba3d37ca69adde3b39032117ee8527519c008dc08934a0380587168af4370307cbec9cf6e587c26f944405a17fefa11a4d350579e5109d4f71fe458a9e933eca5a1f95b531a3a08870347a33f7f71cad83dffc1043dbacf02af9b09b39744cc4b395242061ae10823d511c082bc906e9b0502c110f40c1a4252dfc965704681d0cc33b3cd"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x3, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xdb, 0xcd, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa3, 0x1, 0x3, 0x4, 0x8}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x60, 0x5, 0x2, "c386fd14", "82571480"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x1, 0xd8, 0x5c, 0xe9, 0x8, 0x9}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000300)={0x20, 0x16, 0x32, "637799eae0da9587880c52c9cfbd2be207a3f854fafe51d777ced8c660b3b56d11d8822f91f52f9fab83bde732e9d21e0423"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x50}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x5}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x1c00, 0x2, [0x110]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "8af0"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0xc}, 0x0, &(0x7f0000000540)={0x40, 0x17, 0x6, @random="8bc1ee384194"}, &(0x7f0000000580)={0x40, 0x19, 0x2, "dc7d"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x6c}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x5}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x90004180}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x80, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x180000}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfa}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2bb6b08}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4040080) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r3) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xac, r4, 0xfa7f9446ce5ba6c, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x55129a42}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}}]}, 0xac}}, 0x80) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000c00)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x874, 0x0, 0x168, 0x1, 0x8001, "d979db376057e217058acbb0eea360c899ae63fb1454ae6db62134db649beaa3a05cb323b1217639e42b9d62b34d51a32b1be8c11651ada7b330f08551d9760bc6e0ed9fbdf1efd4ae3bf442d05643d83176a66f53c5d82fad7c28bf9c97cc85b1a4771fdecd03990e31efc391a4e9c76803d5ad300e01720ebdcb98df121860"}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d40)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000d80)={'macsec0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e40)={'gre0\x00', &(0x7f0000000dc0)={'tunl0\x00', 0x0, 0x7800, 0x1, 0x4, 0x2, {{0x18, 0x4, 0x2, 0x3c, 0x60, 0x68, 0x0, 0xff, 0x4, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@generic={0x94, 0xa, "563e7d59b0c0205e"}, @end, @timestamp_addr={0x44, 0x3c, 0x77, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x9}, {@multicast1}, {@broadcast, 0xfffffffc}, {@local, 0x8}, {@rand_addr=0x64010102, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x878}, {@multicast2, 0x584}]}, @noop, @noop]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000e80)={@loopback, 0x0}, &(0x7f0000000ec0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000f00)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000001140)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001100)={&(0x7f0000000f40)={0x1ac, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8b}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2f}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6a}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2429}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4100}, 0x10000840) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_usb_connect$uac1(0x1, 0x10a, &(0x7f0000001180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x3, 0x1, 0x18, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff62, 0xfe}, [@selector_unit={0x6, 0x24, 0x5, 0x4, 0x6, 'h'}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x6, 0x5, 0xf}, @processing_unit={0xb, 0x24, 0x7, 0x2, 0x0, 0xc, "6dab6211"}, @extension_unit={0x9, 0x24, 0x8, 0x3, 0x4, 0x5, "7317"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x6, 0x1, 0x81}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x6, "0e479fc57d90"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x81, 0x7, 0x4}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xfb, 0x4, 0x1, 0xe, "4f11a2059d87"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x0, 0x4}, @as_header={0x7, 0x24, 0x1, 0x40, 0x2, 0x1}, @as_header={0x7, 0x24, 0x1, 0x6a, 0x19}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x100, 0x4, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x81, 0xf8, 0x8, {0x7, 0x25, 0x1, 0x1, 0xfd, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4, 0x4, 0xc, 0x9, "95a904d7b855d6"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0xe, 0x8, "bf5032f0e7"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0xf7, 0xc, "9b702f68"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x4, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x0, 0x7, {0x7, 0x25, 0x1, 0x80, 0x5, 0x7856}}}}}}}]}}, &(0x7f0000001480)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x200, 0x8, 0x8, 0x9, 0x10, 0x1}, 0x2b, &(0x7f0000001300)={0x5, 0xf, 0x2b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x2, 0xf00f, 0x3, [0xc01e, 0xff3fc0, 0x3ff0, 0xff0000]}, @ptm_cap={0x3}]}, 0x2, [{0x6, &(0x7f0000001340)=@string={0x6, 0x3, 'MXQX'}}, {0xc8, &(0x7f0000001380)=@string={0xc8, 0x3, "1396498e451d8197fec4cbead84b9a2e2cad5cfd2c0a4de7d036a648792d4170423802de1eb3ee171598683b59de6f7fdb2d215edd1b33df0c6d127f3761a24278a741930827f76e33f11160e72970e13b31c9efcd437367ab28b68376f3dbf80d01a4bdd3f28afad93cbf7b0442a027fd72ed73ae3eaa716e26a2fc28ec079b5407a126d732e1ae52a96647d0d8bd1e291e8afa4820f7036aea24a1407e3d26ab4e8d72d26a38a34b5aa055a828efad7d97ea8f5a53d2fff688d6d354a7578fa7918aafcae0"}}]}) syz_usb_control_io$uac1(r10, &(0x7f0000001680)={0x14, &(0x7f00000014c0)={0x0, 0x26, 0xd1, {0xd1, 0xa, "c89a45e6d95be0b0fd4ec1213c9e16ebb4325b9c0c2155a46fa3ff627685bb07e4b053d3aea16b80cca1b16ea1a94f7f99f7b3048799b987055ba93ea8163685f865935d18455c660cd1515d77edbf8e78050d3f7c0a05747788dca847ff63e9ae82abe5cc731fcdc25a6bee36e2dce4ad55e923f90d61e06762273c14d4f4846a1ca2d0dbcec7869849cdd8bac34cae282b4e64dfd9d75ff8f43ea8ea3adaafbaa7e64ea4de5a81abfcc155d706e3c345650aac9cb1ebe5ab7365b197097c49d3b33682b9fb2ab1f4431796baf1f4"}}, &(0x7f00000015c0)={0x0, 0x3, 0x98, @string={0x98, 0x3, "41e722b4772ad87a97b475fc09cdbbd2e42e59bd7a59dc7520c65508b1d42456141d54d477311d1e8d1696ce3d2bd6352ad5b986c27f040c0d4ec1dd65190ea372ab3a18f98312c9d7776c6655911b8251b5a9da252afa52a7270f32cefec40bfd3d345e32f74e8c2cf1e1057a4cf8073b82e5d308ca58e0cb51fe36baabc2deaac7384963a3ad99e92ad2fec8a0d498c994ce1385a6"}}}, &(0x7f0000001940)={0x44, &(0x7f00000016c0)={0x0, 0xe, 0xb3, "da2e82730fb2bd47cc18ae51c1eb32b23f2ae3776526f227ed1f8fb296c9fece08d8146d697f742134f18d1e6a645043fd8cc5770d8ca6e34418492f95d508ad82fa8e61b869d4d40e678606bd0d4b3fa5d9e253df6576117e32ed2a0fe4ff71863e9d18a06cce1931e5cf54e31dc70c15daacaf506698f69bf616230740a945936d032fe97f7f7249b35ca306dcc67ceb4f3683cada83665def53ec6749603073f5b0892d6929ad4dcdff0410679b15451672"}, &(0x7f0000001780)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0x37}, &(0x7f0000001800)={0x20, 0x81, 0x3, "d91bb2"}, &(0x7f0000001840)={0x20, 0x82, 0x1, 'f'}, &(0x7f0000001880)={0x20, 0x83, 0x2, "bbc8"}, &(0x7f00000018c0)={0x20, 0x84, 0x1, '2'}, &(0x7f0000001900)={0x20, 0x85, 0x3, "bbc112"}}) r11 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x800) sendmsg$inet(r11, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001a00)="b91f393eb68509f8d7e3df397553d38a4f845bfa23257e5367964cb1a505c572cb6cc7303e21a4ce095d7218f545f4e2432b6ee4e6bfc6f762e1c36a932baae05a4972044e53b6d4a6472dc7cbda7aa27bcd50bce8cca6a0b6b1f315dbefe10759a18640457a1c7a4b06039c09cce0c0ce380dd7e6e679279266e00dfba247fca0e374d2a0edf851d3d04bb0be0a55e587a0141900f13e5685550df8c2adb2797767d0fba9e87b718ce3a6c30623e9035b5a24eaf4a1c3241aa1a9a31b265fa98237f98d9d95bf7567947ca82ad0a50d346b6a83d6b690d3977b03803be5cba46b", 0xe1}, {&(0x7f0000001b00)="aaa4f3bf0c840891e69747b29ac3f84453b5c7071370240ddfdfa3044774a372b8abee9b61a5666b194da58f9763f95f68b0d8b020e615ae38395ed1c884e28df272b2aa45489cc6fe9e0c01f4b13fd0fa9701702007942dc3b7249eaa7c74d2889359af2134e08b0b67c47375295cf8aacfa5deadfb0c2cc7a788937ca94fc4cc9b8aee6dce5f45d6c62293468384fda66c6d4367", 0x95}, {&(0x7f0000001bc0)="33d3cbaec8a64d7a40665b9b5c83f4fe775ff38bfa2da9ece02d93dc95eb1a7b4693120367812e75d16ac51365ecdb13b6cff8f21e504a24da0f5f8cf0bfd0d1d2eb235b8a9af73d8b6170dd56ff71fd8638ed6bbf5de3a9de032db5115eaba0af6a79eba1a16e996c5535031d4ad8a78717ac4890bb46205f84285a1dfcd7f4f830f8782590748171bddf7455e06f281e477ab84a5ee760b7965e0d1b01017a3e4252b73b9fe0d37b1a80fdabef4dd623c8881a9a", 0xb5}, {&(0x7f0000001c80)="6124689fe499035ed8856417737684f18af55cb0b7c8cd652d55535e2922b10cf74c7d91af37bb11af49497e92ae67127db4c77cc28c35817f9b32d818d7a473e94aeff185b980054a9c39edff0db4c31f4a3a76a0d9838bfb27b50fd9378b333a075ebd7c1fee872a22", 0x6a}, {&(0x7f0000001d00)="6d31f73f97013923c3b3e655c1358ed0b73e1742770a7bc45802b70297d75294a4918f9ff689ab92f35cda9db2acf1939771de2404880243360d6ca0ce358e4f34308396d75400865d0e69aa054f018bb5bb6f8aabacba582a439b55399123af61b7f009daf6b43dc4bfde18e23353d34a7a682335e1f916fe838b4f7df1fdf044ec84f6770cc5a297a92b4ae4508722a622b6890cee1779af7089bcef6cf42a377ba70e55e37523ec2aeaf62037feda6bbbd7a752fc6f20dbd5ad44d05a9bd2cc946ab7e5e7de3615a3d45e54d8e0e18c0ecfc2", 0xd4}, {&(0x7f0000001e00)="63d73b6dbbde6cfa5cfa6496e59bf53439217f7ea4569e2e9e3fddaf5a20bb5a7e350747431fc55f8b4e0913c693b780f15cabf9efee95b5773165dcc6e576ae3530ef7b8ede54b2371f7b0ab2cc667749249dd97e242a1dd618a237fc0d3af01629a98fad69607498e011b145809fe586373485cc945930bbf82010b029b4eaeca0d855fdbd09b783ba2b8cd950be12a7343df96b4e2caf74fa8691ff6967e6730e9591ca3b3dbdedca8806c9931238f988fc09c43ce9b05bd3edcb88232d1d234d375996c4d0f12991408f0cbe0f0b625156f7a16837fdaf7058db2c37af0171fbe1231aee985d", 0xe8}], 0x6, &(0x7f0000001f80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x55}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x2e, 0x0, 0x6, [0x1, 0x200, 0x80000001, 0x1, 0x7, 0x324822e9, 0x4, 0xb, 0x2]}, @cipso={0x86, 0x10, 0x0, [{0x6, 0x2}, {0x5, 0x8, "16c0b76c89db"}]}, @timestamp_addr={0x44, 0x44, 0x1a, 0x1, 0xd, [{@empty, 0x50}, {@multicast1, 0xe7}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x5}, {@rand_addr=0x64010100, 0x8}, {@private=0xa010102, 0x4}, {@loopback, 0x8}, {@local, 0xfffffffe}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @private=0xa010100, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x118}, 0x4000001) ioctl$sock_SIOCGSKNS(r11, 0x894c, &(0x7f0000002100)) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x4, &(0x7f0000002140)=0x6, 0x4) syz_usb_connect(0x0, 0x7a3, &(0x7f0000002180)={{0x12, 0x1, 0x200, 0x18, 0xf9, 0x88, 0x10, 0x1b3d, 0x1f1, 0x5ec8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x791, 0x3, 0x30, 0x2, 0xb0, 0x0, [{{0x9, 0x4, 0xec, 0xb4, 0x7, 0x52, 0x1, 0x90, 0x70, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "3e14e5b1"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0x2, 0x3}, {0x6, 0x24, 0x1a, 0x91f, 0x14}}], [{{0x9, 0x5, 0x80, 0x8, 0x18, 0x4, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6d, 0x4}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x8, 0x3, 0x3, [@generic={0xfd, 0x31, "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"}, @generic={0x29, 0x22, "9de7ec410c0ae84174bee67c36ca88b3319a991e36066b0a81e8df18e42fe48d061c6115608fe0"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x4, 0xb0}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x8, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1}, @generic={0x7b, 0x7, "8414490c24b40470e68cf7e704ffb7eae93d88fb9272a459c595b02724afe86bc9f66f40d0cc899bea9d5d027f87ddf4a2ead0722c7e14a4fead488b0c75c1902759e8f69ee0415f52385eb3baca00091a99e7a91f4fbc6c6614db275bb68ed73f5dd203516cfdf1633c269e300c062951933aeb9bfe4ebaae"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x8, 0x2, 0xc6, [@generic={0x67, 0x1, "8e08cc703af7d66d7cdf1afb23404cf219edf90ff72e43f23e44620a3c688f792aaa0726c7c7a0d00cc60b5758c10c1c1ce703e1c5803fad06ac6b7df7f9b94e55ab7eae0ad3b79ae067093fa88d0463bacdf05e4ee24855c50c5cf6b3bf28d9d5659cd6b3"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x10, 0x0, 0x0, [@generic={0xea, 0xd, "37566278dcd38bfaaa4fd0ff602e9eeb9b6cbef592b99f669020738c0d7660d1ae718b26509a382a9b11ef9b10bb901f782c44f35e75f63176f99a192e9680f3ac550ae223eae9d8a24029450b12ffc98e90a226ef447275dc3291feec0417d94fae0308591c235e2b00fd5c4a05b9bf9711957826f8aee30bd7b6a763b0961e51b8baadf21e00c352e03acfc547f8947535a7d9f331451391d48410ace704aff5e2a5ce148fa67240889f0f8d7a6b63788d48e7a5c440e93048ca55e7e5836918dcdf2fd27b563542ed8ab8f3142b59c7e44009314135fd54eb2665baedc93ea5254025974d2ef5"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x9, 0x9d, 0x3}}]}}, {{0x9, 0x4, 0x77, 0x9, 0x6, 0xa, 0x0, 0x0, 0x1, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "59174d"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xa55, 0x0, 0x3, 0x9}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x0, 0x3, 0x5e}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x2, 0x5, 0x0, 0x4, 0x1}]}], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x2, 0xf, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x87, 0xc}]}}, {{0x9, 0x5, 0xf, 0x0, 0x79f, 0x2, 0x4, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x8e}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x7, 0x4, 0x8}}, {{0x9, 0x5, 0x6, 0x2, 0x48, 0x8, 0x43, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x8}]}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0x9, 0x4, 0x2}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x7f, 0xff, 0x5, [@generic={0x2, 0x8}]}}]}}, {{0x9, 0x4, 0xf7, 0x3, 0x10, 0x49, 0xd8, 0xfa, 0x7, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "1d6171d2b1"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xd6, 0xb, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x1d}}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0xf}, [@extension_unit={0xd, 0x24, 0x8, 0x1, 0x3, 0xa3, "619c6ccf3e71"}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x4, "4ddb13d2"}, @processing_unit={0xc, 0x24, 0x7, 0x6, 0x1, 0x33, "e5adfbb11d"}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x6, "c84855"}, @processing_unit={0x7, 0x24, 0x7, 0x3, 0x5, 0xeb}]}], [{{0x9, 0x5, 0x3, 0x10, 0x400, 0x3, 0x5, 0x53}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x0, 0x40}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0xaf, 0x4, 0x4}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x8, 0x5, 0x3}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x0, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x9}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xf8, 0xf, 0x1}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x7, 0x5, 0x21, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x1a}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x39, 0x49, 0x6}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x1, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0xff, 0x4}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x37, 0x8, 0xed}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x2, 0x3, 0x7}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x5, 0x2, 0x9, [@generic={0xf5, 0x1, "73fc612fb1209792625b896dd98b9e58d1d9c88b7d88ebefcd9676de5b13519060d0af82fb8199be61da04bffe69c75fe5ae3c632669e5d78eefb12dc7fd77861b59856c427328693171f4256eae350db3930acecac0835b3efa4ea4dfe85828b314f50d1744b83250c8dce22293d30a9fdfa7ce14bee04e97e399aef68cd19bc3f37456824bd8abe31dce7a79fb448cd4e68e79762d391612a6c6b7cc2eb4d9f674a160d5c0daf896ea0968e34b658f79ba591190c57aa514045404e5ae0974532af73c3156ba67dfb02cb8c0478735a300fca8a96e51801bbf2abd4f452b752d1c87f4f084ec5eb625495ce57ef3cb96d63e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x2}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x9, 0xd, 0xd0}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x0, 0x74, 0x44}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0x9, 0x0, 0xb6, [@generic={0xa9, 0x23, "714ebff992cacb4ec8f40552c609b84825263845c4143d89bde50cb463c9f8faef90b0aeaca1f93a23ca8b04219253212ccf4e3b2ad373dd33fa4d3bcb8c2c89e92ad2a507093e0a05346da468f61457cbe69e68e3b98fd3918d33c834a4bbe1f0d4764bcc8a8f118a17eb4a98ba4bad040c5fa57bc7509b8fbd8d0767ddc57adb6d3c3d05944d6324b86c2d0af6cca010bb5106c12ff4ddb3fde932a413f41ac465176c0e0719"}]}}, {{0x9, 0x5, 0x7, 0x63d18226bafb7036, 0x10, 0x6, 0xfc, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}, @generic={0xdf, 0xd, "f09e21b569f42acbf0dbce02256512352b40c6175c512d5fc58e689f642a9586ddc2204d721f7917bee8909a30b806a4febc0783e0c3de20c9424dc7cf62b2662dcbc8b6b1ed851df3017764f3a2bd9aa414f6c0f86716cc08310e3cae4b33bc7615b8c1d061dc02ce35a13e9db6568b3519310c72425385b9fc16564fbd66be6d44d836ea9ff03e488a87a39171dccaacce53b26ec16f393f40e1115c63c2ce676735c4a94998348c0a40c6c8c8d4a0ad2d9491a8904733b2a7f52324ffb00318145fafec764acac11a4185a32da3fd36f918dac9ced96b9706434b30"}]}}]}}]}}]}}, &(0x7f0000002c40)={0xa, &(0x7f0000002940)={0xa, 0x6, 0x300, 0x8, 0x5, 0xa, 0xff, 0x9}, 0x5, &(0x7f0000002980)={0x5, 0xf, 0x5}, 0x4, [{0x6a, &(0x7f00000029c0)=@string={0x6a, 0x3, "5894ec86604d9f2cd7438f2ee779089f7d21ed47ec555e262f23334b17ad97ad3d92908c1296b1c0007ea4fb1bc748d760b4118618c9a93cd08b6b62756192ed480f02019362b19be3304304f676a13ed2cd6d70e9fd39e21547fb07ebdd6d54741e9cb45de7a35a"}}, {0x95, &(0x7f0000002a40)=@string={0x95, 0x3, "4bde4a54102dc7258cfe5c23e4b552861344899e263f94a5c942421e6f1bdb387b04dce868e361ba886294f784c207ffe774c115049f2cd9b77dbc7b364f3cf0b2fa5892a318f92c6b2b968bdf2e8350eed212d6f6d8a2f2db08ae3f19a6f52617ce621b95b1b3d400069c4c6e5bc251ac077337fe29269e75d3db928f975f02638b78ddb04a7249f87d65a4030d0e6abe105a"}}, {0xf1, &(0x7f0000002b00)=@string={0xf1, 0x3, "2dd616624eca0193b886812831bb3556058e4983d7575e3b221e4acd96f12665fc7c7bc3c79ba61a0343797295a0a150e89f3307a020cd72d631bd763ca5afa7ce329e679c7c46317787f7ff7e3b43c7abbe03c843f5d26d96daccd458aa3091376f595c2c05e498860e255a191c58bce0c766395205279d4d1a41fcbb3df990dc3eebe241d7b6c9ea06e64639ca548a65c1aa59ea784dea752a4f0fa4def91a7c58c470f952f7a83d852b18a139b95ee52ac01001ef4c534701b8bf50115dd16356cb86c927b80bf48044eea1a3a6f5a449ca1e7959e6d738743225eafd18e999a94f3580fa66021874d047d7ab57"}}, {0x4, &(0x7f0000002c00)=@lang_id={0x4, 0x3, 0x4ff}}]}) r13 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000002cc0), 0x800) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000002d00), 0x4) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r14, 0x89f3, &(0x7f0000002d80)={'gretap0\x00', &(0x7f0000002d40)={'sit0\x00', r9, 0x7800, 0x7, 0x8, 0x7f, {{0x6, 0x4, 0x0, 0xf, 0x18, 0x65, 0x0, 0x8, 0x4, 0x0, @local, @broadcast, {[@ra={0x94, 0x4}]}}}}}) 8m48.595442095s ago: executing program 9 (id=21731): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x7ffe, 0x1, 0x2000, 0x1000, &(0x7f0000cd0000/0x1000)=nil}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 8m48.564018706s ago: executing program 9 (id=21733): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') exit(0x1ff) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000040)={0x2, 0x10000, 0x5, 0xc18aaa7c744b6fd8, 0x47e15ce3}) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000002c0)={0xb6, 0x0, 0xd}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000020000000001000320003010000000000000000000010002b00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) socket(0x2c, 0x1, 0x7) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r5, @ANYRES64=r5], 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_binder, @flat=@weak_binder, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 8m45.24792505s ago: executing program 9 (id=21762): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@wr_crn={0x46, 0x20, {0x3, 0x2}}, @wr_crn={0x46, 0x20, {0x3, 0x4}}, @uexit={0x0, 0x18, 0x4}, @in_dx={0x82, 0x20, {0x3d2c, 0x4}}], 0x78}) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m45.24405661s ago: executing program 9 (id=21764): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1802, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) listen(r2, 0x9) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) r3 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='iocharset', &(0x7f0000000080)='\xe0^@&&}\'\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000890400"]) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r7, 0x400454cc, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close_range(r0, 0xffffffffffffffff, 0x0) 8m45.21912958s ago: executing program 9 (id=21765): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000001cc0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) r1 = socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x2) dup3(r4, r6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge0\x00'}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x7, 0x1, 0x40, @empty, @mcast1, 0x7, 0x40, 0xfff, 0x7ff}}) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@remote, @loopback, r8}, 0xc) setsockopt$inet6_MCAST_LEAVE_GROUP(r7, 0x29, 0x2d, &(0x7f0000000040)={0x7bf, {{0xa, 0x4e24, 0x10001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}}, 0x88) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fsetxattr$trusted_overlay_upper(r11, 0x0, &(0x7f00000004c0)={0x0, 0xfb, 0x15, 0x5, 0xd, "6e1994616a5da7db7d35cec7ccf564d3"}, 0x15, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0xffffc000) 8m45.047885484s ago: executing program 9 (id=21767): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) fcntl$dupfd(r3, 0x0, r3) (async) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000480)={0x0, 0xea60}, 0x10) accept(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r2], 0x20}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3d0, 0xe8, 0x0, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffd, 0x7}}}, {{@arp={@local, @loopback, 0xffffff00, 0xffffffff, 0x4, 0x1, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff]}}, 0x0, 0xe, 0x12, 0x5, 0x3b9a, 0xff, 'vcan0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x8001, 0x407afc, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) (async) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3d0, 0xe8, 0x0, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffd, 0x7}}}, {{@arp={@local, @loopback, 0xffffff00, 0xffffffff, 0x4, 0x1, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff]}}, 0x0, 0xe, 0x12, 0x5, 0x3b9a, 0xff, 'vcan0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x8001, 0x407afc, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) 8m45.029159774s ago: executing program 42 (id=21767): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) fcntl$dupfd(r3, 0x0, r3) (async) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000480)={0x0, 0xea60}, 0x10) accept(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r2], 0x20}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3d0, 0xe8, 0x0, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffd, 0x7}}}, {{@arp={@local, @loopback, 0xffffff00, 0xffffffff, 0x4, 0x1, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff]}}, 0x0, 0xe, 0x12, 0x5, 0x3b9a, 0xff, 'vcan0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x8001, 0x407afc, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) (async) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3d0, 0xe8, 0x0, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffd, 0x7}}}, {{@arp={@local, @loopback, 0xffffff00, 0xffffffff, 0x4, 0x1, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff]}}, 0x0, 0xe, 0x12, 0x5, 0x3b9a, 0xff, 'vcan0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x8001, 0x407afc, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) 8m12.303691744s ago: executing program 0 (id=22212): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x800) waitid$P_PIDFD(0x3, r1, 0x0, 0x8, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000280)='/dev/ashmem\x00') 8m12.244495826s ago: executing program 0 (id=22237): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(r4, 0x400454dc, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0xd}, 0x8040) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet6(0xa, 0x2, 0xffffffff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r5 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, &(0x7f0000000500)={0x14, &(0x7f0000000440)={0x0, 0x31, 0x4e, {0x4e, 0x1, "22f70c260703a5f136a2a3326db5e80192fd42b162890173eeb56e672f5ed3099defa27c078348930777f472c079070378ed9eadb1b6e2c006e79adea6fb21771ced51fbd747f15f2bd3c279"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}}, &(0x7f0000000940)={0x44, &(0x7f0000000540)={0x0, 0x6, 0x41, "d47e2d3ab543568375c6935a2b95f76500b45fa32191c7bfb72c8bd6120bbab1c06e73e4a4ebe276039007fd71856c9f15ed41a246731490e44d8b143d8ed4c826"}, 0x0, 0x0, &(0x7f0000000740)={0x20, 0x81, 0x1, "97"}, &(0x7f0000000780)={0x20, 0x82, 0x2, "3de9"}, &(0x7f00000007c0)={0x20, 0x83, 0x1, "8a"}, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) syz_open_procfs(0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "04da380d00000036", "2743837c1ac13b56272aec02aac5263b", "8a2735e8", "e306b52ddd75ce9a"}, 0x28) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0xd0}) fsopen(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m10.97577474s ago: executing program 0 (id=22253): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) munlockall() (async) munlockall() mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xffffffffffffffe2, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@flat=@binder={0x73622a85, 0x100, 0x3}, @fda={0x66646185, 0xa, 0x2, 0x7}, @fd}, &(0x7f00000001c0)={0x0, 0x4b, 0x38}}}], 0x0, 0x0, 0x0}) 8m10.47424615s ago: executing program 0 (id=22262): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000000580), 0x80000) (async) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000140)={0x18}, 0x18) (async) write$FUSE_BMAP(r5, &(0x7f0000000140)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_fscache}]}}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)) (async) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r6 = dup(r2) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) getsockopt$MRT6(r6, 0x29, 0xd0, &(0x7f00000000c0), &(0x7f0000000400)=0x4) write$FUSE_INIT(r6, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x210) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) (async) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='d\x00'], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) (async) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000540)) (async) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r7, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 8m10.310923113s ago: executing program 0 (id=22265): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f00000005c0)=0x2, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 8m10.104014566s ago: executing program 0 (id=22266): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x4000000, 0x2ffffffff}, 0xc) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={0x23}) (async) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000180), 0x10) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xe, 0x13, r3, 0x80000000) (async) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5, 0xd8, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44b8874fdf8a"}}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) close_range(r0, 0xffffffffffffffff, 0x0) 8m10.095738297s ago: executing program 43 (id=22266): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x4000000, 0x2ffffffff}, 0xc) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={0x23}) (async) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000180), 0x10) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xe, 0x13, r3, 0x80000000) (async) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5, 0xd8, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44b8874fdf8a"}}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) close_range(r0, 0xffffffffffffffff, 0x0) 7m22.360306786s ago: executing program 8 (id=22875): r0 = getpgrp(0xffffffffffffffff) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000000), 0x5005) process_vm_writev(r0, &(0x7f0000001200)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/79, 0x4f}, {&(0x7f00000010c0)=""/10, 0xa}, {&(0x7f0000001100)=""/194, 0xc2}], 0x4, &(0x7f0000003640)=[{&(0x7f0000001240)=""/58, 0x3a}, {&(0x7f0000001280)=""/39, 0x27}, {&(0x7f00000012c0)=""/236, 0xec}, {&(0x7f00000013c0)=""/91, 0x5b}, {&(0x7f0000001440)=""/156, 0x9c}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/186, 0xba}, {&(0x7f00000025c0)=""/116, 0x74}, {&(0x7f0000002640)=""/4096, 0x1000}], 0x9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003700)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000003ac0)={&(0x7f0000003740)=@abs, 0x6e, &(0x7f0000003900)=[{&(0x7f00000037c0)=""/49, 0x31}, {&(0x7f0000003800)=""/86, 0x56}, {&(0x7f0000003880)=""/110, 0x6e}], 0x3, &(0x7f0000003940)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x158}, 0x0) ioctl$EVIOCSKEYCODE(r16, 0x40084504, &(0x7f0000003b00)=[0x8, 0xfffffff7]) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) recvmmsg$unix(r4, &(0x7f00000066c0)=[{{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003b40)=""/112, 0x70}, {&(0x7f0000003bc0)=""/4, 0x4}, {&(0x7f0000003c00)=""/112, 0x70}, {&(0x7f0000003c80)=""/172, 0xac}, {&(0x7f0000003d40)=""/192, 0xc0}, {&(0x7f0000003e00)=""/8, 0x8}, {&(0x7f0000003e40)=""/48, 0x30}, {&(0x7f0000003e80)=""/166, 0xa6}, {&(0x7f0000003f40)=""/116, 0x74}], 0x9, &(0x7f0000004080)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000040c0), 0x6e, &(0x7f00000054c0)=[{&(0x7f0000004140)=""/154, 0x9a}, {&(0x7f0000004200)=""/158, 0x9e}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/12, 0xc}, {&(0x7f0000005300)=""/183, 0xb7}, {&(0x7f00000053c0)=""/26, 0x1a}, {&(0x7f0000005400)=""/167, 0xa7}], 0x7, &(0x7f0000005540)}}, {{&(0x7f0000005580)=@abs, 0x6e, &(0x7f0000006600)=[{&(0x7f0000005600)=""/4096, 0x1000}], 0x1, &(0x7f0000006640)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}], 0x3, 0x40000060, &(0x7f0000006780)) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000006840)={0x38, 0x0, &(0x7f00000067c0)=[@acquire_done={0x40106309, 0x1}, @decrefs, @increfs_done={0x40106308, 0x3}, @increfs={0x40046304, 0x2}], 0x6, 0x0, &(0x7f0000006800)="91fb3e7011b1"}) (async) r20 = syz_genetlink_get_family_id$batadv(&(0x7f00000068c0), r11) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000069c0)={&(0x7f0000006880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000006980)={&(0x7f0000006900)={0x44, r20, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2177f0e11961"}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x44}}, 0x5) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r9, 0x40049421, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000006a00)={0x2, 0x3970, @status={[0x9, 0x5, 0x0, 0x5, 0x484, 0x6]}, [0xa, 0x7, 0x8, 0xd, 0x4, 0x5, 0x4, 0x4, 0x24387807, 0xffffffffffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0xe, 0x5, 0xc000000000000, 0x5, 0x8, 0x9, 0x8000000000000000, 0x8000000000000000, 0xffffffffffff33fc, 0x7, 0x1, 0xb, 0x1, 0x3, 0xe51, 0x8ac, 0x2f13, 0xee, 0x25, 0x7ff, 0x3, 0x4000000000000, 0x3, 0x1, 0x3, 0x7, 0x8, 0x80, 0x5, 0x80, 0x4, 0x974, 0xfffffffffffffff7, 0x5, 0x8, 0x7, 0x3, 0xa, 0x79b, 0x2, 0x7, 0x7fff, 0x5, 0x25c95a47, 0x3ff, 0x4, 0x9, 0x8000000000000001, 0x5]}) (async) ioctl$BINDER_WRITE_READ(r18, 0xc0306201, &(0x7f0000007780)={0x6c, 0x0, &(0x7f0000007640)=[@decrefs={0x40046307, 0x3}, @register_looper, @register_looper, @acquire_done={0x40106309, 0x1}, @enter_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000007580)={@fda={0x66646185, 0x5, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000007440), 0x0, 0x2, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000007480)=""/193, 0xc1, 0x2, 0x15}}, &(0x7f0000007600)={0x0, 0x20, 0x48}}}], 0xa9, 0x0, &(0x7f00000076c0)="5f70d3a9f70e6d92394025b1930a4380b56ecb8d133a7c04dd7f59db86b5fb4874a91fca45feb1be42c590a60b54c11995a86000fffe573612dadd4284cf8f013a73f0f87d6818a917a8f29d9b9bf3cd68bd6aae07637ca40cad8d375f884485b7f6275be645af45c45f5a8471dd75e9be22c4ad5d7b0851cae7280fd2e0acde0f347f42eb7811cac9ca90fdb194ca5a77e949764bb20da7c4b7d34de5c160b32d068eebd51f90f38c"}) (async) write(r7, &(0x7f00000077c0)="cd40e3a8452ead6a6ae75b015849bebe6c44a21da9e87b91d41b0b700a6cb6f6ecf6c0be3e48ab3acc13ccefac70b012601960e06a993efc7942dde20b278032b97060e2056d65540ed9723c2271fce3e8c5348f76c3b5379e257503360f080930bf4bd5c1d18eccf64fb115abf2728d4e4b3d9b85fb21b48f01254b72629706a63b52bc87f5925f26740b458a6282fdc727060d8dfcc5c17b2b47e792ed94d622c3178e71e346d949cdc8be61d104309ccfb421c6bb53528e9c4c9b7ed19f2618ecba56f74442532be6b5cbb107a6355057c5f6ee", 0xd5) (async) waitid(0x2, r6, &(0x7f00000078c0), 0x40000000, &(0x7f0000007940)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0x8010, r14, 0x1d2b0000) (async) r21 = accept4$unix(r10, &(0x7f0000007a00)=@abs, &(0x7f0000007a80)=0x6e, 0x80000) recvmsg$unix(r21, &(0x7f0000007e80)={&(0x7f0000007ac0)=@abs, 0x6e, &(0x7f0000007d80)=[{&(0x7f0000007b40)=""/4, 0x4}, {&(0x7f0000007b80)=""/193, 0xc1}, {&(0x7f0000007c80)=""/230, 0xe6}], 0x3, &(0x7f0000007dc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x0) (async) r24 = syz_genetlink_get_family_id$devlink(&(0x7f0000007f00), r19) (async) r25 = syz_open_procfs$namespace(r6, &(0x7f0000007f40)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r17, &(0x7f0000008080)={&(0x7f0000007ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000008040)={&(0x7f0000007f80)={0xac, r24, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r15}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r22}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r25}}]}, 0xac}, 0x1, 0x0, 0x0, 0xc0e4}, 0x40000) (async) ioctl$EXT4_IOC_MIGRATE(r12, 0x6609) syz_genetlink_get_family_id$ethtool(&(0x7f00000080c0), r2) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r13, &(0x7f0000008280)={&(0x7f0000008100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000008240)={&(0x7f0000008140)={0xe4, 0x14, 0x300, 0x70bd27, 0x25dfdbfb, {0x2b, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xd0, 0x1, "e12306bb4f0c6ef7971f1cd5473fd353187a78d0bffc97ecaf16a4ff1baca77d2b07ffffe7981572039004d46c6a590e9d4b6c4e53f2539fe9e680d030f942eb6d7c72f229c1c7c34516628e8abe2842ef6da0cedf2e28fc7c338ae93c322e9c56d10a73218459524fbdd92b93b67579fc770a208a06c1aeb0cecc9394f79d99f3f025c5c6c644562ddde0f13e47c310e0588486195c8b278ace948cba77f69309a3856e58c9e8afc725ab1e8de8da77ec3e87c108884b1ee69cd5afe527061676fce8af7a80fe08271708a0"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080) (async) ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f0000008300)=@attr_other={0x0, 0x7, 0x3, &(0x7f00000082c0)=0x8f8}) (async) recvmsg(r23, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008380)=[{&(0x7f0000008340)=""/46, 0x2e}], 0x1, &(0x7f00000083c0)=""/254, 0xfe}, 0x40000043) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r8, 0x111, 0x4, 0x0, 0x4) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r9, 0x111, 0x2, 0x0, 0x4) (async) syz_usb_disconnect(0xffffffffffffffff) 7m22.223869499s ago: executing program 8 (id=22876): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020100030e0000002cbd70000000000005000600332000000a00000000000000fe800000000000000000000000000018000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000020013"], 0x70}, 0x1, 0x7}, 0x4000000) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl(r0, 0x27d9, &(0x7f0000000240)="968f03735399aad8966d57780468620f877f1f27eb13b165976c3a1e13cd40cd885e11c60de8c3b12781164f409ec1b999277692d1721ed75758cae68bee7ed561cc0accbba69543cbe776f25b0737f7a44eacdd3f94f8b00981883d9ee869bc4a7bdf2552a6244fa37481458caf7e652af8021e9775d09a5e733eea9564626ec6fda0b5076f3e78936367117b900aa55bb90813b176ea75d4d97d3d21e3fbf2c9c8089b29b90ffde5de1331cde5ed3d2971d4feb72ed974a2796bb4e9de60d685e81d70923c11e2469a27c1f31ca91f5d1985fc946d1100ac8616510f13653fbc2c82ff1a623b091f1779761dda6fb3fc562181c2b75b3b217492fd1fb7ca7a787be2679bc6e379e5234e79964c2262c662c4c8cff6274b4027f55e165943d5fbf370c328b756e18655af79473697e37fe66a5a5802976c38b8fab47cd56fb0a2df5c608ff7d7e9dc4f48f72cc7b1eef3e436456a0398e8783926586ec5085609c87f109afbba84f778567a816f8e4578adb6c4e53686d29460bc15fc8d922d3b841ee9f2d395f5cb8ab89ea19020cfbe51ac2263497c802ec55738f3f2cfb154d07c4199c96a1413c0aa4cbbc8e409f00b1e503562fa1fcc71ad064a155494fae4813cba1c338b7f974cdbec6cdd726aa390ea2e6b36c35e36aa07352b097a8a95db8052af76ce2ecfe9c8adc7b1d64deb18c7702d8ce2ee71ad6697b82dfdcb2654406c4cc4e1f4d2f71bcb47ea72a341e06de391700534aa9149e3d564b41e3b9c27a0973c93bcfbede8ec3355913ac85b38395bf8ea9de23c47f3f69fc2a9f7368fd5cc6d380bf48a0a90ed9bc7315092a3abbf7fef95c6292cfb9a5d477ef7588ade14dc2f56cfb12bc0d1d590d528f06a234c6052f032966947c13d17a38974c4ada8e8ad53abb0fdb3be462b54b116ef5b11abed4d9570438d1f65829bc81d67c9f88d4767a4b7b33f2bea74ff01aebbd6927973969cfe483424842e84d03071f75ab29d944eb739b5c87b7e8dfc0318b18ab691febe82e23f4edaa36f0a5898596ce4ca26c54725983fd0643492a88df63c254ba8ac0d0aaca8b97b9e568642817f2b72c101a27a4b85f5566e9f250b6f45c1675a5f86e0f92b1d705bc0b173a9f574b6a05b6b85668df5c1cda4383195b198e819d34dfdfb517312bebdc8769b7464170117595a2263aa9c18cb79f84631088eac9df1a9c15a67144214b82d6a8f386512e440bf791efc24aa42bf278106601c564b2ec88403a6d08346eb1822792de7a79fabdda0dfa4bcfe0de4ccc6451520664e602cd2236ee80bb111a5e733fa883c958d9d0b3e0e5966d20e886b62e105808efc26794881f33d7f1148b7901671ecec177fb7c369fcdb3b9516a87d2c46fe5163b3c747f5b603abe6f6ec4780811cb65c24725f1e98f41c2dbce2d5ec128f7efd3b1868f12434b0d442566151390b52f8c8d390b2aa86bda7bca57b9ff7e46e07ec8fa019ef3af0dcdf28a2d140ffa73a724cd69e8713ecabdfdee0b8d2ed4b63a0b06f087f56a9248ae00c80c6b7039bfac4ac27c1fed78438a427575389ae7df0124f6075c26c0ce6450b12fc60a3b8bcf0accd0b5522819bbeda946d0fa42d2395ddd31b5f476a60bfbd991d1844331afcda95e199df7f24731a63cbcae4e79ed43fa14eb4349cb999337d2014f058f01a6eeaa0399d54bd656722904e66c2893769868c50be5ded9c479138d532babdf74ed8571c2dea359518e306a382565f41f4da0d8650ff42bf902b80f2ae4e17720e734a681a9a41079734cd178cfae944d8e2ba611284f7b56f1d54b747313d6602dcf126e36caad4d0d5e7d50a9b2dec58be367ab62f9e16571933469ba8bdb50a1fa7ec3e088d6ade34cffe82897ac127790e926c84044cc3aade983571fbe081d33c12ff361bc705582873c40d47a37d27c617851a06b8cf9a18552c29c97507a6cf15e7787b2c06726d5ce784b2e70e1c29cc06952a90329135c87b2993b18a9fa1c09778001257a5b3f065412f6c6fed539e61561a99d83165e2233e09027fdbba1a2e2de3eaa1c229be069a194a82822cb4f1cbbf4c9ecc34748f263ba8348d31cf0fe6def3fc64e88403fa3ec09e1f5c9e08460cafc2ff8ba54e5ff63ee6b1d81b6a1dc687d4b191ce52db213ae1f77efb7ac0827401207163a52a06285231488d6f9aef5997759de3b46eab86e8f61971372b243bea42c1d3ec8953f056559a720fccd71c439e1785aa4f7005abc02352d234f4d5ea6050865ba6fcdae0c06e2ac02966da39d53a5d96718963d2a608ede6418d7c193f647b6b8de1d85527ae83be41bf8158c77e875d19b86a8ff6e1bff1c7a01dfd467214975ad18886952f1578e6740b49057f802b1bda02b90af54be422590d921e5db68c6006dc9430eb2a239afa42f02cbb146014505963f59e26261472effd9d23cc76c38ac5178ed74f358d8a9ae00bdcd8a2b2bb197c4fed783a70a69b8c197d2db81ef7195580b83b1d2cba26128eca6f8ded3435e034660db724b6f905f5c6812642f58f2481311b503725e997916fd8262f626fafdf8107eb5c3737eacf4acf9d7166f95e3f12475b6cc03c1ef0e543294bca48ca63dceb71528b6847c390c6d3c1c17f79f6293ded133b8c0ab878dd8144ead4bc9b2181aeb7ded6f78d8c818fd3d78c40c4cceb5991165e5100146e1698793a978ca264b25d58169b8c0d19301bcfc38936e21fc87f327f52cd45f49e111bf80294289c9a7c3337b5289eb4f127fb5bd6f61df582ffea5f65bb9122c4d40484045a4770442952cadc0982e73d298a5700330a869fa14078626afa0b5029ab98e2415adee5601dbd2b16d45702356346b81e1085f13b82fe41400ae36ee78b6606a91e1a9238c692587870edad97f0b3119a4f943a9b0f57bc2eb3cc1c408d7812513523e71083c4b6cb06fefe62d796fde0af91eec950349cd3534ecadb320519bbdd1a8d671c833ba99634a3208ab0f9a37e460837da6019d891e3a1f4fba276f7f2a3fd6f883dac7c1c1d07876d3d060528911c9e10754b957141f03a59bf83593504177ecd00a012d401f76989cf9031feb2318a799bb5b211b769a1207b84ad89b454bd551cdfa353a09b9aebfcb871bee8c501576c0def8534257a8ace01dee30436107c039ec936fdafa6ac5aacb2de06b104abab915a91df00f6941a4de1f2fb4d3fbf3ebfd47f916521b1312e1156d2c5596b67c2aa960073dc381d51ae69f4a84b48151c9ff7964375c31f97f1d442b58c7ab7bf138dd002fdf153a8b0c075a9ac8b0cf5e0fb2a8fa705a506eaa06bb071aa64d092a4a8b0b97b54e6ea59e9019465dd4e19000c6dc1f48785d1f7fa47478e2f1205192422d7556ae560b0366bbe31df56df5ab72697841f23a81343da23581fcf1c54424c69f61c1d870d13ee54d5fb4496650eb25634b8ff95a19070d8baebf18656fe4dc2b154326c1c7004bdf3c15f4679e4792a209971adea76c88f495fd55780d4e5856fa897daf26da0a4d74ffa9a711408fd07ca92cdca3d964c6ecd04b3374c9628e043e64e1791630a1a46379f74c2fad0b91e513001ba7b7fbe120b05c91ea3801ab4c557aef04ff891218f605f87276f370e136ea3ebf492aaadd0aec1bb6b48f9c77adf61196c085756c141fbcafa8c55f186b2366017e925ed77efeb4b533a40e7e661c985cbce2ed67aa4eaa6de14003472f6704a258492a71d58fc6ff3f928fb31a3ec89320edae6a782f3c6bb128a670434f4ead27a15ee0d09ac77f8b310977059cbfa535de70eebd51a53a52400f3fccc19fbdd3e8872ce98e430eae55b4d74dcb02ff88c5bf69588bbf91ed773abf8b1b325a8de1e0d9af0291bd974cd97916350e8e551cdf6dcf175885b52c375adc06c0f0bb01922e56bdb614f61bc8a24c7d1e1bb634d0fe0d9b42fb620f87075e500481cdda6d0f94857dd641b4b3dcbdae55578d09c9eb55fa564b98f7dd326834073f1a7659e1014958402b23d39edf772dafb7095497706ac706117a2a57958e5131d18b3e8b15220fcc08fa6a3d279ae849fd727e5c2f681506d056b6ef93c338edf3735f18110a55d83163251e2dbeb18966d99af4614ef40e4b719bfec05e6a116adc59afa3453f6c4ac663317c5aa9e975d860ace08343b1efd59168111c47b6bfec2b7a18f7dcb0d2078e6de56b61b90431bd78ccea552f1df6ce01f6bd7f87686bb6efcaeacded17442590ca8e71ee3d9be74edf5a84fb25d94f13fa4a72b0b3e719c123134c2f2526ee1fdbad35a63e1ab5eb84a798eb7831abb20c65842b9754f3f9637d801f168742bdc925505060f9e0516722dd00885b5bceab550aee4c12f71f635338aea283714ae18f0e017c9f65f3881299d82097dcf07b73409276a3e9afcaf524299425b89f390ea491d385fea8726151bcc79adf7d3d3342a045ee933ea8c1524d188ba30c6a82d83877058c452e097ccccba2546c086c7dfaa401b695e07d05a89dd7f939e4d1e52a96d0486dbf5ff4e821a9dece64d25c188bc4bfdfaba5488765ee53f774b9690499ad53c5c8b365be00d55ebdd4ea0dc9f23ea392f883d984b19da9e840bf40a07516d63f0ef7568f05cdc468e0193b998f8c8cb7e996ca003c2f5044a0b9efa89f34d5c712c84d9e6f2466bae17b6b199ec537af79d7a647313d08e98d1f551cf156be5c75230f6d965136cdc8fb7fee4251c38f63f8d0744d51d46203b9e36ffb2b80c636cbd8fdcae9ee4d41a28fc9031ecdccb13e378ff3e93a296d999f06c74791f73b1de096292b2d06ff4d90626c3085833df04793717b778d2b928acfaa0fd9e928ff0ceb44e5be0b4061b1f2bec0e68d8e765997f09f4133d3360c250408a926f0a7832722c82f9ec83603c6b5c56b6d9fcf1bfdd29bd706695d1c599b0a10ef47b0bc28ee2cddf7cabd975c87e8b564d01e9b972125e37c6c867374939d2304e1fc9215064d8c6a36bac0ab7cceb679844e53a14568ff40c389f2a171f0397d4b3d58a9e5cd976150f860af94babeeeceff891fa5fd924c1653246f4b5c3df499cf06c43e0f3f0fa6fca6cd78b8367947430026b1bbe1f15c4ae9ad8a2990a2d9e8f4064d8c65deac766a975704ecb3d972eb0e24b8f9c9fa8748cdd3c8fa52645a19bfb19fab468ef1b5365bbb410564bb3d071d7bd8f63c5f9e015c4c81ecb61af0cffecd4a22e23670d6e2a12f3d4c61adbf7eb6309f9a5e733e9224b46ea0284e7a3fcd9fbcb723c872c8fdb8741c24d1274cdb5768ad6cc7e74ca47dddcee18be398b2191449abfd52482e38b9a09a0dc4a48129387aa2f61e62043dd37e5ceb67498591ebe8da8127765a231381e7a53ffcff87714c2bd5678bb53c75c97926854b243754132fa27e7631cfd51293c4be8849c51c1aca0d0a4ce88077a224ad89f4f4bb6736241d269deeef36887353b861d7e78fbee79d1bd45ef745709dc205e48624c21a87e4693a06e18a3993f930359dd106889c2ef9cc2cdbff8c17115a228b63eb355590e7831b78743a1a915aecca892855d40eb68d1a17b6287428c3584439a1f1ac3de0532fcbf5e5968f3e11c33f5ddcd5966bf2636765f9255f78995d0372421a17864d5fe175ace7a8326369e6fd46462a8fca6af4e3820cbb0a4279e256b63dcf2427d237bbde0684fd5f104f34a6d47b9762121751b8bd8542ba628c79aa3ca5a4df4891cc49d7e4dbf68ab97521e50f85202f8123cb151ed7f81c8e4fb75fe29b2ce712cc34e5770921223aa0a13f7") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010a26bd70000000000011000000140009800800020002000000070002"], 0x28}, 0x1, 0x0, 0x0, 0x24008090}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)={0xd4, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xcc7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc080}, 0x8c1) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000003fc0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x18, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x11, 0x32, {@dev={0xfe, 0x80, '\x00', 0x30}}}}], 0x28}}], 0x1, 0x1) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000001340)=ANY=[@ANYBLOB="ac14142c0000000001d5fd000000000000000001a0c0be388ac34f2bdcf9c8f2bbc032c1dae4b8052df04f7988586e940a731bb8"], 0x14) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) mkdir(&(0x7f0000002240)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000200004000"]) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x339) close_range(r0, 0xffffffffffffffff, 0x0) 7m22.043848872s ago: executing program 8 (id=22878): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000480)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) (rerun: 64) 7m21.936209734s ago: executing program 8 (id=22881): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x54, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 7m21.719972798s ago: executing program 8 (id=22885): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) (async, rerun: 64) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (rerun: 64) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000001580)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x4, r2, 0x0, 0x0, 0xe6, 0x0, 0x1}]) (async) r4 = fsmount(0xffffffffffffffff, 0x0, 0x5ac840829ac6e59d) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) (async) r5 = accept(r4, &(0x7f0000000c80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000240)=0x6606699780d18b14) io_submit(r3, 0x4, &(0x7f0000000900)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000000540)="03a8559ce198df796d8507d7f0f099a52ccb2f144fcab5ce5da71ba021f75184512780df924b75d7348381934a3774c3d6784903952659d1213795bac00805c12fa0ed15e04e5d52df5756e972bd776e49b0e9989d9ec316a5d066faf0ae0428dc9cea3edd7b7485f1df5fe0390130dac16ad54ca48c5cc9cb44256aaeb7fdd5dcc13dd127", 0x85, 0x12}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0xee4, r6, &(0x7f0000000600)="8ed76f48eb1dfd2cffb95651390887a3b772ceaac7732b336c53ec7fd59a57a785f6e2766f91f38476444e734033c2a72346ee83fb8807097b5ff9", 0x3b, 0x2, 0x0, 0x2, r4}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x8, r1, &(0x7f00000006c0)="35acfa2342ffaa42e4020674d8131d2cbc250b0c993506e3dc082edc9a4447f3e6c66cbdfbedf18ac01b0dabc1b3d29f7c843b318f455a174e2f8f4e26b6ac874c805959bb15c9f21f71c32d57a0aed8a7dd7fb061799e170468326b493189ae6693689e3a78d67b4b1d2095e2651ca7111190ac25954e4f8d09749493823756ab48ea61204fdb768f06c63c2c1c33491e7281ab54611e32584b", 0x9a, 0x3, 0x0, 0x1, r4}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0xb, r0, &(0x7f00000007c0)="46ee0ae93ff25602315680782bac8961e844ae87f3f919185ffbc99f4a4c23113ab057222c24789f8995f8d5d71c47421aa74a719e40428be93bed1627c20a0b42c538cd90dd78ea605538aafee07fd6572de0ab7918bf2c9357e8fd00e62588dffe8296a2e6af2201ea3521d8860e8e2132ca1f6e3e46860c02d5eab6f89c95241fad64d30e9870f141b363a7dfa1525fb490caf5dabeda69d9a3182148a843cb8ace3cab649529b1e15b4b492840b142844089e7567cf80fa260be9c8be5008df74de91791a2ccf100659a6e206715bd8cd84f033a", 0xd6, 0x2d0a8415, 0x0, 0x2}]) (async, rerun: 64) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000002c0)={@initdev}, &(0x7f0000000300)=0x14) (async, rerun: 64) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async, rerun: 32) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8010) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280), 0x3, &(0x7f0000003100)=[{0x1010, 0x103, 0x6, "e42ddad14cf866105290ec17a06c2ac12ed6c914fcc06109b80fbba46f596f85c2c525f5187488941ab8994802194d1ed4dc3154e238c1bab029ee47437151d362df9e9180da4d46104dc7e704bd0c37bcc7abc8a93b601109599dccb4631a90fbc6b16c29a185251631c4acb957a441ab1a05cf671d554867fa22d5c23cbc305b817d20fdad487d8b284688722789f04f162c81e1e9c1fe3cf948c283a737b2d9857ba4312fa282eeaf7597fbe0cb317acc66c1954ee286fde534dd178cf41e43b264681c2c7cc050b3051fa8481920afe88a92aa5bb27cc689c79004557081701841b394b02fa8a2f238a87788ca86976ada493b3f991111404e53165d4de0a711434e328758cb0c98e6eeb8e43dbe5bc9dba3e7c0e6031bfa5d6fe08a8cf22db9535bd225fb2606df8592eb0897e0ff8b38fdd4dce665401f8d1d3aaf8d3510f6deaf45f2db4cc062485892323665d870d2a191e61f303374eb67696da7e75e98fd6a9dc1b5484b390bdd56fe36f614c77b48e3429e9213c916f0d04a9f9ed2991c76ff3b4eede1d1440a9f76e8fcba536754370fcfba07700075ef5285018f05edb57f25d826e2d5e42e5f7cff1839c1c258054bab3ce7e5d8252b2e7dcaed183625cc0c8b16f78151e241cdbd8106636cbf28450e4cc04281aa51e1f735fde27a0d7a09694b2e3d2eb5be5154787131aea9f99f0bbc27f9b283a48462a2d61f48c21a7efaeb19aa5de7dbb46ef0b3e81a4d1d7f578ecba38cb38ae6c0a97391bd511f0b8d0d1495969abb621e01a9302b24008cd7b39757476062af4c327a99076a84b0d3d224131bbaf2201d3b74169d1e0ccdeb226d307c9f2c16d71a92b2421e99f7f771c1208c8cd3932fd5be28acf92affca6d5806dd7b36c583f8bb39bc94bd6cd7b94bad11190a1d69747b04edfeaec0f6fe16d019887cf0494bdc59e5e72e8555df08cf580432fb8942c93bcd97f1e036e18080a198917a0dfbdeeb2eecfa8a70c16dab91927dcf6f28e5f3e79e432154f3101a57141ffdfd18028483696d71c3997406caf4d1dad2464c2a635cf63c07a6447600b25df6042dfeedd6e0d99b22f96c9c90ad646fb6dd6e3ce1de10fc04f7d14e887574cfd3b1a31751377a993fa742d1c335fba4076f92fd2467add2875396dc269af02ce48e1aeae3c0d4303479a5d0ffbfe82d36e39d55e342a91dc1e513736631183f01c54db764d0a56499f7ba531f34836ad432e46e5629df80fb126c1e906c165f865d8f11837f1f2525d04cdd99c984cea68384f4379170a3d117d8d8ca4cc89752796b5ab433f18a0db6605e29abbab35621bcaefa77ce4eb68954f436c172d9e3e7dac7a56a58a629821b8c5df897c87121c25a33112f991d848b849c61dd1c6d42c1026ae6d9910f36c55525f78a08fab86c69d9bb793c2ccb09747cba4657dc624b3adfe381ce62ea7b28a4602e5d0e3eefc146db2b84d709df44c2bbdbe13aa4f5a462adea9c13fc792330c9423150d91510d77a7c88e600e9c47b1417f3da04520d0b9e70171eb690c492e5ec44a455bfc894dc5fe0ec5c735754a4444bcf0c03e517fdc0a309da8f715a41e68730b4ad67058250fcf3649b4707a91b441447c3a1c076356c8d0fa802b94ccf34612f8dbb36840bf6d8bd28943efc79d001201d8b5ebb414476f62af493bd6de6d2c7900978c000dcad7ae7ddfe55c291cee8d4fecc936fc5c077a9e0800954a2afa20f87c0cf6a22138188f80794be1ac02d5b7feef17d065269319c9da67f4691e946af0019a7d08f2507dedda1e8d353d61151510741ce1b349a6179afb6cf9aa59d18d1d0c3b8b0e36a1dc036da3b58ed291dad40669c4645b471d63f8b4b092097dc42a5cf3f902416d0374fc63f49525e987a44eb40215a07b4b84deee939262eb66901db78bd622c9176f0dcf072a24396a96d7881da58f80305b814fa283e49e5c328fac59bdb2818e7cf11b939d3cbfe9e7f1c8fa435365e7d034e22b4a645e8086d49bdbf23ebcf9da978b3c37b1a707b0bb540707e8e28542729afb39e7500cd07d903298a699126abfd6eab207ff5d91d2599d467ce061281c096c4b2572b28ac136bd82c95394d9769daff3fb49306e0f48ff3605f21c28b62649e452192105f944f1d2b42fce9653ed1c0fd43fae2f2a3b487f084308a98553ef50f840bc91f55f7586f29d123ec899ab6746c42832a77ec3acb6fc81557fe4b5c1b475d2fdcd98321d1c951d3b35cf98dcb2201c21c36df7655793bc7c158c0f8b5bc3754f380170b2bcf836efea5cb4c84610e99ead03d62388ad0f1a54dea2e61648971d5f2508aba9dbabfe09a4f9e1ee2ac93aec50dc214fe59e1290061934ee3a2791b0702908ef9b17294f6282706b45086798467734fe87eb589ed1c098344ae4ddbeca19ce4d5e2cc9872f8bcb7848cfd8eabe3deb9fbc4d30c322e2258878477291a18fe70afd6b02dc6d4de875317a15d18a17a812f4e861cccca098cfbea1812d6cd4d1cf49d1e3b5c6484bbd07f4d52a30a45481fd5b9574b11995106bbbae3cf502f6ece82864d292327c90e519f38e5166e014faada778e393cc6fc2d12ed4c8a6dc3c4765cd372bf79b89a354eace22ced536e66f852faeee2d47b221b6aedc6047d3457ddaf94ab9609070d3f95c19c4ca58d493224ce3f70e99d32df5ca38020cc564b07cbe0a6d7587e11cad87138953f2b73fa4b2ca36f36fa255163ed5531d8e535a9a8694ab4f1e75de6645b295c9742b2ff617e304e56bc1d5262f142ca9fe05f6e917a5fbf4d19ed1bc65cc6fa94e8da9be1929b36059c48b5f75446be07d2e293e4c56c01ee57250493b9bf4e34ce2cdafe507a7b23705c85eb1ad7c46651cdf8fed08f4624fc77f6cd52474bdb4448c547eb1002fabb9e872756cd94aeda4581b7c5f7311846e0d9e07ca3b8fe74e00447e3edd67ef436fdb3a3be42043b9d4144528d78f059030d067d40eacce58602bf3710049a4aab94e3fb00572f4f58cc3624bbeb25cf5d15bf1e74b789aebfef32ee8abb1b15d12d958c190c7676b035bbbe85b4dd2c215c5648dd4b8f946ba306173dc11fb5aeeea45c930a5f90ff275644b96f9138bd42884264aaab14adf70168610070293b50677c66552c1ab1b0a42ccbb5af645508229f537b5570d204bc7ca9c023d78bc20d16e780984fa8bb353031b919b230f67a05165bbd60b30c944658bae591d0410b95494d48e641c1d02677802f74f7d50a538d27ade40657e51bda138ad24a52e26eee2c21bd11e13840a7c78687b92c320a34879073ae51b4e5e84fb89dbd09f3f87a1368d4240eca1bc2752a96969316541e3f7253c1b90e0f5c1a74db7115e4d3ca5ddf6a03c25e23bcccd51998fe38ed4149770409af1747bd0cf2e18a40e4104de3850c350c19561553c96db40912abfb1b5c205128c4f4fb4bb00b3e0ea9e0b6a10f06f13f16c690f55c55045ad1d049e678c589512144268eeab453272f4f47e2de02f15d8cadff6b077e68d01203c80ce2754dd57fe39db453e243b2aca3c01fd1a1779de56253013f35a1633446ac26ac0c49f3e7d99f67b43f0493e4cf36ef41f30a5b75defa49a14377359c35f2e090fae5a2400175cd3c4dc659c64c1d2c080c5397d145db272d78ee10afa8698314fb58f273d376ad64cf3cb08178c93b597306921720e7d6a7dea151c2b347afe294ae225e4597e5e5861b82aded198590404bc08a9e558017ebd13f672c1fa5a1282f4aad6f26b68773a0bf540682ef24bc85c1750e78d652d2ba6abd87c84b5766107cef072c9348ff6b68add1eeff57f962967a526deba5b319458ceacb82869609b07627cb2a4008e9e756d1287836d191bf75dd2f4b5d48c91246a407d0909ef2244b16681b80d9acfd5d2c0f3e8293ab099404977be0743f9afb89ef50b43c447eb5232473b6ed2345bfc7500bb7ab33a037a148309f72818cd5487ae103eeea0cc4d7de6b73dc94dfb1038a1efb41aa89cf0bb625329256e9f91ac7729dda100f137a06fffeb83afc27962901d3bcb78d23a48d905f94c5b6b597d4879c0d7f9ad96fdacd68771fade60c008f9523567f49d6c5c75adc5c25d53a15c66a979731db65b1df52613eb4ad56584062b309678a5436ad3d40a0d2ca898d1262d20e39a65d5e317310dcae62389b30207c75db98b17c5629df9281bccc10615218b370a5d76ce2c717c9fd195647aaed8a5868d432f3a044d80622d5981b9f7d4080a90633e9222de789ad2293878ddcc5aa0b7b606a318835e2bfa859476b5fd4bb6ffe8f5048861f83e97bb12bfe57a57b5b44461881c8bb48f41609aec9d140fd55e45d2f33e5f29ab1dc1c2a58e4f54c76b9c442e6eadbada7e2790f6d9349162a6d6cbf09087644028cb93a98141578f671677c4634a01c6f42d4bdd60d1daf9f66c20c42d06327aa86ec87157aa669f579d3b97b10dfacbce2d8ed90897bc59680bea4021520352372f3671dd3bd2e6976b68dde584172ed5d17da6d3cbba67d3a01019b7c7af1214b94c4e7866965265a8d34050f14619e61aae77ec5cf9fd3202f9762dd45613f6fd651a1a19ed93d0efa5783cd9956312a38fbe9d31cd505d7fae97b13e5985b2857883f5c0301f5b87f093bf4e7514635ebdfdff4ed429a12a7f3b230f39d909097599f65c16a36c16c7bf5fc9f640fd34634b2956056f2820f715989b2a29fc63f82e49a62ff733214a98d7bae05e055e4edbbf6d619978d21dfc3bf96d80bd3f2b892003e53aa2e04e8a07d47103f8c7b0aeed558932e1996da333358e6dc3793df748141bde740aff3abb551f0fdf300cd8a0465b22dcd583f2c58a5bf5dbf6df7e8d1340495a236e4d6946b092e3d396604f8e4cc42e47cb58b97923d99848619ad2af349c922c89261304130a7b8201b60f405043e95345a9c7d2fc247ab61397da11c4fe8aae6f6f13f396a367a849dbb3839cfb4a3c0daaae50c4d048883785e9cdc835f5a0ea727bcb4b863e5b66aeb126b3da75317b17d4bd095b47fd11c005b69c9da4b8ffe1d91c2745a5ca0f8abb718320f0d2d4e420dc59d7d661af1213cedc92b2576afb53290d47738e2dfff251a0c06a61b36d674045c2874dd71c981a1e195f8f75267f8a25581651b5e1866bcae523a7e4d6fbf00308bf1b87a619451b4d7743217a2ee7c4dfde5e55cb0b57f96a14470e2d89e4f03cd191d58b28050dc6bf10f3f2908064ca1d7cfdb8b32e85e72016240ec4cd96e96e877d17a1971da3eaa60c2ea2cb3027f6e425d27cad993af8c2e0b62c457ecb6933f3696075dfb7d114fb06b7c2aeca42098f2c2f867b2cfa74fe80b12755ddc2ae1a2707967a2456b309f32eb57f9aa1c62f0b41a435abe615ca923a1add504f7a99df05477919735871dc192ac6ff65e674fe2d0fb3de909e3f2dc62f302e330ad429a499156410a64b11cdb64f7c8b56204c43e11f3a0250ef2c39bcaebfccfc0223b022610c486b0572abdc64b921454bc66b7c33bf43deba9835b9533e519bebac3dad1f26fbeb574490f241004d1256a0fc2eb4337e6e58ba054901c143c67caf613b5f2c9b5edfe5d87a33059b107d94f889ae8698dd1d2ffbfe01220949061dbca85938c77ea03bd335d19fb11f366a7d2ac9ff3d48493f642129039124eb7df6887c0d45e7fdac0b4b555dfb761ca3afcb98bc8d6507c09113b88ac121880c4f6fdfc55068c267d771ba49b1690e69b5445a987c221bc36c528f17e3135101aa8630c7c87f4bdd965"}, {0x48, 0x93, 0x1ff, "16cd2a7c68cd697ad31945f901e40f962829697f4b2ec1a1a1c1714eafcd35ae77542ed1b339ab34a73fce63db372ea2fb"}], 0x1058}}], 0x2, 0x9200000014000041) (async) recvmmsg(r10, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)=""/159, 0x9f}], 0x1, 0x0, 0xfffffffffffffd72}, 0x6}], 0x1, 0x7fffeca3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) (async) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff0b050c0220000606030905071000020104070824", @ANYRES8], 0x0) (async, rerun: 64) setfsgid(0xee01) (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x24, 0x0, &(0x7f0000000a00)=[@request_death={0x400c630e, 0x1}, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) r12 = dup3(r11, r0, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000640)={0x90, 0x0, &(0x7f0000000bc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000940)={@fda={0x66646185, 0x2, 0x2, 0x28}, @fd, @fd={0x66642a85, 0x0, r5}}, &(0x7f00000009c0)={0x0, 0x20, 0x38}}, 0x400}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000b00)={@ptr={0x70742a85, 0x1, &(0x7f0000000a80)=""/72, 0x48, 0x1, 0xa}, @fda={0x66646185, 0x3, 0x0, 0x2e}, @flat=@weak_handle={0x77682a85, 0x1200, 0x3}}, &(0x7f0000000b80)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 7m21.404081814s ago: executing program 8 (id=22891): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x9}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x3}) 7m21.368348765s ago: executing program 44 (id=22891): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x9}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x3}) 8.320044499s ago: executing program 3 (id=27802): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, 0x0) r1 = syz_usb_connect$cdc_ecm(0x3, 0x57, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x75, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x6, 0x24, 0x6, 0x0, 0x0, "e5"}, {0x5, 0x24, 0x0, 0x8de}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x69, 0x5, 0x5}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xd, 0xc, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x40, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0xa3, 0xf}}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_ep_read(r1, 0x10, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x79, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0xed, 0xd7, 0xf3, 0x8, 0x19d2, 0x1080, 0xd2aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0x6, 0xc0, 0x8, [{{0x9, 0x4, 0xe2, 0x8, 0x0, 0xff, 0xff, 0xff, 0x1, [@generic={0x2a, 0x3, "59ac8bd0843324955d9f41aea4613a42ab308c713c4c70e9d88e66731ddf85b965c166e4410c0eee"}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "d9"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x6, 0x401, 0x7}, {0x6, 0x24, 0x1a, 0x219, 0x30}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x10, 0x93c}]}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x201, 0x3, 0xf4, 0x10, 0x8, 0x8}, 0x5, &(0x7f0000000d40)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x405}}, {0xbc, &(0x7f0000000dc0)=@string={0xbc, 0x3, "87dfab9f68dbeab5c4b5c2913874190fbe4da0d1341af03e7d6a0bd6099aba5f55e36ba9efb362b7f04c931b342b67c66c09742d59e0321609fb4e68f374293e47b74e9f24af451870807b01abd35b642a90711455e20b8c391a16205e09862f88ff2f944d9a063b58f4beae7001ffa17166030f65efbf559db391a65ba14d71b7f923993d8028943b0457abd862f6d566f9701a792ec25ab66b075ea2c6404aec412669488bbf34789cbdb5e4082e7334257d7ceb1014f31094"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x40a}}]}) syz_usb_control_io$hid(r2, &(0x7f0000001000)={0x24, &(0x7f0000000f00)={0x20, 0xc, 0x2a, {0x2a, 0x4, "4ed7ff26540604fd4d4eeb2f83b5b510fc2d0bfda2dae5715575e8e47baf32d3dd5a1f0b6dced46c"}}, &(0x7f0000000f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, &(0x7f0000000f80)={0x0, 0x22, 0xc, {[@main=@item_012={0x1, 0x0, 0x8, '`'}, @local=@item_012={0x1, 0x2, 0x0, '?'}, @local=@item_012={0x2, 0x2, 0xa, "f0e0"}, @local=@item_4={0x3, 0x2, 0x1, "9646f91a"}]}}, &(0x7f0000000fc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0x10, 0x1, {0x22, 0x811}}}}, &(0x7f0000001280)={0x2c, &(0x7f0000001040)={0x0, 0x31, 0xad, "d678725065809d167f44201fbf65c4c14c0174f0961549b8a6f11d953ffcf64dd75a7cf13d87c432051c78b12eb13625e5b58bb467f7f500e64ab0d844c2286499cf25238ec6903f9a73eeb90eacd0d4aea69c23a51e1e5bb55cad6e8705aff4237c63abbd2f6f8d7f4adace167f3fd5602e49192828e9043196407a0de0b3075e1ca7f20670c599c4da945713f279c942f33d29ec42f7d00f87eef41ddf6c2ffd02b7f1b072455b1e2535e1a6"}, &(0x7f0000001100)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000001180)={0x20, 0x1, 0x97, "219a17a3c20f91f6a5d7de7d7894f1fea1b510eb24d299054c148915fe1dd8cdbc2a10235e0d5893c3c2eeb04e3411d9c1ff7d965f24be769b14fab22f343dd76bf45136f304d18ac7f3c238b47a47cde3183516241944858071dc93ea4ff72859202317306d1ee0497700a8f38439c96a64bdb9e0cea94a1db9db3b016ae1a4a2da746d9c032ad8163d0d7066c6b284171e8c8e2a403a"}, &(0x7f0000001240)={0x20, 0x3, 0x1, 0x1}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x254, &(0x7f00000012c0)={[{0x3f, 0x4e00, "2559b3a91a5bdf880550668a7f7311acefc52a32db8029b8ccb08d5951e257a8507e3f35edec526fd7886e578dc26b35331f5030e2f3fad932c3b6841aa671"}, {0x2, 0x4e00, ',I'}, {0x45, 0x4e00, "a3d9250edf63237f33dcc186396cb359ac3ed99c5c0c2b3d34781ceecd46a6e2bb271c10afcf2957f75d80b18fecd39cf7170e880a4c3afbd1c059521887624d09075172df"}, {0x20, 0x4e00, "8b1955369da75f05c41cf55471315073ba44c9e469e96642c7898ebce7f559f0"}, {0xfa, 0x4e00, "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"}, {0x2f, 0x4e00, "77889a54609e3e278ee1439faa28d48ab768816a9fd35aebf008701394f1d74f20a9434dd5983e78b4420149417e0e"}, {0x5f, 0x4e00, "3c4f8ec97050d48eb84f123f5402c62a2ebb3ac87be5420fbbef600becb087e2d17148b626a8c3f03e6ec817c8df86191e45ff262bf41a3cb190fda19500f0b06ef07eb6bebba1becf0b08c4bc938fbd7a8bc6dab4b019f54c8588ab0cd54b"}]}) syz_usb_control_io$sierra_net(r2, &(0x7f0000001680)={0x14, &(0x7f0000001540)={0x20, 0x10, 0x94, {0x94, 0x23, "4d0108d2cb0a8e408319ffebe98761a351f955aed980bcdc3ae0e8521279385ec8aa29f82f3c55db389c0eace060565173725f736293c6593988949a4269a64c7425891c548d4f182fd56115e5730ce5193091f753e492610ceefd11d4fd6f27422643adfc4f5ab4bc12714f6b85ce719d6bbcbbd7a3b40f5fdfea506347bf8c0088211dfc23891c7a04a627b1c5db024b08"}}, &(0x7f0000001600)={0x0, 0x3, 0x74, @string={0x74, 0x3, "ea55a4c46718b0d952d44567b185523ae472851e32644c84d7447d1df2e1097857cb6dc3249e1d430532ab8e7bc4b73062a8c9b489e11943b836e4fbec952fe7ab759ee1dafd3ee0f74d608df4879c8c82a7f2b06a9537cb7eeb7de7fdfba2ea0c5a77cc5a531e4199c3523db9c10c63143e"}}}, &(0x7f0000001b80)={0x1c, &(0x7f00000016c0)={0x0, 0xf, 0x25, "dc2cadcad3f7b63458a1fda9cf2a8b8462389935b5c647f41d1b68fa0b07aa9555639412e9"}, &(0x7f0000001700)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001b40)={0x21, 0x0, 0x1, "df"}}) syz_open_dev$char_usb(0xc, 0xb4, 0x1) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001d80)={0x14, &(0x7f0000001c40)={0x0, 0x23, 0xf3, {0xf3, 0xf, "980ed4c79415366373a0ea1f3d0b4f1d6c2d3f2636ca001670e4c560b951a792e74fff60b0ea7755f14f3b40e27ad83db287b8523311bd5fcc7685fbd902afa59b440f095910c42fc41897cbc145307b5cf8404584a1470bb08bfb9482f860c702c170465c46d9f9279149f96a7130cfcd2386c8655a2fad501150591ac441adc52e6ecaa9a0c26e3fd01eab73882410c77a438623fb911a3a24c53a36efe1baca1b19ef223a91e329047fe71b7f865d91af5e16641be3d7dd9d9d9b40e2c0a5bd8e83a6b836b0030cb8c7df0a3bf0dea63aaa7f359da380af55e81fcacd40efa6d00b2514b4c978936b234e64ddccf9ce"}}, &(0x7f0000001d40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001ec0)={0x1c, &(0x7f0000001dc0)={0x20, 0x11, 0x77, "417b073ce9673304194d9db5ea37b392f17f8775b8dc8d0ce06eaae5b5d7526da615c24e025b1bb751ec2bd4f2d571f283f2409be1da9ed269cfaf3d4c058df2b7b67afa571cc299d4af1200a98d419dd32ebfdbef00f46a30dd51f4598b83c106dbafbecd7227493d3bf6d1acd9198fbdd853b9ac0c47"}, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0xff}}) 6.113881892s ago: executing program 6 (id=27827): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="89edee2c78daddb4b473", 0xa}], 0x1) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000007600"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = syz_open_procfs$userns(r1, &(0x7f0000000040)) mmap(&(0x7f0000016000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26009, 0x942f3deeda33b7fd, r0, 0x22e7c000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, r5, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000328bd7000fcdbdf2563000000080003004b105ddd9a3b67c99aa8e8112b660fc0cdcfa3c6", @ANYRES32=r6, @ANYBLOB="0c0099000400000076000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4081) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="89edee2c78daddb4b473", 0xa}], 0x1) (async) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000007600"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) syz_open_procfs$userns(r1, &(0x7f0000000040)) (async) mmap(&(0x7f0000016000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26009, 0x942f3deeda33b7fd, r0, 0x22e7c000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, r5, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000328bd7000fcdbdf2563000000080003004b105ddd9a3b67c99aa8e8112b660fc0cdcfa3c6", @ANYRES32=r6, @ANYBLOB="0c0099000400000076000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4081) (async) 6.015734313s ago: executing program 6 (id=27828): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x4cf, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0xf8, 0xb7, 0x26, 0xff, 0x152d, 0x539, 0x29e4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4bd, 0x3, 0x5, 0x9, 0x80, 0x4, [{{0x9, 0x4, 0xc5, 0x8, 0x0, 0x8f, 0x11, 0x2c, 0xe}}, {{0x9, 0x4, 0x3b, 0xff, 0x10, 0x53, 0x6e, 0x4c, 0x2, [], [{{0x9, 0x5, 0x8, 0x1, 0x400, 0x6, 0x9, 0x6, [@generic={0x13, 0x31, "c7f27df12234cdab1a9f8e51e2ce07d0dc"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x1ff}]}}, {{0x9, 0x5, 0x2, 0x1, 0x220, 0xc7, 0x6, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8000}]}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x1, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf1, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x2, 0xf, 0x3}}, {{0x9, 0x5, 0xd, 0x1, 0x10, 0x0, 0x0, 0xf7, [@generic={0x94, 0xc, "4d116337747c74bd8c1b664a17e3de9c6e847f9767623f3aca4c6a07e0b22e8c2b0d756a8074f2165b9b485f89baf88978d2c90832c9b6db263ba701abaed201064cc821abc59f2217d2860f56bbd75768715c7557060cac9398d7394c14c8a28bb8389c49dc6f7b4acfb57156278f2cde033686c34299cd12f1f38b331c3a338fc8c714b81df6a4612bf80a3f53200d4ca8"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0xff, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xc}]}}, {{0x9, 0x5, 0x4, 0x10, 0x660, 0x80, 0x1, 0x3, [@generic={0x3f, 0x2, "d6c06e4f56a913c7af6c0d8a743f82d39ee3026abc0b28f3ed74e2d0d8eb943216229f1061c29f8a70da75ec466e6789942807d393d6351a46c4fd2a72"}, @generic={0xeb, 0x10, "1dc2cc2e5e5506d83bf7cc5154532dea96d5d69d8e4f783ece978f708c35c24a3464106c7c7dd88921a89d1f4f43cd90b992a93f2b710d4597999035ee141d859ce4b0ace11cfef6ab139bededc84a06fa3b162238b5dd5f503b10d19f6e84343e264c7079468286a189153015574a21446eea373f0d777922eb13a502c1b62a36cf003723668b42471afd1952580eda41060c192d4385494c0442194c749186cdda0c31ae646f94ba0008c41db1efe3f9c78db8fd9bbfc3237a8e0b83d2005299884a53fd7b37e6afe51599eae3ae1472dc44894957adb819565b2de2c7c9f62dcd16ba088c2ccf45"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x648, 0x3, 0x1, 0x7}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xe, 0x9, 0x3}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0xa0, 0x2, 0xb9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x3d}, @generic={0xcc, 0x5, "6a0581b8750b20f1ab156951f81707faa3fee9e7622adac11d0bd8561543a5972f87e1474a444a4b967315abcef457b86802b0e2b16a7fcc1354ca955b199ad084401e8aecf0501a80ddfe3d47af9e8cce84efd65131cf23044a9c0096b0d25dba15372b4a84ff9168efaf12e1b9d035c810b5814e2f4a8a95d485e969e7c69221606e331e7bb1fe0b7166d0805a9904c812f2b7c4ec2b598913a79ace2f6e15831fff908c8c0a5be61ed4c05ef83ccfc902836dfa9fb2b8f9c0c16b076ef5607ffe9341be63a4a6f92f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x8, 0x9, 0x7}}, {{0x9, 0x5, 0xf, 0x0, 0x18, 0x0, 0x92, 0x95}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0x6, 0x81, 0x13, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x5}, @generic={0x1c, 0x23, "7fd7163599397f9258a747fd63099e91f211d1ab14ce3d7fd305"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x228, 0x7, 0x7, 0x10}}, {{0x9, 0x5, 0x4df367618df3302a, 0x4, 0x200, 0x6, 0xb, 0x3, [@generic={0xe8, 0x2, "55ecba6fd124dc4ba2d61801c9fc984877d44ecbeebbcbc72b0510bbd0179d1e7a2f4845de11033734ce2e98d62df7fb4014d658676414080f57b1cafb72550b1d56688d905a3dfaa284146c6479be0ec2765fd1b6723c6ad88bf280f3bc35292b32f604b0987ba959244ff98ef8c44df08b31485aa6a20d543f5fe5721730dd6ad7c1c8bca3f275dbc0ffa583c5c34550e895cb865fdbc232fb12c2d9d748a963fd40a15df6760efb9e0d2cc3adc9b6d815be839e273afc0ce54579770301f92f35ae2ca1330b36a2e6b1480e9ec44aac80b8b068e7399a8b7e75cbd137553f7b1f09de6051"}, @generic={0x9, 0x21, "6f6f70d912447f"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x4, 0xb, 0xb}}]}}, {{0x9, 0x4, 0xfe, 0x2, 0x2, 0xe0, 0x8b, 0xca, 0x0, [@uac_as], [{{0x9, 0x5, 0xd, 0xc, 0x40, 0x4f, 0x3, 0x2}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0xa0, 0xf, [@generic={0x1c, 0x3, "00f14f76e78ed69dfedf7a9f001f1b197cfe226e380f3599d65b"}]}}]}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x6, 0x4, 0x2, 0xff, 0x6}, 0x43, &(0x7f0000000280)={0x5, 0xf, 0x43, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x40, 0x1, 0x800, 0x0, 0x6, [0x3ff0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "cbec1306c0dc8f375c9ee1f595ea7e8e"}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0xfb8b, 0xff00, 0x3, [0x1feff30]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x30, 0x2, 0x6, 0x7}]}, 0x1, [{0xf1, &(0x7f0000000300)=@string={0xf1, 0x3, "7c6e0fabf87c1c034f378001908e2fb88b898954c7d2521832e851fad1d4719b8ae1ceaf7400572d17d4963e5fad8203516b9d10caa52fd4b4ae0117ae6d2fb7f24773f963830f689dfdeb64444f68f08a8382d163b7560997adab46dd32b1bc5e5949d8c020eb09f67b79dd12d6bca02b6652f65e31f746c164a975298de297bd0698c23b7031cc6b9935dd2ec75e984f80a3ef17d43d4608f42a3b14dfa27fe6d17fe3c7ca3893ead15cf5cd71a68dc6ea4e6a3f8d78fefbd76ba4e61c9ce88267021ddd8ecc866b4b502782b01e4beac27831956b07aa2ef8bef1872e5c1621665d81eab68e981447a96109dc83"}}]}) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000180)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000007ff, 0x0, 0x0, 0x1, 0x2000000d, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca71ea8000000000070cf00b00b0000000000000000000000000000000000000000ba00", "2809e8dbe108598948224b084afbc11d87313c5240f45f819e01177d3d458dd4192c61ac0000001000", "91be4ab3060000000000400000000000000100008000", [0x8, 0x9]}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc0200000000000000000000000000016401010000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000010000000000000000700000000000000a80c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000200000000c4000500ac1414aa000000000000000000000000000004d53c00000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0a010102000000003c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000fc00000000000000000001000000016c000400000000007f00000100000000000000000000000000000000010080000000000000000000fdffffff0000000000"], 0x17c}}, 0x0) accept4$nfc_llcp(r2, &(0x7f0000000940), &(0x7f0000000180)=0x60, 0x1000) 5.040638363s ago: executing program 3 (id=27835): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x100}}, {{0xa, 0x0, 0x2, @local}}}, 0x108) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 4.908002905s ago: executing program 3 (id=27837): socket$nl_route(0x10, 0x3, 0x0) setreuid(0xee00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@clone_children}]}) r0 = getuid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000200)={@val={0xa, 0x8906}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @loopback, @local, @remote}}}}}, 0x2e) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40) setreuid(0x0, r0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000d0005110004600000a60c6eec00be00443cfffe800000000000"], 0xfdef) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000080)={0x2, 0x3}) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf, 0x80, 0xff}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r4, 0x40095505, 0x0) accept$nfc_llcp(r3, &(0x7f0000000440), &(0x7f0000000140)=0x60) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f0000000240)='ipvlan1\x00'}) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)=ANY=[@ANYBLOB='dkrsync,\x00']) 4.107457991s ago: executing program 3 (id=27843): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, 0x0) r1 = syz_usb_connect$cdc_ecm(0x3, 0x57, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x75, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x6, 0x24, 0x6, 0x0, 0x0, "e5"}, {0x5, 0x24, 0x0, 0x8de}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x69, 0x5, 0x5}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xd, 0xc, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x40, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0xa3, 0xf}}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_ep_read(r1, 0x10, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x79, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0xed, 0xd7, 0xf3, 0x8, 0x19d2, 0x1080, 0xd2aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0x6, 0xc0, 0x8, [{{0x9, 0x4, 0xe2, 0x8, 0x0, 0xff, 0xff, 0xff, 0x1, [@generic={0x2a, 0x3, "59ac8bd0843324955d9f41aea4613a42ab308c713c4c70e9d88e66731ddf85b965c166e4410c0eee"}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "d9"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x6, 0x401, 0x7}, {0x6, 0x24, 0x1a, 0x219, 0x30}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x10, 0x93c}]}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x201, 0x3, 0xf4, 0x10, 0x8, 0x8}, 0x5, &(0x7f0000000d40)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x405}}, {0xbc, &(0x7f0000000dc0)=@string={0xbc, 0x3, "87dfab9f68dbeab5c4b5c2913874190fbe4da0d1341af03e7d6a0bd6099aba5f55e36ba9efb362b7f04c931b342b67c66c09742d59e0321609fb4e68f374293e47b74e9f24af451870807b01abd35b642a90711455e20b8c391a16205e09862f88ff2f944d9a063b58f4beae7001ffa17166030f65efbf559db391a65ba14d71b7f923993d8028943b0457abd862f6d566f9701a792ec25ab66b075ea2c6404aec412669488bbf34789cbdb5e4082e7334257d7ceb1014f31094"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x40a}}]}) syz_usb_control_io$hid(r2, &(0x7f0000001000)={0x24, &(0x7f0000000f00)={0x20, 0xc, 0x2a, {0x2a, 0x4, "4ed7ff26540604fd4d4eeb2f83b5b510fc2d0bfda2dae5715575e8e47baf32d3dd5a1f0b6dced46c"}}, &(0x7f0000000f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, &(0x7f0000000f80)={0x0, 0x22, 0xc, {[@main=@item_012={0x1, 0x0, 0x8, '`'}, @local=@item_012={0x1, 0x2, 0x0, '?'}, @local=@item_012={0x2, 0x2, 0xa, "f0e0"}, @local=@item_4={0x3, 0x2, 0x1, "9646f91a"}]}}, &(0x7f0000000fc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0x10, 0x1, {0x22, 0x811}}}}, &(0x7f0000001280)={0x2c, &(0x7f0000001040)={0x0, 0x31, 0xad, "d678725065809d167f44201fbf65c4c14c0174f0961549b8a6f11d953ffcf64dd75a7cf13d87c432051c78b12eb13625e5b58bb467f7f500e64ab0d844c2286499cf25238ec6903f9a73eeb90eacd0d4aea69c23a51e1e5bb55cad6e8705aff4237c63abbd2f6f8d7f4adace167f3fd5602e49192828e9043196407a0de0b3075e1ca7f20670c599c4da945713f279c942f33d29ec42f7d00f87eef41ddf6c2ffd02b7f1b072455b1e2535e1a6"}, &(0x7f0000001100)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000001180)={0x20, 0x1, 0x97, "219a17a3c20f91f6a5d7de7d7894f1fea1b510eb24d299054c148915fe1dd8cdbc2a10235e0d5893c3c2eeb04e3411d9c1ff7d965f24be769b14fab22f343dd76bf45136f304d18ac7f3c238b47a47cde3183516241944858071dc93ea4ff72859202317306d1ee0497700a8f38439c96a64bdb9e0cea94a1db9db3b016ae1a4a2da746d9c032ad8163d0d7066c6b284171e8c8e2a403a"}, &(0x7f0000001240)={0x20, 0x3, 0x1, 0x1}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x254, &(0x7f00000012c0)={[{0x3f, 0x4e00, "2559b3a91a5bdf880550668a7f7311acefc52a32db8029b8ccb08d5951e257a8507e3f35edec526fd7886e578dc26b35331f5030e2f3fad932c3b6841aa671"}, {0x2, 0x4e00, ',I'}, {0x45, 0x4e00, "a3d9250edf63237f33dcc186396cb359ac3ed99c5c0c2b3d34781ceecd46a6e2bb271c10afcf2957f75d80b18fecd39cf7170e880a4c3afbd1c059521887624d09075172df"}, {0x20, 0x4e00, "8b1955369da75f05c41cf55471315073ba44c9e469e96642c7898ebce7f559f0"}, {0xfa, 0x4e00, "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"}, {0x2f, 0x4e00, "77889a54609e3e278ee1439faa28d48ab768816a9fd35aebf008701394f1d74f20a9434dd5983e78b4420149417e0e"}, {0x5f, 0x4e00, "3c4f8ec97050d48eb84f123f5402c62a2ebb3ac87be5420fbbef600becb087e2d17148b626a8c3f03e6ec817c8df86191e45ff262bf41a3cb190fda19500f0b06ef07eb6bebba1becf0b08c4bc938fbd7a8bc6dab4b019f54c8588ab0cd54b"}]}) syz_usb_control_io$sierra_net(r2, &(0x7f0000001680)={0x14, &(0x7f0000001540)={0x20, 0x10, 0x94, {0x94, 0x23, "4d0108d2cb0a8e408319ffebe98761a351f955aed980bcdc3ae0e8521279385ec8aa29f82f3c55db389c0eace060565173725f736293c6593988949a4269a64c7425891c548d4f182fd56115e5730ce5193091f753e492610ceefd11d4fd6f27422643adfc4f5ab4bc12714f6b85ce719d6bbcbbd7a3b40f5fdfea506347bf8c0088211dfc23891c7a04a627b1c5db024b08"}}, &(0x7f0000001600)={0x0, 0x3, 0x74, @string={0x74, 0x3, "ea55a4c46718b0d952d44567b185523ae472851e32644c84d7447d1df2e1097857cb6dc3249e1d430532ab8e7bc4b73062a8c9b489e11943b836e4fbec952fe7ab759ee1dafd3ee0f74d608df4879c8c82a7f2b06a9537cb7eeb7de7fdfba2ea0c5a77cc5a531e4199c3523db9c10c63143e"}}}, &(0x7f0000001b80)={0x1c, &(0x7f00000016c0)={0x0, 0xf, 0x25, "dc2cadcad3f7b63458a1fda9cf2a8b8462389935b5c647f41d1b68fa0b07aa9555639412e9"}, &(0x7f0000001700)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001b40)={0x21, 0x0, 0x1, "df"}}) syz_open_dev$char_usb(0xc, 0xb4, 0x1) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001d80)={0x14, &(0x7f0000001c40)={0x0, 0x23, 0xf3, {0xf3, 0xf, "980ed4c79415366373a0ea1f3d0b4f1d6c2d3f2636ca001670e4c560b951a792e74fff60b0ea7755f14f3b40e27ad83db287b8523311bd5fcc7685fbd902afa59b440f095910c42fc41897cbc145307b5cf8404584a1470bb08bfb9482f860c702c170465c46d9f9279149f96a7130cfcd2386c8655a2fad501150591ac441adc52e6ecaa9a0c26e3fd01eab73882410c77a438623fb911a3a24c53a36efe1baca1b19ef223a91e329047fe71b7f865d91af5e16641be3d7dd9d9d9b40e2c0a5bd8e83a6b836b0030cb8c7df0a3bf0dea63aaa7f359da380af55e81fcacd40efa6d00b2514b4c978936b234e64ddccf9ce"}}, &(0x7f0000001d40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001ec0)={0x1c, &(0x7f0000001dc0)={0x20, 0x11, 0x77, "417b073ce9673304194d9db5ea37b392f17f8775b8dc8d0ce06eaae5b5d7526da615c24e025b1bb751ec2bd4f2d571f283f2409be1da9ed269cfaf3d4c058df2b7b67afa571cc299d4af1200a98d419dd32ebfdbef00f46a30dd51f4598b83c106dbafbecd7227493d3bf6d1acd9198fbdd853b9ac0c47"}, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0xff}}) 2.747767667s ago: executing program 6 (id=27851): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x100000000, 0x410000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x42) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000010) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, 0x0, 0x505, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc6e}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xbc}, 0x1, 0x0, 0x0, 0x14}, 0x4000) recvmsg(r0, &(0x7f0000002980)={&(0x7f00000004c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/153, 0x99}, {&(0x7f0000002600)=""/152, 0x98}, {&(0x7f00000026c0)=""/167, 0xa7}, {&(0x7f0000002780)=""/212, 0xd4}], 0x6, &(0x7f0000002900)=""/107, 0x6b}, 0x100) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x40041) ioctl$KVM_RUN(r0, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002b00), r0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x6c, r4, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x31}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffff8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000002c40)={'\x00', 0x2}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002cc0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000002e00)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x8c, r5, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x35, 0x26}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40811}, 0x40000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f0000002e80), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002ec0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002f00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002fc0)={'ip6tnl0\x00', &(0x7f0000002f40)={'syztnl2\x00', r2, 0x2f, 0xd6, 0x1, 0x4, 0x42, @mcast1, @dev={0xfe, 0x80, '\x00', 0x34}, 0x7800, 0x20, 0x9b, 0xfff}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000003300)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000032c0)={&(0x7f0000003000)={0x284, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r9}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffbcc}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r2}}}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x20048815}, 0x8800) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003380), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x20, r11, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x40000000) sendmsg$unix(r0, &(0x7f0000003600)={&(0x7f0000003480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003500)="d0e298ea4b9c9a133fb155ce88d321ab57d9746225677c92e1ce1246eb1fab174e8451", 0x23}], 0x1, &(0x7f0000003580)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x2c, 0x1, 0x1, [r3, r3, r0, r3, r6, r6, r6]}}], 0x48, 0x40}, 0x2004800) mount$cgroup(0x0, &(0x7f0000003640)='./file0\x00', &(0x7f0000003680), 0x0, &(0x7f00000036c0)={[{@favordynmods}, {@cpuset_v2_mode}, {@name={'name', 0x3d, ' \x01\x00'}}, {@favordynmods}, {@clone_children}, {@subsystem='blkio'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'notify_peers_interval\x00'}}, {@flag='mand'}, {@obj_type={'obj_type', 0x3d, 'enabled\x00'}}, {@subj_user}, {@appraise}, {@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x32, 0x31, 0x32, 0x65, 0x64, 0x34, 0x34], 0x2d, [0x5d, 0x65, 0x37], 0x2d, [0x33, 0x31, 0x63, 0x30], 0x2d, [0x39, 0x32, 0x32, 0x63], 0x2d, [0x38, 0x30, 0x62, 0x64, 0x64, 0x39, 0x66, 0x63]}}}, {@fsmagic={'fsmagic', 0x3d, 0x23}}, {@flag='silent'}, {@context={'context', 0x3d, 'user_u'}}]}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000037c0)={@local, @broadcast, 0x1, 0x1, [@rand_addr=0x64010102]}, 0x14) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000003900)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000038c0)={&(0x7f0000003840)={0x70, 0xc, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040890}, 0x200c0800) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r12, &(0x7f0000003a00)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x24, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0xc8a0}, 0x11) recvmsg(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000003a40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/42, 0x2a}, {&(0x7f0000004b00)=""/54, 0x36}, {&(0x7f0000004b40)=""/88, 0x58}, {&(0x7f0000004bc0)=""/185, 0xb9}, {&(0x7f0000004c80)=""/142, 0x8e}, {&(0x7f0000004d40)=""/96, 0x60}, {&(0x7f0000004dc0)=""/61, 0x3d}, {&(0x7f0000004e00)=""/109, 0x6d}], 0x9, &(0x7f0000004f40)=""/134, 0x86}, 0x0) 2.730740817s ago: executing program 6 (id=27852): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0xa) sendto$packet(r3, &(0x7f0000000180)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b6800000cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x2}]}, 0x28}}, 0x4000) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r6 = socket(0x8000000010, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x100000000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000000340)={0x0, 0xa6, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="010326bd708efddbdf252700000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x24008091}, 0x10) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$TIPC_NL_MON_GET(r8, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000002600)={0x224, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb5, 0x3, "9caa9c91fb6e8a9f117d3240463cf074f505e8bfafc56730716326c289c72b489eb9b6520c86f1770323d1ba3d8523716f56ece7fdc52d7bd58c301d4da308fec348c9c8b5a140c654547e950c9c095d03910afef28d47bb5835948869504b97ac3a33eaaacc73f63fa1a233de8a63ee363a14ae28f09ddadecf01011c4a6ec937728d177018fe84e81bb015677506fa6b8da4f270a5a5294d211e303f863e0d8767aca717a2c49caa96f69c12e4041cbf"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xaa, 0x3, "b090ef43fae4dcce783ca760103bcebaf054012739456d55f9bc87ee728b81e1c5d93d814d1088d4f3829d2cd7897a16d58abe96bf7d80b5bd3eb7a8985e8752f895e00a8e8c7c6d37339d6d578ead3abe099cebcdecf0f2b705c8020a84bbf82a332986e5d342bbcdb8c8de4165942ce189ac15edf94294cbe66330f7d60009be3585aff1b3171811cbdc96d0fe8661935ab06da832ca274c6dc1bf9f1737d70f3927689588"}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7811}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x752f}]}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'pimreg1\x00'}) mount$fuseblk(&(0x7f0000000400), &(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480), 0x85000, &(0x7f0000002840)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r11}, 0x2c, {'group_id', 0x3d, r12}, 0x2c, {[{@default_permissions}, {@allow_other}, {@default_permissions}, {@allow_other}], [{@fsname={'fsname', 0x3d, ':[$*\''}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}]}}) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0xffffffffffffffda, r10, {0x7, 0x2b, 0x2, 0x20, 0x9, 0x101, 0x3, 0x6, 0x0, 0x0, 0x10, 0xa0f}}, 0x50) write(r6, &(0x7f00000006c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000100039815fa2c53c2864800008d5e63efbe737f96705e670929f4af6002b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b2941b94b661304fd5d60789b89d3ef3d99f30910a5bba2e177312e082bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b21067693da9a9c2dbb8b8f5566791cf190201ded815b2ccd243f395ed94e0ad91", 0xfc) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000140)={{'fd', 0x3d, r13}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}]}}) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 2.56702016s ago: executing program 6 (id=27853): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = dup(r1) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x402, 0x10000, @local}, 0x1c) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) read(r3, &(0x7f0000000040)=""/32, 0x20) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x3e7f58135edb1c56, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x35}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 2.467998312s ago: executing program 6 (id=27854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r2, 0x1, 0x70bd29, 0xfffffffd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1000056}}}}, [@NL80211_ATTR_TX_RATES={0x19, 0x10d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xfde1, 0x0, 0x3, 0x3, 0xf33e, 0x9]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x2, 0x9, 0xe2e, 0x4, 0x0, 0x7, 0x1, 0x3b]}}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x64]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d7dda410891193080000010203010902240002000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, &(0x7f00000014c0)={0x14, 0x0, &(0x7f00000013c0)={0x0, 0x3, 0x20, @string={0x20, 0x3, "ac4b7c8448aeee76ead108f46eff2bf2ebf7af9516cfb643e3e2364a0519"}}}, &(0x7f00000028c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)={0x20, 0x0, 0x1, 0x6}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x80}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x161}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x55}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.210298807s ago: executing program 4 (id=27857): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) io_setup(0x1, &(0x7f0000000080)=0x0) io_pgetevents(r0, 0x3, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0), &(0x7f0000000340)={&(0x7f0000000280)={[0xe]}, 0x8}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) socket$packet(0x11, 0x3, 0x300) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x24d, 0x2, 0x4a732f64, 0x100008, 0x9, 0xc, 0x2, 0x12a0, 0x6, 0xf477, 0x800, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x4, 0x91, 0x6, 0x4, 0x7, 0x2, 0x5, 0x2, 0x7fff, 0x5, 0x8, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x3, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x40083, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0x80a8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0xfffffffc, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x1, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x40400, 0xffff58b9, 0x4c2336d3, 0x4, 0x20000001, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7faf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff800, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x80000002, 0x400, 0x100, 0x6, 0x10007, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x200006, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0xffffffff, 0x5, 0x1afa, 0x1, 0x8, 0xfffffe01, 0x7b, 0xfffffff8, 0x100040, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.027793119s ago: executing program 4 (id=27864): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = dup(r1) bind$inet6(r2, &(0x7f0000001dc0)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x80000001}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x82402, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2bf3, &(0x7f0000000040)={0x0, 0x69f1, 0x4000, 0x3, 0x3cb}, &(0x7f00000000c0), 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000002180)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb8w&\xdfP\xba\xdf%\x7f\xb7\xac\x952\x8d\xa0\x15\xbc\xf4nS\x11X\x95\xc0~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7Z\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1\v\xb9\xad\xb7}l\xbe\x95p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b\xe4}\xe3\x7f\x06\xce\xe1D\x94&\xac\x88\x95\xff\xda\x14d\xcbx\x93x\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x7f\x81X)s\xc8\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-', 0xb) fchmod(r4, 0x1b0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) dup(r1) (async) bind$inet6(r2, &(0x7f0000001dc0)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x80000001}, 0x1c) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x82402, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) (async) fcntl$setlease(r3, 0x400, 0x1) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x15) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x2bf3, &(0x7f0000000040)={0x0, 0x69f1, 0x4000, 0x3, 0x3cb}, &(0x7f00000000c0), 0x0) (async) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async) memfd_create(&(0x7f0000002180)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb8w&\xdfP\xba\xdf%\x7f\xb7\xac\x952\x8d\xa0\x15\xbc\xf4nS\x11X\x95\xc0~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7Z\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1\v\xb9\xad\xb7}l\xbe\x95p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b\xe4}\xe3\x7f\x06\xce\xe1D\x94&\xac\x88\x95\xff\xda\x14d\xcbx\x93x\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x7f\x81X)s\xc8\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-', 0xb) (async) fchmod(r4, 0x1b0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 949.631471ms ago: executing program 4 (id=27866): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x8, 0x110, r0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000004000/0x4000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)="b2b6d31855050d25fbcb944a57684ea7c865a749e274342580a43f2fc466130945c283919395b6b1549beddb0a4e85a0e96d3e7761", 0x35, r0}, 0x68) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x8, 0x110, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000004000/0x4000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)="b2b6d31855050d25fbcb944a57684ea7c865a749e274342580a43f2fc466130945c283919395b6b1549beddb0a4e85a0e96d3e7761", 0x35, r0}, 0x68) (async) 866.766153ms ago: executing program 4 (id=27868): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = getpid() r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0x1a, r2, 0xba, &(0x7f0000000040)) syz_pidfd_open(r2, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x2, 0x2, 0x6, 0x5, r1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x4, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x42, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f00000000c0)) 807.754744ms ago: executing program 3 (id=27870): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x43e6, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0xffffffffffffffd1, 0x40012052, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000040)={{0x36, 0x0, 0xe614, 0x4600}, 'syz0\x00', 0x18}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r4, 0x400, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = eventfd2(0x10ffd, 0x80000) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f00000000c0)={0x1, r5}) close_range(r1, 0xffffffffffffffff, 0x0) 619.650688ms ago: executing program 3 (id=27874): write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x2, {{0x0, 0x4, 0x5}, 0x8}}, 0x18) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000080)={0x9, 0x2}) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f00000004c0)={0x4, 0x80, 0x200, &(0x7f00000000c0)=[0x9d0, 0x1, 0x232a, 0x8, 0x5, 0x2, 0x5, 0x6, 0xd8, 0x1, 0x4, 0x5, 0x8, 0x88, 0x3, 0xfffffffffffffffe, 0x7, 0x8, 0x5, 0x3, 0x4, 0x4, 0x5, 0xffffffffffffff13, 0x1, 0x9dc1, 0xc, 0x45c8, 0x8, 0x5, 0xfffffffffffffffd, 0x6, 0x7, 0x6a4a, 0x40, 0x7fff, 0x8, 0x5, 0x33930eb2, 0x2, 0x52, 0x3ff, 0x9, 0xfffffffffffffffc, 0x3, 0x100000000, 0x400, 0xc, 0x41, 0x1ff, 0x8000, 0xfffffffffffff405, 0x9, 0x4, 0x5, 0xd, 0xe0000000000, 0x6, 0xac, 0x10000, 0x60, 0x8001, 0x401, 0x100, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x7, 0x7, 0x680000, 0x27, 0x0, 0x9, 0xe9a2, 0x200, 0x6, 0x8000000000000000, 0xfd2, 0x4, 0x679, 0x4, 0x100, 0x19, 0xe50e, 0xff, 0x7fffffffffffffff, 0x3d0, 0x2, 0x3f, 0x4583, 0xfffffffffffffff8, 0x3, 0x10001, 0xffffffff, 0x1, 0x9, 0x6, 0x9, 0x4, 0x4, 0x3dd7, 0x4, 0x3, 0x5, 0x10000, 0x80000000, 0xffffffff, 0x21, 0x3, 0x7ff, 0x5, 0x8, 0xf04d, 0x2, 0x7f, 0x2, 0x0, 0x1, 0xc960, 0x3, 0x530a, 0x8, 0x9, 0x1, 0x100000001, 0xed]}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000500)) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000740)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast2}}, &(0x7f0000000840)=0xe8) getresuid(&(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) mount$fuse(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x1000000, &(0x7f0000000940)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}, {@allow_other}, {@allow_other}], [{@context={'context', 0x3d, 'staff_u'}}, {@dont_measure}, {@uid_eq={'uid', 0x3d, r4}}, {@euid_lt={'euid<', r7}}, {@dont_measure}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}}) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x8001) r8 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r8, &(0x7f0000000b80)={&(0x7f0000000a80)=@llc, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b00)}], 0x1}, 0xb1) write$P9_RSTATu(r0, &(0x7f0000000bc0)={0x52, 0x7d, 0x2, {{0x0, 0x3c, 0x7, 0x0, {0x0, 0x3, 0x1}, 0x20000000, 0x2a, 0x8, 0x9, 0x0, '', 0x7, 'user_id', 0x2, '-\''}, 0x1, '[', r5, r2, r4}}, 0x52) r9 = pidfd_getfd(r0, r0, 0x0) setuid(r4) utime(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x9, 0x4}) fsetxattr$security_selinux(r9, &(0x7f0000000cc0), &(0x7f0000000d00)='system_u:object_r:sulogin_exec_t:s0\x00', 0x24, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x75c83) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x5) vmsplice(r8, &(0x7f0000001f40)=[{&(0x7f0000000d40)="9fe72db743d1e93a68940c55", 0xc}, {&(0x7f0000000d80)="b92774ece28e22fe4cace968c001171d931cbf73e24df9", 0x17}, {&(0x7f0000000dc0)="b2323ef006a2bb2e9a86f70e20ec37a41369c0e36110f06076ba7d1ae29f665fa1cc7d2f6743ae33f7b72af2dc5ae0c657c43bd27c3ca8e07da1771cf22f24f507bfb81840e6adea8ffa3f2f13b4186b81d7a3ebb024e9ba92e91c245492c560e27772257b552ee32d349f5e90463c47e0752eb3556f72f661106c325557eab64ff929a8c651735ba9c9e7cf2651d54ed683", 0x92}, {&(0x7f0000000e80)="cee7c54806b165913b99f454a41c12716c6f085941c9ac56441fb853003ad3b5a98565128457d2295f1bb7fe2887cc12e8c1a7e8ffbe556bc0a76772ac4ab438df0904dd2a2cdb149c89eef403f0b2cb37cae03bfcfd29c7be30a910efcc591484c6dd5b7972b66c119a88a2ff3694220482aab3291d46dad91c74f2a1cacd0d1db390c51ee76c15c92c0a84a0c213e53d197b6a1a28854ec6324aa8fea2d87af66394a325d5d30c2f0b66bf675cc6bc59ed905c2d3a", 0xb6}, {&(0x7f0000000f40)="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", 0x1000}], 0x5, 0x2) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x20, r11, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) fcntl$F_SET_FILE_RW_HINT(r10, 0x40e, &(0x7f0000002100)=0x3) r12 = open$dir(&(0x7f0000002180)='./file0\x00', 0x20000, 0x10) symlinkat(&(0x7f0000002140)='./file0\x00', r12, &(0x7f00000021c0)='./file0/file0\x00') sendmsg$NFQNL_MSG_VERDICT_BATCH(r9, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x1c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_MARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) setresuid(r6, 0x0, r5) 464.057381ms ago: executing program 4 (id=27877): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x12, &(0x7f0000000040)=0x1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) 395.304822ms ago: executing program 4 (id=27879): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, 0x0) r1 = syz_usb_connect$cdc_ecm(0x3, 0x57, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x75, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x6, 0x24, 0x6, 0x0, 0x0, "e5"}, {0x5, 0x24, 0x0, 0x8de}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x69, 0x5, 0x5}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xd, 0xc, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x40, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0xa3, 0xf}}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_ep_read(r1, 0x10, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x79, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0xed, 0xd7, 0xf3, 0x8, 0x19d2, 0x1080, 0xd2aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0x6, 0xc0, 0x8, [{{0x9, 0x4, 0xe2, 0x8, 0x0, 0xff, 0xff, 0xff, 0x1, [@generic={0x2a, 0x3, "59ac8bd0843324955d9f41aea4613a42ab308c713c4c70e9d88e66731ddf85b965c166e4410c0eee"}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "d9"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x6, 0x401, 0x7}, {0x6, 0x24, 0x1a, 0x219, 0x30}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x10, 0x93c}]}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x201, 0x3, 0xf4, 0x10, 0x8, 0x8}, 0x5, &(0x7f0000000d40)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x405}}, {0xbc, &(0x7f0000000dc0)=@string={0xbc, 0x3, "87dfab9f68dbeab5c4b5c2913874190fbe4da0d1341af03e7d6a0bd6099aba5f55e36ba9efb362b7f04c931b342b67c66c09742d59e0321609fb4e68f374293e47b74e9f24af451870807b01abd35b642a90711455e20b8c391a16205e09862f88ff2f944d9a063b58f4beae7001ffa17166030f65efbf559db391a65ba14d71b7f923993d8028943b0457abd862f6d566f9701a792ec25ab66b075ea2c6404aec412669488bbf34789cbdb5e4082e7334257d7ceb1014f31094"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x40a}}]}) syz_usb_control_io$hid(r2, &(0x7f0000001000)={0x24, &(0x7f0000000f00)={0x20, 0xc, 0x2a, {0x2a, 0x4, "4ed7ff26540604fd4d4eeb2f83b5b510fc2d0bfda2dae5715575e8e47baf32d3dd5a1f0b6dced46c"}}, &(0x7f0000000f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, &(0x7f0000000f80)={0x0, 0x22, 0xc, {[@main=@item_012={0x1, 0x0, 0x8, '`'}, @local=@item_012={0x1, 0x2, 0x0, '?'}, @local=@item_012={0x2, 0x2, 0xa, "f0e0"}, @local=@item_4={0x3, 0x2, 0x1, "9646f91a"}]}}, &(0x7f0000000fc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0x10, 0x1, {0x22, 0x811}}}}, &(0x7f0000001280)={0x2c, &(0x7f0000001040)={0x0, 0x31, 0xad, "d678725065809d167f44201fbf65c4c14c0174f0961549b8a6f11d953ffcf64dd75a7cf13d87c432051c78b12eb13625e5b58bb467f7f500e64ab0d844c2286499cf25238ec6903f9a73eeb90eacd0d4aea69c23a51e1e5bb55cad6e8705aff4237c63abbd2f6f8d7f4adace167f3fd5602e49192828e9043196407a0de0b3075e1ca7f20670c599c4da945713f279c942f33d29ec42f7d00f87eef41ddf6c2ffd02b7f1b072455b1e2535e1a6"}, &(0x7f0000001100)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000001180)={0x20, 0x1, 0x97, "219a17a3c20f91f6a5d7de7d7894f1fea1b510eb24d299054c148915fe1dd8cdbc2a10235e0d5893c3c2eeb04e3411d9c1ff7d965f24be769b14fab22f343dd76bf45136f304d18ac7f3c238b47a47cde3183516241944858071dc93ea4ff72859202317306d1ee0497700a8f38439c96a64bdb9e0cea94a1db9db3b016ae1a4a2da746d9c032ad8163d0d7066c6b284171e8c8e2a403a"}, &(0x7f0000001240)={0x20, 0x3, 0x1, 0x1}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x254, &(0x7f00000012c0)={[{0x3f, 0x4e00, "2559b3a91a5bdf880550668a7f7311acefc52a32db8029b8ccb08d5951e257a8507e3f35edec526fd7886e578dc26b35331f5030e2f3fad932c3b6841aa671"}, {0x2, 0x4e00, ',I'}, {0x45, 0x4e00, "a3d9250edf63237f33dcc186396cb359ac3ed99c5c0c2b3d34781ceecd46a6e2bb271c10afcf2957f75d80b18fecd39cf7170e880a4c3afbd1c059521887624d09075172df"}, {0x20, 0x4e00, "8b1955369da75f05c41cf55471315073ba44c9e469e96642c7898ebce7f559f0"}, {0xfa, 0x4e00, "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"}, {0x2f, 0x4e00, "77889a54609e3e278ee1439faa28d48ab768816a9fd35aebf008701394f1d74f20a9434dd5983e78b4420149417e0e"}, {0x5f, 0x4e00, "3c4f8ec97050d48eb84f123f5402c62a2ebb3ac87be5420fbbef600becb087e2d17148b626a8c3f03e6ec817c8df86191e45ff262bf41a3cb190fda19500f0b06ef07eb6bebba1becf0b08c4bc938fbd7a8bc6dab4b019f54c8588ab0cd54b"}]}) syz_usb_control_io$sierra_net(r2, &(0x7f0000001680)={0x14, &(0x7f0000001540)={0x20, 0x10, 0x94, {0x94, 0x23, "4d0108d2cb0a8e408319ffebe98761a351f955aed980bcdc3ae0e8521279385ec8aa29f82f3c55db389c0eace060565173725f736293c6593988949a4269a64c7425891c548d4f182fd56115e5730ce5193091f753e492610ceefd11d4fd6f27422643adfc4f5ab4bc12714f6b85ce719d6bbcbbd7a3b40f5fdfea506347bf8c0088211dfc23891c7a04a627b1c5db024b08"}}, &(0x7f0000001600)={0x0, 0x3, 0x74, @string={0x74, 0x3, "ea55a4c46718b0d952d44567b185523ae472851e32644c84d7447d1df2e1097857cb6dc3249e1d430532ab8e7bc4b73062a8c9b489e11943b836e4fbec952fe7ab759ee1dafd3ee0f74d608df4879c8c82a7f2b06a9537cb7eeb7de7fdfba2ea0c5a77cc5a531e4199c3523db9c10c63143e"}}}, &(0x7f0000001b80)={0x1c, &(0x7f00000016c0)={0x0, 0xf, 0x25, "dc2cadcad3f7b63458a1fda9cf2a8b8462389935b5c647f41d1b68fa0b07aa9555639412e9"}, &(0x7f0000001700)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001b40)={0x21, 0x0, 0x1, "df"}}) syz_open_dev$char_usb(0xc, 0xb4, 0x1) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000001d80)={0x14, &(0x7f0000001c40)={0x0, 0x23, 0xf3, {0xf3, 0xf, "980ed4c79415366373a0ea1f3d0b4f1d6c2d3f2636ca001670e4c560b951a792e74fff60b0ea7755f14f3b40e27ad83db287b8523311bd5fcc7685fbd902afa59b440f095910c42fc41897cbc145307b5cf8404584a1470bb08bfb9482f860c702c170465c46d9f9279149f96a7130cfcd2386c8655a2fad501150591ac441adc52e6ecaa9a0c26e3fd01eab73882410c77a438623fb911a3a24c53a36efe1baca1b19ef223a91e329047fe71b7f865d91af5e16641be3d7dd9d9d9b40e2c0a5bd8e83a6b836b0030cb8c7df0a3bf0dea63aaa7f359da380af55e81fcacd40efa6d00b2514b4c978936b234e64ddccf9ce"}}, &(0x7f0000001d40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001ec0)={0x1c, &(0x7f0000001dc0)={0x20, 0x11, 0x77, "417b073ce9673304194d9db5ea37b392f17f8775b8dc8d0ce06eaae5b5d7526da615c24e025b1bb751ec2bd4f2d571f283f2409be1da9ed269cfaf3d4c058df2b7b67afa571cc299d4af1200a98d419dd32ebfdbef00f46a30dd51f4598b83c106dbafbecd7227493d3bf6d1acd9198fbdd853b9ac0c47"}, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0xff}}) 253.739395ms ago: executing program 5 (id=27883): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) getrandom(0x0, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x20005) r3 = getpid() r4 = socket$can_raw(0x1d, 0x3, 0x1) dup(r4) unshare(0x400) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) r6 = syz_pidfd_open(r3, 0x0) setns(r6, 0x24020000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x60) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 136.085427ms ago: executing program 5 (id=27884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsmount(r0, 0x0, 0x4) r1 = inotify_init() writev(r1, &(0x7f0000000000), 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1) 135.817147ms ago: executing program 5 (id=27885): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) syz_open_dev$loop(0x0, 0x0, 0x480280) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet(0x2, 0x2, 0xfffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000040)=""/40, 0x28) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x3, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x8009, 0x61, 0x11, 0x0, 0x10}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) syz_io_uring_setup(0x684b, &(0x7f0000000000)={0x0, 0xc5fe, 0x800, 0x3, 0xc6, 0x0, r2}, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0xfffffcda) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0400000000000000850400"]) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 121.504657ms ago: executing program 5 (id=27886): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) quotactl_fd$Q_QUOTAON(r0, 0x0, r2, &(0x7f0000000840)='./file0\x00') write$rfkill(r1, &(0x7f0000000240)={0x1, 0x2, 0x2, 0x1}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000000101010800000000000000000a00000508001a40fffffff8180004801400018006200400a29732318ee58dba765955b67b074000000600"], 0x34}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x1) flock(r3, 0x1) flock(r3, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000880)={0x7, 0x2, "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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_clone(0x8c00, &(0x7f0000000640)="15737ad74bb892a23e5b667ed73267b910e88a2cf64577dca5fab2ee194c88c74227763e0a7b30aacd63bc18285d81ab1924aa4e97d0df42be7b721ff49708b5fc3639d0f452a297e948f5797b69171655f78e12173628dce14b6d1974a5616290c68323cad732d80ba0038cbabba02cba70ca516f4a2da15adcebbb75593f5cd1b6b8b960fcc4973f78de9792c85efa1219fe664599b3af7241d52ffbfd8cc7900f21c884a49422078ddb2fd947effb16a6705ee3de3d4404e491b46b7f02699259ce41a3dbf68c04f92098b331ab772e05ff46371626a687e51da1fc39de2e575af65567f1", 0xe6, &(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000200)="9e481588d7766d70f0b475ac15") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 91.904078ms ago: executing program 5 (id=27887): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x9003}, 0x4) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/183, 0xb7, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x100}, @flat=@weak_handle={0x77682a85, 0x1800}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205dad1d02a2a4524d5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f6282e980021d25789ea8edc9"}) 0s ago: executing program 5 (id=27888): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r3, 0x0, 0x0, 0x20000081, &(0x7f0000000240)={0x6, 0x1, r2, 0x1, 0xa4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) connect$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1000080002, 0x100000000000088) (async) r4 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req3={0x1, 0x9, 0xfffffff8, 0x4, 0xffff, 0x3, 0x800}, 0x1c) (async) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req3={0x1, 0x9, 0xfffffff8, 0x4, 0xffff, 0x3, 0x800}, 0x1c) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) socket$inet6(0xa, 0x802, 0x88) (async) r5 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x20009, @mcast1}, 0x1c) sendto$inet6(r5, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) (async) sendto$inet6(r5, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e661, 0x7, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) close(0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.5.25962'. [ 2028.704540][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.25966'. [ 2028.721439][ T411] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2028.887442][ T411] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2028.896589][ T411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.908458][ T411] usb 5-1: config 0 descriptor?? [ 2029.138865][ T411] usb 5-1: Cannot read MAC address [ 2029.144138][ T411] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2029.157708][ T411] usb 5-1: USB disconnect, device number 55 [ 2029.216132][T31485] tipc: Left network mode [ 2029.268730][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25969'. [ 2029.391119][T11742] netlink: 'syz.5.25970': attribute type 10 has an invalid length. [ 2029.416466][T31485] veth1_macvtap: left promiscuous mode [ 2029.422051][T31485] veth0_vlan: left promiscuous mode [ 2029.428309][T31485] veth1_macvtap: left promiscuous mode [ 2029.433881][T31485] veth0_vlan: left promiscuous mode [ 2029.612282][T11746] tipc: Started in network mode [ 2029.617417][T11746] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 2029.626524][T11746] tipc: Enabled bearer , priority 10 [ 2029.897238][T11754] rust_binder: Error while translating object. [ 2029.897290][T11754] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 2029.903547][T11754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:395 [ 2030.075049][ T1714] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2030.245647][ T1714] usb 5-1: Using ep0 maxpacket: 32 [ 2030.263759][ T1714] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2030.278441][ T1714] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 2030.309662][ T1714] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2030.320742][ T1714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.328788][ T1714] usb 5-1: Product: ᐁ [ 2030.335247][ T1714] usb 5-1: Manufacturer: ֈ迼㟇ꤧ掐滽︒樼᳽윔ꗞ㚻끿鹏嘑핊㠖呈燶ѳ衪눏郂᪭샒Ř葊뢖忴䠛在⦩⟊㹓ኌ⽊ᕐ䪹躴阠ꥶ襰ቤ㧽玲ᄩ᫛幐ↇ䆶啜ᠪ찣쐯骊蛡곬덄띴鐂밖䵸᜴谏肰或춱ᓿ琲䚄̅ꡅఞ [ 2030.362085][ T1714] usb 5-1: SerialNumber: syz [ 2030.388371][T11752] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2030.396304][T11752] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2030.632708][ T1714] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 2030.676715][ T1714] usb 5-1: USB disconnect, device number 56 [ 2030.713892][ T36] kauditd_printk_skb: 5680 callbacks suppressed [ 2030.713911][ T36] audit: type=1400 audit(2033561121.292:371055): avc: denied { ioctl } for pid=11799 comm="syz.3.25990" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2030.747527][ T36] audit: type=1400 audit(2033561121.330:371056): avc: denied { ioctl } for pid=11799 comm="syz.3.25990" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2030.821162][T13738] tipc: Node number set to 4269801494 [ 2030.836723][ T36] audit: type=1400 audit(2033561121.414:371057): avc: denied { read write } for pid=11751 comm="syz.4.25975" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2030.860678][ T36] audit: type=1400 audit(2033561121.414:371058): avc: denied { read write open } for pid=11751 comm="syz.4.25975" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2030.885505][ T36] audit: type=1400 audit(2033561121.414:371059): avc: denied { ioctl } for pid=11751 comm="syz.4.25975" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2030.910800][ T36] audit: type=1400 audit(2033561121.414:371060): avc: denied { ioctl } for pid=11751 comm="syz.4.25975" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2030.936088][ T36] audit: type=1400 audit(2033561121.424:371061): avc: denied { ioctl } for pid=11751 comm="syz.4.25975" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2030.962695][ T36] audit: type=1400 audit(2033561121.424:371062): avc: denied { ioctl } for pid=11751 comm="syz.4.25975" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2031.088181][ T36] audit: type=1400 audit(2033561121.649:371063): avc: denied { ioctl } for pid=11751 comm="syz.4.25975" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2031.173384][ T36] audit: type=1400 audit(2033561121.733:371064): avc: denied { ioctl } for pid=11751 comm="syz.4.25975" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2031.236883][ T1714] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 2031.402901][ T1714] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2031.412068][ T1714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.420989][ T1714] usb 5-1: Product: Њ [ 2031.425081][ T1714] usb 5-1: Manufacturer: 龫뗪뗄釂琸༙䶾토ᨴ㻰橽혋騉徺ꥫ돯띢䳰ᮓ⬴왧६⵴ᘲ﬉桎瓳㸩띇齎꼤ᡅ聰Ż펫摛逪ᑱ谋ᨹ‖फ़⾆ﾈ鐯驍㬆꺾Űꇿ晱༃喿뎝ꚑꅛ煍醴餣耽鐨лꭗ拘헶復ᩰ⹹嫂殶帇욢䩀䇬椦譈㒿鱸떽ࣤ献┴籽ძ鐐 [ 2031.453037][ T1714] usb 5-1: SerialNumber: syz [ 2032.922565][ T1714] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 2033.379071][T11890] SELinux: Context system_u:object_r:policy_src_t:s0 is not valid (left unmapped). [ 2033.491019][T11897] 9pnet_fd: Insufficient options for proto=fd [ 2034.226748][T25650] usb 5-1: USB disconnect, device number 57 [ 2034.335348][T11915] rust_binder: 11915 RLIMIT_NICE not set [ 2034.376500][ T1714] rust_binder: 11914: removing orphan mapping 0:1048 [ 2034.431153][T11917] rust_binder: Write failure EFAULT in pid:165 [ 2034.565457][T11922] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 2034.579845][T11922] rust_binder: 167: no such ref 3 [ 2034.587216][T11922] rust_binder: 167: no such ref 0 [ 2034.592995][T11922] rust_binder: Read failure Err(EAGAIN) in pid:167 [ 2034.653691][T11933] rust_binder: Error while translating object. [ 2034.660717][T11933] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 2034.667011][T11933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:167 [ 2034.828646][T11948] netlink: 16 bytes leftover after parsing attributes in process `syz.5.26038'. [ 2034.854124][T11948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11948 comm=syz.5.26038 [ 2035.522190][T11958] rust_binder: Error while translating object. [ 2035.522228][T11958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2035.528516][T11958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172 [ 2036.011959][ T411] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2036.097923][ T36] kauditd_printk_skb: 435 callbacks suppressed [ 2036.097943][ T36] audit: type=1400 audit(2033561126.349:371500): avc: denied { ioctl } for pid=11962 comm="syz.4.26043" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2036.183199][ T36] audit: type=1400 audit(2033561126.434:371501): avc: denied { ioctl } for pid=11962 comm="syz.4.26043" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2036.209309][ T36] audit: type=1400 audit(2033561126.453:371502): avc: denied { create } for pid=11996 comm="syz.5.26055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2036.230515][ T36] audit: type=1400 audit(2033561126.453:371503): avc: denied { ioctl } for pid=11962 comm="syz.4.26043" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2036.255967][ T36] audit: type=1400 audit(2033561126.453:371504): avc: denied { write } for pid=11996 comm="syz.5.26055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2036.276952][ T411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2036.279196][ T36] audit: type=1400 audit(2033561126.462:371505): avc: denied { create } for pid=11996 comm="syz.5.26055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2036.287874][ T411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2036.307934][ T36] audit: type=1400 audit(2033561126.462:371506): avc: denied { getopt } for pid=11996 comm="syz.5.26055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2036.318979][ T411] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2036.337818][ T36] audit: type=1400 audit(2033561126.462:371507): avc: denied { ioctl } for pid=11962 comm="syz.4.26043" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2036.347863][ T411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.372202][ T36] audit: type=1400 audit(2033561126.471:371508): avc: denied { ioctl } for pid=11962 comm="syz.4.26043" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2036.391060][ T411] usb 5-1: config 0 descriptor?? [ 2036.405256][ T36] audit: type=1400 audit(2033561126.499:371509): avc: denied { ioctl } for pid=11962 comm="syz.4.26043" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2036.668428][ T411] usbhid 5-1:0.0: can't add hid device: -71 [ 2036.674518][ T411] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2036.684938][ T411] usb 5-1: USB disconnect, device number 58 [ 2037.131136][ T411] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 2037.293444][ T411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2037.304542][ T411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2037.314519][ T411] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2037.323635][ T411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2037.333471][ T411] usb 5-1: config 0 descriptor?? [ 2037.341516][ T411] hub 5-1:0.0: USB hub found [ 2037.557950][ T411] hub 5-1:0.0: 1 port detected [ 2037.941899][ T411] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 2037.958409][ T411] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 2037.971209][ T411] usbhid 5-1:0.0: can't add hid device: -71 [ 2037.977328][ T411] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2038.006134][ T411] usb 5-1: USB disconnect, device number 59 [ 2038.350004][T12037] netlink: 32 bytes leftover after parsing attributes in process `syz.6.26067'. [ 2038.430024][T12047] netlink: 16 bytes leftover after parsing attributes in process `syz.6.26071'. [ 2038.489135][T12051] netlink: 'syz.5.26072': attribute type 4 has an invalid length. [ 2038.497527][T12051] netlink: 17 bytes leftover after parsing attributes in process `syz.5.26072'. [ 2039.383192][T12087] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 2039.695999][T12093] netlink: 'syz.4.26090': attribute type 4 has an invalid length. [ 2039.729573][T12093] rust_binder: Error while translating object. [ 2039.729626][T12093] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2039.737296][T12093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:199 [ 2039.807824][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.26094'. [ 2039.904696][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.26094'. [ 2039.913835][T12105] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2040.296757][ T893] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2040.467325][ T893] usb 5-1: Using ep0 maxpacket: 32 [ 2040.483106][ T893] usb 5-1: too many configurations: 16, using maximum allowed: 8 [ 2040.502157][ T893] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2040.510848][ T893] usb 5-1: can't read configurations, error -61 [ 2040.648489][ T893] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2040.808371][ T893] usb 5-1: Using ep0 maxpacket: 32 [ 2040.814800][ T893] usb 5-1: too many configurations: 16, using maximum allowed: 8 [ 2040.827113][ T893] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2040.836160][ T893] usb 5-1: can't read configurations, error -61 [ 2040.844395][ T893] usb usb5-port1: attempt power cycle [ 2040.923765][T12136] 9pnet: p9_errstr2errno: server reported unknown error 2ꓒ۰|sdK [ 2040.923765][T12136] NHo" hb [ 2041.224092][ T893] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2041.246454][ T893] usb 5-1: Using ep0 maxpacket: 32 [ 2041.252561][ T893] usb 5-1: too many configurations: 16, using maximum allowed: 8 [ 2041.262795][ T893] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2041.270489][ T893] usb 5-1: can't read configurations, error -61 [ 2041.405299][ T893] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2041.427403][ T893] usb 5-1: Using ep0 maxpacket: 32 [ 2041.433235][ T893] usb 5-1: too many configurations: 16, using maximum allowed: 8 [ 2041.442182][ T36] kauditd_printk_skb: 382 callbacks suppressed [ 2041.442200][ T36] audit: type=1400 audit(2033561131.369:371892): avc: denied { ioctl } for pid=12111 comm="syz.4.26096" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2041.444361][ T893] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2041.448527][ T36] audit: type=1400 audit(2033561131.369:371893): avc: denied { ioctl } for pid=12111 comm="syz.4.26096" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2041.476077][ T893] usb 5-1: can't read configurations, error -61 [ 2041.481888][ T36] audit: type=1400 audit(2033561131.369:371894): avc: denied { ioctl } for pid=12111 comm="syz.4.26096" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2041.508982][ T893] usb usb5-port1: unable to enumerate USB device [ 2041.513430][ T36] audit: type=1400 audit(2033561131.369:371895): avc: denied { ioctl } for pid=12111 comm="syz.4.26096" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2041.570157][ T36] audit: type=1400 audit(2033561131.369:371896): avc: denied { ioctl } for pid=12111 comm="syz.4.26096" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2041.596025][ T36] audit: type=1400 audit(2033561131.397:371897): avc: denied { ioctl } for pid=12111 comm="syz.4.26096" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2041.622822][ T36] audit: type=1400 audit(2033561131.425:371898): avc: denied { ioctl } for pid=12111 comm="syz.4.26096" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2041.649144][ T36] audit: type=1400 audit(2033561131.538:371899): avc: denied { create } for pid=12138 comm="syz.6.26106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2041.669959][ T36] audit: type=1400 audit(2033561131.538:371900): avc: denied { getopt } for pid=12138 comm="syz.6.26106" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2042.035172][ T36] audit: type=1400 audit(2033561131.922:371901): avc: denied { create } for pid=12145 comm="syz.5.26109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2042.386297][T12157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=12157 comm=syz.6.26114 [ 2042.387722][T12158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=12158 comm=syz.6.26114 [ 2043.274625][T12182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2043.283251][T12182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2043.314825][T12183] fuse: Bad value for 'group_id' [ 2043.320282][T12183] fuse: Bad value for 'group_id' [ 2043.327785][T12182] fuse: Bad value for 'group_id' [ 2043.332773][T12182] fuse: Bad value for 'group_id' [ 2043.677366][T12210] netlink: 64 bytes leftover after parsing attributes in process `syz.6.26133'. [ 2044.393771][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26144'. [ 2044.404038][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26144'. [ 2044.413979][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26144'. [ 2044.424273][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26144'. [ 2044.434119][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26144'. [ 2044.443602][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26144'. [ 2044.453308][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26144'. [ 2044.466209][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26144'. [ 2044.475988][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26144'. [ 2044.658859][T12249] SELinux: failed to load policy [ 2044.718094][T12255] 9pnet_fd: p9_fd_create_tcp (12255): problem connecting socket to 127.0.0.1 [ 2045.189083][ T45] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 2045.246593][T12276] netlink: 'syz.6.26157': attribute type 16 has an invalid length. [ 2045.315852][T12276] netlink: 'syz.6.26157': attribute type 2 has an invalid length. [ 2045.338309][ T45] usb 5-1: device descriptor read/64, error -71 [ 2045.398563][T12284] 9pnet_fd: Insufficient options for proto=fd [ 2045.604797][ T45] usb 5-1: device descriptor read/64, error -71 [ 2045.661399][T12304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:440 [ 2045.765531][T12310] rust_binder: Error in use_page_slow: ESRCH [ 2045.765555][T12310] rust_binder: use_range failure ESRCH [ 2045.771596][T12310] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 2045.777145][T12310] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2045.784981][T12310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:442 [ 2045.825347][T12315] 9pnet_fd: Insufficient options for proto=fd [ 2045.860599][ T45] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 2046.009813][ T45] usb 5-1: device descriptor read/64, error -71 [ 2046.092081][T12317] overlayfs: failed to clone lowerpath [ 2046.265650][ T45] usb 5-1: device descriptor read/64, error -71 [ 2046.308393][T12321] overlayfs: failed to clone lowerpath [ 2046.382950][ T45] usb usb5-port1: attempt power cycle [ 2046.492232][T12328] netlink: 'syz.6.26176': attribute type 4 has an invalid length. [ 2046.502692][T12328] netlink: 'syz.6.26176': attribute type 4 has an invalid length. [ 2046.744986][T12337] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12337 comm=syz.5.26179 [ 2046.745287][ T45] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 2046.759813][T12337] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12337 comm=syz.5.26179 [ 2046.778049][ T36] kauditd_printk_skb: 444 callbacks suppressed [ 2046.778070][ T36] audit: type=1400 audit(2033561136.369:372346): avc: denied { ioctl } for pid=12267 comm="syz.4.26153" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2046.778756][ T36] audit: type=1400 audit(2033561136.369:372347): avc: denied { ioctl } for pid=12267 comm="syz.4.26153" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2046.835538][ T36] audit: type=1400 audit(2033561136.426:372348): avc: denied { ioctl } for pid=12267 comm="syz.4.26153" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2046.836731][ T45] usb 5-1: device descriptor read/8, error -71 [ 2046.860962][ T36] audit: type=1400 audit(2033561136.426:372349): avc: denied { ioctl } for pid=12267 comm="syz.4.26153" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2046.924575][ T36] audit: type=1400 audit(2033561136.426:372350): avc: denied { ioctl } for pid=12267 comm="syz.4.26153" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2046.960546][ T36] audit: type=1400 audit(2033561136.454:372351): avc: denied { ioctl } for pid=12267 comm="syz.4.26153" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2046.962299][T12339] rust_binder: Error while translating object. [ 2046.986019][ T36] audit: type=1400 audit(2033561136.454:372352): avc: denied { read write } for pid=8556 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2046.988676][T12339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 2046.992249][ T36] audit: type=1400 audit(2033561136.454:372353): avc: denied { read write open } for pid=8556 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2046.992287][ T36] audit: type=1400 audit(2033561136.454:372354): avc: denied { ioctl } for pid=8556 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2047.018939][T12339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:448 [ 2047.026147][ T36] audit: type=1400 audit(2033561136.491:372355): avc: denied { read write } for pid=12338 comm="syz.3.26180" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2047.065399][ T45] usb 5-1: device descriptor read/8, error -71 [ 2047.363480][ T45] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 2047.392975][ T45] usb 5-1: device descriptor read/8, error -71 [ 2047.456141][T12348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12348 comm=syz.3.26183 [ 2047.538825][T12349] rust_binder: Write failure EFAULT in pid:457 [ 2047.539306][ T45] usb 5-1: device descriptor read/8, error -71 [ 2047.662776][ T45] usb usb5-port1: unable to enumerate USB device [ 2048.232570][T12372] fuseblk: Bad value for 'group_id' [ 2048.233008][T12368] fuseblk: Bad value for 'group_id' [ 2048.237908][T12372] fuseblk: Bad value for 'group_id' [ 2048.253481][T12372] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2048.255837][T12374] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 2048.258453][T12368] fuseblk: Bad value for 'group_id' [ 2048.263341][T12372] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 2048.277226][T12374] rust_binder: 222: no such ref 1 [ 2049.454376][T12391] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 2049.454402][T12391] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 2049.462527][T12391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:237 [ 2049.813866][T12408] binder: Bad value for 'defcontext' [ 2049.840777][T12410] __nla_validate_parse: 27 callbacks suppressed [ 2049.840797][T12410] netlink: 116 bytes leftover after parsing attributes in process `syz.5.26201'. [ 2049.907061][T12415] rust_binder: inc_ref_done called when no active inc_refs [ 2049.965443][T12417] overlayfs: unescaped trailing colons in lowerdir mount option. [ 2050.251996][T13738] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2050.417727][T13738] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 2050.427069][T13738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2050.435127][T13738] usb 5-1: Product: syz [ 2050.439328][T13738] usb 5-1: Manufacturer: syz [ 2050.443973][T13738] usb 5-1: SerialNumber: syz [ 2050.450181][T13738] usb 5-1: config 0 descriptor?? [ 2050.457628][T13738] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2050.673657][T12419] fuse: Bad value for 'fd' [ 2050.682428][T13738] usb 5-1: USB disconnect, device number 68 [ 2050.983645][T12439] overlayfs: failed to clone upperpath [ 2051.524702][T12453] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 2051.648261][ T411] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 2051.691412][T12455] rust_binder: 12453 RLIMIT_NICE not set [ 2051.830267][ T411] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2051.850771][ T411] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2051.860911][ T411] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2051.871607][ T411] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2051.888595][ T411] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2051.898906][ T411] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2051.907782][ T411] usb 5-1: Product: syz [ 2051.912030][ T411] usb 5-1: Manufacturer: syz [ 2051.924292][ T411] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2052.151598][ T36] kauditd_printk_skb: 397 callbacks suppressed [ 2052.151618][ T36] audit: type=1400 audit(2033561141.417:372753): avc: denied { create } for pid=12447 comm="syz.4.26215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2052.187575][ T36] audit: type=1400 audit(2033561141.436:372754): avc: denied { setopt } for pid=12447 comm="syz.4.26215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2052.212474][ T411] usb 5-1: USB disconnect, device number 69 [ 2052.231618][ T36] audit: type=1400 audit(2033561141.445:372755): avc: denied { sys_module } for pid=12447 comm="syz.4.26215" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2052.254389][ T36] audit: type=1400 audit(2033561141.445:372756): avc: denied { create } for pid=12447 comm="syz.4.26215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2052.275605][ T36] audit: type=1400 audit(2033561141.464:372757): avc: denied { setopt } for pid=12447 comm="syz.4.26215" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2052.296416][ T36] audit: type=1400 audit(2033561141.464:372758): avc: denied { write } for pid=12447 comm="syz.4.26215" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2052.757418][ T36] audit: type=1400 audit(2033561141.980:372759): avc: denied { read write } for pid=10841 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2052.782006][ T36] audit: type=1400 audit(2033561141.980:372760): avc: denied { read write open } for pid=10841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2052.817189][ T36] audit: type=1400 audit(2033561141.980:372761): avc: denied { ioctl } for pid=10841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2052.844428][ T36] audit: type=1400 audit(2033561142.036:372762): avc: denied { read } for pid=12469 comm="syz.4.26223" name="binder1" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2052.882723][T12470] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 2052.882756][T12470] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:265 [ 2053.124578][T12497] overlayfs: failed to clone lowerpath [ 2053.289933][T12520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2053.309824][T12520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2053.534857][ T411] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2053.654596][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.26241'. [ 2053.694728][ T411] usb 5-1: Using ep0 maxpacket: 8 [ 2053.701994][ T411] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 2053.710343][ T411] usb 5-1: config 250 has an invalid interface number: 0 but max is -1 [ 2053.718664][ T411] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2053.729099][ T411] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2053.740482][ T411] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2053.749608][ T411] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2053.757891][ T411] usb 5-1: Product: syz [ 2053.762115][ T411] usb 5-1: SerialNumber: syz [ 2053.772580][ T411] hub 5-1:250.0: bad descriptor, ignoring hub [ 2053.778732][ T411] hub 5-1:250.0: probe with driver hub failed with error -5 [ 2054.467397][T12555] netlink: 32 bytes leftover after parsing attributes in process `syz.5.26248'. [ 2054.632794][T25650] usb 5-1: USB disconnect, device number 70 [ 2054.648312][T12566] rust_binder: Write failure EFAULT in pid:289 [ 2054.797793][T12576] netlink: 'syz.5.26257': attribute type 4 has an invalid length. [ 2054.811856][T12576] netlink: 'syz.5.26257': attribute type 5 has an invalid length. [ 2054.819719][T12576] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.26257'. [ 2055.267717][T12599] fuseblk: Unknown parameter 'max_refd' [ 2055.315521][T12602] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 2055.315548][T12602] rust_binder: Error while translating object. [ 2055.324341][T12602] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2055.331552][T12602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:494 [ 2055.583673][T12619] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2055.753289][T12627] /dev/loop0: Can't lookup blockdev [ 2056.110455][T12644] rust_binder: pid 12644 performed invalid decrement on ref [ 2056.246220][T12652] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 2056.246245][T12652] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 2056.254746][T12652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:305 [ 2056.372324][T12655] support for cryptoloop has been removed. Use dm-crypt instead. [ 2056.418579][T12660] fuse: Bad value for 'user_id' [ 2056.423549][T12660] fuse: Bad value for 'user_id' [ 2056.496187][T12665] netlink: 32 bytes leftover after parsing attributes in process `syz.3.26290'. [ 2056.647191][ T411] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2056.730544][T12691] netlink: 'syz.6.26299': attribute type 2 has an invalid length. [ 2056.796571][T12697] netlink: 32 bytes leftover after parsing attributes in process `syz.6.26301'. [ 2056.831349][ T411] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2056.843495][ T411] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2056.855400][ T411] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2056.867310][ T411] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2056.877034][ T411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2056.900002][T12655] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2057.191251][ T411] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 2057.207536][ T411] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input117 [ 2057.247233][ T411] usb 5-1: USB disconnect, device number 71 [ 2057.539565][ T36] kauditd_printk_skb: 590 callbacks suppressed [ 2057.539586][ T36] audit: type=1400 audit(2033561146.464:373353): avc: denied { mounton } for pid=12724 comm="syz.6.26310" path="/326/file0" dev="tmpfs" ino=1752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2057.571180][ T36] audit: type=1400 audit(2033561146.464:373354): avc: denied { mount } for pid=12724 comm="syz.6.26310" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2057.594403][ T36] audit: type=1400 audit(2033561146.502:373355): avc: denied { create } for pid=12730 comm="syz.5.26312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2057.616067][ T36] audit: type=1400 audit(2033561146.502:373356): avc: denied { write } for pid=12730 comm="syz.5.26312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2057.643502][ T36] audit: type=1400 audit(2033561146.502:373357): avc: denied { read } for pid=12730 comm="syz.5.26312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2057.665059][ T36] audit: type=1400 audit(2033561146.502:373358): avc: denied { read } for pid=12730 comm="syz.5.26312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2057.686545][ T36] audit: type=1400 audit(2033561146.502:373359): avc: denied { create } for pid=12730 comm="syz.5.26312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2057.711827][ T36] audit: type=1400 audit(2033561146.624:373360): avc: denied { mounton } for pid=12739 comm="syz.5.26315" path="/294/file0" dev="tmpfs" ino=1609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2057.735294][ T36] audit: type=1400 audit(2033561146.633:373361): avc: denied { create } for pid=12739 comm="syz.5.26315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2057.755121][ T36] audit: type=1400 audit(2033561146.633:373362): avc: denied { setopt } for pid=12739 comm="syz.5.26315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2058.082353][T12763] __vm_enough_memory: pid: 12763, comm: syz.4.26322, bytes: 18014402804453376 not enough memory for the allocation [ 2058.651063][T25650] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2058.810907][T25650] usb 5-1: Using ep0 maxpacket: 16 [ 2058.823561][T25650] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 2058.832697][T25650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.840730][T25650] usb 5-1: Product: syz [ 2058.844935][T25650] usb 5-1: Manufacturer: syz [ 2058.849573][T25650] usb 5-1: SerialNumber: syz [ 2059.647326][T25650] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 2059.657402][T25650] usb 5-1: USB disconnect, device number 72 [ 2059.715169][ T9172] udevd[9172]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2059.911983][T12841] netlink: 80 bytes leftover after parsing attributes in process `syz.3.26341'. [ 2060.436635][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.26352'. [ 2060.705637][T12880] bpf: Bad value for 'uid' [ 2060.755969][T12875] overlayfs: failed to clone lowerpath [ 2060.763440][T12876] overlayfs: failed to clone lowerpath [ 2060.905758][T12902] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.26364'. [ 2061.009630][T12906] netlink: 12 bytes leftover after parsing attributes in process `syz.5.26366'. [ 2061.272894][T12926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.26373'. [ 2061.283178][T12926] netlink: 57 bytes leftover after parsing attributes in process `syz.5.26373'. [ 2061.747228][T12940] rust_binder: inc_ref_done called when no active inc_refs [ 2062.093805][T25650] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2062.266505][T25650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2062.277613][T25650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2062.287414][T25650] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2062.296515][T25650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2062.306158][T25650] usb 5-1: config 0 descriptor?? [ 2062.538010][T25650] usbhid 5-1:0.0: can't add hid device: -71 [ 2062.548296][T25650] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2062.585069][T25650] usb 5-1: USB disconnect, device number 73 [ 2062.652075][T12968] /dev/rnullb0: Can't open blockdev [ 2062.883706][ T36] kauditd_printk_skb: 860 callbacks suppressed [ 2062.883725][ T36] audit: type=1400 audit(2033561151.484:374223): avc: denied { create } for pid=12982 comm="syz.6.26393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2062.885280][T12983] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26393'. [ 2062.889990][ T36] audit: type=1400 audit(2033561151.484:374224): avc: denied { setopt } for pid=12982 comm="syz.6.26393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2062.910035][T12983] bridge_slave_1: left allmulticast mode [ 2062.945854][T12983] bridge_slave_1: left promiscuous mode [ 2062.951806][T12983] bridge0: port 2(bridge_slave_1) entered disabled state [ 2062.960216][T12983] bridge0: port 1(bridge_slave_0) entered disabled state [ 2063.355602][ T36] audit: type=1400 audit(2033561151.925:374225): avc: denied { name_bind } for pid=12990 comm="syz.3.26395" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2063.378490][ T36] audit: type=1400 audit(2033561151.925:374226): avc: denied { node_bind } for pid=12990 comm="syz.3.26395" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 2063.401820][ T36] audit: type=1400 audit(2033561151.925:374227): avc: denied { create } for pid=12990 comm="syz.3.26395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2063.421906][ T36] audit: type=1400 audit(2033561151.925:374228): avc: denied { connect } for pid=12990 comm="syz.3.26395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2063.442189][ T36] audit: type=1400 audit(2033561151.925:374229): avc: denied { setopt } for pid=12990 comm="syz.3.26395" laddr=::1 lport=49377 faddr=::1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2063.466112][ T36] audit: type=1400 audit(2033561151.925:374230): avc: denied { setopt } for pid=12990 comm="syz.3.26395" laddr=::1 lport=49377 faddr=::1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2063.490050][ T36] audit: type=1400 audit(2033561151.925:374231): avc: denied { mounton } for pid=12990 comm="syz.3.26395" path="/194/file0" dev="tmpfs" ino=1040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2063.513194][ T36] audit: type=1400 audit(2033561151.981:374232): avc: denied { mounton } for pid=12993 comm="syz.3.26396" path="/195/file0" dev="tmpfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2063.978479][T13029] netlink: 679 bytes leftover after parsing attributes in process `syz.5.26408'. [ 2064.033716][T25650] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 2064.052542][T13029] netlink: 679 bytes leftover after parsing attributes in process `syz.5.26408'. [ 2064.087295][T13026] netlink: 'syz.6.26407': attribute type 12 has an invalid length. [ 2064.172231][T25650] usb 5-1: device descriptor read/64, error -71 [ 2064.235112][T13040] netlink: 16 bytes leftover after parsing attributes in process `syz.6.26412'. [ 2064.300751][T13051] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13051 comm=syz.6.26416 [ 2064.314002][T13051] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13051 comm=syz.6.26416 [ 2064.428044][T25650] usb 5-1: device descriptor read/64, error -71 [ 2064.683896][T25650] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 2064.833130][T25650] usb 5-1: device descriptor read/64, error -71 [ 2064.924390][T13082] overlayfs: missing 'lowerdir' [ 2065.088891][T25650] usb 5-1: device descriptor read/64, error -71 [ 2065.206204][T25650] usb usb5-port1: attempt power cycle [ 2065.568580][T25650] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 2065.592231][T25650] usb 5-1: device descriptor read/8, error -71 [ 2065.731272][T25650] usb 5-1: device descriptor read/8, error -71 [ 2065.988854][T25650] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 2066.026909][T25650] usb 5-1: device descriptor read/8, error -71 [ 2066.178941][T25650] usb 5-1: device descriptor read/8, error -71 [ 2066.189065][T13155] fuse: Bad value for 'fd' [ 2066.293885][T25650] usb usb5-port1: unable to enumerate USB device [ 2066.305347][T13160] sock: sock_set_timeout: `syz.5.26454' (pid 13160) tries to set negative timeout [ 2066.314734][T13161] sock: sock_set_timeout: `syz.5.26454' (pid 13161) tries to set negative timeout [ 2067.284810][T13182] binder: Unknown parameter 'context[7' [ 2067.284868][T13181] binder: Unknown parameter 'context[7' [ 2067.304679][T13181] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:355 [ 2067.313264][T13181] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 2067.322529][T13181] rust_binder: Read failure Err(EFAULT) in pid:355 [ 2067.391512][T13185] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2067.429818][T13185] rust_binder: Error while translating object. [ 2067.436414][T13185] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 2067.442677][T13185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:359 [ 2067.783536][T13201] rust_binder: Write failure EFAULT in pid:369 [ 2068.158619][ T45] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2068.212522][T13226] overlayfs: failed to clone lowerpath [ 2068.255235][ T36] kauditd_printk_skb: 481 callbacks suppressed [ 2068.255256][ T36] audit: type=1400 audit(2033561156.522:374714): avc: denied { ioctl } for pid=13204 comm="syz.4.26469" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2068.303882][ T36] audit: type=1400 audit(2033561156.559:374715): avc: denied { execmem } for pid=13227 comm="syz.5.26476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2068.324253][ T36] audit: type=1400 audit(2033561156.578:374716): avc: denied { execute } for pid=13227 comm="syz.5.26476" path="/dev/rnullb0" dev="tmpfs" ino=558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2068.347573][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 2068.354787][ T36] audit: type=1400 audit(2033561156.616:374717): avc: denied { ioctl } for pid=13204 comm="syz.4.26469" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2068.396957][ T36] audit: type=1400 audit(2033561156.653:374718): avc: denied { ioctl } for pid=13204 comm="syz.4.26469" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2068.397044][ T45] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 2068.432122][ T36] audit: type=1400 audit(2033561156.653:374719): avc: denied { ioctl } for pid=13204 comm="syz.4.26469" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2068.458143][ T45] usb 5-1: config 250 has an invalid interface number: 0 but max is -1 [ 2068.466438][ T45] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2068.477847][ T36] audit: type=1400 audit(2033561156.653:374720): avc: denied { ioctl } for pid=13204 comm="syz.4.26469" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2068.503907][ T45] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2068.513817][ T36] audit: type=1400 audit(2033561156.653:374721): avc: denied { ioctl } for pid=13204 comm="syz.4.26469" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2068.542121][ T36] audit: type=1400 audit(2033561156.653:374722): avc: denied { create } for pid=13227 comm="syz.5.26476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2068.563346][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2068.573837][ T45] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2068.582806][ T45] usb 5-1: Product: syz [ 2068.587726][ T45] usb 5-1: SerialNumber: syz [ 2068.594509][ T36] audit: type=1400 audit(2033561156.663:374723): avc: denied { create } for pid=13227 comm="syz.5.26476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2068.618394][ T45] hub 5-1:250.0: bad descriptor, ignoring hub [ 2068.624516][ T45] hub 5-1:250.0: probe with driver hub failed with error -5 [ 2068.680490][T13233] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=13233 comm=syz.3.26477 [ 2068.788899][T13240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=13240 comm=syz.6.26479 [ 2069.118130][ T45] usb 5-1: reset high-speed USB device number 78 using dummy_hcd [ 2069.142948][T13267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.26487'. [ 2069.300861][ T45] usb 5-1: device firmware changed [ 2069.309724][ T45] usb 5-1: USB disconnect, device number 78 [ 2069.549083][T13278] netlink: 88 bytes leftover after parsing attributes in process `syz.3.26489'. [ 2069.618860][ T45] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2069.778717][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 2069.786985][ T45] usb 5-1: config 0 has no interfaces? [ 2069.796434][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2069.805909][ T45] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2069.814314][ T45] usb 5-1: Product: syz [ 2069.818852][ T45] usb 5-1: SerialNumber: syz [ 2069.825837][ T45] usb 5-1: config 0 descriptor?? [ 2070.052202][ T1714] usb 5-1: USB disconnect, device number 79 [ 2070.145086][T13317] 9pnet_fd: Insufficient options for proto=fd [ 2070.634551][T13340] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:374 [ 2070.725178][T13347] x_tables: duplicate entry at hook 1 [ 2070.740662][T13347] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 2070.740688][T13347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 2070.749955][T13347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:381 [ 2070.763239][T13349] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2070.870196][T13357] /dev/nullb0: Can't lookup blockdev [ 2070.884789][T13357] /dev/nullb0: Can't lookup blockdev [ 2071.031254][T13364] __vm_enough_memory: pid: 13364, comm: syz.4.26520, bytes: 18014402804453376 not enough memory for the allocation [ 2071.224501][T13369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.26522'. [ 2071.322070][T13375] binder: Unknown parameter 'de/context' [ 2071.460958][T13384] overlayfs: failed to resolve './file0': -2 [ 2071.748246][T13406] overlayfs: failed to clone upperpath [ 2071.755386][T13406] overlayfs: failed to clone upperpath [ 2071.762444][T13406] overlayfs: failed to clone upperpath [ 2071.771984][T13406] overlayfs: failed to clone upperpath [ 2071.779070][T13406] overlayfs: failed to clone upperpath [ 2071.786988][T13406] overlayfs: failed to clone upperpath [ 2071.794854][T13406] overlayfs: failed to clone upperpath [ 2071.801900][T13406] overlayfs: failed to clone upperpath [ 2071.931755][T25650] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2072.091635][T25650] usb 5-1: Using ep0 maxpacket: 16 [ 2072.104532][T25650] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 2072.114188][T25650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2072.122251][T25650] usb 5-1: Product: syz [ 2072.128145][T25650] usb 5-1: Manufacturer: syz [ 2072.132802][T25650] usb 5-1: SerialNumber: syz [ 2072.512594][T13421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.26542'. [ 2072.802787][T25650] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 2072.975468][ T9172] udevd[9172]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2073.039508][T13454] sit0: entered promiscuous mode [ 2073.046034][T13454] netlink: 'syz.3.26551': attribute type 1 has an invalid length. [ 2073.057571][T13454] netlink: 1 bytes leftover after parsing attributes in process `syz.3.26551'. [ 2073.070442][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26551'. [ 2073.081056][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26551'. [ 2073.185368][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26555'. [ 2073.893391][ T36] kauditd_printk_skb: 494 callbacks suppressed [ 2073.893407][ T36] audit: type=1400 audit(2033561161.813:375218): avc: denied { create } for pid=13464 comm="syz.6.26556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2073.921690][ T36] audit: type=1400 audit(2033561161.841:375219): avc: denied { getopt } for pid=13464 comm="syz.6.26556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2073.946780][ T36] audit: type=1400 audit(2033561161.860:375220): avc: denied { create } for pid=13464 comm="syz.6.26556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2073.998219][ T36] audit: type=1400 audit(2033561161.898:375221): avc: denied { create } for pid=13469 comm="syz.6.26557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2074.052855][ T36] audit: type=1400 audit(2033561161.935:375222): avc: denied { write } for pid=13469 comm="syz.6.26557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2074.088795][ T36] audit: type=1400 audit(2033561161.935:375223): avc: denied { write } for pid=13469 comm="syz.6.26557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2074.141992][ T36] audit: type=1400 audit(2033561162.038:375224): avc: denied { create } for pid=13482 comm="syz.6.26559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2074.164395][ T36] audit: type=1400 audit(2033561162.067:375225): avc: denied { create } for pid=13482 comm="syz.6.26559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2074.185328][ T36] audit: type=1400 audit(2033561162.067:375226): avc: denied { create } for pid=13482 comm="syz.6.26559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2074.235908][ T36] audit: type=1400 audit(2033561162.132:375227): avc: denied { execmem } for pid=13487 comm="syz.6.26560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2074.746516][ T411] usb 5-1: USB disconnect, device number 80 [ 2075.010613][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26577'. [ 2075.397203][ T411] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2075.566427][ T411] usb 5-1: Using ep0 maxpacket: 32 [ 2075.574764][ T411] usb 5-1: config 11 has an invalid interface number: 28 but max is 0 [ 2075.584066][ T411] usb 5-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 2075.594895][ T411] usb 5-1: config 11 has no interface number 0 [ 2075.605016][ T411] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=a8.08 [ 2075.614175][ T411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.622434][ T411] usb 5-1: Product: syz [ 2075.626709][ T411] usb 5-1: Manufacturer: syz [ 2075.631385][ T411] usb 5-1: SerialNumber: syz [ 2075.966264][ T411] usbserial_generic 5-1:11.28: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 2075.981354][ T411] usbserial_generic 5-1:11.28: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 2075.992391][ T411] usbserial_generic 5-1:11.28: device has no bulk endpoints [ 2076.000605][ T411] usb 5-1: USB disconnect, device number 81 [ 2077.029271][T13609] netlink: 'syz.6.26602': attribute type 1 has an invalid length. [ 2077.143880][ T411] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2077.308486][ T411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2077.319935][ T411] usb 5-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 2077.329893][ T411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.347475][ T411] usb 5-1: config 0 descriptor?? [ 2077.364459][T13633] tipc: Enabling of bearer rejected, failed to enable media [ 2077.379882][T13635] tipc: Enabling of bearer rejected, failed to enable media [ 2077.795808][ T411] wacom 0003:056A:0015.0040: unknown main item tag 0x5 [ 2077.802817][ T411] wacom 0003:056A:0015.0040: item fetching failed at offset 6/7 [ 2077.810741][ T411] wacom 0003:056A:0015.0040: parse failed [ 2077.816594][ T411] wacom 0003:056A:0015.0040: probe with driver wacom failed with error -22 [ 2077.870382][T13647] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 2078.017672][T13605] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 4294967295 [ 2078.037601][T13605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2078.054581][T13605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2078.094781][ T1714] usb 5-1: USB disconnect, device number 82 [ 2078.341953][T13691] netlink: 'syz.6.26631': attribute type 4 has an invalid length. [ 2078.351402][T13691] netlink: 'syz.6.26631': attribute type 4 has an invalid length. [ 2078.420723][T13691] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 2078.428789][T13693] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 2078.913232][ T1714] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2079.073094][ T1714] usb 5-1: Using ep0 maxpacket: 32 [ 2079.085382][ T1714] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 2079.095247][ T1714] usb 5-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 2079.107845][ T1714] usb 5-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2079.121659][ T1714] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2079.131221][ T1714] usb 5-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 2079.143004][ T1714] usb 5-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2079.157106][ T1714] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2079.167471][ T1714] usb 5-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 2079.179223][ T1714] usb 5-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2079.193385][ T1714] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2079.203718][ T1714] usb 5-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 2079.214246][ T1714] usb 5-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2079.229321][ T1714] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2079.237152][ T36] kauditd_printk_skb: 465 callbacks suppressed [ 2079.237197][ T36] audit: type=1400 audit(2033561166.823:375693): avc: denied { ioctl } for pid=13694 comm="syz.4.26632" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2079.296981][ T1714] usb 5-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 2079.310002][ T1714] usb 5-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2079.324360][ T36] audit: type=1400 audit(2033561166.851:375694): avc: denied { ioctl } for pid=13694 comm="syz.4.26632" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2079.349975][ T1714] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2079.357827][ T36] audit: type=1400 audit(2033561166.870:375695): avc: denied { ioctl } for pid=13694 comm="syz.4.26632" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2079.385139][ T1714] usb 5-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 2079.401458][ T1714] usb 5-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2079.427001][ T36] audit: type=1400 audit(2033561166.889:375696): avc: denied { ioctl } for pid=13694 comm="syz.4.26632" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2079.456840][ T1714] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2079.473959][ T1714] usb 5-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 2079.489095][ T1714] usb 5-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2079.517570][ T36] audit: type=1400 audit(2033561166.964:375697): avc: denied { ioctl } for pid=13694 comm="syz.4.26632" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2079.548053][ T1714] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2079.557534][ T1714] usb 5-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 2079.568520][ T1714] usb 5-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2079.581781][ T36] audit: type=1400 audit(2033561166.964:375698): avc: denied { ioctl } for pid=13694 comm="syz.4.26632" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2079.608754][ T1714] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2079.615484][ T36] audit: type=1400 audit(2033561166.964:375699): avc: denied { ioctl } for pid=13694 comm="syz.4.26632" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2079.645204][ T1714] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2079.656742][ T1714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.665875][ T36] audit: type=1400 audit(2033561166.973:375700): avc: denied { ioctl } for pid=13694 comm="syz.4.26632" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2079.691408][ T1714] usb 5-1: Product: syz [ 2079.695604][ T1714] usb 5-1: Manufacturer: syz [ 2079.700225][ T1714] usb 5-1: SerialNumber: syz [ 2079.735961][ T36] audit: type=1400 audit(2033561166.992:375701): avc: denied { create } for pid=13704 comm="syz.6.26635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2079.758574][ T36] audit: type=1400 audit(2033561166.992:375702): avc: denied { create } for pid=13704 comm="syz.6.26635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2079.988817][T13695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=13695 comm=syz.4.26632 [ 2080.001721][T13695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=13695 comm=syz.4.26632 [ 2080.014557][T13695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=13695 comm=syz.4.26632 [ 2080.027670][T13695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=13695 comm=syz.4.26632 [ 2080.040796][T13695] netlink: 128 bytes leftover after parsing attributes in process `syz.4.26632'. [ 2080.053417][T13695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2080.062302][T13695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2080.087667][ T1714] usb 5-1: bad CDC descriptors [ 2080.093918][ T1714] usb 5-1: USB disconnect, device number 83 [ 2080.737923][T13730] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:441 [ 2082.015161][T13780] rust_binder: Write failure EFAULT in pid:458 [ 2082.091961][T13787] syz.4.26663: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 2082.113870][T13787] CPU: 0 UID: 0 PID: 13787 Comm: syz.4.26663 Not tainted syzkaller #0 552f331f9455f0e22937522dade9040baae5c125 [ 2082.113912][T13787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2082.113930][T13787] Call Trace: [ 2082.113939][T13787] [ 2082.113950][T13787] __dump_stack+0x21/0x30 [ 2082.113992][T13787] dump_stack_lvl+0x10c/0x190 [ 2082.114026][T13787] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2082.114062][T13787] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 2082.114096][T13787] dump_stack+0x19/0x20 [ 2082.114128][T13787] warn_alloc+0x1bc/0x2a0 [ 2082.114163][T13787] ? stack_depot_save_flags+0x38/0x800 [ 2082.114191][T13787] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 2082.114223][T13787] ? __cfi_warn_alloc+0x10/0x10 [ 2082.114266][T13787] ? kasan_save_track+0x4f/0x80 [ 2082.114292][T13787] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 2082.114317][T13787] ? xskq_create+0x68/0x2a0 [ 2082.114351][T13787] ? xsk_init_queue+0xb6/0x120 [ 2082.114383][T13787] ? xsk_setsockopt+0x43f/0x6f0 [ 2082.114415][T13787] ? do_sock_setsockopt+0x26a/0x400 [ 2082.114449][T13787] ? __x64_sys_setsockopt+0x1b8/0x250 [ 2082.114482][T13787] ? x64_sys_call+0x2adc/0x2ee0 [ 2082.114521][T13787] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2082.114563][T13787] __vmalloc_node_range_noprof+0x135/0x1420 [ 2082.114607][T13787] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 2082.114646][T13787] ? avc_has_perm+0x1f2/0x220 [ 2082.114681][T13787] ? kasan_save_alloc_info+0x40/0x50 [ 2082.114717][T13787] ? __kasan_kmalloc+0x96/0xb0 [ 2082.114747][T13787] vmalloc_user_noprof+0x77/0x90 [ 2082.114781][T13787] ? xskq_create+0xdb/0x2a0 [ 2082.114814][T13787] xskq_create+0xdb/0x2a0 [ 2082.114848][T13787] xsk_init_queue+0xb6/0x120 [ 2082.114880][T13787] xsk_setsockopt+0x43f/0x6f0 [ 2082.114918][T13787] ? __cfi_xsk_setsockopt+0x10/0x10 [ 2082.114951][T13787] ? do_futex+0x309/0x500 [ 2082.114978][T13787] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 2082.115011][T13787] ? security_socket_setsockopt+0x33/0xd0 [ 2082.115035][T13787] ? __cfi_xsk_setsockopt+0x10/0x10 [ 2082.115068][T13787] do_sock_setsockopt+0x26a/0x400 [ 2082.115101][T13787] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 2082.115138][T13787] __x64_sys_setsockopt+0x1b8/0x250 [ 2082.115173][T13787] x64_sys_call+0x2adc/0x2ee0 [ 2082.115212][T13787] do_syscall_64+0x58/0xf0 [ 2082.115241][T13787] ? clear_bhb_loop+0x50/0xa0 [ 2082.115270][T13787] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2082.115309][T13787] RIP: 0033:0x7f029118eec9 [ 2082.115332][T13787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2082.115355][T13787] RSP: 002b:00007f0292033038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2082.115383][T13787] RAX: ffffffffffffffda RBX: 00007f02913e5fa0 RCX: 00007f029118eec9 [ 2082.115404][T13787] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 2082.115420][T13787] RBP: 00007f0291211f91 R08: 0000000000000004 R09: 0000000000000000 [ 2082.115437][T13787] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2082.115455][T13787] R13: 00007f02913e6038 R14: 00007f02913e5fa0 R15: 00007ffd2428a698 [ 2082.115478][T13787] [ 2082.115994][T13787] Mem-Info: [ 2082.209101][T13791] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2082.213786][T13787] active_anon:39658 inactive_anon:665 isolated_anon:0 [ 2082.213786][T13787] active_file:8229 inactive_file:20066 isolated_file:0 [ 2082.213786][T13787] unevictable:20527 dirty:56 writeback:0 [ 2082.213786][T13787] slab_reclaimable:5870 slab_unreclaimable:80686 [ 2082.213786][T13787] mapped:25634 shmem:15622 pagetables:1392 [ 2082.213786][T13787] sec_pagetables:0 bounce:0 [ 2082.213786][T13787] kernel_misc_reclaimable:0 [ 2082.213786][T13787] free:1447871 free_pcp:2649 free_cma:0 [ 2082.225399][T13791] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 2082.229213][T13787] Node 0 active_anon:158632kB inactive_anon:2660kB active_file:32916kB inactive_file:80264kB unevictable:82108kB isolated(anon):0kB isolated(file):0kB mapped:102536kB dirty:224kB writeback:0kB shmem:62488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8108kB pagetables:5568kB sec_pagetables:0kB all_unreclaimable? no [ 2082.444344][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.26668'. [ 2082.480651][T13787] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:5724kB free_cma:0kB [ 2082.560800][T13787] lowmem_reserve[]: 0 3921 3921 [ 2082.565737][T13787] Normal free:2831632kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:158660kB inactive_anon:2660kB active_file:32916kB inactive_file:80264kB unevictable:82108kB writepending:224kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:4268kB local_pcp:1300kB free_cma:0kB [ 2082.597703][T13787] lowmem_reserve[]: 0 0 0 [ 2082.602152][T13787] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 2082.617778][T13787] Normal: 222*4kB (UE) 2453*8kB (UME) 931*16kB (UME) 1236*32kB (UME) 917*64kB (UME) 462*128kB (UME) 174*256kB (UME) 59*512kB (UME) 42*1024kB (UME) 19*2048kB (UME) 606*4096kB (UM) = 2831632kB [ 2082.636774][T13787] 65197 total pagecache pages [ 2082.641467][T13787] 757 pages in swap cache [ 2082.645864][T13787] Free swap = 121560kB [ 2082.650034][T13787] Total swap = 124996kB [ 2082.654193][T13787] 2097051 pages RAM [ 2082.658074][T13787] 0 pages HighMem/MovableOnly [ 2082.662764][T13787] 351537 pages reserved [ 2082.666985][T13787] 0 pages cma reserved [ 2082.673319][T13787] Memory allocations: [ 2082.677344][T13787] 0 B 0 init/main.c:1370 func:do_initcalls [ 2082.684565][T13787] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 2082.692687][T13787] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 2082.700367][T13787] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 2082.708482][T13787] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 2082.716449][T13787] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 2082.725104][T13787] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 2082.733058][T13787] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 2082.741006][T13787] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 2082.748925][T13787] 0 B 0 init/initramfs.c:101 func:find_link [ 2083.111455][T13818] overlayfs: failed to clone upperpath [ 2083.353438][T13837] rust_binder: Error while translating object. [ 2083.353490][T13837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 2083.360612][T13837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:477 [ 2083.372499][T13840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2083.486083][T13844] SELinux: policydb magic number 0x15cf375b does not match expected magic number 0xf97cff8c [ 2083.502897][T13844] SELinux: failed to load policy [ 2083.723256][T13853] rust_binder: Error while translating object. [ 2083.723295][T13853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 2083.729602][T13853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:491 [ 2084.178449][T13899] netlink: 'syz.5.26697': attribute type 10 has an invalid length. [ 2084.264404][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.26701'. [ 2084.273442][T13913] erspan0: default FDB implementation only supports local addresses [ 2084.782200][ T36] kauditd_printk_skb: 411 callbacks suppressed [ 2084.782220][ T36] audit: type=1400 audit(2033561172.021:376114): avc: denied { read write } for pid=10841 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2084.815388][ T36] audit: type=1400 audit(2033561172.021:376115): avc: denied { read write open } for pid=10841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2084.847600][ T36] audit: type=1400 audit(2033561172.021:376116): avc: denied { ioctl } for pid=10841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2084.874647][ T36] audit: type=1400 audit(2033561172.115:376117): avc: denied { relabelfrom } for pid=13917 comm="syz.4.26703" name="NETLINK" dev="sockfs" ino=298568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2084.876969][T13920] /dev/rnullb0: Can't open blockdev [ 2084.900600][ T36] audit: type=1400 audit(2033561172.115:376118): avc: denied { mac_admin } for pid=13917 comm="syz.4.26703" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2084.930899][ T36] audit: type=1400 audit(2033561172.115:376119): avc: denied { relabelto } for pid=13917 comm="syz.4.26703" name="NETLINK" dev="sockfs" ino=298568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 2084.971066][ T36] audit: type=1400 audit(2033561172.115:376120): avc: denied { mounton } for pid=13917 comm="syz.4.26703" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 2084.998064][ T36] audit: type=1400 audit(2033561172.162:376121): avc: denied { read write } for pid=10841 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2085.024269][ T36] audit: type=1400 audit(2033561172.162:376122): avc: denied { read write open } for pid=10841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2085.038622][T13923] /dev/rnullb0: Can't open blockdev [ 2085.056277][ T36] audit: type=1400 audit(2033561172.162:376123): avc: denied { ioctl } for pid=10841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2085.250908][T13939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=13939 comm=syz.4.26709 [ 2085.946143][T13967] SELinux: Context system_u:object_r:updpwd_exec_t:s0 is not valid (left unmapped). [ 2086.299716][ T1714] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 2086.462104][ T1714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2086.473130][ T1714] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2086.486009][ T1714] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 2086.495104][ T1714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.504874][ T1714] usb 5-1: config 0 descriptor?? [ 2086.511527][T13978] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2086.520220][ T1714] usbhid 5-1:0.0: can't add hid device: -22 [ 2086.526286][ T1714] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 2086.737830][T13978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2086.746410][T13978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2087.300861][ T1714] usb 5-1: USB disconnect, device number 84 [ 2087.345335][T14000] SELinux: security_context_str_to_sid () failed with errno=-22 [ 2087.417776][T14002] overlayfs: failed to clone lowerpath [ 2087.814668][T14033] 9pnet_fd: Insufficient options for proto=fd [ 2087.939658][T14045] overlayfs: missing 'workdir' [ 2087.947688][T14045] overlayfs: failed to resolve './file1': -2 [ 2088.005594][T14055] overlayfs: failed to clone upperpath [ 2088.013769][T14055] fuseblk: Bad value for 'fd' [ 2088.081081][T14061] /dev/loop0: Can't lookup blockdev [ 2088.437177][T14069] rust_binder: Error while translating object. [ 2088.437219][T14069] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2088.447336][T14069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:520 [ 2088.713155][T14100] overlayfs: failed to clone lowerpath [ 2088.851981][T14107] /dev/rnullb0: Can't open blockdev [ 2088.937600][T14112] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2088.937637][T14112] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:530 [ 2089.433371][ T45] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2089.603902][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 2089.611451][ T45] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2089.619898][ T45] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2089.628609][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2089.637652][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2089.647395][ T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2089.657075][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2089.670081][ T45] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2089.679179][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.690709][ T45] usb 5-1: config 0 descriptor?? [ 2089.802666][T14130] netlink: 'syz.5.26783': attribute type 58 has an invalid length. [ 2089.812584][T14130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14130 comm=syz.5.26783 [ 2089.920392][ T45] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 85 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2089.946971][ T45] usb 5-1: USB disconnect, device number 85 [ 2089.967912][ T45] usblp0: removed [ 2090.132210][ T36] kauditd_printk_skb: 1100 callbacks suppressed [ 2090.132230][ T36] audit: type=1400 audit(2033561177.105:377224): avc: denied { create } for pid=14145 comm="syz.3.26789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2090.168794][ T36] audit: type=1400 audit(2033561177.115:377225): avc: denied { read write } for pid=14123 comm="syz.4.26780" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2090.193350][ T36] audit: type=1400 audit(2033561177.115:377226): avc: denied { read write open } for pid=14123 comm="syz.4.26780" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2090.218879][ T36] audit: type=1400 audit(2033561177.115:377227): avc: denied { ioctl } for pid=14123 comm="syz.4.26780" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2090.244769][ T36] audit: type=1400 audit(2033561177.115:377228): avc: denied { ioctl } for pid=14123 comm="syz.4.26780" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2090.270752][ T36] audit: type=1400 audit(2033561177.115:377229): avc: denied { ioctl } for pid=14123 comm="syz.4.26780" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2090.296685][ T36] audit: type=1400 audit(2033561177.124:377230): avc: denied { ioctl } for pid=14123 comm="syz.4.26780" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2090.322723][ T36] audit: type=1400 audit(2033561177.265:377231): avc: denied { mounton } for pid=14152 comm="syz.3.26792" path="/290" dev="tmpfs" ino=1547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2090.346748][ T36] audit: type=1400 audit(2033561177.302:377232): avc: denied { create } for pid=14155 comm="syz.3.26793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2090.366847][ T36] audit: type=1400 audit(2033561177.302:377233): avc: denied { create } for pid=14155 comm="syz.3.26793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2090.499244][ T45] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2090.659142][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 2090.667621][ T45] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2090.677763][ T45] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2090.687261][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2090.697168][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2090.707740][ T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2090.717527][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2090.730552][ T45] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2090.739659][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2090.749362][ T45] usb 5-1: config 0 descriptor?? [ 2090.981267][ T45] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 86 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2091.191864][ T893] usb 5-1: USB disconnect, device number 86 [ 2091.207609][ T893] usblp0: removed [ 2091.781822][T14178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:536 [ 2091.781857][T14178] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 2091.799568][T14178] rust_binder: Read failure Err(EFAULT) in pid:536 [ 2092.343303][T13738] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 2092.516860][T13738] usb 5-1: not running at top speed; connect to a high speed hub [ 2092.526630][T13738] usb 5-1: config 1 has an invalid interface number: 226 but max is 1 [ 2092.534854][T13738] usb 5-1: config 1 has an invalid interface number: 103 but max is 1 [ 2092.543120][T13738] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2092.551854][T13738] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2092.560579][T13738] usb 5-1: config 1 has an invalid interface number: 253 but max is 1 [ 2092.568784][T13738] usb 5-1: config 1 has an invalid interface number: 107 but max is 1 [ 2092.576944][T13738] usb 5-1: config 1 has 4 interfaces, different from the descriptor's value: 2 [ 2092.585932][T13738] usb 5-1: config 1 has no interface number 0 [ 2092.592065][T13738] usb 5-1: config 1 has no interface number 1 [ 2092.598173][T13738] usb 5-1: config 1 has no interface number 2 [ 2092.604535][T13738] usb 5-1: config 1 has no interface number 3 [ 2092.611129][T13738] usb 5-1: config 1 interface 226 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 2092.622155][T13738] usb 5-1: config 1 interface 226 altsetting 8 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 2092.633247][T13738] usb 5-1: config 1 interface 226 altsetting 8 endpoint 0x4 has invalid maxpacket 1056, setting to 64 [ 2092.644277][T13738] usb 5-1: config 1 interface 226 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 2092.657468][T13738] usb 5-1: too many endpoints for config 1 interface 103 altsetting 68: 220, using maximum allowed: 30 [ 2092.668674][T13738] usb 5-1: config 1 interface 103 altsetting 68 has a duplicate endpoint with address 0x7, skipping [ 2092.679527][T13738] usb 5-1: config 1 interface 103 altsetting 68 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 2092.691121][T13738] usb 5-1: config 1 interface 103 altsetting 68 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2092.702267][T13738] usb 5-1: config 1 interface 103 altsetting 68 has a duplicate endpoint with address 0x4, skipping [ 2092.713317][T13738] usb 5-1: config 1 interface 103 altsetting 68 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 2092.724397][T13738] usb 5-1: config 1 interface 103 altsetting 68 has 6 endpoint descriptors, different from the interface descriptor's value: 220 [ 2092.737750][T13738] usb 5-1: too many endpoints for config 1 interface 253 altsetting 10: 255, using maximum allowed: 30 [ 2092.748869][T13738] usb 5-1: config 1 interface 253 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 2092.759950][T13738] usb 5-1: config 1 interface 253 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 2092.770946][T13738] usb 5-1: config 1 interface 253 altsetting 10 has a duplicate endpoint with address 0x4, skipping [ 2092.781976][T13738] usb 5-1: config 1 interface 253 altsetting 10 has 5 endpoint descriptors, different from the interface descriptor's value: 255 [ 2092.795923][T13738] usb 5-1: config 1 interface 107 altsetting 3 endpoint 0x6 has invalid maxpacket 36050, setting to 1023 [ 2092.807279][T13738] usb 5-1: config 1 interface 107 altsetting 3 has an invalid endpoint descriptor of length 3, skipping [ 2092.818465][T13738] usb 5-1: config 1 interface 107 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 2092.829217][T13738] usb 5-1: config 1 interface 107 altsetting 3 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 2092.840238][T13738] usb 5-1: config 1 interface 107 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 2092.850988][T13738] usb 5-1: config 1 interface 107 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 2092.861853][T13738] usb 5-1: config 1 interface 107 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 2092.872582][T13738] usb 5-1: config 1 interface 107 altsetting 3 has 7 endpoint descriptors, different from the interface descriptor's value: 5 [ 2092.885673][T13738] usb 5-1: config 1 interface 226 has no altsetting 0 [ 2092.892500][T13738] usb 5-1: config 1 interface 103 has no altsetting 0 [ 2092.899321][T13738] usb 5-1: config 1 interface 253 has no altsetting 0 [ 2092.906127][T13738] usb 5-1: config 1 interface 107 has no altsetting 0 [ 2092.916674][T13738] usb 5-1: New USB device found, idVendor=19d2, idProduct=1080, bcdDevice=d2.aa [ 2092.926164][T13738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.934241][T13738] usb 5-1: Product: Њ [ 2092.938346][T13738] usb 5-1: Manufacturer: 龫뗪뗄釂琸༙䶾토ᨴ㻰橽혋騉徺ꥫ돯띢䳰ᮓ⬴왧६⵴ᘲ﬉桎瓳㸩띇齎꼤ᡅ聰Ż펫摛逪ᑱ谋ᨹ‖फ़⾆ﾈ鐯驍㬆꺾Űꇿ晱༃喿뎝ꚑꅛ煍醴餣耽鐨лꭗ拘헶復ᩰ⹹嫂殶帇욢䩀䇬椦譈㒿鱸떽ࣤ献┴籽ძ鐐 [ 2092.966219][T13738] usb 5-1: SerialNumber: syz [ 2092.974622][T14188] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2093.854101][T13738] usb 5-1: USB disconnect, device number 87 [ 2094.787818][T14286] netlink: 'syz.3.26837': attribute type 1 has an invalid length. [ 2094.877833][T14290] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 2095.146423][ T893] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 2095.309474][ T893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2095.320573][ T893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2095.330439][ T893] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2095.339546][ T893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2095.354521][ T893] usb 5-1: config 0 descriptor?? [ 2095.576779][ T36] kauditd_printk_skb: 379 callbacks suppressed [ 2095.576800][ T36] audit: type=1400 audit(2033561182.209:377613): avc: denied { ioctl } for pid=14289 comm="syz.4.26841" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2095.608913][ T36] audit: type=1400 audit(2033561182.209:377614): avc: denied { ioctl } for pid=14289 comm="syz.4.26841" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2095.797020][ T36] audit: type=1400 audit(2033561182.425:377615): avc: denied { ioctl } for pid=14289 comm="syz.4.26841" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2095.823883][ T893] isku 0003:1E7D:319C.0041: item fetching failed at offset 5/7 [ 2095.830058][ T36] audit: type=1400 audit(2033561182.425:377616): avc: denied { ioctl } for pid=14289 comm="syz.4.26841" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2095.839302][ T893] isku 0003:1E7D:319C.0041: parse failed [ 2095.862485][ T893] isku 0003:1E7D:319C.0041: probe with driver isku failed with error -22 [ 2095.894272][ T36] audit: type=1400 audit(2033561182.509:377617): avc: denied { create } for pid=14316 comm="syz.6.26852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2095.919033][ T36] audit: type=1400 audit(2033561182.528:377618): avc: denied { ioctl } for pid=14316 comm="syz.6.26852" path="socket:[299281]" dev="sockfs" ino=299281 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2096.040749][ T36] audit: type=1400 audit(2033561182.641:377619): avc: denied { ioctl } for pid=14289 comm="syz.4.26841" path="/dev/binderfs/binder0" dev="binder" ino=18 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2096.074198][ T45] usb 5-1: USB disconnect, device number 88 [ 2096.095542][ T36] audit: type=1400 audit(2033561182.659:377620): avc: denied { create } for pid=14325 comm="syz.6.26855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2096.143893][ T36] audit: type=1400 audit(2033561182.659:377621): avc: denied { write } for pid=14325 comm="syz.6.26855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2096.173650][ T36] audit: type=1400 audit(2033561182.659:377622): avc: denied { read } for pid=14325 comm="syz.6.26855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2096.900285][T14339] rust_binder: Write failure EINVAL in pid:562 [ 2097.009678][T14354] x_tables: unsorted underflow at hook 4 [ 2097.332669][T14368] 9pnet_fd: Insufficient options for proto=fd [ 2098.128887][T14414] overlayfs: failed to clone upperpath [ 2098.190087][T14420] overlayfs: failed to resolve 'workdir=./file0': -2 [ 2098.266706][T14420] veth1_macvtap: left promiscuous mode [ 2098.272458][T14420] macsec0: entered promiscuous mode [ 2098.281672][T14420] veth1_macvtap: entered promiscuous mode [ 2098.287659][T14420] macsec0: left promiscuous mode [ 2099.192504][T14458] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26903'. [ 2099.228774][ T1714] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2099.388672][ T1714] usb 5-1: Using ep0 maxpacket: 8 [ 2099.397293][ T1714] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2099.408692][ T1714] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2099.416441][ T1714] usb 5-1: can't read configurations, error -61 [ 2099.559145][ T1714] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2099.719008][ T1714] usb 5-1: Using ep0 maxpacket: 8 [ 2099.727373][ T1714] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2099.738345][ T1714] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2099.751003][ T1714] usb 5-1: can't read configurations, error -61 [ 2099.759189][ T1714] usb usb5-port1: attempt power cycle [ 2100.124090][ T1714] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2100.146192][ T1714] usb 5-1: Using ep0 maxpacket: 8 [ 2100.154424][ T1714] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2100.164852][ T1714] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2100.172602][ T1714] usb 5-1: can't read configurations, error -61 [ 2100.315903][ T1714] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2100.338422][ T1714] usb 5-1: Using ep0 maxpacket: 8 [ 2100.347919][ T1714] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2100.360255][ T1714] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2100.368136][ T1714] usb 5-1: can't read configurations, error -61 [ 2100.374658][ T1714] usb usb5-port1: unable to enumerate USB device [ 2100.971107][ T36] kauditd_printk_skb: 469 callbacks suppressed [ 2100.971128][ T36] audit: type=1400 audit(2033561187.275:378092): avc: denied { create } for pid=14509 comm="syz.3.26916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2100.997867][ T36] audit: type=1400 audit(2033561187.294:378093): avc: denied { create } for pid=14509 comm="syz.3.26916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2101.020946][ T36] audit: type=1400 audit(2033561187.294:378094): avc: denied { write } for pid=14509 comm="syz.3.26916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2101.042211][ T36] audit: type=1400 audit(2033561187.294:378095): avc: denied { read } for pid=14509 comm="syz.3.26916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2101.063076][ T36] audit: type=1400 audit(2033561187.322:378096): avc: denied { create } for pid=14511 comm="syz.3.26917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2101.083022][ T36] audit: type=1400 audit(2033561187.322:378097): avc: denied { connect } for pid=14511 comm="syz.3.26917" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2101.103887][ T36] audit: type=1400 audit(2033561187.341:378098): avc: denied { write } for pid=14511 comm="syz.3.26917" laddr=fe80::a8aa:aaff:feaa:aa16 lport=60 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2101.604780][ T36] audit: type=1400 audit(2033561187.866:378099): avc: denied { create } for pid=14513 comm="syz.3.26918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2101.624730][ T36] audit: type=1400 audit(2033561187.876:378100): avc: denied { read } for pid=14513 comm="syz.3.26918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2101.663577][ T36] audit: type=1400 audit(2033561187.923:378101): avc: denied { setopt } for pid=14513 comm="syz.3.26918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2102.575612][T26798] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 2102.737595][T26798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2102.748830][T26798] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2102.761718][T26798] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 2102.770862][T26798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2102.782672][T26798] usb 5-1: config 0 descriptor?? [ 2102.789293][T14517] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2102.799188][T26798] usbhid 5-1:0.0: can't add hid device: -22 [ 2102.805561][T26798] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 2103.014772][T14517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2103.024566][T14517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2103.041854][T14535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2103.057978][T14535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2103.083906][T13738] usb 5-1: USB disconnect, device number 93 [ 2103.101377][T14538] netlink: 156 bytes leftover after parsing attributes in process `syz.5.26925'. [ 2104.014458][T13738] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2104.174340][T13738] usb 5-1: Using ep0 maxpacket: 32 [ 2104.182777][T13738] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2104.194404][T13738] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 2104.209246][T13738] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2104.218992][T13738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.227051][T13738] usb 5-1: Product: ᐁ [ 2104.232749][T13738] usb 5-1: Manufacturer: ֈ迼㟇ꤧ掐滽︒樼᳽윔ꗞ㚻끿鹏嘑핊㠖呈燶ѳ衪눏郂᪭샒Ř葊뢖忴䠛在⦩⟊㹓ኌ⽊ᕐ䪹躴阠ꥶ襰ቤ㧽玲ᄩ᫛幐ↇ䆶啜ᠪ찣쐯骊蛡곬덄띴鐂밖䵸᜴谏肰或춱ᓿ琲䚄̅ꡅఞ [ 2104.259774][T13738] usb 5-1: SerialNumber: syz [ 2104.274275][T14556] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2104.292101][T14556] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2104.526118][T14556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2104.543600][T14556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2104.561914][T13738] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 2104.579977][T13738] usb 5-1: USB disconnect, device number 94 [ 2105.602630][ T45] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2105.765533][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2105.776279][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2105.787595][ T45] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2105.796722][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2105.804816][ T45] usb 5-1: SerialNumber: syz [ 2106.029177][T14590] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 2106.036406][T14590] rust_binder: Write failure EINVAL in pid:599 [ 2106.054452][ T45] usb 5-1: 0:2 : does not exist [ 2106.068746][ T45] usb 5-1: USB disconnect, device number 95 [ 2106.125800][ T9172] udevd[9172]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2106.379653][ T36] kauditd_printk_skb: 293 callbacks suppressed [ 2106.379675][ T36] audit: type=1400 audit(2033561192.342:378395): avc: denied { create } for pid=14606 comm="syz.5.26953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2106.407024][ T36] audit: type=1400 audit(2033561192.351:378396): avc: denied { create } for pid=14606 comm="syz.5.26953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2106.428765][ T36] audit: type=1400 audit(2033561192.351:378397): avc: denied { create } for pid=14606 comm="syz.5.26953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2106.450441][ T36] audit: type=1400 audit(2033561192.351:378398): avc: denied { getopt } for pid=14606 comm="syz.5.26953" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2106.472041][ T36] audit: type=1400 audit(2033561192.398:378399): avc: denied { create } for pid=14608 comm="syz.5.26954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2106.486568][T14611] netlink: 56 bytes leftover after parsing attributes in process `syz.5.26955'. [ 2106.494293][ T36] audit: type=1400 audit(2033561192.398:378400): avc: denied { write } for pid=14608 comm="syz.5.26954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2106.523055][ T36] audit: type=1400 audit(2033561192.398:378401): avc: denied { read } for pid=14608 comm="syz.5.26954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2106.547138][ T36] audit: type=1400 audit(2033561192.445:378402): avc: denied { create } for pid=14610 comm="syz.5.26955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2106.565789][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26956'. [ 2106.569250][ T36] audit: type=1400 audit(2033561192.445:378403): avc: denied { create } for pid=14610 comm="syz.5.26955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2106.597931][ T36] audit: type=1400 audit(2033561192.445:378404): avc: denied { write } for pid=14610 comm="syz.5.26955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2106.924285][ T45] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2107.084184][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 2107.095846][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2107.107018][ T45] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 2107.122607][ T45] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 2107.134974][ T45] usb 5-1: config 13 has no interface number 0 [ 2107.142039][ T45] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 2107.153122][ T45] usb 5-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2107.166406][ T45] usb 5-1: config 13 interface 50 has no altsetting 0 [ 2107.176227][ T45] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 2107.185416][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.193459][ T45] usb 5-1: Product: syz [ 2107.197712][ T45] usb 5-1: Manufacturer: syz [ 2107.202349][ T45] usb 5-1: SerialNumber: syz [ 2107.210079][T14619] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2107.440200][T14619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2107.453959][T14619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2107.482283][ T45] usb 5-1: MIDIStreaming interface descriptor not found [ 2107.504723][ T45] usb 5-1: USB disconnect, device number 96 [ 2107.600732][T10910] udevd[10910]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2107.968864][ T45] usb 5-1: new low-speed USB device number 97 using dummy_hcd [ 2108.142393][ T45] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2108.151601][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.161491][ T45] usb 5-1: config 0 descriptor?? [ 2108.324741][T14683] fuse: Bad value for 'user_id' [ 2108.329695][T14683] fuse: Bad value for 'user_id' [ 2109.940705][T14749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=14749 comm=syz.6.27002 [ 2110.148635][T14757] overlayfs: failed to clone upperpath [ 2110.159520][T14757] netlink: 92 bytes leftover after parsing attributes in process `syz.6.27005'. [ 2110.224440][T14760] netlink: 100 bytes leftover after parsing attributes in process `syz.6.27006'. [ 2110.337890][T14659] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2110.368459][ T45] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2110.397171][ T45] asix 5-1:0.0: probe with driver asix failed with error -71 [ 2110.415999][ T45] usb 5-1: USB disconnect, device number 97 [ 2110.514051][T14766] overlayfs: failed to clone lowerpath [ 2110.528944][T14766] veth1: entered allmulticast mode [ 2110.535052][T14765] veth1: left allmulticast mode [ 2110.632142][T14768] overlayfs: lower data-only dirs require metacopy support. [ 2110.855867][T14789] netlink: 180 bytes leftover after parsing attributes in process `syz.3.27017'. [ 2111.032152][T14799] netlink: 96 bytes leftover after parsing attributes in process `syz.3.27022'. [ 2111.305760][T14810] netlink: 240 bytes leftover after parsing attributes in process `syz.6.27025'. [ 2111.767303][T14853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=14853 comm=syz.3.27038 [ 2111.777333][ T36] kauditd_printk_skb: 387 callbacks suppressed [ 2111.777358][ T36] audit: type=1400 audit(2033561197.399:378792): avc: denied { create } for pid=14855 comm="syz.6.27041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2111.808645][ T36] audit: type=1400 audit(2033561197.427:378793): avc: denied { create } for pid=14852 comm="syz.3.27038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2111.829454][ T36] audit: type=1400 audit(2033561197.427:378794): avc: denied { create } for pid=14852 comm="syz.3.27038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2111.850842][ T36] audit: type=1400 audit(2033561197.436:378795): avc: denied { write } for pid=14852 comm="syz.3.27038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2111.890974][ T36] audit: type=1400 audit(2033561197.436:378796): avc: denied { nlmsg_write } for pid=14852 comm="syz.3.27038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2111.918453][ T36] audit: type=1400 audit(2033561197.436:378797): avc: denied { create } for pid=14852 comm="syz.3.27038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2111.960937][ T36] audit: type=1400 audit(2033561197.436:378798): avc: denied { bind } for pid=14852 comm="syz.3.27038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2112.010571][ T36] audit: type=1400 audit(2033561197.436:378799): avc: denied { create } for pid=14852 comm="syz.3.27038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2112.035332][ T36] audit: type=1400 audit(2033561197.436:378800): avc: denied { write } for pid=14852 comm="syz.3.27038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2112.055966][ T36] audit: type=1400 audit(2033561197.436:378801): avc: denied { create } for pid=14852 comm="syz.3.27038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2112.189691][ T893] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 2112.351231][ T893] usb 5-1: not running at top speed; connect to a high speed hub [ 2112.359129][ T893] usb 5-1: too many configurations: 240, using maximum allowed: 8 [ 2112.369615][ T893] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2112.377267][ T893] usb 5-1: can't read configurations, error -61 [ 2112.535225][ T893] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 2112.705453][ T893] usb 5-1: not running at top speed; connect to a high speed hub [ 2112.719996][ T893] usb 5-1: too many configurations: 240, using maximum allowed: 8 [ 2112.732664][ T893] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2112.740737][ T893] usb 5-1: can't read configurations, error -61 [ 2112.748313][ T893] usb usb5-port1: attempt power cycle [ 2113.117016][ T893] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 2113.140577][ T893] usb 5-1: not running at top speed; connect to a high speed hub [ 2113.143477][T14934] can: request_module (can-proto-0) failed. [ 2113.148852][ T893] usb 5-1: too many configurations: 240, using maximum allowed: 8 [ 2113.165373][ T893] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2113.173497][ T893] usb 5-1: can't read configurations, error -61 [ 2113.308889][ T893] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 2113.332725][ T893] usb 5-1: not running at top speed; connect to a high speed hub [ 2113.340527][ T893] usb 5-1: too many configurations: 240, using maximum allowed: 8 [ 2113.351743][ T893] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2113.359367][ T893] usb 5-1: can't read configurations, error -61 [ 2113.365796][ T893] usb usb5-port1: unable to enumerate USB device [ 2113.697034][T14939] overlayfs: failed to clone lowerpath [ 2114.308570][T14972] netlink: 36 bytes leftover after parsing attributes in process `syz.6.27087'. [ 2114.853130][T14993] can: request_module (can-proto-0) failed. [ 2115.185183][T15013] rust_binder: Write failure EFAULT in pid:616 [ 2115.245086][T15013] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2115.261798][T15013] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 192, size: 226) [ 2115.261824][T15013] rust_binder: Error while translating object. [ 2115.272671][T15013] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2115.278884][T15013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:616 [ 2115.378178][T15019] netlink: 'syz.5.27103': attribute type 46 has an invalid length. [ 2115.507964][T15030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:619 [ 2115.512272][T15030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2115.522398][T15030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:619 [ 2115.606735][T15032] 9pnet: Could not find request transport: f d [ 2115.618423][T15034] netlink: 'syz.5.27107': attribute type 8 has an invalid length. [ 2115.993920][T15053] rust_binder: Write failure EINVAL in pid:635 [ 2116.175738][T15069] netlink: 'syz.4.27120': attribute type 4 has an invalid length. [ 2116.197437][T15069] netlink: 'syz.4.27120': attribute type 4 has an invalid length. [ 2116.207288][T15069] overlay: Unknown parameter 'measure' [ 2116.520401][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27126'. [ 2116.530636][T15089] fuse: Unknown parameter 'qL{gu00000000000000000000' [ 2116.568708][T15091] veth1: entered allmulticast mode [ 2117.115264][ T36] kauditd_printk_skb: 724 callbacks suppressed [ 2117.115285][ T36] audit: type=1400 audit(2033561202.409:379526): avc: denied { create } for pid=15107 comm="syz.4.27132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2117.160356][ T36] audit: type=1400 audit(2033561202.456:379527): avc: denied { execmem } for pid=15107 comm="syz.4.27132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2117.277797][ T36] audit: type=1400 audit(2033561202.568:379528): avc: denied { create } for pid=15111 comm="syz.5.27133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2117.300048][ T36] audit: type=1400 audit(2033561202.596:379529): avc: denied { setopt } for pid=15111 comm="syz.5.27133" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2117.317919][T15110] sock: sock_timestamping_bind_phc: sock not bind to device [ 2117.328649][ T36] audit: type=1400 audit(2033561202.606:379530): avc: denied { setopt } for pid=15111 comm="syz.5.27133" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2117.349973][ T36] audit: type=1400 audit(2033561202.634:379531): avc: denied { getopt } for pid=15107 comm="syz.4.27132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2117.360856][T15108] 9pnet_fd: Insufficient options for proto=fd [ 2117.372294][ T36] audit: type=1400 audit(2033561202.634:379532): avc: denied { write } for pid=15107 comm="syz.4.27132" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2117.406419][ T36] audit: type=1400 audit(2033561202.634:379533): avc: denied { write open } for pid=15107 comm="syz.4.27132" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2117.433961][ T36] audit: type=1400 audit(2033561202.634:379534): avc: denied { watch } for pid=15107 comm="syz.4.27132" path="/219" dev="tmpfs" ino=1184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2117.457454][T15090] veth1: left allmulticast mode [ 2117.462452][ T36] audit: type=1400 audit(2033561202.634:379535): avc: denied { create } for pid=15107 comm="syz.4.27132" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2117.541884][T15118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27135'. [ 2117.616872][T15118] 9pnet_fd: Insufficient options for proto=fd [ 2118.243850][ T1714] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2118.403818][ T1714] usb 5-1: Using ep0 maxpacket: 32 [ 2118.411365][ T1714] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2118.422510][ T1714] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 2118.436119][ T1714] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2118.445255][ T1714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2118.453316][ T1714] usb 5-1: Product: syz [ 2118.457546][ T1714] usb 5-1: Manufacturer: syz [ 2118.462149][ T1714] usb 5-1: SerialNumber: syz [ 2118.471195][T15135] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2118.479604][T15135] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2118.745925][ T1714] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 2118.756054][ T1714] usb 5-1: USB disconnect, device number 102 [ 2118.888542][T15182] netlink: 140 bytes leftover after parsing attributes in process `syz.3.27159'. [ 2118.898037][T15182] netlink: 48 bytes leftover after parsing attributes in process `syz.3.27159'. [ 2118.912088][T15182] netlink: 76 bytes leftover after parsing attributes in process `syz.3.27159'. [ 2118.921474][T15183] netlink: 76 bytes leftover after parsing attributes in process `syz.3.27159'. [ 2119.016316][T15193] devpts: called with bogus options [ 2119.192474][ T893] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 2119.358875][ T893] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2119.368080][ T893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.376746][ T893] usb 5-1: Product: Њ [ 2119.382319][ T893] usb 5-1: Manufacturer: 龫뗪뗄釂琸༙䶾토ᨴ㻰橽혋騉徺ꥫ돯띢䳰ᮓ⬴왧६⵴ᘲ﬉桎瓳㸩띇齎꼤ᡅ聰Ż펫摛逪ᑱ谋ᨹ‖फ़⾆ﾈ鐯驍㬆꺾Űꇿ晱༃喿뎝ꚑꅛ煍醴餣耽鐨лꭗ拘헶復ᩰ⹹嫂殶帇욢䩀䇬椦譈㒿鱸떽ࣤ献┴籽ძ鐐 [ 2119.410988][ T893] usb 5-1: SerialNumber: syz [ 2119.468404][T15212] devpts: called with bogus options [ 2119.567557][T15214] cgroup: subsys name conflicts with all [ 2119.794934][T15224] netlink: 188 bytes leftover after parsing attributes in process `syz.6.27175'. [ 2120.055326][T15233] netlink: 'syz.6.27178': attribute type 1 has an invalid length. [ 2120.176053][T15241] tipc: Enabling of bearer rejected, failed to enable media [ 2120.429748][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27189'. [ 2121.191890][T15285] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15285 comm=syz.6.27197 [ 2121.731915][T15319] netlink: 16 bytes leftover after parsing attributes in process `syz.5.27207'. [ 2121.762672][ T893] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 2121.799563][ T893] usb 5-1: USB disconnect, device number 103 [ 2121.829863][T15321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2121.830169][T15321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2121.837127][T15321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2121.843472][T15321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2121.854592][T15321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2121.868203][T15321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2121.875778][T15321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2122.100276][T15319] netlink: 76 bytes leftover after parsing attributes in process `syz.5.27207'. [ 2122.458683][ T36] kauditd_printk_skb: 799 callbacks suppressed [ 2122.458704][ T36] audit: type=1400 audit(2033561207.428:380335): avc: denied { name_bind } for pid=15350 comm="syz.4.27217" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 2122.498578][ T36] audit: type=1400 audit(2033561207.465:380336): avc: denied { create } for pid=15350 comm="syz.4.27217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2122.522210][ T36] audit: type=1400 audit(2033561207.465:380337): avc: denied { write } for pid=15350 comm="syz.4.27217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2122.543697][ T36] audit: type=1400 audit(2033561207.465:380338): avc: denied { sys_module } for pid=15350 comm="syz.4.27217" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2122.578023][ T36] audit: type=1400 audit(2033561207.494:380339): avc: denied { read write } for pid=10841 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2122.613370][ T36] audit: type=1400 audit(2033561207.494:380340): avc: denied { read write open } for pid=10841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2122.638876][ T36] audit: type=1400 audit(2033561207.494:380341): avc: denied { ioctl } for pid=10841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2122.664828][ T36] audit: type=1400 audit(2033561207.569:380342): avc: denied { read } for pid=15356 comm="syz.4.27219" name="binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2122.688057][ T36] audit: type=1400 audit(2033561207.569:380343): avc: denied { read open } for pid=15356 comm="syz.4.27219" path="/dev/binderfs/binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2122.713453][ T36] audit: type=1400 audit(2033561207.569:380344): avc: denied { mount } for pid=15356 comm="syz.4.27219" name="/" dev="ramfs" ino=302816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2122.762846][T22204] tipc: Disabling bearer [ 2122.819316][T15349] bridge0: port 1(bridge_slave_0) entered blocking state [ 2122.826473][T15349] bridge0: port 1(bridge_slave_0) entered disabled state [ 2122.834108][T15349] bridge_slave_0: entered allmulticast mode [ 2122.841167][T15349] bridge_slave_0: entered promiscuous mode [ 2122.849372][T15349] bridge0: port 2(bridge_slave_1) entered blocking state [ 2122.857004][T15349] bridge0: port 2(bridge_slave_1) entered disabled state [ 2122.864624][T15349] bridge_slave_1: entered allmulticast mode [ 2122.870179][ T893] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 2122.871718][T15349] bridge_slave_1: entered promiscuous mode [ 2122.888097][T22204] tipc: Left network mode [ 2122.914716][T15358] overlayfs: failed to clone lowerpath [ 2122.922589][T22204] veth1_macvtap: left promiscuous mode [ 2122.928627][T22204] veth0_vlan: left promiscuous mode [ 2122.941506][T15358] overlayfs: failed to clone upperpath [ 2123.034595][ T893] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 2123.043704][ T893] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2123.054790][ T893] usb 5-1: config 8 has no interface number 0 [ 2123.060917][ T893] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2123.078971][ T893] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2123.090396][ T893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2123.097811][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27225'. [ 2123.099487][ T893] usb 5-1: Product: syz [ 2123.112337][ T893] usb 5-1: Manufacturer: syz [ 2123.117634][ T893] usb 5-1: SerialNumber: syz [ 2123.137253][T15349] bridge0: port 2(bridge_slave_1) entered blocking state [ 2123.144376][T15349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2123.151710][T15349] bridge0: port 1(bridge_slave_0) entered blocking state [ 2123.158797][T15349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2123.228769][T31486] bridge0: port 1(bridge_slave_0) entered disabled state [ 2123.236987][T31486] bridge0: port 2(bridge_slave_1) entered disabled state [ 2123.255049][T31486] bridge0: port 1(bridge_slave_0) entered blocking state [ 2123.262135][T31486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2123.274480][T31482] bridge0: port 2(bridge_slave_1) entered blocking state [ 2123.281606][T31482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2123.317494][T15388] incfs: Options parsing error. -22 [ 2123.323372][T15388] incfs: mount failed -22 [ 2123.335316][T15388] incfs: Options parsing error. -22 [ 2123.341942][T15388] incfs: mount failed -22 [ 2123.353169][T15357] overlayfs: conflicting options: nfs_export=on,index=off [ 2123.399424][T15349] veth0_vlan: entered promiscuous mode [ 2123.448551][T15349] veth1_macvtap: entered promiscuous mode [ 2123.887956][T15405] netlink: 12 bytes leftover after parsing attributes in process `syz.6.27233'. [ 2125.202893][T15462] netlink: 'syz.6.27251': attribute type 40 has an invalid length. [ 2125.687966][T15475] can0: slcan on ptm0. [ 2125.745191][T15474] can0 (unregistered): slcan off ptm0. [ 2125.790332][ T893] usb 5-1: USB disconnect, device number 104 [ 2125.903530][T15482] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 2126.193998][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27266'. [ 2126.230944][T15501] rust_binder: Error while translating object. [ 2126.230990][T15501] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2126.237233][T15501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 2126.291218][T11419] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2126.302234][T15503] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 2126.488101][T11419] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 2126.497624][T11419] usb 5-1: config 160 has no interface number 0 [ 2126.503943][T11419] usb 5-1: config 160 interface 200 has no altsetting 0 [ 2126.550862][T11419] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 2126.574711][T11419] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2126.592378][T11419] usb 5-1: Product: syz [ 2126.596614][T11419] usb 5-1: Manufacturer: syz [ 2126.601308][T11419] usb 5-1: SerialNumber: syz [ 2126.854560][T11419] usb 5-1: MIDIStreaming interface descriptor not found [ 2126.874171][T11419] usb 5-1: USB disconnect, device number 105 [ 2126.884976][ T9172] udevd[9172]: setting mode of /dev/bus/usb/005/105 to 020664 failed: No such file or directory [ 2126.896351][ T9172] udevd[9172]: setting owner of /dev/bus/usb/005/105 to uid=0, gid=0 failed: No such file or directory [ 2126.943257][ T9700] udevd[9700]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:160.200/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2127.477408][T15557] rust_binder: Got transaction with invalid offset. [ 2127.477443][T15557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2127.484096][T15557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:681 [ 2127.571441][T15559] rust_binder: Error while translating object. [ 2127.580647][T15559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2127.586914][T15559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:683 [ 2127.843077][ T36] kauditd_printk_skb: 705 callbacks suppressed [ 2127.843097][ T36] audit: type=1400 audit(2033561212.485:381050): avc: denied { create } for pid=15562 comm="syz.5.27289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2127.878646][ T36] audit: type=1400 audit(2033561212.485:381051): avc: denied { bind } for pid=15562 comm="syz.5.27289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2127.898556][ T36] audit: type=1400 audit(2033561212.485:381052): avc: denied { name_bind } for pid=15562 comm="syz.5.27289" src=3620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 2127.903858][T15561] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27288'. [ 2127.920425][ T36] audit: type=1400 audit(2033561212.485:381053): avc: denied { node_bind } for pid=15562 comm="syz.5.27289" saddr=::1 src=3620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2127.944905][T15561] rust_binder: Error while translating object. [ 2127.950957][T15561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2127.952456][ T36] audit: type=1400 audit(2033561212.485:381054): avc: denied { connect } for pid=15562 comm="syz.5.27289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2127.957266][T15561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:685 [ 2127.968205][ T36] audit: type=1400 audit(2033561212.485:381055): avc: denied { setopt } for pid=15562 comm="syz.5.27289" lport=40542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2128.016751][ T36] audit: type=1401 audit(2033561212.532:381056): op=fscreate invalid_context=CFA7AE [ 2128.026176][ T36] audit: type=1400 audit(2033561212.532:381057): avc: denied { create } for pid=15564 comm="syz.5.27290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2128.046973][ T36] audit: type=1400 audit(2033561212.541:381058): avc: denied { read write } for pid=15560 comm="syz.4.27288" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2128.070821][ T36] audit: type=1400 audit(2033561212.541:381059): avc: denied { read write open } for pid=15560 comm="syz.4.27288" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2129.516142][T15585] bridge0: port 1(bridge_slave_0) entered blocking state [ 2129.523310][T15585] bridge0: port 1(bridge_slave_0) entered disabled state [ 2129.530455][T15585] bridge_slave_0: entered allmulticast mode [ 2129.537227][ T1714] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 2129.546266][T15585] bridge_slave_0: entered promiscuous mode [ 2129.555202][T15585] bridge0: port 2(bridge_slave_1) entered blocking state [ 2129.562316][T15585] bridge0: port 2(bridge_slave_1) entered disabled state [ 2129.569462][T15585] bridge_slave_1: entered allmulticast mode [ 2129.576132][T15585] bridge_slave_1: entered promiscuous mode [ 2129.691301][ T1714] usb 5-1: device descriptor read/64, error -71 [ 2129.696251][T15585] bridge0: port 2(bridge_slave_1) entered blocking state [ 2129.704679][T15585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2129.711996][T15585] bridge0: port 1(bridge_slave_0) entered blocking state [ 2129.719065][T15585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2129.806156][T31486] bridge0: port 1(bridge_slave_0) entered disabled state [ 2129.831425][T31486] bridge0: port 2(bridge_slave_1) entered disabled state [ 2129.858527][T31486] bridge0: port 1(bridge_slave_0) entered blocking state [ 2129.865657][T31486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2129.883825][T31486] bridge0: port 2(bridge_slave_1) entered blocking state [ 2129.890926][T31486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2129.968457][ T1714] usb 5-1: device descriptor read/64, error -71 [ 2130.017431][T15606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2130.018323][T15606] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 2130.141827][T15585] veth0_vlan: entered promiscuous mode [ 2130.171749][T15611] netlink: 'syz.6.27306': attribute type 11 has an invalid length. [ 2130.180245][T15611] netlink: 'syz.6.27306': attribute type 2 has an invalid length. [ 2130.234891][ T1714] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 2130.265164][T15585] veth1_macvtap: entered promiscuous mode [ 2130.312379][T15619] SELinux: failed to load policy [ 2130.328643][T15619] rust_binder: Error while translating object. [ 2130.328687][T15619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2130.341457][T15619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 2130.394739][ T1714] usb 5-1: device descriptor read/64, error -71 [ 2130.682556][ T1714] usb 5-1: device descriptor read/64, error -71 [ 2130.703955][T15636] rust_binder: Write failure EFAULT in pid:77 [ 2130.810548][ T1714] usb usb5-port1: attempt power cycle [ 2131.204822][ T1714] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 2131.212612][T13738] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2131.249583][ T1714] usb 5-1: device descriptor read/8, error -71 [ 2131.377674][T13738] usb 6-1: config 0 has an invalid interface number: 190 but max is 0 [ 2131.385917][T13738] usb 6-1: config 0 has no interface number 0 [ 2131.392138][T13738] usb 6-1: New USB device found, idVendor=19d2, idProduct=1111, bcdDevice= 7.75 [ 2131.402711][T13738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.412433][ T1714] usb 5-1: device descriptor read/8, error -71 [ 2131.420649][T13738] usb 6-1: config 0 descriptor?? [ 2131.678127][ T1714] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 2131.690716][T13738] usb 6-1: string descriptor 0 read error: -71 [ 2131.706271][T13738] usb 6-1: bad CDC descriptors [ 2131.717096][T13738] usb 6-1: USB disconnect, device number 62 [ 2131.736124][ T1714] usb 5-1: device descriptor read/8, error -71 [ 2131.889991][ T1714] usb 5-1: device descriptor read/8, error -71 [ 2132.005731][ T1714] usb usb5-port1: unable to enumerate USB device [ 2132.500813][T15680] netlink: 20 bytes leftover after parsing attributes in process `syz.5.27330'. [ 2132.514818][T15680] binder: Unknown parameter 'fscontext?}' [ 2132.878241][ T1714] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2132.899558][ T893] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 2133.040515][ T1714] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 2133.048933][ T1714] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2133.057813][ T1714] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2133.068162][ T1714] usb 6-1: config 220 has no interface number 2 [ 2133.074483][ T1714] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2133.075530][ T893] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2133.087743][ T1714] usb 6-1: config 220 interface 0 has no altsetting 0 [ 2133.098788][ T893] usb 5-1: not running at top speed; connect to a high speed hub [ 2133.102596][ T1714] usb 6-1: config 220 interface 76 has no altsetting 0 [ 2133.113521][ T893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2133.116845][ T1714] usb 6-1: config 220 interface 1 has no altsetting 0 [ 2133.128739][ T893] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2133.139152][ T1714] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2133.149000][ T893] usb 5-1: string descriptor 0 read error: -22 [ 2133.153392][ T1714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2133.158427][ T893] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2133.167149][ T1714] usb 6-1: Product: syz [ 2133.176646][ T893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2133.180309][ T1714] usb 6-1: Manufacturer: syz [ 2133.191675][ T36] kauditd_printk_skb: 683 callbacks suppressed [ 2133.191693][ T36] audit: type=1400 audit(2033561217.495:381743): avc: denied { ioctl } for pid=15681 comm="syz.4.27331" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2133.192284][ T893] usb 5-1: 0:2 : does not exist [ 2133.197893][ T36] audit: type=1400 audit(2033561217.495:381744): avc: denied { ioctl } for pid=15681 comm="syz.4.27331" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2133.253491][ T1714] usb 6-1: SerialNumber: syz [ 2133.258647][ T36] audit: type=1400 audit(2033561217.495:381745): avc: denied { ioctl } for pid=15681 comm="syz.4.27331" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2133.287139][ T36] audit: type=1400 audit(2033561217.589:381746): avc: denied { ioctl } for pid=15685 comm="syz.5.27333" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2133.312609][ T36] audit: type=1400 audit(2033561217.589:381747): avc: denied { ioctl } for pid=15685 comm="syz.5.27333" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2133.338392][ T36] audit: type=1400 audit(2033561217.589:381748): avc: denied { ioctl } for pid=15685 comm="syz.5.27333" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2133.364878][ T36] audit: type=1400 audit(2033561217.654:381749): avc: denied { create } for pid=15688 comm="syz.3.27334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2133.384956][ T36] audit: type=1400 audit(2033561217.664:381750): avc: denied { create } for pid=15688 comm="syz.3.27334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2133.404915][ T36] audit: type=1400 audit(2033561217.664:381751): avc: denied { write } for pid=15688 comm="syz.3.27334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2133.424861][ T36] audit: type=1400 audit(2033561217.664:381752): avc: denied { write } for pid=15688 comm="syz.3.27334" lport=52874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2133.503206][T15686] binder: Unknown parameter 'maxE000000000000' [ 2133.511574][ T1714] usb 6-1: selecting invalid altsetting 0 [ 2133.517500][ T1714] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 2133.528713][ T1714] usb 6-1: No valid video chain found. [ 2133.538155][ T1714] usb 6-1: USB disconnect, device number 63 [ 2133.836793][T15682] netlink: 84 bytes leftover after parsing attributes in process `syz.4.27331'. [ 2133.849945][ T893] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2133.863986][ T893] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2133.873967][ T893] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 2133.887193][ T893] usb 5-1: USB disconnect, device number 110 [ 2133.910797][ T9172] udevd[9172]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2133.954852][T15698] overlay: Bad value for 'nfs_export' [ 2133.964867][T15698] overlayfs: failed to clone upperpath [ 2134.189018][ T1714] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 2134.207567][ T1714] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 2134.215574][ T1714] hid-generic 0003:0004:0000.0042: unknown main item tag 0x0 [ 2134.225242][ T1714] hid-generic 0003:0004:0000.0042: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 2134.439834][T15711] can0: slcan on ptm0. [ 2134.479384][T15709] can0 (unregistered): slcan off ptm0. [ 2134.690392][T15723] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 160, size: 237) [ 2134.690413][T15723] rust_binder: Error while translating object. [ 2134.701082][T15723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2134.707412][T15723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:702 [ 2134.758780][T15726] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 2134.775452][T15726] rust_binder: Error while translating object. [ 2134.784123][T15726] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2134.813623][T15726] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:704 [ 2134.883398][T15731] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 2134.902585][T15731] rust_binder: Write failure EINVAL in pid:708 [ 2134.981566][T15736] netlink: 16 bytes leftover after parsing attributes in process `syz.5.27349'. [ 2135.006025][T15737] /dev/rnullb0: Can't open blockdev [ 2135.071725][T15741] binder: Bad value for 'max' [ 2135.157494][T15745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27353'. [ 2135.181820][T15743] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 233) [ 2135.181849][T15743] rust_binder: Error while translating object. [ 2135.192552][T15743] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2135.198852][T15743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 2135.460522][T15758] rust_binder: Error while translating object. [ 2135.460571][T15758] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2135.477457][T15758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:717 [ 2135.709368][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27363'. [ 2135.729582][T15770] 9pnet_fd: Insufficient options for proto=fd [ 2135.735821][T11419] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2135.862650][ T1714] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2135.905306][T11419] usb 6-1: Using ep0 maxpacket: 8 [ 2135.913726][T11419] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2135.922884][T11419] usb 6-1: config 179 has no interface number 0 [ 2135.929345][T11419] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2135.940662][T11419] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2135.952156][T11419] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2135.963526][T11419] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2135.975139][T11419] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2135.989366][T11419] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2135.998551][T11419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.010289][T15760] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2136.035599][ T1714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2136.050410][ T1714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2136.073009][ T1714] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2136.105398][ T1714] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2136.116360][ T1714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.138070][ T1714] usb 5-1: config 0 descriptor?? [ 2136.238996][T11419] usb 6-1: USB disconnect, device number 64 [ 2136.245157][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2136.245203][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2136.464327][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27373'. [ 2136.796961][T15763] netlink: 393 bytes leftover after parsing attributes in process `syz.4.27361'. [ 2136.807806][ T1714] usbhid 5-1:0.0: can't add hid device: -71 [ 2136.815259][ T1714] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2136.828264][ T1714] usb 5-1: USB disconnect, device number 111 [ 2136.937396][T15812] rust_binder: Error in use_page_slow: ESRCH [ 2136.937414][T15812] rust_binder: use_range failure ESRCH [ 2136.943660][T15812] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 2136.949175][T15812] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2136.957276][T15812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:62 [ 2137.389629][T15826] netlink: 68 bytes leftover after parsing attributes in process `syz.4.27382'. [ 2137.407834][T15826] netlink: 32 bytes leftover after parsing attributes in process `syz.4.27382'. [ 2137.434084][T15827] 9pnet_fd: Insufficient options for proto=fd [ 2137.526172][T15831] rust_binder: Write failure EFAULT in pid:726 [ 2137.781228][ T893] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2137.935010][ T893] usb 5-1: device descriptor read/64, error -71 [ 2137.983462][T15833] 9pnet_fd: Insufficient options for proto=fd [ 2138.207592][ T893] usb 5-1: device descriptor read/64, error -71 [ 2138.463419][ T893] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2138.538026][ T1714] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2138.538739][ T36] kauditd_printk_skb: 623 callbacks suppressed [ 2138.538760][ T36] audit: type=1400 audit(2033561222.524:382376): avc: denied { ioctl } for pid=15830 comm="syz.4.27384" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2138.577132][ T36] audit: type=1400 audit(2033561222.524:382377): avc: denied { ioctl } for pid=15849 comm="syz.5.27390" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2138.602419][ T36] audit: type=1400 audit(2033561222.524:382378): avc: denied { ioctl } for pid=15849 comm="syz.5.27390" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2138.627664][ T893] usb 5-1: device descriptor read/64, error -71 [ 2138.627686][ T36] audit: type=1400 audit(2033561222.524:382379): avc: denied { ioctl } for pid=15849 comm="syz.5.27390" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2138.660196][ T36] audit: type=1400 audit(2033561222.636:382380): avc: denied { ioctl } for pid=15849 comm="syz.5.27390" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2138.740503][ T1714] usb 6-1: Using ep0 maxpacket: 8 [ 2138.746368][ T36] audit: type=1400 audit(2033561222.711:382381): avc: denied { ioctl } for pid=15849 comm="syz.5.27390" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2138.772210][ T36] audit: type=1400 audit(2033561222.711:382382): avc: denied { execmem } for pid=15854 comm="syz.3.27392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2138.792369][ T36] audit: type=1400 audit(2033561222.739:382383): avc: denied { ioctl } for pid=15849 comm="syz.5.27390" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2138.819510][ T36] audit: type=1400 audit(2033561222.739:382384): avc: denied { ioctl } for pid=15830 comm="syz.4.27384" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2138.844936][ T1714] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2138.852699][ T36] audit: type=1400 audit(2033561222.739:382385): avc: denied { ioctl } for pid=15830 comm="syz.4.27384" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2138.879377][ T1714] usb 6-1: config 6 has an invalid interface number: 248 but max is 0 [ 2138.887588][ T1714] usb 6-1: config 6 has no interface number 0 [ 2138.894981][ T1714] usb 6-1: config 6 interface 248 has no altsetting 0 [ 2138.905880][ T1714] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2138.911151][ T893] usb 5-1: device descriptor read/64, error -71 [ 2138.915488][ T1714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.929571][ T1714] usb 6-1: Product: syz [ 2138.933902][ T1714] usb 6-1: Manufacturer: syz [ 2138.938539][ T1714] usb 6-1: SerialNumber: syz [ 2139.028864][ T893] usb usb5-port1: attempt power cycle [ 2139.164806][T15850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2139.175597][T15850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2139.190432][ T1714] ums-karma 6-1:6.248: USB Mass Storage device detected [ 2139.244013][ T1714] usb 6-1: USB disconnect, device number 65 [ 2139.401380][ T893] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2139.457590][ T893] usb 5-1: device descriptor read/8, error -71 [ 2139.596208][ T893] usb 5-1: device descriptor read/8, error -71 [ 2139.650256][T15900] can0: slcan on ptm0. [ 2139.713531][T15900] can0 (unregistered): slcan off ptm0. [ 2139.849551][ T893] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2139.899706][ T893] usb 5-1: device descriptor read/8, error -71 [ 2140.063133][ T893] usb 5-1: device descriptor read/8, error -71 [ 2140.168773][ T411] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2140.179641][ T893] usb usb5-port1: unable to enumerate USB device [ 2140.210431][T15930] devpts: called with bogus options [ 2140.350044][ T411] usb 6-1: Using ep0 maxpacket: 8 [ 2140.358711][ T411] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2140.378434][ T411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2140.394649][ T411] usb 6-1: config 0 descriptor?? [ 2141.066870][ T411] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 2141.085857][ T411] asix 6-1:0.0: probe with driver asix failed with error -32 [ 2141.268181][T15991] can0: slcan on ptm1. [ 2141.299614][T15990] can0 (unregistered): slcan off ptm1. [ 2141.719001][T16010] binder: Bad value for 'stats' [ 2141.904372][T16018] rust_binder: 742: no such ref 0 [ 2142.194306][T16024] /dev/rnullb0: Can't open blockdev [ 2142.294009][T16027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27437'. [ 2142.652264][T13738] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2142.790864][T13738] usb 5-1: device descriptor read/64, error -71 [ 2143.046655][T13738] usb 5-1: device descriptor read/64, error -71 [ 2143.302442][T13738] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2143.440990][T13738] usb 5-1: device descriptor read/64, error -71 [ 2143.696841][T13738] usb 5-1: device descriptor read/64, error -71 [ 2143.814147][T13738] usb usb5-port1: attempt power cycle [ 2143.889396][ T36] kauditd_printk_skb: 986 callbacks suppressed [ 2143.889416][ T36] audit: type=1400 audit(2033561227.543:383372): avc: denied { ioctl } for pid=16028 comm="syz.4.27438" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2143.921033][ T36] audit: type=1400 audit(2033561227.543:383373): avc: denied { ioctl } for pid=16028 comm="syz.4.27438" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2144.091053][ T1714] usb 6-1: USB disconnect, device number 66 [ 2144.124807][ T36] audit: type=1400 audit(2033561227.759:383374): avc: denied { ioctl } for pid=16028 comm="syz.4.27438" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2144.150448][ T36] audit: type=1400 audit(2033561227.759:383375): avc: denied { read write } for pid=15585 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2144.175459][ T36] audit: type=1400 audit(2033561227.759:383376): avc: denied { read write open } for pid=15585 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2144.207568][T13738] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2144.215541][ T36] audit: type=1400 audit(2033561227.759:383377): avc: denied { ioctl } for pid=15585 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2144.241627][ T36] audit: type=1400 audit(2033561227.853:383378): avc: denied { read } for pid=16034 comm="syz.5.27439" name="binder0" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2144.264817][ T36] audit: type=1400 audit(2033561227.853:383379): avc: denied { read open } for pid=16034 comm="syz.5.27439" path="/dev/binderfs/binder0" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2144.267660][T13738] usb 5-1: device descriptor read/8, error -71 [ 2144.290311][ T36] audit: type=1400 audit(2033561227.899:383380): avc: denied { ioctl } for pid=16028 comm="syz.4.27438" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2144.336303][ T36] audit: type=1400 audit(2033561227.899:383381): avc: denied { ioctl } for pid=16028 comm="syz.4.27438" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2144.435444][T13738] usb 5-1: device descriptor read/8, error -71 [ 2144.698738][T13738] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2144.722669][T13738] usb 5-1: device descriptor read/8, error -71 [ 2144.795431][T16051] overlayfs: missing 'lowerdir' [ 2144.861210][T13738] usb 5-1: device descriptor read/8, error -71 [ 2144.986522][T13738] usb usb5-port1: unable to enumerate USB device [ 2145.716595][T16075] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 2145.724392][T16075] SELinux: failed to load policy [ 2145.847220][T16081] rust_binder: Error while translating object. [ 2145.847276][T16081] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 2145.871180][T16081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:758 [ 2146.136678][T16091] fuse: Unknown parameter '' [ 2146.351363][T16099] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 2146.385962][T16099] netlink: 'syz.5.27460': attribute type 4 has an invalid length. [ 2146.393892][T16099] netlink: 'syz.5.27460': attribute type 5 has an invalid length. [ 2146.401749][T16099] netlink: 'syz.5.27460': attribute type 1 has an invalid length. [ 2146.510735][ T411] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2146.673033][ T411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2146.684045][ T411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2146.693844][ T411] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2146.706785][ T411] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2146.715865][ T411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.725814][ T411] usb 5-1: config 0 descriptor?? [ 2147.166203][ T411] plantronics 0003:047F:FFFF.0043: item fetching failed at offset 13/15 [ 2147.175029][ T411] plantronics 0003:047F:FFFF.0043: parse failed [ 2147.181361][ T411] plantronics 0003:047F:FFFF.0043: probe with driver plantronics failed with error -22 [ 2147.383878][T13738] usb 5-1: USB disconnect, device number 121 [ 2147.558084][T16109] Invalid ELF header magic: != ELF [ 2148.323098][T15956] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2148.493281][T15956] usb 5-1: Using ep0 maxpacket: 8 [ 2148.515571][T15956] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 2148.523889][T15956] usb 5-1: config 250 has an invalid interface number: 0 but max is -1 [ 2148.534830][T15956] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2148.546356][T15956] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2148.556078][T16130] netlink: 'syz.6.27471': attribute type 27 has an invalid length. [ 2148.567051][T15956] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2148.576295][T15956] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2148.584654][T15956] usb 5-1: Product: syz [ 2148.588868][T15956] usb 5-1: SerialNumber: syz [ 2148.603034][T15956] hub 5-1:250.0: bad descriptor, ignoring hub [ 2148.611927][T15956] hub 5-1:250.0: probe with driver hub failed with error -5 [ 2148.623739][T16130] bridge0: port 2(bridge_slave_1) entered disabled state [ 2148.631020][T16130] bridge0: port 1(bridge_slave_0) entered disabled state [ 2149.021144][T16140] netlink: 'syz.6.27473': attribute type 8 has an invalid length. [ 2149.090476][ T411] usb 5-1: reset high-speed USB device number 122 using dummy_hcd [ 2149.124613][T16144] overlay: filesystem on ./bus not supported as upperdir [ 2149.132338][T16144] overlay: filesystem on ./bus not supported as upperdir [ 2149.140636][T16144] overlay: filesystem on ./bus not supported as upperdir [ 2149.148555][T16144] overlay: filesystem on ./bus not supported as upperdir [ 2149.156543][T16144] overlay: filesystem on ./bus not supported as upperdir [ 2149.164307][T16144] overlay: filesystem on ./bus not supported as upperdir [ 2149.272014][ T36] kauditd_printk_skb: 687 callbacks suppressed [ 2149.272037][ T36] audit: type=1400 audit(2033561232.590:384069): avc: denied { ioctl } for pid=16120 comm="syz.4.27468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2149.304840][ T36] audit: type=1400 audit(2033561232.590:384070): avc: denied { ioctl } for pid=16120 comm="syz.4.27468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2149.330212][ T36] audit: type=1400 audit(2033561232.619:384071): avc: denied { ioctl } for pid=16120 comm="syz.4.27468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2149.355811][ T36] audit: type=1400 audit(2033561232.647:384072): avc: denied { ioctl } for pid=16120 comm="syz.4.27468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2149.381167][ T36] audit: type=1400 audit(2033561232.675:384073): avc: denied { ioctl } for pid=16120 comm="syz.4.27468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2149.406898][ T36] audit: type=1400 audit(2033561232.694:384074): avc: denied { ioctl } for pid=16120 comm="syz.4.27468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2149.432484][ T36] audit: type=1400 audit(2033561232.722:384075): avc: denied { ioctl } for pid=16120 comm="syz.4.27468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2149.458050][ T36] audit: type=1400 audit(2033561232.722:384076): avc: denied { ioctl } for pid=16120 comm="syz.4.27468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2149.483615][ T36] audit: type=1400 audit(2033561232.722:384077): avc: denied { ioctl } for pid=16120 comm="syz.4.27468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2149.761709][ T411] usb 5-1: USB disconnect, device number 122 [ 2150.191608][ T36] audit: type=1400 audit(2033561233.454:384078): avc: denied { read write } for pid=10841 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2150.239203][T16148] rust_binder: Error in use_page_slow: ESRCH [ 2150.239231][T16148] rust_binder: use_range failure ESRCH [ 2150.246382][T16148] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 2150.252636][T16148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2150.260650][T16148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:781 [ 2150.309623][T16153] rust_binder: pid 16153 performed invalid decrement on ref [ 2150.373805][T16155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2150.378447][T16155] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2150.385273][T16155] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:788 [ 2150.443984][T16157] rust_binder: Write failure EFAULT in pid:790 [ 2150.756681][T16166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=16166 comm=syz.3.27481 [ 2150.777967][T16168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=16168 comm=syz.3.27481 [ 2150.902234][T26798] usb 5-1: new low-speed USB device number 123 using dummy_hcd [ 2151.065373][T26798] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2151.074868][T26798] usb 5-1: config 6 has an invalid interface number: 234 but max is 0 [ 2151.083120][T26798] usb 5-1: config 6 has no interface number 0 [ 2151.089341][T26798] usb 5-1: config 6 interface 234 has no altsetting 0 [ 2151.473761][T16180] binder: Bad value for 'stats' [ 2151.502586][T16182] 9pnet_fd: Insufficient options for proto=fd [ 2152.341316][T16198] SELinux: security_context_str_to_sid () failed with errno=-22 [ 2152.489950][T16196] fuse: Bad value for 'fd' [ 2152.833269][T16210] netlink: 40 bytes leftover after parsing attributes in process `syz.6.27495'. [ 2153.211291][T16231] netlink: 28 bytes leftover after parsing attributes in process `syz.6.27502'. [ 2153.211336][T16230] netlink: 28 bytes leftover after parsing attributes in process `syz.6.27502'. [ 2153.838324][T26798] usb 5-1: New USB device found, idVendor=7374, idProduct=0001, bcdDevice=7e.58 [ 2153.848879][T26798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2153.866796][T26798] usb 5-1: can't set config #6, error -71 [ 2153.876537][T26798] usb 5-1: USB disconnect, device number 123 [ 2153.931702][T16237] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2154.295395][T16254] kernel read not supported for file /policy (pid: 16254 comm: syz.6.27509) [ 2154.357278][ T411] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2154.458970][T16264] can0: slcan on ptm0. [ 2154.511967][T16262] can0 (unregistered): slcan off ptm0. [ 2154.539322][ T411] usb 5-1: Using ep0 maxpacket: 8 [ 2154.569238][ T411] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2154.609822][ T411] usb 5-1: config 6 has an invalid interface number: 248 but max is 0 [ 2154.618372][ T36] kauditd_printk_skb: 368 callbacks suppressed [ 2154.618390][ T36] audit: type=1400 audit(2033561237.610:384447): avc: denied { read } for pid=16274 comm="syz.3.27511" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=307103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2154.629260][ T411] usb 5-1: config 6 has no interface number 0 [ 2154.650984][ T36] audit: type=1400 audit(2033561237.610:384448): avc: denied { ioctl } for pid=16240 comm="syz.4.27505" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2154.696577][ T411] usb 5-1: config 6 interface 248 has no altsetting 0 [ 2154.722347][ T411] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2154.725231][ T36] audit: type=1400 audit(2033561237.704:384449): avc: denied { ioctl } for pid=16240 comm="syz.4.27505" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2154.736191][ T411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2154.773684][ T411] usb 5-1: Product: syz [ 2154.778092][ T411] usb 5-1: Manufacturer: syz [ 2154.784022][ T411] usb 5-1: SerialNumber: syz [ 2154.824480][ T36] audit: type=1400 audit(2033561237.704:384450): avc: denied { ioctl } for pid=16240 comm="syz.4.27505" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2154.871892][ T36] audit: type=1400 audit(2033561237.704:384451): avc: denied { ioctl } for pid=16240 comm="syz.4.27505" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2154.908150][ T36] audit: type=1400 audit(2033561237.704:384452): avc: denied { ioctl } for pid=16240 comm="syz.4.27505" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2154.934769][ T36] audit: type=1400 audit(2033561237.704:384453): avc: denied { ioctl } for pid=16240 comm="syz.4.27505" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2154.961166][ T36] audit: type=1400 audit(2033561237.704:384454): avc: denied { ioctl } for pid=16240 comm="syz.4.27505" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2154.986541][ T36] audit: type=1400 audit(2033561237.704:384455): avc: denied { ioctl } for pid=16240 comm="syz.4.27505" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2155.012244][ T36] audit: type=1400 audit(2033561237.713:384456): avc: denied { ioctl } for pid=16240 comm="syz.4.27505" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2155.048675][ T411] ums-karma 5-1:6.248: USB Mass Storage device detected [ 2155.119016][ T411] usb 5-1: USB disconnect, device number 124 [ 2155.372948][T16299] overlayfs: failed to clone lowerpath [ 2155.996974][ T411] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2156.068361][T16322] netlink: 68 bytes leftover after parsing attributes in process `syz.3.27533'. [ 2156.135528][ T411] usb 5-1: device descriptor read/64, error -71 [ 2156.401995][ T411] usb 5-1: device descriptor read/64, error -71 [ 2156.657795][ T411] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2156.807029][ T411] usb 5-1: device descriptor read/64, error -71 [ 2157.062837][ T411] usb 5-1: device descriptor read/64, error -71 [ 2157.180187][ T411] usb usb5-port1: attempt power cycle [ 2157.542492][ T411] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2157.566169][ T411] usb 5-1: device descriptor read/8, error -71 [ 2157.704871][ T411] usb 5-1: device descriptor read/8, error -71 [ 2157.846072][T16376] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 2157.968885][ T411] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2158.004339][ T411] usb 5-1: device descriptor read/8, error -71 [ 2158.142511][ T411] usb 5-1: device descriptor read/8, error -71 [ 2158.257241][ T411] usb usb5-port1: unable to enumerate USB device [ 2158.825103][T16396] __vm_enough_memory: pid: 16396, comm: syz.6.27561, bytes: 18014402804453376 not enough memory for the allocation [ 2159.588981][ T1714] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 2159.628383][T16431] 9pnet_fd: Insufficient options for proto=fd [ 2159.738164][ T1714] usb 5-1: device descriptor read/64, error -71 [ 2159.994009][ T1714] usb 5-1: device descriptor read/64, error -71 [ 2160.056356][ T36] kauditd_printk_skb: 667 callbacks suppressed [ 2160.056376][ T36] audit: type=1400 audit(2033561242.704:385124): avc: denied { create } for pid=16439 comm="syz.5.27577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2160.084740][ T36] audit: type=1400 audit(2033561242.714:385125): avc: denied { ioctl } for pid=16439 comm="syz.5.27577" path="socket:[307871]" dev="sockfs" ino=307871 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2160.111068][ T36] audit: type=1400 audit(2033561242.732:385126): avc: denied { mounton } for pid=16441 comm="syz.5.27578" path="/84/file0" dev="tmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2160.134880][ T36] audit: type=1400 audit(2033561242.732:385127): avc: denied { mount } for pid=16441 comm="syz.5.27578" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2160.159025][ T36] audit: type=1400 audit(2033561242.807:385128): avc: denied { ioctl } for pid=16413 comm="syz.4.27568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2160.184443][ T36] audit: type=1400 audit(2033561242.807:385129): avc: denied { ioctl } for pid=16413 comm="syz.4.27568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2160.210344][ T36] audit: type=1400 audit(2033561242.854:385130): avc: denied { ioctl } for pid=16413 comm="syz.4.27568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2160.238892][ T36] audit: type=1326 audit(2033561242.883:385131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.5.27580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914a18eec9 code=0x7ff00000 [ 2160.263279][ T36] audit: type=1326 audit(2033561242.883:385132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.5.27580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914a18eec9 code=0x7ff00000 [ 2160.287301][ T1714] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 2160.289209][ T36] audit: type=1326 audit(2033561242.883:385133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16447 comm="syz.5.27580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914a18eec9 code=0x7ff00000 [ 2160.430965][ T1714] usb 5-1: device descriptor read/64, error -71 [ 2160.697438][ T1714] usb 5-1: device descriptor read/64, error -71 [ 2160.815196][ T1714] usb usb5-port1: attempt power cycle [ 2161.177077][ T1714] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 2161.200939][ T1714] usb 5-1: device descriptor read/8, error -71 [ 2161.339581][ T1714] usb 5-1: device descriptor read/8, error -71 [ 2161.592788][ T1714] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 2161.616783][ T1714] usb 5-1: device descriptor read/8, error -71 [ 2161.755462][ T1714] usb 5-1: device descriptor read/8, error -71 [ 2161.870069][ T1714] usb usb5-port1: unable to enumerate USB device [ 2166.775685][ T36] kauditd_printk_skb: 9446 callbacks suppressed [ 2166.775705][ T36] audit: type=1400 audit(2033561249.009:394562): avc: denied { read } for pid=16452 comm="syz.4.27582" name="binder0" dev="binder" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2166.812145][T16462] netlink: 'syz.3.27583': attribute type 3 has an invalid length. [ 2166.856364][ T36] audit: type=1400 audit(2033561249.009:394563): avc: denied { create } for pid=16454 comm="syz.5.27585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2166.885128][T16465] binder: Binderfs stats mode cannot be changed during a remount [ 2166.894313][ T36] audit: type=1400 audit(2033561249.009:394564): avc: denied { create } for pid=16454 comm="syz.5.27585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2166.949295][ T36] audit: type=1400 audit(2033561249.009:394565): avc: denied { write } for pid=16454 comm="syz.5.27585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2167.002654][ T36] audit: type=1400 audit(2033561249.047:394566): avc: denied { read open } for pid=16452 comm="syz.4.27582" path="/dev/binderfs/binder0" dev="binder" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2167.034094][ T36] audit: type=1400 audit(2033561249.065:394567): avc: denied { read write } for pid=10841 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2167.040309][T16462] netlink: 944 bytes leftover after parsing attributes in process `syz.3.27583'. [ 2167.088327][ T36] audit: type=1400 audit(2033561249.065:394568): avc: denied { read write open } for pid=10841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2167.114036][ T36] audit: type=1400 audit(2033561249.065:394569): avc: denied { ioctl } for pid=10841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2167.141752][ T36] audit: type=1400 audit(2033561249.065:394570): avc: denied { read write } for pid=15349 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2167.166212][ T36] audit: type=1400 audit(2033561249.065:394571): avc: denied { read write open } for pid=15349 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2167.199244][T15956] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2167.363870][T15956] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2167.374867][T15956] usb 5-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 2167.385748][T15956] usb 5-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2167.398932][T15956] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2167.408872][T15956] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2167.418276][T15956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2167.424285][T16485] fuse: Unknown parameter '' [ 2167.427628][T15956] usb 5-1: Product: ˝憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓ꊐݜㄿ↦裌莡ꉳ咆纥㉸從ழ讧걿⨔亓뉭얄슀葋䤝빗馿㞘톷注栴享◗◧報ꓨ莏藷⢞덥ﯕ좢떸枱嘯떦摵﹧겥鈐ᜇ䤬漳 [ 2167.434927][T16485] binder: Unknown parameter 'defcontext00000000000000000000000' [ 2167.453704][T15956] usb 5-1: SerialNumber: syz [ 2167.686837][T16466] rust_binder: Error while translating object. [ 2167.686879][T16466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2167.693288][T16466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:821 [ 2167.706113][T15956] cdc_ether 5-1:1.0: skipping garbage [ 2167.726136][T15956] cdc_ether 5-1:1.0: skipping garbage [ 2167.731668][T15956] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 2167.742648][T15956] usb 5-1: USB disconnect, device number 7 [ 2168.032947][T16495] tmpfs: Unknown parameter 'no' [ 2168.359460][T16509] netlink: 24 bytes leftover after parsing attributes in process `syz.6.27602'. [ 2168.422739][T16513] netlink: 72 bytes leftover after parsing attributes in process `syz.6.27604'. [ 2168.584882][T15956] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2168.766069][T15956] usb 5-1: Using ep0 maxpacket: 8 [ 2168.774447][T15956] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2168.797575][T15956] usb 5-1: config 179 has no interface number 0 [ 2168.804827][T15956] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2168.830168][T15956] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2168.853569][T15956] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2168.867624][T15956] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2168.879904][T15956] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2168.895130][T15956] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2168.904325][T15956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2168.927678][T16507] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2168.964753][T16529] netlink: 68 bytes leftover after parsing attributes in process `syz.3.27609'. [ 2169.167897][T15956] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input119 [ 2169.226620][T16539] netlink: 80 bytes leftover after parsing attributes in process `syz.5.27613'. [ 2169.384921][T16507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2169.393712][T16507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2169.621278][T16507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2169.630939][T16507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2169.640231][ T1714] usb 5-1: USB disconnect, device number 8 [ 2169.640247][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2169.654581][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 2169.657063][ T1714] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2170.898657][T16572] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2171.069588][T16584] overlayfs: failed to clone upperpath [ 2171.249555][ T411] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 2171.291758][T16589] netlink: 56 bytes leftover after parsing attributes in process `syz.3.27630'. [ 2171.411777][ T411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2171.422996][ T411] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2171.435934][ T411] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 2171.445045][ T411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2171.455084][ T411] usb 5-1: config 0 descriptor?? [ 2171.461722][T16580] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2171.470489][ T411] usbhid 5-1:0.0: can't add hid device: -22 [ 2171.476609][ T411] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 2171.687504][ T1714] usb 5-1: USB disconnect, device number 9 [ 2171.941358][T16605] fuseblk: Unknown parameter '' [ 2172.136960][ T36] kauditd_printk_skb: 396 callbacks suppressed [ 2172.136980][ T36] audit: type=1400 audit(2033561254.038:394968): avc: denied { read write } for pid=16612 comm="syz.5.27639" name="rnullb0" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 2172.200838][ T36] audit: type=1400 audit(2033561254.038:394969): avc: denied { read write open } for pid=16612 comm="syz.5.27639" path="/dev/rnullb0" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 2172.228804][ T36] audit: type=1400 audit(2033561254.038:394970): avc: denied { write } for pid=16612 comm="syz.5.27639" name="rnullb0" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 2172.270107][ T36] audit: type=1400 audit(2033561254.160:394971): avc: denied { read write } for pid=10841 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2172.343340][ T36] audit: type=1400 audit(2033561254.188:394972): avc: denied { read write open } for pid=10841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2172.423128][ T36] audit: type=1400 audit(2033561254.188:394973): avc: denied { create } for pid=16614 comm="syz.5.27640" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2172.485954][ T36] audit: type=1400 audit(2033561254.188:394974): avc: denied { ioctl } for pid=10841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2172.511062][T16623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27644'. [ 2172.569808][T16626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.27642'. [ 2172.571239][ T36] audit: type=1400 audit(2033561254.188:394975): avc: denied { ioctl } for pid=16614 comm="syz.5.27640" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=309000 ioctlcmd=0x54c9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2172.616549][ T36] audit: type=1400 audit(2033561254.188:394976): avc: denied { ioctl } for pid=16614 comm="syz.5.27640" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=309000 ioctlcmd=0xaf21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2172.672616][ T36] audit: type=1400 audit(2033561254.244:394977): avc: denied { name_bind } for pid=16616 comm="syz.5.27643" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2172.839428][T16638] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2172.981688][T16651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=16651 comm=syz.4.27651 [ 2173.237356][T16669] rust_binder: Write failure EINVAL in pid:863 [ 2173.237713][T16669] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 2173.266690][T16669] rust_binder: Write failure EINVAL in pid:863 [ 2173.267142][T16669] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 2174.074793][T16706] can0: slcan on ptm0. [ 2174.160737][T16706] can0 (unregistered): slcan off ptm0. [ 2174.735469][T16722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2174.737332][T16722] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 238) [ 2174.743865][T16722] rust_binder: Error while translating object. [ 2174.755804][T16722] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2174.762954][T16722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:886 [ 2174.900835][T16735] overlayfs: failed to clone lowerpath [ 2175.017646][T16743] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 2175.027931][T16743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27681'. [ 2175.065383][ T411] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2175.214602][ T411] usb 5-1: device descriptor read/64, error -71 [ 2175.481103][ T411] usb 5-1: device descriptor read/64, error -71 [ 2175.736892][ T411] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2175.875443][ T411] usb 5-1: device descriptor read/64, error -71 [ 2176.131274][ T411] usb 5-1: device descriptor read/64, error -71 [ 2176.248567][ T411] usb usb5-port1: attempt power cycle [ 2176.478830][T16772] veth1_macvtap: left promiscuous mode [ 2176.484502][T16772] macsec0: entered allmulticast mode [ 2176.491612][T16772] veth1_macvtap: entered promiscuous mode [ 2176.497402][T16772] veth1_macvtap: entered allmulticast mode [ 2176.503306][T16772] macsec0: left allmulticast mode [ 2176.509348][T16772] veth1_macvtap: left allmulticast mode [ 2176.621549][ T411] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2176.653821][ T411] usb 5-1: device descriptor read/8, error -71 [ 2176.794692][ T411] usb 5-1: device descriptor read/8, error -71 [ 2177.047884][ T411] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2177.072121][ T411] usb 5-1: device descriptor read/8, error -71 [ 2177.139151][T16821] netlink: 32 bytes leftover after parsing attributes in process `syz.3.27709'. [ 2177.210623][ T411] usb 5-1: device descriptor read/8, error -71 [ 2177.325572][ T411] usb usb5-port1: unable to enumerate USB device [ 2177.639056][ T36] kauditd_printk_skb: 1185 callbacks suppressed [ 2177.639075][ T36] audit: type=1400 audit(2033561259.198:396163): avc: denied { create } for pid=16833 comm="syz.3.27715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2177.666419][ T36] audit: type=1400 audit(2033561259.198:396164): avc: denied { write } for pid=16833 comm="syz.3.27715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2178.025081][ T36] audit: type=1400 audit(2033561259.564:396165): avc: denied { read write } for pid=10841 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2178.052916][ T36] audit: type=1400 audit(2033561259.583:396166): avc: denied { read write open } for pid=10841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2178.079610][ T36] audit: type=1400 audit(2033561259.583:396167): avc: denied { ioctl } for pid=10841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2178.112899][ T36] audit: type=1400 audit(2033561259.639:396168): avc: denied { read write } for pid=16835 comm="syz.4.27716" name="binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2178.135295][T16836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27716'. [ 2178.138070][ T36] audit: type=1400 audit(2033561259.639:396169): avc: denied { read write open } for pid=16835 comm="syz.4.27716" path="/dev/binderfs/binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2178.171803][ T36] audit: type=1400 audit(2033561259.658:396170): avc: denied { create } for pid=16835 comm="syz.4.27716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2178.192686][ T36] audit: type=1400 audit(2033561259.658:396171): avc: denied { create } for pid=16835 comm="syz.4.27716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2178.214490][ T36] audit: type=1400 audit(2033561259.658:396172): avc: denied { write } for pid=16835 comm="syz.4.27716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2178.401549][ T411] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2178.561444][ T411] usb 5-1: Using ep0 maxpacket: 8 [ 2178.605938][ T411] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 2178.614270][ T411] usb 5-1: config 250 has an invalid interface number: 0 but max is -1 [ 2178.646750][ T411] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2178.668024][ T411] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2178.682679][ T411] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2178.700066][ T411] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2178.708388][ T411] usb 5-1: Product: syz [ 2178.717794][ T411] usb 5-1: SerialNumber: syz [ 2178.736755][ T411] hub 5-1:250.0: bad descriptor, ignoring hub [ 2178.739747][T16854] can0: slcan on ptm0. [ 2178.765775][ T411] hub 5-1:250.0: probe with driver hub failed with error -5 [ 2179.275761][ T411] usb 5-1: reset high-speed USB device number 14 using dummy_hcd [ 2179.797978][ T411] usb 5-1: USB disconnect, device number 14 [ 2180.305675][T16952] can: request_module (can-proto-0) failed. [ 2180.586585][T15956] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2180.746448][T15956] usb 5-1: Using ep0 maxpacket: 16 [ 2180.753709][T15956] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 2180.762881][T15956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2180.772672][T15956] usb 5-1: config 0 descriptor?? [ 2180.780305][T15956] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 2180.995059][T16952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2181.003697][T16952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2181.012717][T15956] usb 5-1: Detected FT232B [ 2181.023812][T15956] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2181.034338][T15956] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2181.059651][T15956] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2181.071109][T16971] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2181.076273][T15956] usb 5-1: USB disconnect, device number 15 [ 2181.094595][T15956] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2181.119974][T15956] ftdi_sio 5-1:0.0: device disconnected [ 2181.397197][T16983] x_tables: duplicate entry at hook 2 [ 2181.535270][T15956] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2181.709799][T15956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2181.721345][T15956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2181.731683][T15956] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2181.744631][T15956] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2181.754263][T15956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.765234][T15956] usb 5-1: config 0 descriptor?? [ 2181.949177][T17020] netlink: 'syz.5.27777': attribute type 4 has an invalid length. [ 2181.959756][T17020] netlink: 'syz.5.27777': attribute type 4 has an invalid length. [ 2181.968989][T17021] netlink: 'syz.5.27777': attribute type 4 has an invalid length. [ 2181.982792][T17020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=17020 comm=syz.5.27777 [ 2182.217881][T15956] plantronics 0003:047F:FFFF.0044: No inputs registered, leaving [ 2182.229818][T15956] plantronics 0003:047F:FFFF.0044: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2182.493026][T17039] bridge0: port 1(bridge_slave_0) entered blocking state [ 2182.500164][T17039] bridge0: port 1(bridge_slave_0) entered disabled state [ 2182.507832][T17039] bridge_slave_0: entered allmulticast mode [ 2182.514128][T17039] bridge_slave_0: entered promiscuous mode [ 2182.521448][ T1714] usb 5-1: USB disconnect, device number 16 [ 2182.528467][T17039] bridge0: port 2(bridge_slave_1) entered blocking state [ 2182.535783][T17039] bridge0: port 2(bridge_slave_1) entered disabled state [ 2182.545468][T17039] bridge_slave_1: entered allmulticast mode [ 2182.557462][T17039] bridge_slave_1: entered promiscuous mode [ 2182.763072][T31482] bridge_slave_1: left allmulticast mode [ 2182.768836][T31482] bridge_slave_1: left promiscuous mode [ 2182.774547][T31482] +$<: port 2(bridge_slave_1) entered disabled state [ 2182.782038][T31482] bridge_slave_0: left allmulticast mode [ 2182.787806][T31482] bridge_slave_0: left promiscuous mode [ 2182.793528][T31482] +$<: port 1(bridge_slave_0) entered disabled state [ 2182.922541][T17039] bridge0: port 2(bridge_slave_1) entered blocking state [ 2182.929661][T17039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2182.937031][T17039] bridge0: port 1(bridge_slave_0) entered blocking state [ 2182.944129][T17039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2182.998235][ T36] kauditd_printk_skb: 567 callbacks suppressed [ 2182.998254][ T36] audit: type=1400 audit(2033561264.236:396740): avc: denied { sys_module } for pid=17039 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2183.040605][T31486] bridge0: port 1(bridge_slave_0) entered disabled state [ 2183.048084][ T36] audit: type=1400 audit(2033561264.264:396741): avc: denied { sys_module } for pid=17039 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2183.059591][T31486] bridge0: port 2(bridge_slave_1) entered disabled state [ 2183.071437][ T36] audit: type=1400 audit(2033561264.264:396742): avc: denied { sys_module } for pid=17039 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2183.101381][ T36] audit: type=1400 audit(2033561264.274:396743): avc: denied { sys_module } for pid=17039 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2183.135390][T31482] veth1_macvtap: left promiscuous mode [ 2183.140943][T31482] veth0_vlan: left promiscuous mode [ 2183.146319][ T36] audit: type=1400 audit(2033561264.358:396744): avc: denied { read write } for pid=10841 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2183.171046][ T36] audit: type=1400 audit(2033561264.358:396745): avc: denied { read write open } for pid=10841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2183.224642][ T36] audit: type=1400 audit(2033561264.358:396746): avc: denied { sys_module } for pid=17039 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2183.290633][ T36] audit: type=1400 audit(2033561264.377:396747): avc: denied { ioctl } for pid=10841 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2183.320562][ T36] audit: type=1400 audit(2033561264.489:396748): avc: denied { create } for pid=17062 comm="syz.5.27788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2183.344338][ T36] audit: type=1400 audit(2033561264.489:396749): avc: denied { write } for pid=17062 comm="syz.5.27788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2183.347671][T31486] bridge0: port 1(bridge_slave_0) entered blocking state [ 2183.372178][T31486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2183.388648][T31487] bridge0: port 2(bridge_slave_1) entered blocking state [ 2183.395812][T31487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2183.483879][T17070] tmpfs: Bad value for 'huge' [ 2183.525001][T17039] veth0_vlan: entered promiscuous mode [ 2183.581202][T17039] veth1_macvtap: entered promiscuous mode [ 2183.873549][T17078] /dev/rnullb0: Can't open blockdev [ 2183.935170][T17081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2184.189313][T17096] rust_binder: validate_parent_fixup: new_min_offset=21, sg_entry.length=0 [ 2184.195847][T17096] rust_binder: Error while translating object. [ 2184.204636][T17096] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2184.210882][T17096] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 2184.510951][T17098] tipc: Enabling of bearer rejected, failed to enable media [ 2185.228984][T17145] fuseblk: Unknown parameter 'f50x0000000000000005' [ 2185.287091][ T411] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2185.446944][ T411] usb 5-1: Using ep0 maxpacket: 8 [ 2185.454622][ T411] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2185.469374][ T411] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2185.476076][ T411] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 2185.485296][ T411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2185.497865][ T411] usb 5-1: config 0 descriptor?? [ 2185.942921][ T411] uclogic 0003:5543:0042.0045: No inputs registered, leaving [ 2185.960298][ T411] uclogic 0003:5543:0042.0045: hidraw0: USB HID v0.07 Device [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 2186.158060][T17181] netlink: 'syz.5.27822': attribute type 6 has an invalid length. [ 2186.166160][T17142] rust_binder: Write failure EFAULT in pid:914 [ 2186.166663][ T411] usb 5-1: USB disconnect, device number 17 [ 2186.946572][T17209] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 2186.953855][T17209] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2187.290907][T11419] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2187.461500][T11419] usb 5-1: Using ep0 maxpacket: 16 [ 2187.469294][T11419] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2187.480313][T11419] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2187.492743][T11419] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 2187.501860][T11419] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2187.510635][T11419] usb 5-1: Product: syz [ 2187.514890][T11419] usb 5-1: Manufacturer: syz [ 2187.519535][T11419] usb 5-1: SerialNumber: syz [ 2187.526903][T11419] usb 5-1: config 0 descriptor?? [ 2187.918298][T17225] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 2187.918333][T17225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:22 [ 2187.994459][T11419] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2188.013888][T11419] asix 5-1:0.0: probe with driver asix failed with error -71 [ 2188.027065][T11419] usb 5-1: USB disconnect, device number 18 [ 2188.487634][ T36] kauditd_printk_skb: 558 callbacks suppressed [ 2188.487655][ T36] audit: type=1400 audit(2033561269.387:397308): avc: denied { create } for pid=17232 comm="syz.5.27838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2188.513751][ T36] audit: type=1400 audit(2033561269.387:397309): avc: denied { bind } for pid=17232 comm="syz.5.27838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2188.534079][ T36] audit: type=1400 audit(2033561269.387:397310): avc: denied { bind } for pid=17232 comm="syz.5.27838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2188.554127][ T36] audit: type=1400 audit(2033561269.387:397311): avc: denied { bind } for pid=17232 comm="syz.5.27838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2188.574629][ T36] audit: type=1400 audit(2033561269.387:397312): avc: denied { bind } for pid=17232 comm="syz.5.27838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2188.595686][ T36] audit: type=1400 audit(2033561269.387:397313): avc: denied { bind } for pid=17232 comm="syz.5.27838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2188.615631][ T36] audit: type=1400 audit(2033561269.387:397314): avc: denied { bind } for pid=17232 comm="syz.5.27838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2188.655568][ T36] audit: type=1400 audit(2033561269.387:397315): avc: denied { bind } for pid=17232 comm="syz.5.27838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2188.656166][T17239] 9pnet_fd: Insufficient options for proto=fd [ 2188.681995][ T36] audit: type=1400 audit(2033561269.387:397316): avc: denied { bind } for pid=17232 comm="syz.5.27838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2188.708253][ T36] audit: type=1400 audit(2033561269.387:397317): avc: denied { bind } for pid=17232 comm="syz.5.27838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2188.734149][T17239] 9pnet_fd: Insufficient options for proto=fd [ 2189.835643][T17270] x_tables: duplicate underflow at hook 1 [ 2189.861613][T17268] netlink: 44 bytes leftover after parsing attributes in process `syz.4.27849'. [ 2189.870737][T17268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27849'. [ 2189.880589][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27849'. [ 2190.234031][T17275] netlink: 188 bytes leftover after parsing attributes in process `syz.6.27852'. [ 2190.520090][T17284] 9pnet_fd: Insufficient options for proto=fd [ 2191.827791][T17304] 9pnet_fd: Insufficient options for proto=fd [ 2192.108352][T17333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2192.337259][T17333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2192.345027][T17333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:948 [ 2192.660290][T17371] netlink: 'syz.5.27883': attribute type 3 has an invalid length. [ 2192.677381][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27883'. [ 2192.790792][ T411] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2192.961686][ T411] usb 5-1: Using ep0 maxpacket: 32 [ 2192.975624][ T411] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2192.985551][ T411] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 2192.999998][ T411] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2193.009175][ T411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2193.018818][ T411] usb 5-1: Product: syz [ 2193.023026][ T411] usb 5-1: Manufacturer: syz [ 2193.028660][ T411] usb 5-1: SerialNumber: syz [ 2193.050361][T17358] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2193.062126][T17358] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2193.292512][T17398] /dev/rnullb0: Can't open blockdev [ 2193.299401][ T411] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 2193.329493][ T411] usb 5-1: USB disconnect, device number 20 [ 2193.825814][ T36] kauditd_printk_skb: 657 callbacks suppressed [ 2193.825835][ T36] audit: type=1400 audit(2033561274.397:397975): avc: denied { mounton } for pid=17416 comm="syz.6.27895" path="/119/file0" dev="tmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2193.857582][ T411] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 2193.864787][ T36] audit: type=1400 audit(2033561274.425:397976): avc: denied { mount } for pid=17416 comm="syz.6.27895" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2193.895159][ T36] audit: type=1400 audit(2033561274.453:397977): avc: denied { ioctl } for pid=17357 comm="syz.4.27879" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2193.921500][ T36] audit: type=1400 audit(2033561274.472:397978): avc: denied { unmount } for pid=15349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2193.942835][ T36] audit: type=1400 audit(2033561274.481:397979): avc: denied { ioctl } for pid=17357 comm="syz.4.27879" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2193.968159][ T36] audit: type=1400 audit(2033561274.481:397980): avc: denied { ioctl } for pid=17357 comm="syz.4.27879" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2194.020782][ T36] audit: type=1400 audit(2033561274.481:397981): avc: denied { read write } for pid=15349 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2194.022768][T17422] EXT4-fs: dax option not supported [ 2194.047620][ T36] audit: type=1400 audit(2033561274.481:397982): avc: denied { read write open } for pid=15349 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2194.076867][ T36] audit: type=1400 audit(2033561274.481:397983): avc: denied { ioctl } for pid=15349 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2194.088527][ T411] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2194.104653][ T36] audit: type=1400 audit(2033561274.556:397984): avc: denied { ioctl } for pid=17357 comm="syz.4.27879" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2194.133833][ T411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2194.145041][ T411] usb 5-1: Product: Њ [ 2194.149196][ T411] usb 5-1: Manufacturer: 龫뗪뗄釂琸༙䶾토ᨴ㻰橽혋騉徺ꥫ돯띢䳰ᮓ⬴왧६⵴ᘲ﬉桎瓳㸩띇齎꼤ᡅ聰Ż펫摛逪ᑱ谋ᨹ‖फ़⾆ﾈ鐯驍㬆꺾Űꇿ晱༃喿뎝ꚑꅛ煍醴餣耽鐨лꭗ拘헶復ᩰ⹹嫂殶帇욢䩀䇬椦譈㒿鱸떽ࣤ献┴籽ძ鐐 [ 2194.180787][ T411] usb 5-1: SerialNumber: syz [ 2196.517558][ T411] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 2196.544057][ T411] usb 5-1: USB disconnect, device number 21