last executing test programs: 2m29.515635602s ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x3292e291) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x8008770b, 0x2) 2m29.514663522s ago: executing program 1 (id=11): openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2882, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x6, 0x804, 0x15, 0xc, 0x120000, 0xff, 0xfffffdffffffffff, 0x9, 0x1, 0x4, 0x0, 0x105, 0x400000000000008, 0x3], 0x0, 0x141200}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x1, 0x8, 0x3, 0x0, 0x8, 0x4, 0x0, 0x3, 0x3, 0x4, 0x0, 0x0, 0x80, '\x00', 0x0, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e660, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x10800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async, rerun: 64) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0x2020) (async, rerun: 64) faccessat2(r7, &(0x7f0000000140)='./file0\x00', 0x17, 0x100) (rerun: 64) 2m28.626087234s ago: executing program 1 (id=21): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x7cab6ced6415608, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x50, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000340)=[@free_buffer={0x40086303, r3}, @decrefs={0x40046307, 0x2}, @clear_death={0x400c630f, 0x2}, @acquire={0x40046305, 0x3}], 0x15b, 0x0, &(0x7f0000000640)="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"}) 2m27.774519484s ago: executing program 1 (id=28): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') read$FUSE(r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r3 = syz_open_pts(r2, 0x20800) dup3(r3, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x301401, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) geteuid() lsetxattr$system_posix_acl(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x4}, [], {0x4, 0x1}, [{0x8, 0x2}, {0x8, 0x1}], {0x10, 0x4}, {0x20, 0x6}}, 0x34, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000380)=[@dead_binder_done, @exit_looper, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x10b240, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16) ptrace$getregs(0xe, r4, 0x6a, &(0x7f0000000000)=""/213) 2m26.910049034s ago: executing program 1 (id=32): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_create_resource$binfmt(0xfffffffffffffffc) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000007400)=ANY=[@ANYBLOB="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"], 0x1118) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f5dd000) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r4, @ANYRESOCT=r0, @ANYRESDEC, @ANYBLOB="2c00e3ce45cc857b130db9fbaa896a22"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0xfffffffffffffffc) readv(r5, &(0x7f0000002540)=[{&(0x7f0000000280)=""/176, 0xb0}], 0x1) dup2(r5, r6) syz_fuse_handle_req(r4, &(0x7f0000002100)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0x20001, 0x6, 0xdcd, 0x7, 0x0, 0x800, 0x0, 0x0, 0x10, 0x9b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x3, {0x8, 0x0, 0x0, {0x5, 0x400000000000007, 0x0, 0x80000005, 0x40000000000003, 0x1, 0x9e8, 0x35741061, 0x10000, 0x4000, 0x9e7, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x4, 0x0, 0x402, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$cont(0x20, r8, 0x0, 0x0) ptrace$cont(0x1f, r8, 0xfffffffffffffffc, 0x3) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000003c0)={r8}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) write(0xffffffffffffffff, &(0x7f0000008840)="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", 0x1001) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r6) sendto$packet(r7, &(0x7f0000000080)="4d01000000000000002100e50414090b00920000", 0x14, 0x81, &(0x7f0000000340)={0x11, 0x0, r9, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 2m26.798201953s ago: executing program 1 (id=33): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x2023, 0x4, 0x2, 0x1, 0x1}, 0x8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6) setresgid(0xffffffffffffffff, 0xee01, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000200), 0x8, 0x602500) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000240)={0x3, 0x2, 0x5}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/246, 0xf6, 0x2, 0x8000000000002}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/130, 0x82, 0x0, 0x20}, @fda={0x66646185, 0x4, 0x0, 0x9}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x40}], 0x0, 0x0, 0x0}) 2m26.788508414s ago: executing program 32 (id=33): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x2023, 0x4, 0x2, 0x1, 0x1}, 0x8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6) setresgid(0xffffffffffffffff, 0xee01, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000200), 0x8, 0x602500) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000240)={0x3, 0x2, 0x5}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/246, 0xf6, 0x2, 0x8000000000002}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/130, 0x82, 0x0, 0x20}, @fda={0x66646185, 0x4, 0x0, 0x9}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x40}], 0x0, 0x0, 0x0}) 35.209080702s ago: executing program 0 (id=1913): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x3fc, 0x5, @remote, 0x20000}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r5 = dup(r3) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) pipe(&(0x7f0000000040)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x11}, 0x20008040) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000400)=ANY=[@ANYBLOB="070000000000000000020000050000000100000000000000ff7f00000000000000000000000000000000000000000000000000000000000001000080040000000000000000000000060000000200000000000000000000000000000000000000000000000000000003000000040000000000000000000000f2779b140000000005000000000000000800000000000000020000000000010004000000040000000100000000000000010000000100000003000000000000000113000000000000d9b800000100ffff0000010005000000000000000000000009000000ffff000009000000ff7f0000000000000000000000000000000000000d0000000500000001000000000000004c0000000700000000000000d7f20000000000000000000000000000000000000300000003000000000000000000000064660000000000007e06000000000000070000000000000018070000ff000000"]) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@userxattr}, {@xino_off}, {@userxattr}]}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r8, 0xc00c4809, &(0x7f0000000000)={0x3, 0xffffffff, 0x39fb}) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000000)='./file1\x00', 0x800, 0x4) 33.485554662s ago: executing program 0 (id=1944): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 33.467894293s ago: executing program 0 (id=1945): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x1}, [{0x2, 0x3}], {0x4, 0x5}, [], {0x10, 0x7}, {0x20, 0x4}}, 0x2c, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r9, &(0x7f0000000040)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00']) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close_range(r0, 0xffffffffffffffff, 0x0) 31.796682379s ago: executing program 0 (id=1959): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='rootcontext', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x40040b0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x10004, 0x2, 0x4000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='rootcontext', 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) (async) umount2(0x0, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x40040b0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x10004, 0x2, 0x4000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) 31.735474273s ago: executing program 0 (id=1960): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001280)={&(0x7f0000000080)={0x11fc, r0, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xccac, 0x4e}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_REALM={0x86, 0xfa, "5f83920c696e6a2a2758c606548ac6a54f605855e806d6872778f9b295e2aa6674909dab45c53f213167a675f20341a265d2a5793cbec2280ecf67dd03eca9df79c8e3a8ef6d25530453e7a79294be565354781b4cadaa537751ac03dd2020acd41d9e57be6bd754ff03a532d8ed474d7c30958ba68ad6e9953084ac528f6ca28ff1"}, @NL80211_ATTR_FILS_ERP_REALM={0x1b, 0xfa, "15e5b38b3eafbc26b895eccf3f86dee22c837f181d6e2a"}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_RRK={0xae, 0xfc, "d2b70ba8428992fa69a581868bc8e3e0f8d01c3699bd68560f1f97c2fc901747b891f55938c6ea5010d587bb748dc3cc66a70e2847dc5af1bbb189289759941a4d07c3b5a2ad7213057cdb140b447a7fb9abdd43a9ca2693fb60c396ece0e04cea3684033095be767a997e4b56ed61a2a21844deaea700e2c69e4f71126f02cad669646a8e5551ed0e2df616526ceef57df8d3d523ee210e20fab8d414d8f06aba517fd38aca9e524a51"}, @NL80211_ATTR_FILS_ERP_REALM={0x6b, 0xfa, "d6b0a7bdfa88f4b03f50ffc5940988ef54a3bae16e656a3d6c432878b35d4366c2b504db85b61be89770fa7c75511f2db615b6944e70c415b7b771e44eb13a94ebe03b7832d64df6783bc816deb027a705f20e7b1a8c01b209c146020810b813477296810e33ea"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}]]}, 0x11fc}, 0x1, 0x0, 0x0, 0x800}, 0x1) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001300), 0x2a0901, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000001340)={[0x80a0000, 0x4000, 0x1000, 0x1000], 0xfffffffffffffff8, 0x80, 0x6}) ioctl$FIOCLEX(r1, 0x5451) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, r0, 0x10, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x810) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000001780)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001540)={0x1ec, r0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xd, 0x7e}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "d0b7293936dd"}, @NL80211_NAN_FUNC_SRF={0x13c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xf}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x1}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}, @NL80211_NAN_FUNC_SERVICE_INFO={0x59, 0xb, "ccd08eafb2357215460d139104caf69105607ec85719d4827fc308d06fdc824c731f669984e30a5418c836287a856f55d74e3e9418c3306414a71c33bda78a3607f1c312344366ea657df2929e4b9cc079425b81af"}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x84}, 0x811) (async, rerun: 32) pipe(&(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000001800)) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000001880)=0x200000) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000018c0), 0x2, 0x0) r5 = openat(r3, &(0x7f0000001900)='./file0\x00', 0x121000, 0xc0) read(r3, &(0x7f0000001940)=""/58, 0x3a) (async) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000001980), &(0x7f00000019c0), 0x2, 0x7) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000001a00)={0x2, 'syzkaller1\x00', {0x3}, 0x200}) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x20, r0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf, 0xe}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x24, r0, 0x400, 0x70bd28, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r7) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x54, r0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xff}, {0x8, 0x0, 0xa7}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x400}, {0x8, 0x0, 0xa}, {0x8, 0x0, 0x10001}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001dc0), r3) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x30, r8, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) r9 = syz_create_resource$binfmt(&(0x7f0000001ec0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x41, 0x1ff) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000001f00)) ioctl$UI_DEV_DESTROY(r3, 0x5502) (async) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000001f40)={[0xffff1000, 0x2, 0xd000, 0xdddd1000], 0x8, 0x20, 0x4}) 31.433810318s ago: executing program 0 (id=1961): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x2, 0x7, 0x7fc, 0xfffe}, 0x20) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r2, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x2, 0x7, 0x7fc, 0xfffe}, 0x20) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) listen(r2, 0x4) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) (async) 31.370493273s ago: executing program 33 (id=1961): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x2, 0x7, 0x7fc, 0xfffe}, 0x20) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r2, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x2, 0x7, 0x7fc, 0xfffe}, 0x20) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) listen(r2, 0x4) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) (async) 29.522758243s ago: executing program 2 (id=1984): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008800}, 0x20000881) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) poll(&(0x7f0000000000)=[{r1, 0x8}], 0x1, 0x800) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x80086601, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffa) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xf, 0x2, 0x8, 0x80, 0x9, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x200, 0x6, 0x4, 0x7}, {0x9, 0x5, 0x3, 0x3, 0x8, 0x3, 0x5, 0x4}}}}}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x20, 0x23, 0xcb, {0xcb, 0x6, "4066d4a08c9f0e6812382feadb89c8b6b1536dd8dcfb9f52b588041ac52efa03ca45731ce1dc3033bd015882a91da63c07963fd49e64f244b6a38c7a457a0ed6af75b522f05771339bcf239eb7b957d1fd7f0d3488a855979b0f1afb9faa9e02498e3ebb72fcedcbf7a9873649f921e004973479bfa9064bfebc7fb96517fa45bb559d7c46c87ed63372eecc3ae3031f2ee395c9835355cdf724e41387deef68e0fe6f6218bccf68ff0085e5bb343b161bc2cbe530bcb11cc0de0f773f06d7850150ac430d00fd722d"}}, &(0x7f0000000240)={0x0, 0x3, 0x38, @string={0x38, 0x3, "cd6f3913384f17d7936529429b33b0dcbc8cdbd89aa22381572d65afdf493f642781eb1c0b2f332b28f22b1d9592ba499f435b7d6406"}}, &(0x7f00000003c0)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x60, 0x4, 0xf5e, 0x0, 0x3ff, [0xc0, 0xffff0f, 0xff3f00, 0xc0]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0x7, 0x9, 0x7}, @ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x2, 0x5, 0x3, "2119c829", "270388ae"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x18, 0x3, 0x4, 0x6, 0xfff8, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000004c0)={0x40, 0x14, 0x37, "03700b159a4d30b4f611e2ceb7e27a807f3e5c08d990796552fb2945903d7f1c51dbc0fba599e275d344b95c97303ef096c71f7408a6c8"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x0, 0x80, [0xf00]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000700)={0x40, 0xb, 0x2, "6c82"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000780)={0x40, 0x13, 0x6}, &(0x7f00000007c0)={0x40, 0x17, 0x6}, &(0x7f0000000800)={0x40, 0x19, 0x2, "af7b"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x5}}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r9}, 0x14) close_range(r6, 0xffffffffffffffff, 0x0) r10 = openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) preadv2(r10, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r10, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0x1}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) mremap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 28.955713619s ago: executing program 2 (id=1985): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66742, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d7dda410891193080000010203010902240002000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x35, 0x4) madvise(&(0x7f000019c000/0x4000)=nil, 0x4000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 28.443425381s ago: executing program 2 (id=1992): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf258200000008000300", @ANYRES32=0x0, @ANYBLOB="c5a75876a9707c42841f994250b0c64b39f1ab8b6962103ebab169be86f86bd4cbafe3a456a5d13f1f34238b02850398a80caa24932ad69dbc08e181849466ab247ce3ce4108aedc01f24f941024e5f53b9b52467696be095e2232d32f248cbfe0374a301ef7551172f9f968dded511ef7dcc3"], 0x1c}, 0x1, 0x0, 0x0, 0xc050}, 0x4040040) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r4 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0xc058671e, &(0x7f00000000c0)) (async) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0xc058671e, &(0x7f00000000c0)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r5, 0x29, 0x36, 0x0, &(0x7f0000000440)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket(0x1e, 0x4, 0x0) (async) r8 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) (async) r9 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x9}, 0x10) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)={0x84, r10, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x3}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x80000000}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x9}]}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x10000}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x80000000}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x4b}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0xffff}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x6}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x3}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0xd882}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x18}, 0x20000000) (async) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)={0x84, r10, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x3}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x80000000}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x9}]}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x10000}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x80000000}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x4b}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0xffff}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x6}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x3}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0xd882}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x18}, 0x20000000) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r11 = dup3(r9, r8, 0x0) recvmmsg(r11, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000300)={"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"}) close_range(r0, 0xffffffffffffffff, 0x0) 28.403511664s ago: executing program 2 (id=1993): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000ac0)={0x2c, &(0x7f0000000740)=ANY=[@ANYBLOB="000dab"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001040)='net/nf_conntrack\x00') pread64(r4, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "c2e79c70754259f2", "064a50e0a4d910203e9c07bc9eb44a15", "b7f050e7", "4abcc2e1cd7d68c9"}, 0x28) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',debug=C']) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x2}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0505405, &(0x7f0000000000)={{0x3, 0x0, 0x1, 0x1, 0x401}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) write$binfmt_aout(r1, 0x0, 0xfdef) close_range(r0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r1, &(0x7f0000001080)=""/217, 0xd9, 0x2, &(0x7f0000001180)={0xa, 0x4e23, 0x325a, @rand_addr=' \x01\x00', 0x9}, 0x1c) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0xa, 0x2e, 0xf, 0x6, 0xfffffffe, 0xfe3, 0x0, 0x151}}) ioctl$RTC_EPOCH_READ(r9, 0x8008700d, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 27.819436072s ago: executing program 2 (id=1998): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) (async) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) fgetxattr(r0, &(0x7f0000000d40)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) fgetxattr(r0, &(0x7f0000000d40)=@known='system.posix_acl_access\x00', 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2800408, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000019240)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000019200)='net/packet\x00') read$FUSE(r2, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000005, 0x4010, r0, 0x98467000) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000005, 0x4010, r0, 0x98467000) times(&(0x7f0000000140)) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000019280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000100)='pagemap\x00') (async) r6 = syz_open_procfs(r4, &(0x7f0000000100)='pagemap\x00') pread64(r6, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000004c0)={0x2, 0x1, 0x18, 0x6, 0x130, &(0x7f00000000c0)="019aca1c0c09c1239de021717ac11931c081c8cb36bb0a58fa56aecdc297896b0ca492c8ed14015f1786a474118c51f4da26348c1ecb6f1269ff43d82cff86b4f375546331519005af2dcb0b8dbf470a00f124889d212c47d5be3d85e4f8c716fa4be594efb9a6638b358cf4193c5d067b84f8bf3a0a6c8dd0d3be423bb731ed346648d2522f67499e25edca11f47d4b08164563cefd087484df2d84a52dd9c8e24868c979c020d6d861ccbcb00ddde2960476905f6b3a79a87ff85592a53849e87026dca639ade1ab144e3df1baa10fe532a88ad086ffd5e28a1bf349d2870c0de7da87f1582767eb41dad6e9d342f528cbe2f91eb6d40946a4a4c6e2eaff421174d6de9d21c4304e305ff54e09c32969d7dff92490b36bc4b31dd60b7f8c63ba10028827a4c9c1d5c0af657509e8be9f9ca5e62335b5e92176d11b8264ba6ed705decd2798e6a03d8f24818eed7930f46f9a01c570959aa0cc0f9f9a80cdbfa15f00e5860398f97988e091ed88fa952373d1c7dfec5907127cb0a6968a04b398b546dd7aa02bc8d74213d134e506d53156d1301a5f0240c0a756fbbdcda92c6790748a30d2324c989ec7086c38fa380e22fca9a5ca96732c82c2319b74c7add700414c51973f1c07e436d2c84262375ebef7c9004054f446c956113d82d6ae8a0df37fa4f343f42fe5ddc388d61abf305a68fe1e2bf59210da9aac0e06a7f093d07dac4d6079a2d5745884737af7d70e2715b7372b3351e3b5fdce93d14abb42bb3d331e311a3c5180dc51c26a20e8d863d27381a2bdc85211c2090fda352359f566fb5589840cade0311dbb4b405cb1f3ca38c1186c631b213f90133b787acbbf8ca70b8794337bc23d8960b4b28d41692b36a1905b924f2755a22876f3063ab63cbedbe14c708eb6f1c132e87eded9cc4164a9e9b394c81b1b3fd0ba99f94b85b90381aa64b16e8bb3e4ba04d8a91d8b1812ac5c19080ad523ab01334ef483f3b6eb634b2e22a8b977db6ef87b4332cfc07c56be2510efc627728afa2f979da7914af96889f21934946706bbcedec4cf71c17dac67c7d35c6983f1619ffd079923e1bf3f02cdf4dd974bb9ece83ef50a60dd1887da2121cecaea2aacc4df473503bbf1e50dde6632f3ee8835e130eeea460eba1e07fcc76d7426244a772dd0b3ebc4cba809a90a2ce7abdd52cf5dee3bef85b22992cbb152a61407bb8d52d087d268598548bb937a168d99d664e252abb9b137bff258e698984809ec186d9e43f152da6a513052ff8dcaac113593a2df9c60f491ca6de75fd17326ed5656e4b89a69fd908af024ed9ca92c4aeb8e69e6877e731644057e7d2a4e6588c479081d719e1544559390ea661134fbc9726855bb95d8bc53409f585f0e6572ac13f878ad3a1c8187fd5203985b5790d061ed6ed7aba9fba84a9a70305135afe735"}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_modinfo={0x42, 0x287, 0x7}}) r8 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r8, &(0x7f0000003800)={0x2020}, 0x2020) 27.818962301s ago: executing program 2 (id=1999): creat(&(0x7f00000002c0)='./file0\x00', 0x8) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1508000065ffff0480001faf6471eed2129a76af08938c6b989add8e343083d96584eed346701dcb5cef48bfbd51d4e79b2f1e3bb703711cfef5ad16445bc0d431e658adddaa1bf3498d078230a7871819d771aca1ad8c3b7d0697f7634a70fcc968f9e85a1a8a48c9a9a207a7e472f43b83d56eced2e8ed0a85a58101fb69095a00893f0eb98f14a5d236d1facbc9a175171e4735b509bc9e5d067d7c8125f7a124f20e17a1fe714f572141d1df"], 0x15) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) r3 = dup(r1) read$FUSE(r3, &(0x7f0000001940)={0x2020}, 0x2020) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0xfffffffffffffffe, r5, {0x5}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd000111000400020070ef6e13800000000000ff0045625e33c4a6c326"], 0x7a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20008c0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}, {@ignoreqv}, {@cache_fscache}], [], 0x6b}}) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)) 24.123669181s ago: executing program 3 (id=2027): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x1, 0x6, 0x0, 0x500, 0x4, 0x540000, r6}) (async) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x400, 0x6, 0x1e0103, r6}) (async) r7 = dup(r3) write$FUSE_BMAP(r7, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) write$FUSE_GETXATTR(r7, &(0x7f00000004c0)={0x18}, 0x18) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000200)={0x50, 0x0, r8, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c63616368653d66736361b9e91e995165ccd0939ab66368652c00"]) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 24.030918519s ago: executing program 3 (id=2032): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) socket$key(0xf, 0x3, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 24.028932529s ago: executing program 3 (id=2033): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x341) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000f1000040"]) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000180)=[{r5, 0x8100}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) r6 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r7, &(0x7f0000000140)='./file0\x00') openat(r7, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 23.201423317s ago: executing program 3 (id=2035): timerfd_create(0x9, 0x80000) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x761c03, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x12, r1, 0x57788000) (async) r2 = dup3(r1, r1, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000002c0)=""/193) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000100)={'\x00', 0x100, 0x5, 0x6, 0x0, 0x2, 0x8080000, 0x0, '\x00', 0x8b17}) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 23.135737542s ago: executing program 3 (id=2036): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async, rerun: 32) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) (async, rerun: 32) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 23.134843232s ago: executing program 3 (id=2037): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6400, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x244a02, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x400, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000000)={0x2}) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x8019, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) read$FUSE(r3, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x7ffff000) 12.828598619s ago: executing program 34 (id=1999): creat(&(0x7f00000002c0)='./file0\x00', 0x8) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1508000065ffff0480001faf6471eed2129a76af08938c6b989add8e343083d96584eed346701dcb5cef48bfbd51d4e79b2f1e3bb703711cfef5ad16445bc0d431e658adddaa1bf3498d078230a7871819d771aca1ad8c3b7d0697f7634a70fcc968f9e85a1a8a48c9a9a207a7e472f43b83d56eced2e8ed0a85a58101fb69095a00893f0eb98f14a5d236d1facbc9a175171e4735b509bc9e5d067d7c8125f7a124f20e17a1fe714f572141d1df"], 0x15) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) r3 = dup(r1) read$FUSE(r3, &(0x7f0000001940)={0x2020}, 0x2020) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0xfffffffffffffffe, r5, {0x5}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd000111000400020070ef6e13800000000000ff0045625e33c4a6c326"], 0x7a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20008c0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}, {@ignoreqv}, {@cache_fscache}], [], 0x6b}}) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)) 8.150574778s ago: executing program 35 (id=2037): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6400, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x244a02, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x400, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000000)={0x2}) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x8019, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) read$FUSE(r3, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x7ffff000) 3.5745871s ago: executing program 4 (id=2262): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, r0, 0x4, 0x100010, r2, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x8}) poll(&(0x7f0000000080)=[{r1, 0x8589}, {r2, 0xa192}, {r2, 0x80}, {r2, 0x200}, {r2, 0x2}, {r1, 0x40d}], 0x6, 0xb) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0xddea14805c1b7b7b, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0xfffffffffffffffb, 0x281) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x4}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000180)) r5 = accept4$tipc(r2, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x80000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r6 = accept4(r4, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f00000002c0)=0x80, 0x0) r7 = accept4(r6, &(0x7f0000000300)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000380)=0x80, 0x80000) userfaultfd(0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_open_dev$hiddev(&(0x7f00000003c0), 0xe7, 0x20003) preadv(r9, &(0x7f0000000400), 0x0, 0x1c2d, 0x9) r10 = openat$cgroup_ro(r2, &(0x7f0000000440)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x2, 0x67}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40090) sendto$inet6(r10, &(0x7f0000000600)="24a514e017c586b94a1fb731ba1c35d05dba2a39a8ec9901fcbde8bd9486d98c8593aecb5eaf94b95e4c602cf59aeff94d7d4cea46cfa02b70e9b9452c3d75a368b13a28c1df4bb2b7956b90a47288eb9d753e8bb1edc395ad4e5f68ca12bad41ad110cedc9ce8a5a0f1a956a3fe34c93dcba37df8e14966401da844c0467b59bb6f3b2bc0e57564ce3c86c43f967aa559cfa96f5718", 0x96, 0x800, &(0x7f00000006c0)={0xa, 0x4e22, 0x1000, @private0, 0x9}, 0x1c) sendto$inet6(r7, &(0x7f0000000700)="5e3a8fecad563c7103dbb66152df495b963460ffb32ea9a34d191ab9ef06d9881ff69aa83b737788a96b81eeceeca964da85968ced9bc27b816b7912d530f46b2232bd004c9dcbf03a5df659835e9c0c16c9aac3b069132cdd1466162960047dfff9c33cfd77dd07f5133df77176bb44ae86427844a3eadab2db7441e0f1f0498af3a968f9fdbf6c8adc3727fd66f9f994dca3f622bd5d2119329c2a4bc8705121a926b67540718ae83e93baed004bfa72131d574ae77f760e9064de3869d99c26d73945e9abd718f7fc95bb67b0", 0xce, 0x5000, &(0x7f0000000800)={0xa, 0x4e20, 0x14, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xa4, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x17a4cf9527258b1d}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x10}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x48040) r12 = syz_usb_connect(0x5, 0x6de, &(0x7f00000009c0)={{0x12, 0x1, 0x300, 0x2f, 0x20, 0x5a, 0x8, 0x5c6, 0x9005, 0xce50, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6cc, 0x2, 0x3, 0x10, 0x40, 0xa, [{{0x9, 0x4, 0x2, 0x3, 0xb, 0x30, 0xcb, 0x3a, 0x1, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "73dc"}, {0x5, 0x24, 0x0, 0x1c2}, {0xd, 0x24, 0xf, 0x1, 0xdea, 0x9, 0x7, 0x66}, {0x6, 0x24, 0x1a, 0x80, 0x14}, [@mbim={0xc, 0x24, 0x1b, 0x50, 0x3, 0x1, 0xff, 0x8, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x7fff}, @network_terminal={0x7, 0x24, 0xa, 0x7f, 0x39, 0x8, 0x6}, @country_functional={0xc, 0x24, 0x7, 0x5, 0x8000, [0x3821, 0x8, 0x101]}, @network_terminal={0x7, 0x24, 0xa, 0xb5, 0x0, 0x50, 0xb}, @dmm={0x7, 0x24, 0x14, 0x3a3, 0x7}]}], [{{0x9, 0x5, 0xa, 0x0, 0x20, 0x2e, 0x3, 0xb6, [@generic={0x1a, 0x22, "d33edf0d46ba6eea12de74af2b0874737edbf4c20ac02fde"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x7, 0xc5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x7}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x5, 0x9, 0x3, [@generic={0xbf, 0x8, "30c54f4860aafa74850942a0cf3bd34fab95eb31b301440fdf9354d31710fa7452f106216762fac35dd5e6a4dbaac93e2339b928b770507a41df21ea31f516725ee3ccc369380f825112827d8cc36f0cb1b1614afde1a10e71d54af300097cb4be1f06c979d6625fbb42b5dccf194322876f828758ff987e3d4e0fd2e7eae90aef4f406f2c7d6f771f54062f5ed67128fe51cc7bf50ce6aedc70198f5bcdc7f666178aba2f134a90030c31d2ae0c6f7639d9c4600ec6c1d0fa2f580dec"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x4, 0xe, 0x22, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x7f}]}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0xb, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x5, 0x2, 0x48, [@generic={0x99, 0x1f, "58bdec8195c0ecda26919422f97aa22f6cdb9ac3c81b7d4511b80cb74e77719993de6ae1deb290b88bef3114631fd673d04c0d815688a5d9a7b5087ca9250173ebbf0a988ed306dcd4b19a9751557c0aabd96b1458dbf2fec9aa8c882258224322d40c1198d9a1d8ab93f12e977f983a49fb50fc473ac1b88608aee7ebf84a07b37d3c41ca3cec162bc9d16b03aae226b3afbcbe6b2f79"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x8, 0x42, 0x10, [@generic={0x35, 0x24, "196ebe86ea519c7687856b2caf70ea6eed29898ef1ecebd7a4404456096e26c8ba99857a5828d9eacb3322889bf09420d1ba9e"}, @generic={0xeb, 0x21, "8d95c12c9a9a5f66e6c1bcd798499f2381687a2b11ddc177f09b5dbbbc6910976f11c248243e8981c3c1afb2d4c28fd03618d97419493bce6e7982458ca7f0b3f14517e885b39a1753f2373f776dfb03bd737871b4b9a853856d3c965bfde0b78e36fc9879f363eee0f5cc6b1dd58fb01dcf74065e84b7dd86d8b1db2bdcfc28482e1b4a2d2ffdd58858cd38e63044b007c678db655a6f6a5bbaad9b183c64eb68f844c677e958bf96cc3e188b3225e03cc763f1fc1d9491ff458c055c2c2fd412ebd816e5ef6983598e0376f0fe5ed45079ea44eb5ceb8f35e88615d78cb915ca58fb462ec161f938"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x99, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x8}, @generic={0x2f, 0x10, "a0731d69bb365cea58cea47a28db01c619e0ad04b03a36969d4c062a50404dc861ff615a9a52403728597099b4"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x7, 0x9, 0x2, [@generic={0xd2, 0xe, "59f6121b22d0ca7ab994869b1aa1682a87c37dcf1d4bbcf0b98f8dbb94881779437f6a04a3ce2296da24c08c0aec650f43210167ce5a2965523b6e1f19399c038f961cf4f4039801e097f37e31ef8ac95085491e60b6650b5725dffe05da68041a6f957e29b27eaa8b4bb1b1b6e5ddff61d63d36639f0d722a5151c4a2e5df9bc3fef010e714a8f5c40edef410401e19fba700cd2f0718710e116a314fc38881b35880c3e713c582f6f34ed0f7149b6a456a1c988f09d1c300de2cdba45dc7110f9d8369e42e640a5492db9c2faed813"}, @generic={0x51, 0x21, "de9a0669b826e7f7bf71120867b5e084033c3aa1e4b6ef32c64f747ad2ec771ad1f7c9ef8daa7db0b3ed387f1d919c6e2dab3b66df47180b6b7d349c9de591792c8d57166b50b9429ea00cb89e8cc5"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x0, 0x0, 0x7, [@generic={0x4c, 0x5, "394fd7a76f989b098a80e2d4f8656dfe6c832e4ebfffcfae0901fce68e16e68201db274d09844e489f9254b20b4ce2727cf562bdac55dac631aca0be59bb0d438eb5af0add24623be849"}, @generic={0x87, 0x0, "4104d44d08810af7c4955f2e4ca4776b3d990662ae60979847e94740a2c9f9e7f1ada4478e86ae31c60728c5f258d8d86ae6f16eb6c2573d5ee5631c3407b8ce7dde1186c2ac10e12c89f966528d8875b1a27931ba11dffa2ef0d75f6305ac476a1a6905dba634f020f8604350e0bf2730f9072ed0ad46f347d9f33bfa57a48a96933583c1"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x8, 0xb1, 0x9, [@generic={0xdf, 0xe, "f5105520cac98ead24ac50ac4fb1f9f39a8724977846c24d7e274cb8d748a6743e96633fc64c03b94c42617648e571a3fe86e2c8cdef76db2dff07c924acf77c63a8ef4c0e6dba7e2fdd4c687ec17e01ce72f35e1659075416254cc43aa3c9566942746f66c9d02c16709cc6ea2e14aa99a7938246ef5dec6729a735371da92a9c0dccd00979c1484e45fa0b12f81696c28d1f30a0bd5410af5c9011d7619ef2a7016601b36d6a60be16039de259f9fb17622e056f21105089b001310750beeb03d457ce3fdf4aca5d2b0858454fea8026c5420e9662317d0790e1b520"}]}}]}}, {{0x9, 0x4, 0x44, 0x9, 0x1, 0xff, 0x0, 0x0, 0xe, [@generic={0x2b, 0x22, "11e6d17ef706243295c116a21549664e75042872bfbb0c4739f36273b9d4586d2b3546c349c292e226"}], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x5, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xa, 0x2}]}}]}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x310, 0x1, 0x2f, 0xb1, 0x18, 0x2}, 0x110, &(0x7f0000001100)={0x5, 0xf, 0x110, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "9807e801f1446138df4c18aaf46cb4aa"}, @generic={0xd9, 0x10, 0x1, "9a96da28b1aab518a60e8addb54eccdb8cad6415624a06b14a0556a667dc40eaa9bca9bc8b1e52d758b275f489df2829d1f5430d91971ca9b0c0483d5ffe1d685f384c04baa6445e0700f73443a83e8f5d450ed55c4934aa86cc30869e303106e68267f16d46d7f176574a751254e9479c1c7836fbbcf7704bb2f7069fdd7df807ef581aae13a28a11c60d7d24dade63466c7853e95c03503cbe1d997189840b3dcb8d3db377a4496e78e32940a945f4be30529e7ddf8d85cc30b3198767725041205a1a2774569bf14fbe01f7c7df5a72a9943af820"}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "6295cf55c9f66f5eb320e16c8d84709f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x5, 0x2}]}, 0x6, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x3c0a}}, {0xe9, &(0x7f00000012c0)=@string={0xe9, 0x3, "cb3ef2d3c4817fa5351e001ccbde33771d22e6cb41d47c87da923c3ff0ace80ab900ffe8ac113309c5379ec54d8653e06befaacc5b357694e0f67f68edc20eb7f3ba9811cf95e19be590c347c143c6a9f3c0896a13df972b49681587d7127e9661a1778951c5d140ed1cf3ebb7154687559c540a3c55895ea4be4afdee7ddf91a91bf37b2e460194ab3f61b7e28d64f2f7215f56a1830d569d6d53929f2484f59b5093ab78ea564c5a3d247ec7a2a6514d41d877ec0de9db2c24998e86506e38a05e8431e47d3719e9604a886e51e0ef38a2ecb3c3f0b15f88127fc73e7dde2c2dc7ec41b18bc5"}}, {0xe8, &(0x7f00000013c0)=@string={0xe8, 0x3, "c46a80169f82cce270ff2c07188cfe312d7fcf8ef4e9f63923552e5c5da6148b4153d789ca54df4acdaee5a84ad7c6ad7d0f81f0a33688458ede0e750d27d5f77b16116277a3c0e900d9f1726ce9124f48bab93bfd7289b285be7c7ecd2f77d0a71a9877275d014575c71d62bd2792f5d8a90b4977f3f91730d1ef2082d40612d213f66455ee13176b1331edfa12e25f007d4e32ef3715e5916a3a73f2bddc0b4fb895c13e98a91328bed78490f1f04e37132bc20f78c452e5f4d2b5143d1fd545ffe5fb766cf39a08becdd49ee877b55b7a849a169d0038df16ca8ae2e31b7db33c99f2f94a"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x7808}}, {0xdb, &(0x7f0000001500)=@string={0xdb, 0x3, "b522289aa6aa15815bd0b945007f04424a0e9b6bb280fcf7679f5759ad584c55f3262ae639b53a1b1d0eb6cf50a9c53a740a0f02f5ab2df0307b0dad6d96034705f04f565769b11c627f1424aa992aaa640e46054491f6aec1b2374db8ab76606aa420855010f421309e9697be6cc229d396436650d50af746c397db28afc0b7dd82679ad9c459044d76fa141145027efc011e56eefbc47d473ab332b0a8ad87d02e9edfe1e141c7e0cf54e83c45f811c74db4f831bbe2bda0726921b4380f7ad9d4b6d0022e65c58cfeff7d53a6ac577d7c5d18e37debcd8f"}}]}) syz_usb_control_io(r12, &(0x7f0000001880)={0x2c, &(0x7f0000001680)={0x20, 0xe, 0xad, {0xad, 0x8, "a12e196c301c2b9b143ee29947575307dac10dba2cd6bd4c528a4d610933a4122af0e640e2ffabbd782e512200d8a72bf76a7f47a7e89b5cdc442a6d09e143cc7cf33bdf9cc32bc6896a6a9ab85236f7161ad817161a6343b2eea96e1ea29004202c34d48126321d1642991b3ce1e94f418a6e04abc0039113e8b49022b5da3e357fe62a46ef5e8e16be7466237e8d45aa22ffc099b39deb22b01d83f09f919a5e89a6be42a780b9efdf68"}}, &(0x7f0000001740)={0x0, 0x3, 0x57, @string={0x57, 0x3, "d00c8c5b14e173a4de3fefd5b5f0b424c582f86366c3cea0279167a0bd46aeffcbb8e45f9089efabb63da782ff1f5d9afb178de11ac451c8afe732ff54e50ed2059025b9a3bcd26a702f4f911cbb8a20a41adde1bc"}}, &(0x7f00000017c0)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8, 0xa, 0x55}, @ptm_cap={0x3}]}}, &(0x7f0000001800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x2, 0x4, 0x4, "7517b113", "d4768fa3"}}, &(0x7f0000001840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0x2, 0x3, 0x5, 0x0, 0x1}}}, &(0x7f0000001cc0)={0x84, &(0x7f00000018c0)={0x20, 0x17}, &(0x7f0000001900)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001940)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001980)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000019c0)={0x20, 0x0, 0x8, {0xc0, 0x2, [0xf00]}}, &(0x7f0000001a00)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000001a40)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000001a80)={0x40, 0xb, 0x2, "edc4"}, &(0x7f0000001ac0)={0x40, 0xf, 0x2, 0x7ff}, &(0x7f0000001b00)={0x40, 0x13, 0x6, @random="6a3637c02328"}, &(0x7f0000001b40)={0x40, 0x17, 0x6, @local}, &(0x7f0000001b80)={0x40, 0x19, 0x2, "2702"}, &(0x7f0000001bc0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000001c00)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001c40)={0x40, 0x1e, 0x1, 0xf9}, &(0x7f0000001c80)={0x40, 0x21, 0x1, 0x7}}) recvmsg$can_bcm(r7, &(0x7f0000001ec0)={&(0x7f0000001d80)=@l2tp6, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001e00)=""/75, 0x4b}], 0x1}, 0x40000101) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000001f80)={'gretap0\x00', &(0x7f0000001f00)={'ip_vti0\x00', r8, 0x491535ac1c5fe375, 0x20, 0xdef, 0xffffffff, {{0xc, 0x4, 0x3, 0x1c, 0x30, 0x65, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101, {[@rr={0x7, 0x1b, 0x56, [@multicast1, @private=0xa010100, @loopback, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}]}]}}}}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000001fc0)={[0x7, 0x2, 0x100000001, 0xa, 0xff, 0x7fffffff, 0x7, 0xfff, 0x19, 0x1, 0xb85, 0xa47e, 0x3, 0xc, 0x1862, 0x81], 0xad33e0b9d65e2797, 0xa002}) 3.106027448s ago: executing program 5 (id=2264): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f00006fd000/0x2000)=nil, 0x2000, 0x9, 0x810, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x11c, &(0x7f00000000c0)=0x800, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000380)={0x30, 0x5, 0x0, {0x0, 0x1, 0x4, 0x81}}, 0x30) syz_fuse_handle_req(r1, &(0x7f0000002180)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0x800, 0x5, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006400)="7f73a2cec5d0db4d420442fce4e4191e2ed112a607e662fc1eeef7926d41c5a0f91c64de08fcd231ba34fb2b58307d834cc83ce0f3908b5333fec9af958c900344d938cfa948f432dd5acb1a7a73bdba45cd411b82f7fed6fa3bf23c9abdc4f263fdf3fd68dcbd973b4dc2aef81c7296d7d08e562f89231f57d43e4d7458c8f389810e60c1c20bddfefcf1739824ad409148f4647b52cc98987f7c31bd6f7f44e39ac5f97f75f06dccd331d2828625fbfd3a65fd0d32871b92c0a6aa8895d3b467921c933eeb93cdbd7387abe27c4427d4ab77bbf9558a9a085a74170e875d83f8c5017d46901eb519854e8aaeaf94e6e050fec7c1afd81e26da117484dfb042805ed1ad3fc67a28636f5a35ad72f6106a5c3cbdd25048567ef13b229024142ebeb7a8bf518f017fd49dc31d8652ab7036107f8d5216a142e58f8ed850ba177786e911fa4f9ff952f8ddb66af705c7b97ed4b385d9ea3c0fecfdd5dcf168832726ced26b51f7a5911a35106aaee0e8662497f6c5dce5543690ea32505e79f13bace0f89ad9e8c551578eedc78028c414145dc3be2184e2055c037cc2ae07842a78910815c69d010bfbb850ec8f1a5da8b48ed2f75838dfe8657e5b1b59c561cd5d219a481802939c7abfb216e01173985e3436b7135d2377ba714281dcb3f82c064957e621464e5de29e8248d2400668e5775d8a75d23d7e3fd9fdce31aef258be698b121ac4ff319c6e4f872c4cf1b5f3ebbfb2ebabe113ccffe028d829922ea909a5522e5b632e3b99fb47ba9d0f8e15ca401e3ac671e80dcb56214330e7ffb3a415d6a0b84c56b056a6f2a4ffbb77130a5867b12e061a2539aaf67360af472c21a27855b5387e132ef9bac10b86b1f93974da52b3f4c48011c77eab7481e1838975fec2ae160f6b8c168b80dcfd3e03e8c1ec2a643cf850203e8254112c08ed4c2c6d0715b6bf5f281df7356cc2c9f8baac8b0dc574fc46eef5eaa9530dc0a6a88b3ad315d01a36282c5338cc5c399deb78cad23b22eb71b80d266fa904fc1a6d94f77a1e3a2173abe5dba58af48a75fbadd339eddfe7dc5ecf3fb85284e903ab70dc00663f0a5270ab805556aaf09223679845a1e091f24318d71dff015847107ffd9d7f789e8753abc2a51d5067da21c49fa8b8f66c89afb009cf17200753164786af597b8b6d5b5505d1d716c74fb26cd78679d77330c2cb2bd154423bd6e5b8972e2c576a89806e57686a7019a369de75c99e0bb6704f508adfd5394568a2f8c56a5333c861432e4ed056e5b8f20217c81563f0fb9efa6467459753832814e3118c24b634d6068b35871bcaaadda1d206584324a2bd35050f5fb993e898ca25fe82b3578e325658a4cb91ba32589c6d6720284c610569788acd2907091a968651b3978d797a5e808d4f33be1859de2bb57b5d249725f06d94e32ab46d1b7d1174703bf8dba02d4a5f5a16fb3878d6a2c915df4ea588ad8b0545b62308112d6c7f9bd93e5a51a45af9e990985f8d7dc8925ac1f63210cad488769d4957b03108e5e6f716d80a0bf88349d680067fb0a0bc59edd8ba646a2a86b4c32fd531dbc4879c86ab74e17f49f877c30a36279698a3420f3f236a69a84781fb981a2248bc0dd12dcc464f6b970b27ee634f0fa8c1338bdc3b4193b865727eb856995c08d9b88161b9a15245ec0967000f678e807c953f933edc6e80fcfe963663f7cc801927bc91c238d0b6f0c61ae66a8d210ca577b17677d79ffad404194d733dbcce9b2f163637b7ed1cf4f967ca680bf1db83b1b6f090dd99b8e0d49e7b3cac65864c32cb321d84bf43e7a300a6f4ac27c8091e39e4383fc99617f4b367d7a2e0041176dee5fa85ceb501c3d2a2efc1f489f83fbbbdc4af125fcac9a2ed8db3cc227543b195e36adef6a67a126a28be525e0441d3c5def236da4bb1d5cec084b1f08da02299f72b2a10ea7fdd5eb3c2f999740a287c179db7fa5766f8781b5147a6933623bbaec777152c4e65d262733ce7e864c5c79a56f60075662248f6b765562f718d0767a89de9bd3649957fa54bc9df603158d4ea631d71be5ea93ce64d4718abc196fdc85dddd8656806500660aaf5e3c5c74732872141cf9c542bd32f1ad210cae53fd91bce48a55afe056540d396b0930632d6b252833a91bb4d9020d5ed10d66d2467e324ee68f06926194d378da476f0d4dbb9c452475d938e8c774cc68bd291726a95223ae3866d9a2f3e4e6c319e2b4700ef4640ceedd9ab0a587bdaabd649363f0d93ec1afd6106e791f8d8f1a0d52c085a4c8a89a5c6d8443c63d3757dcca07e1f813aa6c7d007385b54b9a280713e80d8b61630360166c5ef66190fe367d7694112f340f790d8a9cf0f39eef719edbe914c9da3ecae2913a544cdce5bdb9fa462ef83bf3da34e76670612885e66c1cb13c76f72fa796ab1810f507be6dccdb66aad16e88168e0637ce5ea5bbb01ba6731052459600121734f1db7c610920e979e1f2c69be00a33a7cf14e5dec0626d3928040c75db097626e198c17114da8841c9e5cea3ba122dc119d6a2da3144993e7e023849f5360f299675f49353828a592aa8b6c2ec821b0991dc478024a6811656a265431f9aa56feda7e8267d6e3351ce340a79856e59de5db2c919c6726cff7ee678b95390d6c6ddd2ba323be59eb4c42f08a2f9973ff0c45820d59b50b6a153775ed0e9e73e73c6ccb98887bf70d35d97ae8d226c35b4fe8a5d4cda816eac80cdb962e8444a5cb4452ea83da83ccb437c7b00e146d7b71aa86a0933aced67fada0588dfd280066f5a735215691ecdcfd474dd0ae3c644af51a79f8fe7a84b0c2130e619dba270a101b0d1669c9317d5e548a2cc3755d5a37817d8eaae8059713854fb1b5b70991ac62db6453afc3bc4fb78a5cdd56e22b4d7abd70e6370ba28d5cba9478886f232a482cc4a1dda770c0458c8bef5ac19d8f4a24117d6ab0c7d37928c05a9b51cb6b2d8f5e422383dfae0f8152365fea2a948a12899aac9587a01ed162e6e70572d3eb02fec0cf0af4e65757f4bb535aa4fb82a193f79913b09e8a4d1ebe26eb4bd3d1549ecb20a08c501bfb5aa8ceb236a99d6ac3cf7be65475a867c27d301bd62a947c1d03e7247db527d9f7356bd59ea335f3c0afe3de183fc16c77e658aade451f036c34b9ee58ba53672994358355209728a760d76aa2f22d7d4e37732cca6404fde0d067bc97a4020a9f3946893743fe132704285a7e1b01403955d61aa22805dd592e4f4af41bd3c3f3ff2b1f0fa434c141261fc28b2bc1b104c78ed7f27cc9609a3d9ca2b8b976dd2374db05550e85032d7e080fac951aa68eac62a9de55565ab6201508cff33c38286494184219c919958415b50420756d32ea98cd04b6ac9c5f311fc933e48a597285c2f8a3dc008f174854b6ea186af6aa55aeecc10345b7d9bb9d2bbd3c0bb8153f6fbf080f4cd49e07dd850ab3a44cf505fecc8cb52b0540a60598ca941d40bda71b16f703bb30e344d3de13e540bc1205a1d9b3c94658b2199b2f2008c9f106eae565ef605278b8779ece25cda761069c7c72f020b820a39e6d0c441cdb00a41292c3146f39d2a5f7bb2fc8723a318fe3df11ce8a2e81eeabd0dd9245cb0f54a6d048c428c899182804cff8947361c01b009214b7d95617d312fbbfd379925f402bd9cc0cf5c25f14c24c64ccc7d87add9ce615711c9c6df6b0866d001f4669030abde15fd2e4059f25ad1c5543ededdf6d26c5a4f52d6c4448d105bbaad24a88cdc41b7e741c82973dc2578f9f1fd1faf4e522eb08c430f4efc4772fa4f6e504164b7b0b275635446c64fe3764cc13b1903b2a359eaa16c28abd331a34f78354ef286116c7b4a0ed3b8c38e8667f26a4ad8de9e205b9f1b24ec8c46a3c3578655f45d4356bd9504b2c4bceab55e7b02cd53139c1b5f044d9182b1e41c9020ad44eb31b8e8a7bf01e85c182ec849d7ed42d69eda8eb57d58c1c38e4ef4c3266fab97db4047eee31d289e91c53b243f5ad50af8de32c35cdd1165c894cfc9df5f59f55b2acdf81b6ee3db4eeed50c7cad36cf53dd10ad592c6d059f067d76711c067d42a148443a195512ea16f41589b3f1dace5e63d2c1255ea19c8ef1836ed19ff7ccaf96536548c06d4fdc76daf99d960c040e4df0e5a1f39f57bcd6dc294adff4af3a8ef364338049c5991d532a248aef4a0d166de764a4c3b583b6f8c30a8cad255f34f342f2b778fdda98766e11c21f4df0db226e6bfb66e71c342d904e99d506aea721d01456938e02f60e78b2652204819ed4595ee77e987d9646b2720ecdd41869653f7225e23dec28dbf0709a1da684693cb22f5b74f569f2d424499eb246ca8d8cf9ba86b2f1d25ac5e3707d46c46fa5d3008cc01aaf2e645b92dda134010df5ce5ad6ca03c2a30ae023a72688f766bcc821f24fb81d1c9edf5da5d96816476a3afcd4df699cc2b98664af0d1365e589673ee7272e3746d7e95ff6c87e1d5ae8055551724e3ad3c50d852eeac1333a4507d096687c6a7765accefc4b22dcc36a73f231d6c9dc242a5e7a0309415bb10455c2df3bf719c79d73e35ad068f5473b66c7e9bf769919b295d6c9dce8f774a21bb7878fd7d4b887bd2efaee03c73532a35bd23810dfe10e214d4f9cec03c72afa212f009e068852546eca171ce2c7070228901527621eca6771cb75b1613df30ad1582df923e12b91013f73102f130fb33b85d82f038bc1f54e6f126d5077262ca82ea7130995a5b24c4974ca8a1b1d4ae7c3417d05547cdf5e6030c4d02c6cfa0bec697be7df432b8d78926831d00e7bca1a5e67e6d55666cca07c6842950cd793ce986da89185efe61046e863add47c745775b8e3727b074434f1c14c502e44d276b73ad2faad946cef2435fbf1225076c461b76b3f83e24a05cbaf0fed70c3a05f4765c0499a9b7a80805be294053e7f27e2260e1ddd1737d535aeb7692a0c8c169b5c058a9d217776b1a9888dd8175477f4cfa44b83715ab4f6f212153628554f719fcdb6bd376c1d443c2692ba8f2db168c63723eb8c88e9a9612a0934ee66dd63daab19078d61fe68ab10a621460d98d12bd3cc6799b2c35eb1010a457e2f36fccf3b37a96233d844291bf798f630fec23525ffa41e64b17b895c28ff7699cf31e9faab9b2f515d2e14dd3981ac7c21dea76810ab33ac178648ecab1cb09b158f43d1d9a97ab05b52c322d02206922a719a400367796063570b480980d4f9347214d747ce0de4f56902df321e892bac8a79ededdac14b93682b9ca8b95452b68c8ec3fa1ed188237dd1f67a286d988fb8e43889c00f4a87a3e6416bfb34259646296cd5f73d0e00534309af6e8f5e0e54c63fca9822505237f4e3cd95b8adccf45f3709e8427da5d7c3c57c99286a2c094db3f815373a756e9ffd2af88d6e69a8829dd4a7cee75942aea8556ffcd82653fce46daeee574ed7502fb2b1e8dd8d60a5d46b898684a0d715f643ad91505747cca04968e6a1d0c447e036e1ca25419cd8bd785402d88bce5e40532b1806aee693f8b5030cfad71e9f52d0445304aa2af28893b1bc731f37b55bfc6e5846634482cfa3cee7e9d2c8a34a48fcca25393d7b3fe5c5a3c2d53de126654468984ab1777954272c6e25ba392f3c3c2a658518625921196839ddfbaa0bab14836ea12e63542a60db72048bc0770351cc2c30ed6185ce69b61f8160078415e86f9bab5f399bd7ed4b720fd19fa327f440f6054937b0dd6ef511849823e6162e0c7d1f846f9ebafc32583954e7b136303977a191d9974e939fc7cac14134026967b5408fa6907afbdfa41cf80a17c251fc1363725987819f165518f86fee07ca1660c25d04f157ecd43b8b92f93b2c6c02e0c1e715836d70c503e60ceaeaaac61f7b9e07d3fc9904ecfc81ece857754191e57a8991bd0042750b53722f35741641ebd5c5febee02d648fc1d048bf916a8d8f33227fca790602c02dfbd4aad34f2dc8e77e537ad4042a553e5e8a0a15dbee27da24ac13048378899c3a8772a0d8b85c442c8082f464b58fc016e845186bafa8fdf4f04d0d952136d4c7be90a909e3e6adcb3d74ed37da19769cb81114ead1a40dc0368169e5c230eb02a0d1c1a11ffd808f27159baeaa8879a034dcaf6a70b2f99e5859ad9c7465d61b4b51e993d8b93095ca63675dee276ba112bd2f469efdfb79fc8c97b809e0076001b98651bffa6829b2141fb3ff789d0ddc3d73b077d36521841ed9aa5a8a134f5875c444c62efa1f9b0d98a4bb4a62760a15d33824791420a5a89467ec364f30954db77219b849677e0f5bfea9c3d2a3a1e1e76ce3df4c8b9a6a3866b20566e7c68c6d32bad4d70fd2b9235fa7d38475ec1b9c9d746f55b02bdbdee6dcb6238caeed353de28d1e6e2d5126117e5fa82b9d57b703dd527736b51444b0d7d4b77562d4a370a202ed70b4940bf58ef3ff8801f78d632f2d2428fb133a910aaf4757b32d657d831c5575398aa88643e7fb1431ed0dec16a505e2d8583ef3d8787413bbdfe132c921d16cf272ca791e88e196824ea3a5c009a6a21b88dd1d6d6f87733528959ed24a4d3505d469d32a09b1970329add757c533afea8f8314c58400c0f3e25b703d9757c4b04f1b1bf293defb008ea60dcc77b0d3a6e9a1286c761bb3aa0c8f3aed74f8cab11094741c093e495867afb3857d3a92ef0fae7253b2bc3291a9ac0dcdb62c517ce2471ca23d985012f2e860238ccbec834039e8538de07f6086d1ac09027729bcc4e0bbd36e931be4242ec7135d16b01b3da39b1cd1c1d751017df8ffb31875f5a541a94099a4f035044f310fe5356d3b2d9a1eb5bcefd422e546bb3c169b8793df2764e6390dd161d90943a55d40f1984e1e211fd0227296e2b5c6485ad19675dcbce483a88f5c68d44b80ebb716c1aa0017ebafe340a0273b48979c7dd4e426f8c0a736e40c4f844a037742d00a73b67fba3c14051c6278c4dabdc4d8446ab5762e2d9d4f34359da34cdc333735b02e5deb9f71c8af1a5cea228eb70d0d8b371e378f5fd8172e60d9432e38e8eef54758d89e5413693ff2deb95fadfda6ecb6feb3adeae0c08860056a23d122e7b070568ca196b58cf0c5e737be9f2d9c66fa2be4f532c603ea8533cf06152d231cd2513cdcf212af2869ab96488f5cc484cf773c4d6eff8573b9487e51c84c3ea2e03e0bf3bea7717b8c92470a05d6e518265e8d31e23a22dbefbf82bb2a81d6c76372c5f41b19c5bcbea706ebd0b3cb7e52be6f8c70b7fbbfda4de69318cf9186aaba9d94c93b2df2310c44ed93d937db65b5f596dfaf6b52a7a4ae77c4b096d0075189cb568e4bbf6ce9c796839855440e6f060e241f295e4f76b0f162dacb2cb2e47a06961152e0057ed615fe14943822e8d6fa18636f3168f09ff2986dbf1904043ba4fee74b5c4706781568861df4c9b13bf2a815ba7c69a0b60114e19d817c3a038921fbb1b47acb8597bb38f7980f8b628f3565b09d7f7be504264ff143409b54516b4e79bdf7147eac7b1de7e43d76c558d6306bf780095f2bb5b9ffa3846df980001b22171d65463c17f4adbb95274abe315707946e65026a86d1b368586046e0cfd2a99352c16b9bbd91bb839c443e9962ae35a9d0dd6e2a48e773e6ac06597c6e428f5cc14836e6462135972bec63de2e7e3b5306704d44c2d9367308ffc4bb43cf839e37ee5fda8e50383aaf2eb67004645fad98662d6ce3d499ed921c9015ee5691b030f53cf95c346131097fd8fdbf257dbbb4410fb1dd14d64e384ad486ed5903866cb1982c606d41d611d4bb6298fb26cf965a7dbaf57309d46483fd5ff7c4782341446e7ad9695c52f7aa57a0c856214f67b7a7b8def0e915f5eb2ae457e4800d8791faac0133cb3851881aa429826cda874a42b7956a032f3d0615296c4f706ed649690d196ca6a6a2481be470c0a3922c7789276effa51e0221c8e163ce47dd8ba62391882338ad843d5579a6c3cd3ed711d770b8e0be9de4c91120bc01d69f457715fd770d6c335de853c87be3b638953faa0f2284d415c537e01285afe9b7f54d7a432bb7e16cd18621b6e5769b635dba997a5c65279bad6522d189da110e549f51fe20af42fcabf1a900cdea166bfe279855b8fdcb1bfb97049238dd17aec8093ea38b04e04bf43dd1b43658abab3b0b395cecf73d59279b9001e0d4ba93b95de101534ac718336a82216f2112b7aa0235c15594960f4771a0fdc21b4636ce3ddda5dd63291bfedce53347b725f8fe17848319b05cdf4c8d3d198b64deb3e10f6fab3db35ecce06908cd4f26cbda0f8c4a7deeb6ee12e0b5c13dd022851e6da21f44505697a4a974a10e57145bc75960ba59e189768938e89eb0c81071b45345ce428e90c4fc04ba11e75127f96698a4a2dba776a0f0a1576853d39e0ad3addb7bc1f3c030794d1fe621799d34582d07b80114df1039cd2866f1899f19fe34b946571c17f8b3efdc0e857fcf83f1ebc2b99ad59485fef3057e07534d36e7b4350dee86fe84f6f85f75330064301e2f055e017cc187f93bb8e92583b9e6e3999ae5c7ad1521ec77ee0ba476308242f9d6cad4d5ed385924c3806077f0d143bce70b9205b6d59f8f107f50133fd6fa87ddffaabab3a16156d353c28c5b3d92ba8643e4f06b866ea3f7ffc604a234750e5eba551e4787b340ddc90081b74a0d2e7df723e73b09e5cd38568993f171ecd6056aee45496c8d8fc458f8e2e721e359541cbb9dbcb1d801538cb84324fb090e960d53bc81c0020229e38e36c186cfaff1a1bc385e2d5338bd3bd9148730275b36f2dab198ee329b060159efb17ab00e40a940245d8ca47712921db546dde1100c29ff47dab5dd8cf10cca97565ed96901b0309841d7e3d746cde9fb1985cc276e4420636b145a2ee8720ad2fa2c256b995879b95e2e597f6d6fdeac1f2d349e3305322cd4b0df519abf958e874ed6d25bd4eb7418e9e45addd44e4a9e6cdf7b553cb48fc0c2d12683b2a83d2aeeaf03b6718abfaaffa59f38879a1b380668ade3e320ec2db4bdfa4409d09abf35fdd2ff501dafd55fbb2dd2ff2821a47ef41f644f4cc87d4a41576e2618a4da38302aa3ab38516e656b5a64f790a008d0200aede7267bea8bfe554e7d082d11d8ec186e314b070b5ea07b0ae722b4f2ab965bea7f906326710e0909eb1c0ba9959dd97a7b5331494d87b74c04587e4b78c420b8aa8ac99ad6c59d05d35a2e370b2126de5eb8901cc6ba879ee86de290bcf77e0bed67a74932794b3faaa187f5fd23a7932037f0a3d4517a1509eb981752492d13aa7d48d997fb71e65ee97db61d51ede49a215a158890bb60103f5502893a998be6ba800a07ecf9d8e5379b817621047933b3b314b7cb20abb6c30c6d490db451c7ee5c37942b5e886e0b43f21b9ff383ab80461e1a2c9c05f870111d023fc49dc425fae83e848eae43772902f83bdb1af645039e0cc961d6ce39588bd4b00e2a5e55ec02cfcc3ebe3783fbedab8ab64ed2d78202493ff6550471ba6196e73ad2b35f828eceaf8e340b78e9ff0fca04431e56cb7d0c3e366f938f0d7d966ba34458b0ac9dd6dd5c0034f73f902ed2183d7438377b72e81919ce168f294009c734220b4a501ec8e47b2d1f3f69605ce91fc825b5c4ac7b267718cf28c81d485aaa7de1d0dee66f677b6ee9ad02d75099c653decac58e0f1e13f414304b972d6e17d3d1fc0ff30591b82aa785a3dbf24c59bc8efc57fdef33c7c2d051214d9d8f48a9a71ed77ee6a3a2a699bd3882a4a71ccb714c8a911388be571a2a7136b9c308c5c854f6ed7bb74bab77076ff3d48ba989384ee4dc996262fc9e1585d2638107df8615d66f335d147efb64373ad8668fb50e00eba86ef4c65842cbf246496e997fcf0546c043740035af30e05f69d69ae06334e249fc828d5c3d1d58f31f2e439fd6d415be63ac6c88385935bdb11f4e8cba2f0209314253a0e5001fb029cfff63e012c379d8269611eb3868055868087f3916990089d3cb9dd201db0fbc4768a03b4c36c2a58511932468ce65f6b2d5fdaf3b1e669dbb7bd3ed2525d6f81944512d79918b1b14e17e225b3b7cce0bbcc073eec2ca8aa47a260d4842ab5a0e29b163d83ed1392ede695ad64e44f530af80aa4af328f8fbad8e4ea11f71bfc8418a145ae47612f9e7a7d4d037c3249e5d3a1feded9798dbd78af07990aa8d607254194256c1c662479a881f8bb6e6ecc4cb92aacd919fef13e78b58ad44ef3a3e7e0145950706e762c1ac44e78249cd1a29c5dd1f635c596c8046cc432024079ac0eb4b7376d89ac60485300594ce3a2498a374e0ef103a6aa5e0c42df5cbdb6da478bcfece47ff79e79cc2abaa7678a2d6f5f26bf3702d3b07cc5cdf5f402b2b5801c7d5489ecdef4477d111a5040f65cf7ba8586509151890a0a1ff2a093b1b969a4d01fbb29de063138d5407ff358d7c98a8ec79a424d3080d5b9b4533f23dc80ad3fd9baef5d1895576a8af9479c65f772874b9f7b0379d9212f386af9fbe816179316290746a973b5178601b861c1054e9d8f38426edfbe8206765314c723f262fe0e32950f68f00a45582e6e72d0140614035f58e3527eba96d29363f966bda6a29b4453285ad94b3eb51ebfbf5afba8bd6a89fc54e8cfc1d8b91555282e27ebcba8b2aa7f4d397b6b017bbcd80d30fc0180cd93b97541a0b127925d609baae79e4243c34b9660a17ff066c4b906ba554655dc30e47cca38f18e5190ff861dc3cb2bf777052da48bcac3925db0b9e9ce401c1cb2c2a1c51d0c420d357af3c939166cc01759d50f9e65fb04957c7c5c5ac46433e064ec563233d8dc7eea97d9f5c12b4a03a46ce306550f3bd4c7166dea3d4876f7a83b39b207654e6fd2a01abadfb2a3f19436c065088ea49859d5dbc8fdfcf1e0c4857cc512870795fe74989f674f40875a5104713ad3560ee1ce61df8fa6b97937703c7434fbf81009890d98f327954c3f7800e39fe5269e5b030b6cd8312bff2c0c44eb435ab1a3d861a0aaf01e992776d135d33e0b02fb28ca2d06c545366f222f55d28514d883e11aa255681ee7f20d61f73a5c20955ea919c557c1b7403401c34ceb76cde309ab991a13a5b6c3535dff4118b1162a22329be3efba01f08d3f0a9a68becd040c09bf6da005aea6c8120af5c6775925af7e042a1847087067c1b8e1527dc2b9ba6fc3082b47a9e42a7eddb980ecda3f66ab5af600b5f92d1db42032b1fb4a11ed8a4732ea3ec73454ebf0b84acd58a545ccc95b9f413044f47b9e40df58a8225651c379ace7b826cfe7f5bd5205917b606cc7fe266702918eb7da26be268e137aea627ba1b849961692ccc8a6fe2d42957601fc95e393a399c6199a2f1c0adf2187711b9e82023872a99fc25c7144131364ddb03d392961080734533c49911fc91e1a2d2b14f7db46d8133a9b2ab3824b53f620b659c877ca458c1c8d0cef838ec467bf67f2060b688fdb0f8ba0948da364a742d87e2eb2173b2cc019d1c76b53505a87ae986cab70db7885056a3989dd1a3abb6f21d3415f3e53aba7ed09b6864a", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) ioctl$VHOST_VDPA_SET_GROUP_ASID(0xffffffffffffffff, 0x4008af7c, &(0x7f0000000100)={0x1, 0x1000}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) socket$inet6(0xa, 0x2, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r6, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x1, 0x0, 0x325, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) fadvise64(r3, 0x6b, 0x4000000000f7c, 0x4) 3.105672838s ago: executing program 5 (id=2265): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000340)=@ethtool_gfeatures={0x24}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x28, 0x0, 0x7, {[@ra={0x94, 0x0, 0x1}]}}}], 0xc}}], 0x1, 0x40000) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="b8000000000000e3f3e6b68d64c8223f554d1c8b00e7ac687f6254a9c38d"], 0xb8) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$BLKGETDISKSEQ(r5, 0x80081280, &(0x7f0000000400)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0xb1, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8844}, 0x4040000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x4, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x941}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x245}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x45}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xee1fa397cb6b6ea5}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x891}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x7fff}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000001}, 0xc881) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffde, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @register_looper], 0x0, 0x0, 0x0}) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000080)=0x9, 0x12) 3.105282008s ago: executing program 5 (id=2266): ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000780)={[0x3ff]}, 0x8) syz_io_uring_setup(0x54f0, &(0x7f00000007c0)={0x0, 0x3056, 0x80, 0x1, 0x34a, 0x0, r0}, &(0x7f0000000840), &(0x7f0000000880)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x108, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_io_uring_setup(0x5de0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400250, 0x0, r0}, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003d71be108205440017d3010203010902120901000000980904c4000002f0de00"], 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) add_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x240001, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/82, 0x52, 0x0, 0xa}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1.919684324s ago: executing program 4 (id=2267): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)={0x73622a85, 0x100b, 0x400000000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x323}, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000500)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x1ff, 0x7fff, 0x1c2, 0x0, 0x7, 0x81, 0x7, 0x6, 0x5, 0x3ff, 0x80, 0x0, 0x942f, 0x10, 0x10000, 0xe157, 0x1000, 0x65, 0x9, 0x4, 0x8, 0x6, 0x2, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x3, 0x8, 0xff, 0x6, 0x9, 0xb2d5, 0xf045, 0x2, 0x1ff, 0x351, 0x9, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x91, 0xb7c, 0xc, 0x7, 0x80000001, 0x8, 0x2, 0x4, 0x9, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0xfffff91a, 0x4, 0x8, 0x1, 0x101, 0x80000000, 0x8, 0x2, 0x2, 0x7, 0x81, 0x6, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x2, 0x2, 0x6, 0x81, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x10001, 0x4c, 0x8, 0x3, 0x1, 0x3, 0x4, 0x7, 0x6, 0xfffffffa, 0x20000, 0x8, 0xfffffffb, 0x0, 0x5, 0x0, 0x9, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x6, 0x5]}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa, 0xc0, 0x3, [{{0x9, 0x4, 0x0, 0x6a, 0x1, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x80, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x5, 0x5}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x0, 0x7, 0xb, 0x0, 0xff}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @request_death], 0x0, 0x0, 0x0}) 720.939572ms ago: executing program 4 (id=2269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6, 0x0, 0xfe, 0x400}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x41, 0x0) write$FUSE_INTERRUPT(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e1c, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc8}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0xd, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) getsockopt$inet6_int(r8, 0x29, 0x10, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000800000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800"/112], 0xb8}, 0x1, 0x0, 0x0, 0x50}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="a000000021000100fcffffff000000000a1f0101000000080000000000000000fc02000000000000000000000000000000000000000000003394d90b23b6fc4cf88e0a00000000000000", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYBLOB="00001000000000005000110000000000000000000000ffffac1414aaff0100000000000000000000000000010a010102000000000000000000000000fc0200000000000000000000000000003c0000000000000002000200"], 0xa0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r11, 0x125f, 0x0) 696.135274ms ago: executing program 6 (id=2270): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x1000000, 0x0}) 623.695079ms ago: executing program 6 (id=2271): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x3f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="70000000120001000000000000000000100000004000000000000000004d00"], 0x70}], 0x1}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) listen(r2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0x3, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 619.53124ms ago: executing program 6 (id=2272): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) r1 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 608.013421ms ago: executing program 6 (id=2273): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x24, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair(0x2a, 0xa, 0x80000000, &(0x7f0000000000)) fadvise64(r0, 0xf, 0x3, 0x1) timer_delete(r2) sendfile(r0, r0, 0x0, 0x7ffff000) 561.479234ms ago: executing program 6 (id=2274): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000003c0)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904470b6e00430002317d55000905020200020200000905820200020000004505a7a3c8b5a5899a9df3f2b718f8b975b2199ae641d6e235759be806174ff162b64730dc1506e65533c9e892b8a7402aed8d5568f7600cc65b3ee52bb79fce6a9c34be3a1de1b394b211fba5b8c6c4e40646dd"], 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = socket(0x18, 0x4, 0xfffffffe) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @loopback, 0x20000}}, {{0xa, 0x0, 0x40000, @mcast1}}}, 0x108) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) socket$inet_tcp(0x2, 0x1, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 443.626944ms ago: executing program 7 (id=2275): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000540001000005000000034b309c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000000105000d0000000000000002000044199aec801400585e76f51e55d769000108000200e00000010c00128005000100000000001c001080080001400e76bd14f85271c451b5baf6b3ed7e3961b5377b6b391304146bb834347b0000847aaa38"], 0x54}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r8 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000240)='ip6_vti0\x00', 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0xe, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x3, 0x6, 0x5f, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0xfffffff9, 0xa}}) sendmmsg$inet(r8, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xe000) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9188605234ffa22f52826511a6bd2c020796eedd6c15723823111497eb3896236006cbce5a20bd1171c462d765630527537031a9f560da63e276aa669df6fe3b71ab3f31ed9035920f7aa2104a33cb506ee4581fa7e003ea2cd6193c600c7b9634039650ccd8a52e76e6e3963f0aeadb87", @ANYRES16=r7, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r10 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r10, 0x0, 0x0) keyctl$link(0x8, r10, r10) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r11, 0x0) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) 442.541934ms ago: executing program 7 (id=2276): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1b, 0x8, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cce0a1fcaed1e831fa79a", "67523760fd40f7da2cfc03d81a8ca55ba139c01802c4dae4162e43039cb7ad33", [0x4, 0x7]}}) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RVERSION(r4, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x40, 0x8, '9P2000.u'}, 0x15) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xc}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101, 0x7}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 361.475721ms ago: executing program 7 (id=2277): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) socketpair(0x18, 0x6, 0x4, &(0x7f0000000300)) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x80) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) (async) sendmmsg(r1, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "6c382ccb69434f02", "a6b3b6be08c3ba02e945de45490efc0ef54528d6726a902093be2838c1ed2264", "d9d1f4c2", "cbde04a76efcf227"}, 0x38) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83\x1b\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x1d\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbzE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\x02\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x02\x16\xf5\xe6\x7f\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\x18g8j\x0eT\xbe\xa1\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35\xef\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00\xfel\xf1\xc8\x0f8\xdb%W\x87\xd0\xbc\xbf\x97\xa9\x97\v\xbe%\x81\xbf[\x05\x9d\xed\'\"( \x15\x8bA\x19\xa8\xbcF%\x17#[\xbb\x99U\x92\'\xb6\xbe6\x8f\xc9%\xd9\xce\x91r\xfch\xf5\xf5*h\x1e\x0e\xbcD\xc4\xb9\x93e\x84\xb11\xae\xb8\x06\x81\x96g\x17h\a\x02\xfe\xa0\x1a\xfd\xb3e8\xa5\xd0\xb1\xa1\x8c\xd2\x9f\xd3\xc3?\xb6\x0e\xfe\x1f\x1bG31\xf9J\xf4\x85\xa9L\x1b\x18\x01A\x18\xae\xc9B\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xb9\xc2\xdd\x9d\x8d5B\xaf\xe2\xf3\t\x97_uaJ|z\xec\x11\xb6\xd2\"U?cH[\xe5\xcf\xe0b&^\xbd\x15\xaecx@`\xe8\x1c\xfe\x9e\x17L\xa0\xe2l\xfa\xf1 \t\x0fG\xcd\xc3\xbc\x96z\x0e\xe9w\xc9y\x11\xf31\x8cc\xe2\xcd+\n\xcb\x05\x7f*2\x1c\xde\xb5\xd53x\xbd\xe5\x157l\xf1\x15y^\xbf4\x05\x94\xda\xd9\x04\x1b\x1dP\x1d\xbb1\xc8<*\xfb\v\b\xaf \xae\xea\xa4\x8b\x18\xefc\x90[\xe4\x8a\x03\xe3\x9e\xb9]\x8a~z\x9e\xc7qLY\xa0\xce\xdd0\a\x19\xe3\xd6\xeeV\x93\b~{\\\xa4\xe1\xc7d\x9c\f\xed\a&m\a\x9f7\x03]C\xed\xb4\x80>?/3\xc2\x14r}\xe0\xdd\xab\xc8\xb1\xb3\xdbu\x86\xa6Xo\xc7\xf4\xcc\xdf\xb9\x92W\x02JL=F\xd6a\xef') (async) r6 = accept(r1, &(0x7f0000000000)=@l2tp={0x2, 0x0, @empty}, &(0x7f00000004c0)=0x80) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000001040)=ANY=[@ANYBLOB="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"/4208], 0x1070) 343.173902ms ago: executing program 7 (id=2278): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x42c03) (rerun: 32) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xb, 0xd8, 0x0, 0x12, 0x6, 0x4, "d06d9979c230c1347839b4ee8cda634e2449dd9ff8ed62aa7ea44734de1a8d7094059214888cfa15d2de87e67a70357aaeef090a32332391dc07e4355e077a94", "567030aa1aef51b14c191591168dd8f57f205fe90805810bb9b85c06b5264022f0c6cb9909956a194b1faa364cc2d2898350f8767ee4b8d62d4ad6b9d2369f61", "1e7c5fb1cdc557a5167f5746e4cbab90e5cab4b1c5833511e91efd4ec23a87e1", [0x0, 0xffff]}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000240)=@x86={0x0, 0x2, 0x84, 0x0, 0x1, 0x5, 0x83, 0x4, 0x80, 0x4, 0x3, 0xbe, 0x0, 0x7f, 0x4, 0xf0, 0xd5, 0x8, 0x6, '\x00', 0xc, 0x21}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 191.698895ms ago: executing program 7 (id=2279): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000002500), 0x8100, 0x0) read(r3, &(0x7f0000002600)=""/4096, 0x1000) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x18, 0x31, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) capset(&(0x7f0000000040)={0x20071026}, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0xb0, 0x6, 0x0, 0x8, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x1, 0xffffffff00000001, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0xa00}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e17000/0xa000)=nil, 0xa000, &(0x7f0000000000)=',,\x00\te\xcf\xad\x06\x8c-\xc6\xe4w\xd7\xbc\xef\r\xa0orc\xf6F\xe3\xce\xdc\xb7\x1a@\xa5\xfeo+lx\x92&\xb6\b\x82') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x48e, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f00000005c0)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xaaac2ebda3c223b4) 188.776645ms ago: executing program 4 (id=2280): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{0x444, 0x6, 0x0, 0x9, 0xa0, 0x38, 0x8, 0x9, 0x51, 0x1, 0x81, 0x4}, {0x3, 0x6, 0x0, 0x4, 0x6, 0x6, 0x5d, 0x9, 0x2, 0x7, 0x7f, 0x81, 0xff}, {0x7, 0xb, 0xf0, 0x1, 0x4, 0x3, 0x6, 0x1, 0x8, 0x49, 0x3, 0x91, 0x5}], 0x100}) r3 = eventfd2(0x8, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x183082, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 0xf}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000200)={0x7, 0x4000, 0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setregid(0xee00, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) write$FUSE_NOTIFY_POLL(r7, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x4}}, 0x18) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@rdmsr={0x32, 0x18, {0x24d}}, @rdmsr={0x32, 0x18, {0x8a1}}, @code={0xa, 0x5a, {"b991030000b805000000ba000000000f300f01c4b968020000b8c9000000ba000000000f30c4e2791de9c4e35d46744bbe00470fc76a003e0f01f8460f01c4440fc73ac4625bf55a2b"}}, @wrmsr={0x1e, 0x20, {0x317, 0x1}}, @code={0xa, 0x62, {"0fc72ab9e9080000b847eb0000ba000000000f30b9800000c00f3235000400000f300f21c566b8d1000f00d0c4c3016af95e67460f785100b805000000b90d0000000f01c1f2afc4c209acb4ddf33c0000"}}, @uexit={0x0, 0x18, 0x4e2}, @cpuid={0x14, 0x18, {0x80000000, 0x3ff}}, @code={0xa, 0x54, {"670f01c40f072e470f01f8c4c27d1a760266b814008ee0c4e155600f0f01c848b800000000010000000f23d00f21f835100000040f23f8470f01f8b8010000000f01c1"}}, @wr_crn={0x46, 0x20, {0x4, 0x8}}, @wr_crn={0x46, 0x20, {0x2, 0xfe63}}], 0x1d0}) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000004f00), 0x2001, 0x0) writev(r9, &(0x7f0000006040)=[{&(0x7f0000004f40)="4aae1a02e0cd", 0x6}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000100)='veth0_vlan\x00', 0x10) 82.136763ms ago: executing program 5 (id=2281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)={'vlan0\x00'}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r3, 0x409, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1, 0xfffffffffffff000, 0x4000}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e26, @rand_addr=0x64010101}, 0x0, 0x0, 0x4}}, 0x26) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) 81.845873ms ago: executing program 7 (id=2282): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000a2b000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000300)=[@vmwrite={0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd9000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x2, &(0x7f0000000100)=[@cr0={0x0, 0xe001002e}], 0x1) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f00000003c0)={0xfffffff8, 0xfffffff9, 0x1, 0x1, 0x7, "ea713977e0715f01bbff00", 0x4, 0xb7}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0xa) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000180)={{r5}, 0x100000000, 0x7fffffffffffffff, 0x2}) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000000280)={0x3, 0x20, [0x9, 0x84b, 0x3, 0xffffffff], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000240)=@usbdevfs_driver={0x1, 0xfffffffe, &(0x7f0000000200)}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) setpriority(0x1, 0x0, 0xe) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, 0x0) io_submit(0x0, 0x0, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r10 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r10, 0x4004480d, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 65.327824ms ago: executing program 5 (id=2283): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000000c0)=0x1003, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981b00, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) madvise(&(0x7f00007b4000/0x1000)=nil, 0x1000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0xa, 0x2, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000000c0)=0x1003, 0x4) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981b00, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) eventfd(0x0) (async) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) (async) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) (async) madvise(&(0x7f00007b4000/0x1000)=nil, 0x1000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 7.591129ms ago: executing program 4 (id=2284): r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r4}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYBLOB="01000000000000000080000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000300200000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) (async) fstat(r0, &(0x7f0000000440)) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r5, 0x74886000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) close_range(r6, 0xffffffffffffffff, 0x0) (async) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x47bb) (async) r10 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x8, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x0, '\x00', [{0xddb00000, 0x6, 0x80, 0x400000000000000, 0x7, 0x3}, {0x9, 0x9, 0x1, 0x2, 0x58, 0x9}], ['\x00']}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 7.265299ms ago: executing program 5 (id=2285): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0xaa, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x8, 0x8, 0xd}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0xf7, 0x8, 0x10}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x8, 0x5, 0x10, 0x10, 0xa}, 0x1bb, &(0x7f0000000300)={0x5, 0xf, 0x1bb, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x3, 0x6, 0x4}, @generic={0xbd, 0x10, 0x4, "15bb6d7fcc13c0775de9ba6b8575df435c81470b705347bcdb6fac8236257f2927eefab77e2f01d4413f4e1308c2d879ad5b17067eb1b112c5d2f52765ee4902df733dd55f75cc024e98b9685de758d3663d6282ffaab9987ea851c13f8def56029eba4650ec2ba395e3fc31a716a4ece122e22ce71d0df6a210bf4c8f44bbb0dae57baddb102c839457a702847c22e296813ef4203484903c9a2ad24ce33a229595e64c20b23ed6a912f467f2a0bdec000530e78389f173a38a"}, @generic={0xb7, 0x10, 0x3, "20a75ba03e57df79463920e5fffaa2da734bf9034f7971a4d9b128eff8c22fc0b0a20b2aa1a9060ee247eaa69fd538d5413fb645aed470255656d6ac6a87bb8bcb0a7b224871e9d63bccc549a541183cc0b25a746f21be0d76667c07de75d0d8bd6dfec85128da14e9d25fbdf450144e7641f38e945b568aa82d9f6dfe23b78b07c2eb2fa6e2571eecbfb3b2887a0fab1eca8c42caecae695c0d4d40f38e25faf45ce66301b2ab196924683287e77c2c4d110f23"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "35b1b24ccdd1ee77b47051a5b6b949c0"}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x7fffff6, 0xf, 0xfff8, [0xffc0, 0xf, 0xaf, 0xc000, 0x1f80, 0xc000]}]}, 0x6, [{0x9b, &(0x7f00000001c0)=@string={0x9b, 0x3, "5102b06f4657c132b5035b00077599117131b377cef2f021e455b2e8a067615a9bd43fd5d0d202b3a1a906bb2095563829cc986b639e10e9194e4e100a46260d80986350db548a8d422cb56056e3f6e1c74594aeb11e8f6ac97a5221dc93e5df8d1e5479eba54490fbbcfb2c317f03317785769eb25285dc09ec103b89ac39957e0f9e367c2aeade4cba27d669d5e1832c844f0f6c0565af2e"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x421}}, {0xe, &(0x7f0000000500)=@string={0xe, 0x3, "afd576e4cc4111f8f0fb68b7"}}, {0x68, &(0x7f0000000540)=@string={0x68, 0x3, "e20dca524c82a08a7a4247cd1ba892c27fd87bc273f07f397caa491b15719420cb619066c5ee4667c7e0218a7ecbd16638a21514ed683d671e10709f7e557ea152359ebf837bfb903b9c4a93d8e428079a167ac631edc7d8d4f13288b2d8ae339831ad3b77f6"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1007}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x40, 0x30, 0x7, {0x7, 0x13, "4c9068c1ac"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000000a80)={0x34, &(0x7f0000000780)={0x40, 0x30, 0xf1, "3a3ec3274e8edcbb9d593a080be6d98a75545e5429b90b72816104247e8c7f625629ba2b5c893fd02d21838756af9bff410169bccea7257bd5e6775672833ac027daf62f855e4e6e78344cd051e861a25428cdda032d0156faf10b2bfa5d3e3871fe4bb7d85ad56c4e7ba39556d4e399646e148c3e7b2982e1982e0680ce300dd12af6464fb5ba6ce8e606576856652246c655ed4d29f0f813e14a46f3b153b8e264f027231117f981c26f923db18a30549e036faefb2f6be1e15203dc99848c45882af57a681bda6888a8bcc5003ed2627bf7f2c7463fef16083569bcd1b34fee94e5d92dd62b8c2e6c9b1be20f732b44"}, &(0x7f0000000880)={0x0, 0xa, 0x1}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000980)={0x20, 0x0, 0xaf, {0xad, "121c028769a64df0c2fbb4f6b3d0b80ebdeb81958559039138bca5ced3197c178d0143474f750d0fbd5b21c9657e1960be3826fcbddffd33458b4db6dac0807b346aa4a07aa6e8f6738bdf2d9d63f31b9e10032f81bcc78b03cecf1743b1192ef55106465d44cda75378d784f10a887b92b25ca39048d317d19980faa7c7ce595a3717c1996847673abe6b45689cffddcf434e55e1249c6fe14252bbe7da95dab432b3cbba9c7b49cc1a6c7ce9"}}, &(0x7f0000000900)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0x7}}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 588.44µs ago: executing program 6 (id=2286): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x20, 0x67, 0x9e, 0x8, 0xc72, 0x14, 0xc776, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x38, 0x0, 0x0, 0x1, 0x28, 0xff}}]}}]}}, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f6450000000033e010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010f50700014004000000", 0x58}], 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0xbc) r8 = openat$incfs(r7, &(0x7f00000000c0)='.log\x00', 0x0, 0x70) read$FUSE(r8, 0x0, 0x0) r9 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x20, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r9}, @clear_death={0x400c630f, 0x3}, @register_looper], 0x0, 0x1000000, 0x0}) 0s ago: executing program 4 (id=2287): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000900)="01000000", 0x4}, {&(0x7f0000000200)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28", 0x1a}, {&(0x7f0000000940)="74739b5832d9f06f8d760a", 0xb}], 0x3, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000900, 0xee01, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = fsopen(&(0x7f0000000080)='ext4\x00', 0x0) close_range(r3, r4, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) r7 = open$dir(&(0x7f0000000b40)='./file0\x00', 0x2200, 0x10) fcntl$setownex(r7, 0xf, &(0x7f0000000900)) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b4a, &(0x7f0000000000)={0x0, 0x2d61, 0x61b, 0x1, 0xc3, 0x0, r6}, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x603f) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fda000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000480)=ANY=[@ANYBLOB="01ff03000000000001000040"]) ioctl$FIOCLEX(r2, 0x5451) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r11 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x30000000, 0x3, &(0x7f0000000100)}) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4138ae84, &(0x7f0000000240)=@x86={0x0, 0x2, 0x84, 0x0, 0x1, 0x5, 0x83, 0x4, 0x80, 0x4, 0x3, 0xbe, 0x0, 0x7f, 0x4, 0xf0, 0xd5, 0x8, 0x6, '\x00', 0xc, 0x21}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f00000001c0)={0x2, 'batadv_slave_0\x00', {0x7a46}, 0x540d}) kernel console output (not intermixed with test programs): ESRCH [ 94.813389][ T3242] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 94.819465][ T3242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 94.828678][ T3242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:435 [ 94.889645][ T3250] 9pnet_fd: Insufficient options for proto=fd [ 94.966987][ T3259] binder: Bad value for 'stats' [ 95.004152][ T36] audit: type=1400 audit(2000000564.711:516): avc: denied { create } for pid=3263 comm="syz.0.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 95.170440][ T537] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 95.328661][ T537] usb 3-1: Using ep0 maxpacket: 8 [ 95.335604][ T537] usb 3-1: unable to get BOS descriptor or descriptor too short [ 95.345073][ T537] usb 3-1: config 6 has an invalid interface number: 215 but max is 0 [ 95.353795][ T537] usb 3-1: config 6 has no interface number 0 [ 95.360988][ T537] usb 3-1: config 6 interface 215 altsetting 5 endpoint 0xB has invalid maxpacket 1999, setting to 1024 [ 95.375111][ T537] usb 3-1: config 6 interface 215 altsetting 5 bulk endpoint 0xB has invalid maxpacket 1024 [ 95.387983][ T537] usb 3-1: config 6 interface 215 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 64 [ 95.399128][ T537] usb 3-1: config 6 interface 215 has no altsetting 0 [ 95.407718][ T537] usb 3-1: New USB device found, idVendor=0c52, idProduct=2442, bcdDevice=f8.3f [ 95.416869][ T31] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 95.425106][ T537] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.434100][ T537] usb 3-1: Product: syz [ 95.438424][ T537] usb 3-1: Manufacturer: syz [ 95.444485][ T537] usb 3-1: SerialNumber: syz [ 95.454857][ T3252] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.464310][ T3252] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.507623][ T3281] 9pnet_fd: Insufficient options for proto=fd [ 95.556516][ T36] audit: type=1400 audit(2000000565.261:517): avc: denied { execute } for pid=3286 comm="syz.3.1017" name="file0" dev="ramfs" ino=16943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 95.579643][ T36] audit: type=1400 audit(2000000565.261:518): avc: denied { execute_no_trans } for pid=3286 comm="syz.3.1017" path="/file0" dev="ramfs" ino=16943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 95.605111][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 95.612184][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.622666][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.634628][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.644378][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.653262][ T31] usb 1-1: Product: syz [ 95.657797][ T31] usb 1-1: Manufacturer: syz [ 95.663358][ T31] usb 1-1: SerialNumber: syz [ 95.920574][ T31] usb 1-1: 0:2 : does not exist [ 95.930105][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 95.944460][ T31] usb 1-1: USB disconnect, device number 36 [ 95.953515][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.336462][ T3311] 9pnet_fd: Insufficient options for proto=fd [ 96.447938][ T3317] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 96.447964][ T3317] rust_binder: Read failure Err(EFAULT) in pid:457 [ 96.457327][ T3319] rust_binder: 457: no such ref 16777216 [ 96.520295][ T3326] rust_binder: Write failure EFAULT in pid:466 [ 96.771427][ T507] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 96.940550][ T507] usb 1-1: not running at top speed; connect to a high speed hub [ 96.948639][ T3341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'. [ 96.959507][ T507] usb 1-1: config 5 has an invalid interface number: 206 but max is 3 [ 96.978902][ T507] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 96.998719][ T507] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 4 [ 97.007765][ T507] usb 1-1: config 5 has no interface number 0 [ 97.038644][ T507] usb 1-1: config 5 interface 206 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 97.065835][ T507] usb 1-1: config 5 interface 206 has no altsetting 0 [ 97.078991][ T507] usb 1-1: language id specifier not provided by device, defaulting to English [ 97.089440][ T507] usb 1-1: New USB device found, idVendor=14b2, idProduct=3c12, bcdDevice=63.d5 [ 97.102294][ T507] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.118669][ T507] usb 1-1: Product: ﳿ [ 97.123435][ T507] usb 1-1: Manufacturer: ﻤ᭵쑙୵䚖²꣄덡뵾뚗孔瑥ࡘ䤹摔䙨匃㵑ⅴ﷬慜鋶盍ꆾ쑘ᡁ梖ઇ필꜏Ў馻桻蕬﫝蘶쇭暚溑添愄㟍㰀翭ﭳ浉⏞푃蹸挭䧰⚊䃠⃽ꈧ릉볱䏺똨傡濁ẻ黎䵤洅玽﷠匉캳跘뱉篽䫵‒䠊ڲ撲훴ᆶ⟒운 [ 97.179912][ T507] usb 1-1: SerialNumber: ࠌ [ 97.409248][ T507] usb 1-1: USB disconnect, device number 37 [ 97.776588][ T3378] mmap: syz.4.1047 (3378): VmData 29208576 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 97.823950][ T3383] overlayfs: failed to clone upperpath [ 97.939603][ T537] ftdi_sio 3-1:6.215: FTDI USB Serial Device converter detected [ 97.956975][ T36] audit: type=1400 audit(2000000567.661:519): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 97.982112][ T537] ftdi_sio ttyUSB0: unknown device type: 0xf83f [ 97.998669][ T537] usb 3-1: USB disconnect, device number 31 [ 98.009275][ T537] ftdi_sio 3-1:6.215: device disconnected [ 98.053661][ T3411] 9pnet_fd: Insufficient options for proto=fd [ 98.188644][ T507] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 98.210438][ T3439] 9pnet_fd: p9_fd_create_tcp (3439): problem connecting socket to 127.0.0.1 [ 98.349754][ T507] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 98.386263][ T507] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.404990][ T36] audit: type=1400 audit(2000000568.111:520): avc: denied { write } for pid=3468 comm="syz.2.1081" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.407203][ T507] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 98.458703][ T507] usb 1-1: config 1 has no interface number 1 [ 98.465722][ T507] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 98.479278][ T507] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.492267][ T507] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.501629][ T507] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.510419][ T507] usb 1-1: Product: syz [ 98.514850][ T507] usb 1-1: Manufacturer: syz [ 98.519702][ T507] usb 1-1: SerialNumber: syz [ 98.581006][ T3475] rust_binder: 473: no such ref 2 [ 98.587344][ T3475] rust_binder: 473: no such ref 2 [ 98.714899][ T3485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1087'. [ 98.737178][ T507] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 98.745670][ T507] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 98.766594][ T507] usb 1-1: USB disconnect, device number 38 [ 98.790458][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 98.913112][ T3496] x_tables: unsorted underflow at hook 4 [ 98.914625][ T329] tipc: Subscription rejected, illegal request [ 99.153961][ T3530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.155212][ T3530] rust_binder: Error in use_page_slow: ESRCH [ 99.163324][ T3530] rust_binder: use_range failure ESRCH [ 99.170061][ T3530] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 99.175963][ T3530] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 99.184993][ T3530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:494 [ 99.929811][ T3551] syz.2.1111: attempt to access beyond end of device [ 99.929811][ T3551] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 99.964644][ T36] audit: type=1400 audit(2000000569.671:521): avc: denied { setattr } for pid=3550 comm="syz.2.1111" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 100.127213][ T3561] netlink: 'syz.0.1115': attribute type 1 has an invalid length. [ 100.145625][ T3561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1115'. [ 100.246736][ T3566] binder: Unknown parameter '' [ 100.290212][ T36] audit: type=1400 audit(2000000570.001:522): avc: denied { append } for pid=3569 comm="syz.0.1119" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.389569][ T330] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 100.548688][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 100.555831][ T330] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 100.567687][ T330] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.579181][ T330] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.590468][ T330] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 100.604547][ T330] usb 3-1: config 7 interface 0 has no altsetting 0 [ 100.611575][ T330] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 100.621051][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.039455][ T330] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.000C/input/input13 [ 101.058095][ T330] kye 0003:0458:5010.000C: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 101.317614][ T330] usb 3-1: USB disconnect, device number 32 [ 101.328092][ T3599] tmpfs: Bad value for 'huge' [ 101.501554][ T3607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3607 comm=syz.4.1130 [ 102.090318][ T3613] futex_wake_op: syz.2.1132 tries to shift op by -1; fix this program [ 102.215100][ T36] audit: type=1400 audit(2000000571.921:523): avc: denied { mounton } for pid=3616 comm="syz.2.1134" path="/181/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 102.354792][ T36] audit: type=1400 audit(2000000572.061:524): avc: denied { create } for pid=3622 comm="syz.4.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.479264][ T330] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 102.521955][ T3630] __vm_enough_memory: pid: 3630, comm: syz.0.1137, bytes: 18014402804453376 not enough memory for the allocation [ 102.547128][ T3630] __vm_enough_memory: pid: 3630, comm: syz.0.1137, bytes: 18014402804453376 not enough memory for the allocation [ 102.643013][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 102.661449][ T330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.695192][ T330] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.13 [ 102.710186][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.729247][ T330] usb 3-1: config 0 descriptor?? [ 102.743491][ T330] usbhid 3-1:0.0: can't add hid device: -22 [ 102.754489][ T330] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 102.764741][ T3635] syz.0.1140 (3635): /proc/3634/oom_adj is deprecated, please use /proc/3634/oom_score_adj instead. [ 102.953964][ T3665] fuse: Bad value for 'rootmode' [ 103.127925][ T330] usb 3-1: USB disconnect, device number 33 [ 103.502127][ T3685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1157'. [ 103.632711][ T3699] overlayfs: missing 'workdir' [ 103.646178][ T3700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.646495][ T3700] rust_binder: Error in use_page_slow: ESRCH [ 103.656007][ T3700] rust_binder: use_range failure ESRCH [ 103.663925][ T3700] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 103.670665][ T3700] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 103.680756][ T3700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:519 [ 103.745892][ T3709] rust_binder: Write failure EFAULT in pid:526 [ 103.840086][ T3729] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:530 [ 103.847536][ T3731] rust_binder: 530: no such ref 3 [ 104.005483][ T3744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3744 comm=syz.4.1178 [ 104.077346][ T3741] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 104.077386][ T3741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:541 [ 104.208718][ T507] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 104.328794][ T330] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 104.400097][ T507] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 104.412309][ T507] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.426509][ T507] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.438263][ T507] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 104.456357][ T507] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 104.468768][ T507] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 104.479109][ T507] usb 1-1: Manufacturer: syz [ 104.487484][ T507] usb 1-1: config 0 descriptor?? [ 104.499454][ T330] usb 3-1: not running at top speed; connect to a high speed hub [ 104.510424][ T330] usb 3-1: config 1 has an invalid interface number: 55 but max is 1 [ 104.520019][ T330] usb 3-1: config 1 has an invalid interface number: 158 but max is 1 [ 104.529789][ T330] usb 3-1: config 1 has no interface number 0 [ 104.536393][ T330] usb 3-1: config 1 has no interface number 1 [ 104.543740][ T330] usb 3-1: config 1 interface 55 has no altsetting 0 [ 104.550695][ T330] usb 3-1: config 1 interface 158 has no altsetting 0 [ 104.560102][ T330] usb 3-1: New USB device found, idVendor=046d, idProduct=08a1, bcdDevice= 2.64 [ 104.571120][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.581349][ T330] usb 3-1: Product: syz [ 104.587556][ T330] usb 3-1: Manufacturer: syz [ 104.593226][ T330] usb 3-1: SerialNumber: syz [ 104.808764][ T330] usb 3-1: USB disconnect, device number 34 [ 104.899716][ T507] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 104.907678][ T507] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 104.918524][ T507] appleir 0003:05AC:8243.000D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 104.975784][ T36] audit: type=1400 audit(2000000574.681:525): avc: denied { read } for pid=3787 comm="syz.3.1193" name="/" dev="configfs" ino=1665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.002913][ T36] audit: type=1400 audit(2000000574.681:526): avc: denied { open } for pid=3787 comm="syz.3.1193" path="/" dev="configfs" ino=1665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.035190][ T3791] netlink: 'syz.3.1194': attribute type 29 has an invalid length. [ 105.044260][ T3791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1194'. [ 105.099284][ T507] usb 1-1: USB disconnect, device number 40 [ 105.373342][ T507] rust_binder: 3740: removing orphan mapping 0:24 [ 105.529908][ T3809] overlayfs: failed to clone upperpath [ 105.571039][ T3813] overlayfs: failed to clone upperpath [ 105.618656][ T507] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 105.651045][ T3821] input: syz0 as /devices/virtual/input/input14 [ 105.780382][ T507] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.792685][ T507] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt [ 105.810399][ T507] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.826833][ T507] usb 3-1: config 1 interface 0 has no altsetting 0 [ 105.831662][ T3834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.843871][ T3834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.844528][ T507] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 105.866889][ T507] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.881154][ T3798] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 106.106443][ T36] audit: type=1400 audit(2000000575.811:527): avc: denied { create } for pid=3853 comm="syz.3.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 106.116035][ T507] usb 3-1: USB disconnect, device number 35 [ 106.185579][ T3863] /dev/rnullb0: Can't lookup blockdev [ 106.218657][ T411] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 106.266827][ T3871] 9pnet_fd: Insufficient options for proto=fd [ 106.389839][ T411] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.398246][ T411] usb 1-1: not running at top speed; connect to a high speed hub [ 106.409413][ T411] usb 1-1: config 5 has an invalid interface number: 29 but max is 0 [ 106.419740][ T411] usb 1-1: config 5 has no interface number 0 [ 106.426288][ T411] usb 1-1: config 5 interface 29 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 106.438985][ T411] usb 1-1: config 5 interface 29 has no altsetting 0 [ 106.449803][ T411] usb 1-1: New USB device found, idVendor=05a9, idProduct=2643, bcdDevice=49.45 [ 106.460338][ T411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.482997][ T411] usb 1-1: Product: syz [ 106.488874][ T411] usb 1-1: Manufacturer: syz [ 106.494146][ T411] usb 1-1: SerialNumber: syz [ 106.504677][ T3842] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 106.512514][ T3881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1228'. [ 106.629575][ T3883] /dev/rnullb0: Can't lookup blockdev [ 106.647965][ T3883] 9pnet_fd: Insufficient options for proto=fd [ 106.693195][ T36] audit: type=1400 audit(2000000576.401:528): avc: denied { map } for pid=3884 comm="syz.2.1230" path="/proc/547/net/vlan/vlan0" dev="proc" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 106.712053][ T3893] 9pnet_fd: Insufficient options for proto=fd [ 106.720806][ T36] audit: type=1400 audit(2000000576.401:529): avc: denied { execute } for pid=3884 comm="syz.2.1230" path="/proc/547/net/vlan/vlan0" dev="proc" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 106.779429][ T3899] netlink: 'syz.2.1235': attribute type 29 has an invalid length. [ 106.796083][ T3902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1213'. [ 106.809672][ T411] usb 1-1: Found UVC 0.00 device syz (05a9:2643) [ 106.817592][ T411] usb 1-1: No valid video chain found. [ 106.824961][ T411] usb 1-1: USB disconnect, device number 41 [ 107.050992][ T3917] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 107.124762][ T3920] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.125175][ T3920] rust_binder: Error in use_page_slow: ESRCH [ 107.133464][ T3920] rust_binder: use_range failure ESRCH [ 107.140276][ T3920] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 107.146694][ T3920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 107.155481][ T3920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:568 [ 107.196783][ T3924] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.206899][ T3926] rust_binder: inc_ref_done called when no active inc_refs [ 107.253761][ T3928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.261295][ T3928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:576 [ 107.271585][ T3928] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 107.281202][ T3928] rust_binder: Read failure Err(EFAULT) in pid:576 [ 107.318097][ T507] rust_binder: 3841: removing orphan mapping 0:24 [ 107.473720][ T36] audit: type=1326 audit(2000000577.181:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.3.1248" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6cfc18ebe9 code=0x0 [ 107.520900][ T36] audit: type=1400 audit(2000000577.231:531): avc: denied { setattr } for pid=3936 comm="syz.0.1247" name="/" dev="configfs" ino=1665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.529904][ T3942] tmpfs: Invalid uid '0x00000000ffffffff' [ 107.545186][ T36] audit: type=1400 audit(2000000577.241:532): avc: denied { getopt } for pid=3936 comm="syz.0.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.550586][ T411] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 107.572103][ T36] audit: type=1400 audit(2000000577.241:533): avc: denied { mounton } for pid=3936 comm="syz.0.1247" path="/" dev="configfs" ino=1665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.730506][ T411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 107.742709][ T411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.754144][ T411] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 107.768719][ T411] usb 3-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 107.778706][ T411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.787685][ T411] usb 3-1: config 0 descriptor?? [ 108.198563][ T411] saitek 0003:0738:1709.000E: unknown main item tag 0x0 [ 108.207258][ T411] saitek 0003:0738:1709.000E: unknown main item tag 0x0 [ 108.223584][ T411] saitek 0003:0738:1709.000E: unknown main item tag 0x0 [ 108.233215][ T411] saitek 0003:0738:1709.000E: item fetching failed at offset 3/5 [ 108.243845][ T411] saitek 0003:0738:1709.000E: parse failed [ 108.250968][ T411] saitek 0003:0738:1709.000E: probe with driver saitek failed with error -22 [ 108.319129][ T36] audit: type=1326 audit(2000000578.031:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.3.1254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cfc18ebe9 code=0x0 [ 108.400615][ T537] usb 3-1: USB disconnect, device number 36 [ 108.478672][ T31] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 108.640126][ T31] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 108.653080][ T31] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.668494][ T31] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 108.688783][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.701287][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 108.712977][ T31] usb 1-1: SerialNumber: syz [ 108.942006][ T3962] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.178635][ T411] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 109.368632][ T411] usb 3-1: Using ep0 maxpacket: 8 [ 109.382001][ T411] usb 3-1: config 254 has an invalid interface number: 48 but max is 0 [ 109.404205][ T411] usb 3-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 109.419074][ T411] usb 3-1: config 254 has no interface number 0 [ 109.428613][ T411] usb 3-1: too many endpoints for config 254 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 109.445750][ T411] usb 3-1: config 254 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 109.467399][ T411] usb 3-1: config 254 interface 48 has no altsetting 0 [ 109.475373][ T411] usb 3-1: New USB device found, idVendor=0403, idProduct=7150, bcdDevice=eb.e0 [ 109.490996][ T411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.538040][ T31] rndis_host 1-1:253.0: RNDIS init failed, -71 [ 109.546205][ T31] rndis_host 1-1:253.0: probe with driver rndis_host failed with error -71 [ 109.559357][ T31] usb 1-1: USB disconnect, device number 42 [ 109.604842][ T36] audit: type=1400 audit(2000000579.311:535): avc: denied { remount } for pid=3968 comm="syz.0.1258" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 109.629914][ T36] audit: type=1400 audit(2000000579.341:536): avc: denied { mounton } for pid=3968 comm="syz.0.1258" path="/195/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 109.706967][ T3962] SELinux: Context system_u:object_r:devlog_t:s0 is not valid (left unmapped). [ 109.717905][ T3962] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.769226][ T3976] rust_binder: Error in use_page_slow: ESRCH [ 109.776001][ T3976] rust_binder: use_range failure ESRCH [ 109.782891][ T3976] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 109.788961][ T3976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 109.798507][ T3976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:580 [ 109.905436][ T3975] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 109.988650][ T31] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 110.139906][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.152331][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 110.165261][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 110.178619][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.194017][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.204606][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.216618][ T31] usb 1-1: config 0 descriptor?? [ 110.224625][ T3971] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 111.041729][ T31] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 111.051093][ T31] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 111.242472][ T3993] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 111.674306][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 111.674328][ T36] audit: type=1400 audit(2000000581.381:541): avc: denied { map } for pid=4017 comm="syz.3.1277" path="socket:[19405]" dev="sockfs" ino=19405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 111.940689][ T411] usb 3-1: string descriptor 0 read error: -71 [ 111.956857][ T411] ftdi_sio 3-1:254.48: FTDI USB Serial Device converter detected [ 111.968087][ T411] ftdi_sio ttyUSB0: unknown device type: 0xebe0 [ 111.989679][ T411] usb 3-1: USB disconnect, device number 37 [ 112.008882][ T411] ftdi_sio 3-1:254.48: device disconnected [ 112.015923][ T36] audit: type=1326 audit(2000000581.721:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf78ebe9 code=0x7ffc0000 [ 112.069174][ T36] audit: type=1326 audit(2000000581.721:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf78ebe9 code=0x7ffc0000 [ 112.093625][ T36] audit: type=1326 audit(2000000581.721:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf78ebe9 code=0x7ffc0000 [ 112.120171][ T36] audit: type=1326 audit(2000000581.721:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf78ebe9 code=0x7ffc0000 [ 112.145417][ T36] audit: type=1326 audit(2000000581.721:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf78ebe9 code=0x7ffc0000 [ 112.171610][ T36] audit: type=1326 audit(2000000581.751:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbfdf78ebe9 code=0x7ffc0000 [ 112.197246][ T36] audit: type=1326 audit(2000000581.751:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf78ebe9 code=0x7ffc0000 [ 112.229729][ T36] audit: type=1326 audit(2000000581.751:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf78ebe9 code=0x7ffc0000 [ 112.254718][ T36] audit: type=1326 audit(2000000581.751:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf78ebe9 code=0x7ffc0000 [ 112.326465][ T4033] /dev/rnullb0: Can't lookup blockdev [ 112.673035][ T411] usb 1-1: USB disconnect, device number 43 [ 113.073893][ T4085] 9pnet_fd: Insufficient options for proto=fd [ 113.093305][ T4085] incfs: Error accessing: ./file0. [ 113.105657][ T4085] incfs: mount failed -20 [ 113.238633][ T411] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 113.398638][ T411] usb 3-1: Using ep0 maxpacket: 16 [ 113.419885][ T411] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 113.429070][ T411] usb 3-1: config 0 has no interface number 0 [ 113.436818][ T411] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 113.458783][ T411] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 113.470310][ T411] usb 3-1: config 0 interface 41 has no altsetting 0 [ 113.480299][ T411] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 113.491394][ T411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.500469][ T411] usb 3-1: Product: syz [ 113.506045][ T411] usb 3-1: Manufacturer: syz [ 113.511056][ T411] usb 3-1: SerialNumber: syz [ 113.520574][ T411] usb 3-1: config 0 descriptor?? [ 113.527737][ T4080] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.537075][ T4080] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.755327][ T4080] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.768676][ T4080] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 114.005845][ T411] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 114.018266][ T411] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 114.028008][ T4134] fuse: Bad value for 'group_id' [ 114.033681][ T4134] fuse: Bad value for 'group_id' [ 114.050947][ T411] usb 3-1: USB disconnect, device number 38 [ 114.063205][ T4136] fuse: Unknown parameter '00000000000000000000000' [ 114.201490][ T4151] /dev/loop0: Can't lookup blockdev [ 114.289993][ T4166] fuse: Unknown parameter 'smackfsroot' [ 114.339377][ T4173] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1331'. [ 114.648636][ T411] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 114.741354][ T4189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.808664][ T411] usb 1-1: Using ep0 maxpacket: 16 [ 114.829872][ T411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.841897][ T411] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 114.851467][ T411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.863108][ T411] usb 1-1: config 0 descriptor?? [ 115.020893][ T4201] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1342'. [ 115.065961][ T4203] 9p: Unknown Cache mode or invalid value fscache.k [ 115.398240][ T4214] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.410772][ T4214] netlink: 'syz.2.1348': attribute type 27 has an invalid length. [ 115.479015][ T411] usbhid 1-1:0.0: can't add hid device: -71 [ 115.495713][ T411] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 115.509890][ T411] usb 1-1: USB disconnect, device number 44 [ 115.516265][ T4214] rust_binder: Error in use_page_slow: ESRCH [ 115.516291][ T4214] rust_binder: use_range failure ESRCH [ 115.522974][ T4214] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 115.529650][ T4214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 115.538097][ T4214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:604 [ 115.554006][ T4226] overlayfs: failed to clone upperpath [ 116.773562][ T4295] rust_binder: 624: no such ref 0 [ 116.780819][ T36] kauditd_printk_skb: 465 callbacks suppressed [ 116.780838][ T36] audit: type=1400 audit(2000000586.491:1016): avc: denied { validate_trans } for pid=4294 comm="syz.2.1379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 116.949975][ T36] audit: type=1400 audit(2000000586.661:1017): avc: denied { mounton } for pid=4297 comm="syz.2.1380" path="/219/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 117.328687][ T537] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 117.478654][ T537] usb 1-1: Using ep0 maxpacket: 32 [ 117.485833][ T537] usb 1-1: unable to get BOS descriptor or descriptor too short [ 117.496184][ T537] usb 1-1: config index 0 descriptor too short (expected 257, got 36) [ 117.507309][ T537] usb 1-1: config 9 has an invalid descriptor of length 64, skipping remainder of the config [ 117.518896][ T537] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 9 [ 117.532389][ T537] usb 1-1: string descriptor 0 read error: -22 [ 117.539835][ T537] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 117.550840][ T537] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.696586][ T4338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.696905][ T4338] rust_binder: Error in use_page_slow: ESRCH [ 117.703896][ T4338] rust_binder: use_range failure ESRCH [ 117.710166][ T4338] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 117.715842][ T4338] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 117.725087][ T4338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:631 [ 117.760290][ T4343] usb usb8: usbfs: process 4343 (syz.2.1395) did not claim interface 0 before use [ 117.781905][ T4313] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 117.791832][ T671] usb 1-1: USB disconnect, device number 45 [ 118.034967][ T411] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 118.191009][ T411] usb 3-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 118.204734][ T411] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 118.218138][ T411] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 118.236705][ T411] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.249320][ T411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 118.259279][ T411] usb 3-1: SerialNumber: syz [ 118.281099][ T411] cdc_acm 3-1:1.0: Zero length descriptor references [ 118.296033][ T411] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 118.481582][ T4343] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.481963][ T4343] rust_binder: inc_ref_done called when no active inc_refs [ 118.492451][ T411] usb 3-1: USB disconnect, device number 39 [ 118.853464][ T4379] SELinux: security_context_str_to_sid () failed with errno=-22 [ 118.965806][ T4390] cgroup: Invalid name [ 119.070120][ T411] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 119.126580][ T36] audit: type=1400 audit(2000000588.831:1018): avc: denied { bpf } for pid=4411 comm="syz.4.1420" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 119.233006][ T4429] overlayfs: failed to clone upperpath [ 119.238680][ T411] usb 1-1: Using ep0 maxpacket: 16 [ 119.248826][ T411] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 119.258429][ T411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.272687][ T411] usb 1-1: config 0 descriptor?? [ 119.280698][ T411] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 119.294147][ T4433] /dev/rnullb0: Can't lookup blockdev [ 119.438694][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 119.479978][ T411] usb 1-1: Detected FT232A [ 119.487334][ T411] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 119.498065][ T411] usb 1-1: USB disconnect, device number 46 [ 119.507578][ T411] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 119.520212][ T411] ftdi_sio 1-1:0.0: device disconnected [ 119.598692][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 119.606531][ T9] usb 3-1: config 0 has an invalid interface number: 71 but max is 0 [ 119.616951][ T9] usb 3-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 119.629712][ T9] usb 3-1: config 0 has no interface number 0 [ 119.636641][ T9] usb 3-1: too many endpoints for config 0 interface 71 altsetting 11: 110, using maximum allowed: 30 [ 119.649372][ T9] usb 3-1: config 0 interface 71 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 119.664036][ T9] usb 3-1: config 0 interface 71 has no altsetting 0 [ 119.673551][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 119.683827][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.693830][ T9] usb 3-1: Product: syz [ 119.699307][ T9] usb 3-1: Manufacturer: syz [ 119.704890][ T9] usb 3-1: SerialNumber: syz [ 119.711811][ T9] usb 3-1: config 0 descriptor?? [ 119.728047][ T4446] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.924565][ T9] smsc95xx v2.0.0 [ 119.930318][ T9] smsc95xx 3-1:0.71 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 119.942000][ T9] smsc95xx 3-1:0.71: probe with driver smsc95xx failed with error -22 [ 119.952030][ T9] usb 3-1: USB disconnect, device number 40 [ 120.021843][ T4453] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 120.144251][ T4459] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.151868][ T4459] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.159951][ T4459] bridge0: entered promiscuous mode [ 120.165395][ T4459] bridge0: entered allmulticast mode [ 120.173194][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.181045][ T4459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.190433][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.199780][ T4459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.240180][ T4465] /dev/rnullb0: Can't open blockdev [ 120.677111][ T4479] 9pnet_fd: Insufficient options for proto=fd [ 120.788716][ T671] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 120.945001][ T671] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 120.954000][ T671] usb 3-1: config 0 has no interface number 1 [ 120.960752][ T671] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 120.971392][ T671] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 120.984195][ T671] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 120.994064][ T671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.002709][ T671] usb 3-1: SerialNumber: syz [ 121.009237][ T671] usb 3-1: config 0 descriptor?? [ 121.029458][ T4503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4503 comm=syz.4.1452 [ 121.044611][ T4503] overlayfs: failed to resolve './file1': -2 [ 121.222520][ T671] usb 3-1: Found UVC 0.00 device (0002:0000) [ 121.242689][ T671] usb 3-1: No valid video chain found. [ 121.254632][ T671] usb 3-1: USB disconnect, device number 41 [ 121.678149][ T4525] SELinux: policydb magic number 0x40486311 does not match expected magic number 0xf97cff8c [ 121.678784][ T36] audit: type=1400 audit(2000000591.381:1019): avc: denied { load_policy } for pid=4524 comm="syz.0.1458" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 121.697789][ T4525] SELinux: failed to load policy [ 121.730206][ T4525] rust_binder: Write failure EFAULT in pid:661 [ 121.762490][ T4529] __vm_enough_memory: pid: 4529, comm: syz.2.1459, bytes: 18014402804453376 not enough memory for the allocation [ 121.838530][ T36] audit: type=1400 audit(2000000591.541:1020): avc: denied { audit_control } for pid=4533 comm="syz.0.1461" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 121.992549][ T4550] overlayfs: failed to clone upperpath [ 122.716729][ T36] audit: type=1400 audit(2000000592.421:1021): avc: denied { map } for pid=4561 comm="syz.2.1471" path="socket:[22756]" dev="sockfs" ino=22756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 122.934371][ T4591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.942509][ T4591] rust_binder: Error in use_page_slow: ESRCH [ 122.942534][ T4591] rust_binder: use_range failure ESRCH [ 122.948917][ T4591] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 122.954584][ T4591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 122.962800][ T4591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:679 [ 123.011378][ T36] audit: type=1400 audit(2000000592.721:1022): avc: denied { setopt } for pid=4598 comm="syz.0.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.090195][ T4614] overlay: Unknown parameter 'hash' [ 123.278653][ T31] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 123.383619][ T4635] overlayfs: failed to clone upperpath [ 123.420532][ T36] audit: type=1400 audit(2000000593.131:1023): avc: denied { create } for pid=4640 comm="syz.3.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.441704][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 123.449928][ T31] usb 1-1: config 1 has an invalid interface number: 152 but max is 0 [ 123.459593][ T31] usb 1-1: config 1 has no interface number 0 [ 123.466593][ T31] usb 1-1: config 1 interface 152 altsetting 3 endpoint 0xD has an invalid bInterval 64, changing to 7 [ 123.481120][ T31] usb 1-1: config 1 interface 152 has no altsetting 0 [ 123.490053][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=0282, bcdDevice=d4.ef [ 123.500932][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.510261][ T31] usb 1-1: Product: syz [ 123.514716][ T31] usb 1-1: Manufacturer: syz [ 123.520003][ T31] usb 1-1: SerialNumber: syz [ 123.821601][ T4599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.852796][ T4599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.947353][ T31] usbhid 1-1:1.152: couldn't find an input interrupt endpoint [ 123.977505][ T31] usb 1-1: USB disconnect, device number 47 [ 124.067057][ T4716] tipc: Enabling of bearer rejected, media not registered [ 124.099178][ T36] audit: type=1326 audit(2000000593.811:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4705 comm="syz.2.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf78ebe9 code=0x7fc00000 [ 125.098488][ T36] audit: type=1326 audit(2000000594.801:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4705 comm="syz.2.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfdf72ade9 code=0x7fc00000 [ 125.374539][ T4769] fuse: Unknown parameter '0x00000000000000000x0000000000000000' [ 125.469707][ T36] audit: type=1400 audit(2000000595.181:1026): avc: denied { mount } for pid=4774 comm="syz.0.1540" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 125.510964][ T36] audit: type=1400 audit(2000000595.221:1027): avc: denied { connect } for pid=4776 comm="syz.0.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.549231][ T4779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1542'. [ 125.688994][ T4788] incfs_lookup_dentry err:-13 [ 125.693835][ T4788] incfs: Can't find or create .index dir in ./bus [ 125.700662][ T4788] incfs: mount failed -13 [ 125.723076][ T36] audit: type=1400 audit(2000000595.431:1028): avc: denied { setattr } for pid=4791 comm="syz.4.1547" name="TIPC" dev="sockfs" ino=22373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.080066][ T36] audit: type=1400 audit(2000000595.791:1029): avc: denied { ioctl } for pid=4805 comm="syz.4.1554" path="socket:[23317]" dev="sockfs" ino=23317 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.081011][ T4808] devpts: called with bogus options [ 126.115899][ T4808] tmpfs: Bad value for 'size' [ 126.271448][ T4815] overlayfs: failed to clone lowerpath [ 126.422264][ T4823] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 126.818703][ T31] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 126.832147][ T4846] overlayfs: failed to clone lowerpath [ 126.839556][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 126.839572][ T36] audit: type=1400 audit(2000000596.551:1031): avc: denied { read } for pid=4848 comm="syz.4.1569" name="file0" dev="tmpfs" ino=2757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 126.958758][ T31] usb 1-1: device descriptor read/64, error -71 [ 127.139319][ T4883] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1579'. [ 127.208672][ T31] usb 1-1: device descriptor read/64, error -71 [ 127.448690][ T31] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 127.578658][ T31] usb 1-1: device descriptor read/64, error -71 [ 127.776389][ T4901] overlayfs: failed to clone lowerpath [ 127.818709][ T31] usb 1-1: device descriptor read/64, error -71 [ 127.929288][ T31] usb usb1-port1: attempt power cycle [ 128.050625][ T4914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1590'. [ 128.268708][ T31] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 128.289992][ T31] usb 1-1: device descriptor read/8, error -71 [ 128.419993][ T31] usb 1-1: device descriptor read/8, error -71 [ 128.658662][ T31] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 128.680013][ T31] usb 1-1: device descriptor read/8, error -71 [ 128.809905][ T31] usb 1-1: device descriptor read/8, error -71 [ 128.918920][ T31] usb usb1-port1: unable to enumerate USB device [ 129.611870][ T4992] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 129.611899][ T4992] rust_binder: Error while translating object. [ 129.621053][ T4992] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.627651][ T4992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:710 [ 129.716125][ T4996] syz.0.1617 (4996): attempted to duplicate a private mapping with mremap. This is not supported. [ 129.749549][ T4996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.749592][ T4996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:714 [ 129.845827][ T5005] binder: Bad value for 'stats' [ 129.908891][ T5010] overlayfs: failed to clone upperpath [ 130.118666][ T31] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 130.268700][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 130.275708][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.287952][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.298295][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 130.313258][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 130.322951][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.331937][ T31] usb 1-1: config 0 descriptor?? [ 130.469176][ T5023] /dev/rnullb0: Can't lookup blockdev [ 130.742316][ T31] hid (null): invalid report_size 29808 [ 130.749064][ T31] hid (null): invalid report_size 28719 [ 130.762110][ T31] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0010/input/input17 [ 130.785390][ T31] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0010/input/input18 [ 130.818820][ T31] kye 0003:0458:5013.0010: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 130.944274][ T9] usb 1-1: USB disconnect, device number 52 [ 131.035486][ T5053] syz.4.1638 uses obsolete (PF_INET,SOCK_PACKET) [ 131.042653][ T5053] netlink: 540 bytes leftover after parsing attributes in process `syz.4.1638'. [ 131.077388][ T5057] /dev/rnullb0: Can't lookup blockdev [ 131.110068][ T5061] new mount options do not match the existing superblock, will be ignored [ 131.135708][ T5063] netlink: 'syz.4.1643': attribute type 4 has an invalid length. [ 131.248418][ T5074] fuse: Unknown parameter '' [ 131.343909][ T36] audit: type=1400 audit(2000000601.051:1032): avc: denied { map } for pid=5102 comm="syz.2.1658" path="socket:[24740]" dev="sockfs" ino=24740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.437288][ T5115] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 131.494578][ T5125] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 131.494689][ T5125] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true [ 131.595967][ T5137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1671'. [ 131.808681][ T31] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 131.898698][ T36] audit: type=1400 audit(2000000601.601:1033): avc: denied { create } for pid=5155 comm="syz.2.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 131.960172][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 131.970893][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 131.983495][ T31] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 131.992825][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.001244][ T31] usb 1-1: Product: syz [ 132.005611][ T31] usb 1-1: Manufacturer: syz [ 132.010391][ T31] usb 1-1: SerialNumber: syz [ 132.016164][ T31] usb 1-1: config 0 descriptor?? [ 132.022020][ T5135] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 132.030302][ T5135] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 132.238522][ T5135] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 132.246059][ T5135] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 132.659276][ T31] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 132.728692][ T5192] overlayfs: failed to clone upperpath [ 132.868731][ T31] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 132.881425][ T31] usb 1-1: USB disconnect, device number 53 [ 133.073995][ T5228] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 133.083422][ T5228] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 133.092113][ T5228] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 133.104558][ T5228] overlayfs: missing 'lowerdir' [ 133.149854][ T5234] overlayfs: failed to clone upperpath [ 133.762297][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 133.873618][ T5255] overlayfs: failed to clone upperpath [ 133.919770][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.931691][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.943103][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 133.956546][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.970508][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.979868][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.989480][ T9] usb 1-1: config 0 descriptor?? [ 134.078057][ T36] audit: type=1400 audit(2000000603.781:1034): avc: denied { connect } for pid=5264 comm="syz.4.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.400397][ T9] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 134.417371][ T9] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 134.450631][ T9] usb 1-1: USB disconnect, device number 54 [ 134.461299][ T5284] tipc: Started in network mode [ 134.474201][ T5284] tipc: Node identity c, cluster identity 4711 [ 134.482443][ T5284] tipc: Node number set to 12 [ 134.491087][ T36] audit: type=1326 audit(2000000604.201:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.3.1725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cfc18ebe9 code=0x2000000 [ 134.787041][ T5298] rust_binder: 5297 RLIMIT_NICE not set [ 135.108673][ T31] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 135.268642][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 135.275416][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 135.284104][ T31] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 135.292690][ T31] usb 1-1: config 0 has no interface number 0 [ 135.299044][ T31] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 135.310090][ T31] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 135.319965][ T31] usb 1-1: config 0 interface 88 has no altsetting 0 [ 135.328866][ T31] usb 1-1: string descriptor 0 read error: -22 [ 135.335136][ T31] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 135.344297][ T31] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 135.353275][ T31] usb 1-1: config 0 descriptor?? [ 135.360140][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input20 [ 135.380338][ T344] udevd[344]: Error opening device "/dev/input/event3": Input/output error [ 135.389121][ T344] udevd[344]: Unable to EVIOCGABS device "/dev/input/event3" [ 135.396660][ T344] udevd[344]: Unable to EVIOCGABS device "/dev/input/event3" [ 135.561313][ T31] usb 1-1: USB disconnect, device number 55 [ 135.603964][ T5309] /dev/rnullb0: Can't lookup blockdev [ 135.762296][ T36] audit: type=1326 audit(2000000605.471:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5320 comm="syz.4.1740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d58ebe9 code=0x0 [ 135.918695][ T31] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 136.068631][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 136.075286][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.086426][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.096249][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.109241][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 136.118500][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.127325][ T31] usb 1-1: config 0 descriptor?? [ 136.166803][ T5336] 9pnet_fd: Insufficient options for proto=fd [ 136.220469][ T5343] tipc: Enabling of bearer rejected, failed to enable media [ 136.269995][ T5349] 9pnet_fd: Insufficient options for proto=fd [ 136.289948][ T5352] 9pnet_fd: Insufficient options for proto=fd [ 136.535983][ T31] microsoft 0003:045E:07DA.0012: invalid report_count 997398948 [ 136.543829][ T31] microsoft 0003:045E:07DA.0012: item 0 4 1 9 parsing failed [ 136.552405][ T31] microsoft 0003:045E:07DA.0012: parse failed [ 136.559415][ T31] microsoft 0003:045E:07DA.0012: probe with driver microsoft failed with error -22 [ 136.675212][ T36] audit: type=1400 audit(2000000606.381:1037): avc: denied { mounton } for pid=5374 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 136.747033][ T5374] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.754343][ T5374] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.762256][ T5374] bridge_slave_0: entered allmulticast mode [ 136.769170][ T5374] bridge_slave_0: entered promiscuous mode [ 136.775994][ T5374] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.783305][ T5374] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.790878][ T5374] bridge_slave_1: entered allmulticast mode [ 136.797375][ T5374] bridge_slave_1: entered promiscuous mode [ 136.808484][ T9] usb 1-1: USB disconnect, device number 56 [ 136.893606][ T5374] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.900898][ T5374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.908209][ T5374] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.915290][ T5374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.937183][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.944743][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.954914][ T36] audit: type=1326 audit(2000000606.671:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595238ebe9 code=0x7ff00000 [ 136.956856][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.985975][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.986900][ T36] audit: type=1326 audit(2000000606.691:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595238ebe9 code=0x7ff00000 [ 137.018647][ T36] audit: type=1326 audit(2000000606.691:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595238ebe9 code=0x7ff00000 [ 137.044122][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.044129][ T36] audit: type=1326 audit(2000000606.691:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595238ebe9 code=0x7ff00000 [ 137.044162][ T36] audit: type=1326 audit(2000000606.691:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595238ebe9 code=0x7ff00000 [ 137.051273][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.062542][ T5374] veth0_vlan: entered promiscuous mode [ 137.076129][ T36] audit: type=1326 audit(2000000606.691:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595238ebe9 code=0x7ff00000 [ 137.118636][ T5374] veth1_macvtap: entered promiscuous mode [ 137.139657][ T36] audit: type=1326 audit(2000000606.691:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595238ebe9 code=0x7ff00000 [ 137.164575][ T36] audit: type=1326 audit(2000000606.691:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595238ebe9 code=0x7ff00000 [ 137.188856][ T36] audit: type=1326 audit(2000000606.691:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595238ebe9 code=0x7ff00000 [ 137.233868][ T5393] netlink: 'syz.0.1763': attribute type 4 has an invalid length. [ 137.242441][ T36] audit: type=1326 audit(2000000606.691:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595238ebe9 code=0x7ff00000 [ 137.251491][ T5393] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1763'. [ 137.278447][ T5397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1761'. [ 137.288361][ T5395] tipc: Enabling of bearer rejected, failed to enable media [ 137.718692][ T411] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 137.870340][ T411] usb 1-1: unable to get BOS descriptor or descriptor too short [ 137.879333][ T411] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt [ 137.889344][ T411] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.904264][ T411] usb 1-1: config 1 interface 0 has no altsetting 0 [ 137.923395][ T411] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 137.934291][ T411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.946769][ T5419] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.167702][ T411] usb 1-1: USB disconnect, device number 57 [ 138.618635][ T411] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 138.691525][ T5496] overlayfs: missing 'lowerdir' [ 138.696909][ T5496] rust_binder: Error while translating object. [ 138.696939][ T5496] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 138.703541][ T5496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:769 [ 138.713892][ T5496] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 138.745581][ T5498] rust_binder: Error while translating object. [ 138.745623][ T5498] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 138.752001][ T5498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:771 [ 138.779747][ T411] usb 4-1: config 9 has an invalid descriptor of length 51, skipping remainder of the config [ 138.810347][ T411] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 138.810790][ T5507] /dev/rnullb0: Can't open blockdev [ 138.819552][ T411] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 138.838618][ T411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.860863][ T5511] cgroup: Unknown subsys name 'rdma' [ 139.038910][ T5525] rust_binder: Write failure EINVAL in pid:781 [ 139.288879][ T31] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 139.459734][ T31] usb 1-1: config index 0 descriptor too short (expected 240, got 45) [ 139.478675][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.494631][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.508412][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.522005][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.28 [ 139.531702][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.555205][ T31] usb 1-1: config 0 descriptor?? [ 139.594180][ T411] usb 4-1: string descriptor 0 read error: -71 [ 139.609517][ T411] usb 4-1: USB disconnect, device number 7 [ 139.967763][ T5527] syzkaller1: entered promiscuous mode [ 139.973831][ T5527] syzkaller1: entered allmulticast mode [ 139.983419][ T5527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.992111][ T5527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.001118][ T5527] rust_binder: 783: no such ref 1 [ 140.006585][ T5527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:783 [ 140.009365][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 140.024980][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 140.036174][ T31] usb 1-1: USB disconnect, device number 58 [ 140.188716][ T5581] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 140.707868][ T5605] __vm_enough_memory: pid: 5605, comm: syz.0.1836, bytes: 18014402804453376 not enough memory for the allocation [ 140.744067][ T5610] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1837'. [ 140.770504][ T5610] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 140.783058][ T5610] binder: Unknown parameter 's'label' [ 141.117001][ T5625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 141.124902][ T5626] rust_binder: 47: no such ref 1 [ 141.134249][ T5626] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 141.141515][ T5626] rust_binder: Error while translating object. [ 141.141592][ T5626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 141.147863][ T5626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:47 [ 141.239734][ T5636] rust_binder: Write failure EFAULT in pid:57 [ 141.948677][ T537] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 141.990633][ T5668] /dev/rnullb0: Can't open blockdev [ 142.010150][ T36] kauditd_printk_skb: 1347 callbacks suppressed [ 142.010168][ T36] audit: type=1400 audit(2000000611.721:2395): avc: denied { getopt } for pid=5669 comm="syz.0.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.109696][ T537] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 142.127614][ T537] usb 4-1: config 1 has no interface number 0 [ 142.134222][ T537] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 142.144227][ T537] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x71, changing to 0x1 [ 142.155948][ T537] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 142.183043][ T537] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 142.195458][ T537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.203798][ T537] usb 4-1: Product: syz [ 142.208090][ T537] usb 4-1: Manufacturer: syz [ 142.212792][ T537] usb 4-1: SerialNumber: syz [ 142.228069][ T5646] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 142.237016][ T5646] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 142.391143][ T5708] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 142.398450][ T5708] rust_binder: Write failure EINVAL in pid:835 [ 142.452281][ T507] usb 4-1: USB disconnect, device number 8 [ 142.708658][ T31] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 142.838677][ T31] usb 1-1: device descriptor read/64, error -71 [ 143.078668][ T31] usb 1-1: device descriptor read/64, error -71 [ 143.318704][ T31] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 143.385668][ T5739] overlayfs: failed to clone upperpath [ 143.408657][ T537] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 143.448683][ T31] usb 1-1: device descriptor read/64, error -71 [ 143.560211][ T537] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.570494][ T537] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.580192][ T537] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 143.589982][ T537] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.598032][ T537] usb 4-1: SerialNumber: syz [ 143.688676][ T31] usb 1-1: device descriptor read/64, error -71 [ 143.798946][ T31] usb usb1-port1: attempt power cycle [ 143.805259][ T5737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.814268][ T5737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.025578][ T537] usb 4-1: 0:2 : does not exist [ 144.040760][ T537] usb 4-1: USB disconnect, device number 9 [ 144.056378][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 144.140408][ T31] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 144.179689][ T31] usb 1-1: device descriptor read/8, error -71 [ 144.287030][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.294377][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.302036][ T5759] bridge_slave_0: entered allmulticast mode [ 144.308461][ T5759] bridge_slave_0: entered promiscuous mode [ 144.309725][ T31] usb 1-1: device descriptor read/8, error -71 [ 144.316063][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.328328][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.335620][ T5759] bridge_slave_1: entered allmulticast mode [ 144.341973][ T5759] bridge_slave_1: entered promiscuous mode [ 144.413283][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.421656][ T5759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.429115][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.436208][ T5759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.463939][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.471690][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.482363][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.489466][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.499411][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.507057][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.542567][ T5759] veth0_vlan: entered promiscuous mode [ 144.558387][ T5759] veth1_macvtap: entered promiscuous mode [ 144.568637][ T31] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 144.589806][ T31] usb 1-1: device descriptor read/8, error -71 [ 144.674138][ T5811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:71 [ 144.719933][ T31] usb 1-1: device descriptor read/8, error -71 [ 144.839039][ T31] usb usb1-port1: unable to enumerate USB device [ 145.023226][ T5832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 145.023255][ T5832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:16 [ 145.033451][ T5833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 145.429012][ T5839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:841 [ 145.539572][ T5844] SELinux: failed to load policy [ 145.562580][ T5842] kvm: pic: non byte write [ 145.584110][ T5846] rust_binder: Write failure EINVAL in pid:843 [ 145.706979][ T5851] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 145.722023][ T5851] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 145.766185][ T5854] bpf: Bad value for 'uid' [ 145.772049][ T36] audit: type=1400 audit(2000000615.481:2396): avc: denied { remount } for pid=5853 comm="syz.3.1914" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 145.881395][ T46] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 145.892527][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 145.978634][ T537] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 146.068037][ T5897] tipc: Enabling of bearer rejected, failed to enable media [ 146.119727][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1928'. [ 146.128728][ T537] usb 1-1: Using ep0 maxpacket: 32 [ 146.135565][ T537] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.146679][ T537] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.156491][ T537] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 146.166199][ T537] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.178816][ T537] usb 1-1: config 0 descriptor?? [ 146.319561][ T5909] input input21: cannot allocate more than FF_MAX_EFFECTS effects [ 146.329980][ T5909] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1931'. [ 146.592548][ T537] savu 0003:1E7D:2D5A.0013: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 146.731662][ T5918] 9pnet_fd: Insufficient options for proto=fd [ 146.841636][ T64] usb 1-1: USB disconnect, device number 63 [ 147.256776][ T5929] rust_binder: Write failure EFAULT in pid:50 [ 147.387979][ T5942] netlink: 'syz.2.1942': attribute type 4 has an invalid length. [ 147.402238][ T5942] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1942'. [ 147.424534][ T5946] /dev/rnullb0: Can't open blockdev [ 147.698703][ T507] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 147.838694][ T64] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 147.850171][ T507] usb 5-1: unable to get BOS descriptor or descriptor too short [ 147.858683][ T507] usb 5-1: config 8 has an invalid interface number: 43 but max is 0 [ 147.866849][ T507] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 147.875588][ T507] usb 5-1: config 8 has no interface number 0 [ 147.881874][ T507] usb 5-1: config 8 interface 43 altsetting 255 endpoint 0x4 has invalid maxpacket 3840, setting to 1024 [ 147.893125][ T507] usb 5-1: config 8 interface 43 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 1024 [ 147.903375][ T507] usb 5-1: config 8 interface 43 has no altsetting 0 [ 147.911770][ T507] usb 5-1: New USB device found, idVendor=0582, idProduct=935b, bcdDevice=be.6c [ 147.920888][ T507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=33 [ 147.928641][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 147.929070][ T956] Bluetooth: hci0: command 0x1003 tx timeout [ 147.941137][ T5952] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1946'. [ 147.941340][ T507] usb 5-1: Product: syz [ 147.951012][ T5952] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1946'. [ 147.954554][ T507] usb 5-1: Manufacturer: syz [ 147.968058][ T507] usb 5-1: SerialNumber: syz [ 147.970027][ T5952] netlink: 'syz.2.1946': attribute type 6 has an invalid length. [ 147.981402][ T5952] netlink: 'syz.2.1946': attribute type 5 has an invalid length. [ 147.989267][ T5944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.989459][ T5952] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1946'. [ 148.006672][ T64] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.023006][ T64] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 148.032163][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 148.040362][ T64] usb 1-1: Product: syz [ 148.046343][ T64] usb 1-1: Manufacturer: syz [ 148.057726][ T64] usb 1-1: SerialNumber: syz [ 148.204193][ T507] usb 5-1: USB disconnect, device number 2 [ 148.231541][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.43/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 148.268290][ T64] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 148.308642][ T411] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 148.459990][ T411] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.471835][ T411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 148.483091][ T411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 148.493249][ T411] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.506195][ T411] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.515331][ T411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.524207][ T411] usb 4-1: config 0 descriptor?? [ 148.533846][ C0] usblp0: nonzero write bulk status received: -71 [ 148.540842][ T507] usb 1-1: USB disconnect, device number 64 [ 148.560001][ T507] usblp0: removed [ 148.731809][ T5985] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 148.731846][ T5985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:57 [ 148.932118][ T411] plantronics 0003:047F:FFFF.0014: unknown main item tag 0xd [ 148.948757][ T411] plantronics 0003:047F:FFFF.0014: item fetching failed at offset 14/15 [ 148.957283][ T411] plantronics 0003:047F:FFFF.0014: parse failed [ 148.963619][ T411] plantronics 0003:047F:FFFF.0014: probe with driver plantronics failed with error -22 [ 148.998640][ T64] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 149.158081][ T64] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 149.167600][ T64] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.178634][ T64] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.190372][ T64] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.200316][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.208465][ T64] usb 5-1: Product: syz [ 149.216145][ T64] usb 5-1: Manufacturer: syz [ 149.220986][ T64] usb 5-1: SerialNumber: syz [ 149.232055][ T330] usb 4-1: USB disconnect, device number 10 [ 149.432341][ T64] usb 5-1: 0:2 : does not exist [ 149.439372][ T64] usb 5-1: USB disconnect, device number 3 [ 149.450271][ T46] bridge_slave_1: left allmulticast mode [ 149.456951][ T46] bridge_slave_1: left promiscuous mode [ 149.469132][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.477845][ T46] bridge_slave_0: left allmulticast mode [ 149.483788][ T46] bridge_slave_0: left promiscuous mode [ 149.490251][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.600975][ T46] tipc: Left network mode [ 149.606457][ T46] veth1_macvtap: left promiscuous mode [ 149.612074][ T46] veth0_vlan: left promiscuous mode [ 149.707560][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.714777][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.722079][ T5999] bridge_slave_0: entered allmulticast mode [ 149.728397][ T5999] bridge_slave_0: entered promiscuous mode [ 149.735153][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.742593][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.749814][ T5999] bridge_slave_1: entered allmulticast mode [ 149.758761][ T5999] bridge_slave_1: entered promiscuous mode [ 149.764501][ T6006] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 149.764707][ T6006] rust_binder: Read failure Err(EFAULT) in pid:91 [ 149.831830][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.846015][ T5999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.853374][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.860470][ T5999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.898729][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.909043][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.919463][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.926597][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.939195][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.946309][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.979018][ T6017] rust_binder: Write failure EINVAL in pid:61 [ 149.992353][ T5999] veth0_vlan: entered promiscuous mode [ 150.016651][ T5999] veth1_macvtap: entered promiscuous mode [ 150.070871][ T6025] usb usb9: check_ctrlrecip: process 6025 (syz.5.1962) requesting ep 01 but needs 81 [ 150.080662][ T6025] usb usb9: usbfs: process 6025 (syz.5.1962) did not claim interface 0 before use [ 150.083869][ T36] audit: type=1400 audit(2000000619.791:2397): avc: denied { shutdown } for pid=6020 comm="syz.3.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 150.091477][ T6025] 9pnet_fd: Insufficient options for proto=fd [ 150.118096][ T6027] usb usb9: check_ctrlrecip: process 6027 (syz.5.1962) requesting ep 01 but needs 81 [ 150.129157][ T6027] usb usb9: usbfs: process 6027 (syz.5.1962) did not claim interface 0 before use [ 150.154027][ T36] audit: type=1400 audit(2000000619.861:2398): avc: denied { mounton } for pid=6030 comm="syz.5.1970" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.210383][ T6031] rust_binder: Error while translating object. [ 150.210422][ T6031] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 150.216837][ T6031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:7 [ 150.444154][ T6040] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1974'. [ 151.068732][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 151.162457][ T36] audit: type=1400 audit(2000000620.871:2399): avc: denied { execute } for pid=6048 comm="syz.2.1977" path="/dev/rnullb0" dev="tmpfs" ino=1286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 151.219729][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.230318][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 151.243922][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.253612][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.265964][ T31] usb 5-1: config 0 descriptor?? [ 151.272781][ T31] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 151.358704][ T64] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 151.508610][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 151.515001][ T64] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 151.525272][ T64] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.536203][ T64] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.536650][ T330] usb 5-1: USB disconnect, device number 4 [ 151.546081][ T64] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 151.565154][ T64] usb 4-1: config 7 interface 0 has no altsetting 0 [ 151.571942][ T64] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 151.581144][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.000274][ T64] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0015/input/input22 [ 152.018890][ T64] kye 0003:0458:5010.0015: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 152.249516][ T31] usb 4-1: USB disconnect, device number 11 [ 152.312244][ T6090] netlink: 'syz.4.1991': attribute type 16 has an invalid length. [ 152.325845][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.334594][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.568646][ T411] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 152.719784][ T411] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 152.729505][ T411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.738139][ T411] usb 5-1: config 0 descriptor?? [ 152.945605][ T411] usb 5-1: Cannot read MAC address [ 152.951012][ T411] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 152.963855][ T411] usb 5-1: USB disconnect, device number 5 [ 153.076816][ T6115] /dev/rnullb0: Can't open blockdev [ 153.290045][ T6123] tmpfs: Bad value for 'nr_blocks' [ 153.333262][ T6129] FAULT_INJECTION: forcing a failure. [ 153.333262][ T6129] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 153.347167][ T6129] CPU: 1 UID: 0 PID: 6129 Comm: syz.3.2003 Not tainted syzkaller #0 6e51b6b85230f66418c68cf4df55f7a3259ed786 [ 153.347207][ T6129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.347226][ T6129] Call Trace: [ 153.347234][ T6129] [ 153.347243][ T6129] __dump_stack+0x21/0x30 [ 153.347297][ T6129] dump_stack_lvl+0x10c/0x190 [ 153.347326][ T6129] ? __cfi_dump_stack_lvl+0x10/0x10 [ 153.347357][ T6129] dump_stack+0x19/0x20 [ 153.347386][ T6129] should_fail_ex+0x3d9/0x530 [ 153.347421][ T6129] should_fail+0xf/0x20 [ 153.347452][ T6129] should_fail_usercopy+0x1e/0x30 [ 153.347472][ T6129] _copy_to_user+0x24/0xa0 [ 153.347498][ T6129] __se_sys_newstat+0x2cf/0x360 [ 153.347528][ T6129] ? __x64_sys_newstat+0x80/0x80 [ 153.347554][ T6129] ? mutex_unlock+0x8b/0x240 [ 153.347587][ T6129] ? __cfi_mutex_unlock+0x10/0x10 [ 153.347619][ T6129] ? __fget_files+0x2c5/0x340 [ 153.347646][ T6129] ? __cfi_ksys_write+0x10/0x10 [ 153.347667][ T6129] ? __kasan_check_read+0x15/0x20 [ 153.347699][ T6129] __x64_sys_newstat+0x5f/0x80 [ 153.347723][ T6129] x64_sys_call+0x5b6/0x2ee0 [ 153.347754][ T6129] do_syscall_64+0x58/0xf0 [ 153.347781][ T6129] ? clear_bhb_loop+0x50/0xa0 [ 153.347803][ T6129] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 153.347838][ T6129] RIP: 0033:0x7fc75e38ebe9 [ 153.347865][ T6129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.347885][ T6129] RSP: 002b:00007fc75f18f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 153.347913][ T6129] RAX: ffffffffffffffda RBX: 00007fc75e5b5fa0 RCX: 00007fc75e38ebe9 [ 153.347931][ T6129] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 00002000000007c0 [ 153.347948][ T6129] RBP: 00007fc75f18f090 R08: 0000000000000000 R09: 0000000000000000 [ 153.347964][ T6129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.347978][ T6129] R13: 00007fc75e5b6038 R14: 00007fc75e5b5fa0 R15: 00007ffc9bc94fd8 [ 153.347998][ T6129] [ 153.594744][ T6130] tmpfs: Unknown parameter 'trans' [ 153.600644][ T6131] tmpfs: Unknown parameter 'trans' [ 153.637312][ T6140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.646322][ T6140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.808838][ T411] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 153.868670][ T330] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 153.908652][ T507] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 153.959796][ T411] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 153.970741][ T411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.981777][ T411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.991742][ T411] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 154.004796][ T330] usb 4-1: device descriptor read/64, error -71 [ 154.012298][ T411] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 154.021431][ T411] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 154.029544][ T411] usb 5-1: Manufacturer: syz [ 154.034754][ T411] usb 5-1: config 0 descriptor?? [ 154.069754][ T507] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.080009][ T507] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 154.093339][ T507] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.102483][ T507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.111311][ T507] usb 6-1: config 0 descriptor?? [ 154.117332][ T507] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 154.242149][ T411] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 154.249402][ T330] usb 4-1: device descriptor read/64, error -71 [ 154.255853][ T411] appleir 0003:05AC:8243.0016: No inputs registered, leaving [ 154.264714][ T411] appleir 0003:05AC:8243.0016: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 154.394213][ T411] usb 6-1: USB disconnect, device number 2 [ 154.441959][ T10] usb 5-1: USB disconnect, device number 6 [ 154.488629][ T330] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 154.618630][ T330] usb 4-1: device descriptor read/64, error -71 [ 154.858646][ T330] usb 4-1: device descriptor read/64, error -71 [ 154.969191][ T330] usb usb4-port1: attempt power cycle [ 155.006032][ T6151] rust_binder: Error while translating object. [ 155.006059][ T6151] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 155.012317][ T6151] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 155.022089][ T6151] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:25 [ 155.041977][ T10] rust_binder: 6150: removing orphan mapping 0:24 [ 155.062454][ T6157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 155.185025][ T6161] FAULT_INJECTION: forcing a failure. [ 155.185025][ T6161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.207613][ T6161] CPU: 1 UID: 0 PID: 6161 Comm: syz.5.2015 Not tainted syzkaller #0 6e51b6b85230f66418c68cf4df55f7a3259ed786 [ 155.207652][ T6161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.207665][ T6161] Call Trace: [ 155.207672][ T6161] [ 155.207680][ T6161] __dump_stack+0x21/0x30 [ 155.207715][ T6161] dump_stack_lvl+0x10c/0x190 [ 155.207744][ T6161] ? __cfi_dump_stack_lvl+0x10/0x10 [ 155.207768][ T6161] dump_stack+0x19/0x20 [ 155.207797][ T6161] should_fail_ex+0x3d9/0x530 [ 155.207822][ T6161] should_fail+0xf/0x20 [ 155.207844][ T6161] should_fail_usercopy+0x1e/0x30 [ 155.207859][ T6161] _copy_to_user+0x24/0xa0 [ 155.207876][ T6161] simple_read_from_buffer+0xed/0x160 [ 155.207897][ T6161] proc_fail_nth_read+0x19e/0x210 [ 155.207918][ T6161] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 155.207939][ T6161] ? bpf_lsm_file_permission+0xd/0x20 [ 155.207961][ T6161] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 155.207982][ T6161] vfs_read+0x278/0xb60 [ 155.208005][ T6161] ? __x64_sys_newstat+0x80/0x80 [ 155.208024][ T6161] ? __cfi_vfs_read+0x10/0x10 [ 155.208049][ T6161] ? __kasan_check_write+0x18/0x20 [ 155.208071][ T6161] ? mutex_lock+0x92/0x1c0 [ 155.208094][ T6161] ? __cfi_mutex_lock+0x10/0x10 [ 155.208117][ T6161] ? __fget_files+0x2c5/0x340 [ 155.208135][ T6161] ksys_read+0x141/0x250 [ 155.208149][ T6161] ? __cfi_ksys_read+0x10/0x10 [ 155.208163][ T6161] ? __kasan_check_read+0x15/0x20 [ 155.208186][ T6161] __x64_sys_read+0x7f/0x90 [ 155.208200][ T6161] x64_sys_call+0x2638/0x2ee0 [ 155.208224][ T6161] do_syscall_64+0x58/0xf0 [ 155.208243][ T6161] ? clear_bhb_loop+0x50/0xa0 [ 155.208259][ T6161] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 155.208285][ T6161] RIP: 0033:0x7ff2e638d5fc [ 155.208298][ T6161] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 155.208312][ T6161] RSP: 002b:00007ff2e72a4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.208330][ T6161] RAX: ffffffffffffffda RBX: 00007ff2e65b5fa0 RCX: 00007ff2e638d5fc [ 155.208342][ T6161] RDX: 000000000000000f RSI: 00007ff2e72a40a0 RDI: 0000000000000007 [ 155.208353][ T6161] RBP: 00007ff2e72a4090 R08: 0000000000000000 R09: 0000000000000000 [ 155.208363][ T6161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.208373][ T6161] R13: 00007ff2e65b6038 R14: 00007ff2e65b5fa0 R15: 00007ffca6c77b48 [ 155.208388][ T6161] [ 155.408897][ T330] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 155.470533][ T330] usb 4-1: device descriptor read/8, error -71 [ 155.478762][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 155.501987][ T36] audit: type=1400 audit(2000000625.211:2400): avc: denied { setattr } for pid=6162 comm="syz.5.2016" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 155.507238][ T6163] fuse: Unknown parameter 'f' [ 155.525858][ T36] audit: type=1400 audit(2000000625.211:2401): avc: denied { mounton } for pid=6162 comm="syz.5.2016" path="/11/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 155.599652][ T330] usb 4-1: device descriptor read/8, error -71 [ 155.639891][ T31] usb 5-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 155.650228][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 155.659292][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.674145][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.683402][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.691551][ T31] usb 5-1: Product: syz [ 155.695845][ T31] usb 5-1: Manufacturer: syz [ 155.700506][ T31] usb 5-1: SerialNumber: syz [ 155.838711][ T330] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 155.871183][ T330] usb 4-1: device descriptor read/8, error -71 [ 155.907409][ T6154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.916003][ T6154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.008636][ T330] usb 4-1: device descriptor read/8, error -71 [ 156.120621][ T330] usb usb4-port1: unable to enumerate USB device [ 156.202270][ T31] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 156.209146][ T31] cdc_ncm 5-1:1.0: bind() failure [ 156.215240][ T31] usb 5-1: USB disconnect, device number 7 [ 156.657047][ T6184] binder: Bad value for 'max' [ 156.753532][ T36] audit: type=1400 audit(2000000626.451:2402): avc: denied { unmount } for pid=5999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 156.788994][ T6203] 9p: Unknown Cache mode or invalid value fscaQeГche [ 156.820070][ T6209] rust_binder: Write failure EINVAL in pid:64 [ 156.998623][ T31] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 157.169789][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 157.180928][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.194144][ T31] usb 5-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 157.203484][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.216851][ T31] usb 5-1: config 0 descriptor?? [ 157.222594][ T6196] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 157.634741][ T31] wacom 0003:056A:00FA.0017: hidraw0: USB HID v1.01 Device [HID 056a:00fa] on usb-dummy_hcd.4-1/input0 [ 157.797652][ T36] audit: type=1400 audit(2000000627.501:2403): avc: denied { append } for pid=6234 comm="syz.3.2037" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.832849][ T31] usb 5-1: USB disconnect, device number 8 [ 158.356453][ T36] audit: type=1400 audit(2000000628.061:2404): avc: denied { setattr } for pid=6237 comm="syz.4.2038" path="pipe:[27762]" dev="pipefs" ino=27762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 159.031173][ T6252] rust_binder: Write failure EINVAL in pid:107 [ 159.056899][ T6254] rust_binder: Error in use_page_slow: ESRCH [ 159.056926][ T6254] rust_binder: use_range failure ESRCH [ 159.068501][ T6254] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 159.068535][ T6254] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 159.076565][ T6254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:107 [ 159.130640][ T6256] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2042'. [ 159.141654][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 159.153983][ T10] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 159.548619][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 159.678640][ T10] usb 5-1: device descriptor read/64, error -71 [ 159.918651][ T10] usb 5-1: device descriptor read/64, error -71 [ 159.942727][ T6264] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2045'. [ 159.963397][ T6269] overlayfs: failed to clone upperpath [ 160.158673][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 160.288714][ T10] usb 5-1: device descriptor read/64, error -71 [ 160.528701][ T10] usb 5-1: device descriptor read/64, error -71 [ 160.638766][ T10] usb usb5-port1: attempt power cycle [ 160.716699][ T36] audit: type=1400 audit(2000000630.421:2405): avc: denied { execute_no_trans } for pid=6298 comm="syz.5.2055" path="/33/file1" dev="tmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 160.978640][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 160.999714][ T10] usb 5-1: device descriptor read/8, error -71 [ 161.129685][ T10] usb 5-1: device descriptor read/8, error -71 [ 161.368639][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 161.409604][ T10] usb 5-1: device descriptor read/8, error -71 [ 161.541896][ T10] usb 5-1: device descriptor read/8, error -71 [ 161.652145][ T10] usb usb5-port1: unable to enumerate USB device [ 162.099465][ T6346] overlayfs: failed to clone upperpath [ 162.106286][ T6348] overlayfs: failed to clone upperpath [ 162.348884][ T6355] IPv6: Can't replace route, no match found [ 162.356218][ T6355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.708652][ T507] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 162.869802][ T507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.880749][ T507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.890540][ T507] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 162.899616][ T507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.908232][ T507] usb 5-1: config 0 descriptor?? [ 163.339332][ T507] usbhid 5-1:0.0: can't add hid device: -32 [ 163.345342][ T507] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 163.353437][ T6359] /dev/rnullb0: Can't open blockdev [ 163.361469][ T507] usb 5-1: USB disconnect, device number 13 [ 163.904987][ T6371] rust_binder: Write failure EINVAL in pid:126 [ 164.426395][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2087'. [ 164.856711][ T6397] 9pnet_fd: Insufficient options for proto=fd [ 165.308682][ T64] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 165.459738][ T64] usb 5-1: config 0 has no interfaces? [ 165.465260][ T64] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 165.474338][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.486130][ T64] usb 5-1: config 0 descriptor?? [ 165.693931][ T64] usb 5-1: USB disconnect, device number 14 [ 166.037426][ T6419] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2097'. [ 166.448728][ T10] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 166.600096][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 166.608919][ T10] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt [ 166.618817][ T10] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.631646][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 166.645640][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 166.654913][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.664234][ T6421] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 166.877683][ T10] usb 5-1: USB disconnect, device number 15 [ 167.455036][ T6444] rust_binder: Write failure EFAULT in pid:157 [ 167.455228][ T36] audit: type=1400 audit(2000000637.161:2406): avc: denied { setattr } for pid=6443 comm="syz.4.2106" path="socket:[31834]" dev="sockfs" ino=31834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.494259][ T6447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 167.494293][ T6447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159 [ 167.504668][ T6447] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 167.514202][ T6447] rust_binder: Read failure Err(EFAULT) in pid:159 [ 168.206365][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.220341][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.227435][ T6452] bridge_slave_0: entered allmulticast mode [ 168.233937][ T6452] bridge_slave_0: entered promiscuous mode [ 168.240685][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.247767][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.255011][ T6452] bridge_slave_1: entered allmulticast mode [ 168.261495][ T6452] bridge_slave_1: entered promiscuous mode [ 168.322742][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.329890][ T6452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.337187][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.344284][ T6452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.368644][ T330] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 168.394881][ T6470] netlink: 'syz.5.2113': attribute type 10 has an invalid length. [ 168.402993][ T6470] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2113'. [ 168.425720][ T6452] veth0_vlan: entered promiscuous mode [ 168.439730][ T6452] veth1_macvtap: entered promiscuous mode [ 168.499947][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2116'. [ 168.510387][ T36] audit: type=1326 audit(2000000638.221:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.5.2116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e638ebe9 code=0x0 [ 168.548625][ T330] usb 5-1: Using ep0 maxpacket: 32 [ 168.555003][ T330] usb 5-1: config 0 has an invalid interface number: 71 but max is 0 [ 168.563591][ T330] usb 5-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 168.574678][ T330] usb 5-1: config 0 has no interface number 0 [ 168.581435][ T330] usb 5-1: too many endpoints for config 0 interface 71 altsetting 11: 110, using maximum allowed: 30 [ 168.594711][ T330] usb 5-1: config 0 interface 71 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 168.609471][ T330] usb 5-1: config 0 interface 71 has no altsetting 0 [ 168.618309][ T330] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 168.627587][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.638765][ T330] usb 5-1: Product: syz [ 168.643039][ T330] usb 5-1: Manufacturer: syz [ 168.647726][ T330] usb 5-1: SerialNumber: syz [ 168.657594][ T330] usb 5-1: config 0 descriptor?? [ 168.867324][ T330] smsc95xx v2.0.0 [ 168.871138][ T330] smsc95xx 5-1:0.71 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 168.881286][ T330] smsc95xx 5-1:0.71: probe with driver smsc95xx failed with error -22 [ 168.890427][ T330] usb 5-1: USB disconnect, device number 16 [ 169.366282][ T6506] netlink: 'syz.5.2123': attribute type 10 has an invalid length. [ 169.374680][ T6506] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2123'. [ 169.408495][ T6508] netlink: 'syz.5.2124': attribute type 6 has an invalid length. [ 170.979847][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2152'. [ 170.999952][ T6600] 9pnet_fd: Insufficient options for proto=fd [ 171.100261][ T36] audit: type=1400 audit(2000000640.811:2408): avc: denied { accept } for pid=6614 comm="syz.4.2158" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.215728][ T6626] rust_binder: Error while translating object. [ 171.215772][ T6626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 171.222398][ T6626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:170 [ 171.798640][ T380] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 171.960554][ T380] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.969024][ T380] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt [ 171.978898][ T380] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.991742][ T380] usb 5-1: config 1 interface 0 has no altsetting 0 [ 172.004854][ T380] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 172.013965][ T380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.023017][ T6645] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.236336][ T380] usb 5-1: USB disconnect, device number 17 [ 172.355276][ T6658] bpf: Bad value for 'uid' [ 172.511148][ T6671] 9pnet: p9_errstr2errno: server reported unknown error ottle.io_service_bytes_recursive [ 172.848468][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.855605][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.862959][ T6684] bridge_slave_0: entered allmulticast mode [ 172.869591][ T6684] bridge_slave_0: entered promiscuous mode [ 172.876046][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.883161][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.890466][ T6684] bridge_slave_1: entered allmulticast mode [ 172.896781][ T6684] bridge_slave_1: entered promiscuous mode [ 172.949997][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.957062][ T6684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.964479][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.971548][ T6684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.988621][ T380] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 172.996851][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.004783][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.015279][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.022384][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.032015][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.039114][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.067108][ T6684] veth0_vlan: entered promiscuous mode [ 173.079227][ T6684] veth1_macvtap: entered promiscuous mode [ 173.159741][ T380] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.170594][ T380] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 173.183880][ T380] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.193209][ T380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.205897][ T380] usb 5-1: config 0 descriptor?? [ 173.231811][ T380] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 173.235064][ T6697] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 173.247906][ T12] team_slave_0: left allmulticast mode [ 173.253691][ T12] team_slave_0: left promiscuous mode [ 173.259371][ T12] bridge0: port 1(team_slave_0) entered disabled state [ 173.266775][ T12] bridge_slave_1: left allmulticast mode [ 173.272577][ T12] bridge_slave_1: left promiscuous mode [ 173.278240][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.380696][ T12] tipc: Left network mode [ 173.385821][ T12] veth1_macvtap: left promiscuous mode [ 173.391413][ T12] veth0_vlan: left promiscuous mode [ 173.441332][ T330] usb 5-1: USB disconnect, device number 18 [ 173.475321][ T6706] overlayfs: failed to clone upperpath [ 173.481988][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2184'. [ 173.494894][ T380] rust_binder: 6694: removing orphan mapping 0:112 [ 173.501988][ T380] rust_binder: 6694: removing orphan mapping 112:1048 [ 173.533967][ T36] audit: type=1400 audit(2000000643.241:2409): avc: denied { shutdown } for pid=6711 comm="syz.5.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 173.539669][ T6712] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6712 comm=syz.5.2187 [ 174.070837][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 174.079586][ T6738] overlayfs: conflicting options: userxattr,redirect_dir=on [ 174.313097][ T6773] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2209'. [ 174.335450][ T36] audit: type=1400 audit(2000000644.041:2410): avc: denied { bind } for pid=6775 comm="syz.5.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 174.354793][ T36] audit: type=1400 audit(2000000644.061:2411): avc: denied { getopt } for pid=6775 comm="syz.5.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 175.011030][ T328] Bluetooth: hci1: Frame reassembly failed (-84) [ 175.368831][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2232'. [ 175.456482][ T6858] sit0: entered promiscuous mode [ 175.463327][ T6858] netlink: 'syz.6.2236': attribute type 1 has an invalid length. [ 175.471166][ T6858] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2236'. [ 176.025903][ T6880] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2244'. [ 176.088600][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 176.089438][ T6822] Bluetooth: hci0: command 0x1003 tx timeout [ 176.150244][ T6915] fuse: Unknown parameter '0x0000000000000004' [ 176.150243][ T36] audit: type=1400 audit(2000000645.869:2412): avc: denied { mounton } for pid=6914 comm="syz.6.2254" path="/54/file0" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.180468][ T36] audit: type=1400 audit(2000000645.899:2413): avc: denied { append } for pid=6914 comm="syz.6.2254" name="file0" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.203235][ T36] audit: type=1400 audit(2000000645.919:2414): avc: denied { watch } for pid=6914 comm="syz.6.2254" path="/54/file0" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.273055][ T36] audit: type=1400 audit(2000000645.989:2415): avc: denied { shutdown } for pid=6917 comm="syz.6.2255" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.358608][ T380] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 176.508603][ T380] usb 5-1: Using ep0 maxpacket: 32 [ 176.515025][ T380] usb 5-1: config 0 has an invalid interface number: 71 but max is 0 [ 176.523319][ T380] usb 5-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 176.533613][ T380] usb 5-1: config 0 has no interface number 0 [ 176.539754][ T380] usb 5-1: too many endpoints for config 0 interface 71 altsetting 11: 110, using maximum allowed: 30 [ 176.550748][ T380] usb 5-1: config 0 interface 71 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 176.564022][ T380] usb 5-1: config 0 interface 71 has no altsetting 0 [ 176.572258][ T380] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 176.581901][ T380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.589982][ T380] usb 5-1: Product: syz [ 176.594194][ T380] usb 5-1: Manufacturer: syz [ 176.598843][ T380] usb 5-1: SerialNumber: syz [ 176.604422][ T380] usb 5-1: config 0 descriptor?? [ 176.813052][ T380] smsc95xx v2.0.0 [ 176.816768][ T380] smsc95xx 5-1:0.71 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 176.826850][ T380] smsc95xx 5-1:0.71: probe with driver smsc95xx failed with error -22 [ 176.836169][ T380] usb 5-1: USB disconnect, device number 19 [ 176.965583][ T36] audit: type=1400 audit(2000000646.679:2416): avc: denied { read } for pid=6925 comm="syz.5.2258" path="socket:[33960]" dev="sockfs" ino=33960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 177.048792][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 177.049346][ T956] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 177.339938][ T6940] netlink: 'syz.7.2263': attribute type 4 has an invalid length. [ 177.402429][ T6941] devpts: called with bogus options [ 177.578681][ T507] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 177.728696][ T507] usb 5-1: Using ep0 maxpacket: 8 [ 177.735964][ T507] usb 5-1: config 3 has an invalid interface number: 2 but max is 1 [ 177.745050][ T507] usb 5-1: config 3 has an invalid interface number: 68 but max is 1 [ 177.753581][ T507] usb 5-1: config 3 has no interface number 0 [ 177.759838][ T507] usb 5-1: config 3 has no interface number 1 [ 177.766017][ T507] usb 5-1: config 3 interface 2 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 177.777073][ T507] usb 5-1: config 3 interface 2 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 177.788063][ T507] usb 5-1: config 3 interface 2 altsetting 3 bulk endpoint 0xC has invalid maxpacket 32 [ 177.798023][ T507] usb 5-1: config 3 interface 2 altsetting 3 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 177.809038][ T507] usb 5-1: config 3 interface 2 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 177.819811][ T507] usb 5-1: config 3 interface 2 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 177.830398][ T507] usb 5-1: config 3 interface 2 altsetting 3 has an endpoint descriptor with address 0x39, changing to 0x9 [ 177.841860][ T507] usb 5-1: config 3 interface 2 altsetting 3 endpoint 0x9 has an invalid bInterval 111, changing to 10 [ 177.852967][ T507] usb 5-1: config 3 interface 2 altsetting 3 endpoint 0x9 has invalid maxpacket 42967, setting to 1024 [ 177.864092][ T507] usb 5-1: config 3 interface 2 altsetting 3 bulk endpoint 0x5 has invalid maxpacket 16 [ 177.873887][ T507] usb 5-1: config 3 interface 2 altsetting 3 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 177.886977][ T507] usb 5-1: config 3 interface 68 altsetting 9 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 177.897807][ T507] usb 5-1: config 3 interface 2 has no altsetting 0 [ 177.904467][ T507] usb 5-1: config 3 interface 68 has no altsetting 0 [ 177.912718][ T507] usb 5-1: New USB device found, idVendor=05c6, idProduct=9005, bcdDevice=ce.50 [ 177.921859][ T507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.929936][ T507] usb 5-1: Product: 㻋폲臄ꕿḵᰀ眳∝쯦푁蝼鋚㼼곰૨¹ᆬळ㟅얞虍첪㕛鑶桿십뜎뫳ᆘ闏鯡郥䟃䏁꧆샳檉⮗桉蜕዗陾ꅡ襷앑䃑᳭ᖷ蝆鱕੔唼庉뺤﵊緮釟ᮩ篳䘮鐁㾫띡跢⇷噟莡嘍涝鉓⒟傛ꮓ䱖㵚縤ꋇ冦䅍矘෬␬躙傆㡮庠ㆄ緤ᤷ惩衊兮ꈸ돬徱ኈ읿紾Ⳟ윭䇬讱 [ 177.962976][ T507] usb 5-1: Manufacturer: 㰊 [ 177.967592][ T507] usb 5-1: SerialNumber: 櫄 芟ーܬ谘ㇾ缭軏㧶唣尮ꙝ謔十觗哊䫟껍꣥흊귆ཽ㚣䖈甎✍ᙻ我ꍷ狱伒멈㮹狽늉뺅繼⿍큷ᪧ瞘崧䔁익戝➽꧘䤋៹터⃯풂ሆᏒ擶ᜓ፫ዺ忢紀㉎㟯檑猺뷲௜롏솕頾Ꭹ븨蓗仰ጷ숫砏勄뗒㴔픟eﯥ汶髳븈퓍땷穛骄鴖㠀ᛟ諊紛㲳䫹 [ 178.002613][ T6938] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.010237][ T6938] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.017698][ T6938] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.433218][ T507] usb 5-1: USB disconnect, device number 20 [ 179.146996][ T36] audit: type=1400 audit(2000000648.859:2417): avc: denied { read } for pid=6951 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 179.178654][ T537] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 179.249095][ T36] audit: type=1400 audit(2000000648.969:2418): avc: denied { ioctl } for pid=6949 comm="syz.4.2267" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Stopping sshd: [ 179.328589][ T537] usb 5-1: Using ep0 maxpacket: 32 [ 179.335390][ T537] usb 5-1: unable to get BOS descriptor or descriptor too short stopped /usr/sbin/sshd (pid 200) OK [ 179.348223][ T537] usb 5-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64 Stopping crond: [ 179.362049][ T537] usb 5-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1 stopped /usr/sbin/crond (pid 193[ 179.378116][ T537] usb 5-1: config 1 interface 0 has no altsetting 0 ) OK [ 179.388990][ T537] usb 5-1: string descriptor 0 read error: -22 [ 179.395309][ T537] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 179.404724][ T537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.415161][ T6950] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 179.422608][ T6950] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 147) [ 179.457922][ T36] audit: type=1400 audit(2000000649.169:2419): avc: denied { search } for pid=6963 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 179.538688][ T36] audit: type=1400 audit(2000000649.249:2420): avc: denied { read write } for pid=6971 comm="ip" path="/dev/console" dev="rootfs" ino=1066 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 179.595578][ T36] audit: type=1400 audit(2000000649.309:2421): avc: denied { write } for pid=148 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.620491][ T36] audit: type=1400 audit(2000000649.309:2422): avc: denied { remove_name } for pid=148 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.648188][ T6950] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 179.661653][ T537] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8 OK [ 179.682828][ T537] usb 5-1: USB disconnect, device number 21 [ 179.683759][ T36] audit: type=1400 audit(2000000649.309:2423): avc: denied { unlink } for pid=148 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 179.691050][ T537] usblp0: removed Stopping iptables: [ 179.724910][ T36] audit: type=1400 audit(2000000649.359:2424): avc: denied { unlink } for pid=148 comm="dhcpcd" name="pid" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 OK[ 179.746875][ T36] audit: type=1400 audit(2000000649.439:2425): avc: denied { read write } for pid=6977 comm="iptables" path="/dev/console" dev="rootfs" ino=1066 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 Stopping system [ 179.771069][ T36] audit: type=1400 audit(2000000649.449:2426): avc: denied { search } for pid=6977 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 message bus: done killall: can't kill pid 344: No such process Stopping klogd: OK Stopping acpid: [ 180.267077][ T7003] tc_dump_action: action bad kind [ 180.278957][ T7003] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2269'. [ 180.433548][ T7011] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2275'. [ 180.514526][ T7013] rust_binder: Error while translating object. [ 180.514561][ T7013] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.520818][ T7013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 180.825089][ T7034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.861152][ T7041] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 180.861321][ T330] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 180.868275][ T7041] rust_binder: Write failure EINVAL in pid:209 [ 180.876429][ T330] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.939794][ T7047] ------------[ cut here ]------------ [ 180.945378][ T7047] WARNING: CPU: 1 PID: 7047 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 180.955500][ T7047] Modules linked in: [ 180.959469][ T7047] CPU: 1 UID: 0 PID: 7047 Comm: syz.4.2287 Not tainted syzkaller #0 6e51b6b85230f66418c68cf4df55f7a3259ed786 [ 180.971075][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.981187][ T7047] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 180.987132][ T7047] Code: 00 48 8b 5d a0 74 08 48 89 df e8 e2 40 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 181.006904][ T7047] RSP: 0018:ffffc9000b63fc88 EFLAGS: 00010202 [ 181.013043][ T7047] RAX: 1ffffd1ffff8176a RBX: ffffc9000c1e28e8 RCX: ffffffff816dc859 [ 181.021086][ T7047] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc0bb50 [ 181.029119][ T7047] RBP: ffffc9000b63fcf0 R08: ffffe8ffffc0bb57 R09: 1ffffd1ffff8176a [ 181.037133][ T7047] R10: dffffc0000000000 R11: fffff91ffff8176b R12: dffffc0000000000 [ 181.045266][ T7047] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc0bb50 OK[ 181.053550][ T7047] FS: 00007fd6485c86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 181.062665][ T7047] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.069371][ T7047] CR2: 000000110c296900 CR3: 000000011307c000 CR4: 00000000003526b0 [ 181.077460][ T7047] Call Trace: [ 181.080836][ T7047] [ 181.081202][ T7050] SELinux: policydb string length 11617 does not match expected length 8 [ 181.083917][ T7047] kvm_put_kvm+0x1100/0x12b0 [ 181.094233][ T7050] SELinux: failed to load policy [ 181.097099][ T7047] ? __cfi_kvm_vm_release+0x10/0x10 [ 181.107434][ T7047] kvm_vm_release+0x47/0x70 [ 181.112038][ T7047] __fput+0x1fe/0xa00 [ 181.116078][ T7047] ? __cfi__raw_spin_lock_irq+0x10/0x10 Stopping syslogd[ 181.121756][ T7047] ____fput+0x20/0x30 [ 181.127160][ T7047] task_work_run+0x1e3/0x250 : [ 181.131844][ T7047] ? __cfi_task_work_run+0x10/0x10 [ 181.137084][ T7047] ? __kasan_check_write+0x18/0x20 [ 181.142291][ T7047] resume_user_mode_work+0x36/0x50 [ 181.147459][ T7047] syscall_exit_to_user_mode+0x64/0xb0 stopped /sbin/sy[ 181.153211][ T7047] do_syscall_64+0x64/0xf0 [ 181.159029][ T7047] ? clear_bhb_loop+0x50/0xa0 slogd (pid 91) [ 181.163737][ T7047] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 181.171127][ T7047] RIP: 0033:0x7fd64778ebe9 [ 181.175592][ T7047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 OK[ 181.195403][ T7047] RSP: 002b:00007fd6485c8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 181.203982][ T7047] RAX: 0000000000000000 RBX: 00007fd6479b5fa0 RCX: 00007fd64778ebe9 [ 181.212047][ T7047] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 181.220146][ T7047] RBP: 00007fd647811e19 R08: 0000000000000000 R09: 0000000000000000 [ 181.228293][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.236475][ T7047] R13: 00007fd6479b6038 R14: 00007fd6479b5fa0 R15: 00007ffdbe04e7a8 [ 181.244545][ T7047] [ 181.247605][ T7047] ---[ end trace 0000000000000000 ]--- umount: can't remount debugfs read-only umount: can't remount sysfs read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.77 closed by remote host. [ 181.616860][ T328] bridge_slave_1: left allmulticast mode [ 181.632408][ T328] bridge_slave_1: left promiscuous mode [ 181.638098][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.659174][ T328] bridge_slave_0: left allmulticast mode [ 181.664878][ T328] bridge_slave_0: left promiscuous mode [ 181.688658][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.830425][ T328] veth1_macvtap: left promiscuous mode [ 181.836004][ T328] veth0_vlan: left promiscuous mode [ 182.150468][ T328] bridge_slave_1: left allmulticast mode [ 182.156140][ T328] bridge_slave_1: left promiscuous mode [ 182.161790][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.170263][ T328] bridge_slave_0: left allmulticast mode [ 182.175961][ T328] bridge_slave_0: left promiscuous mode [ 182.181619][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.189290][ T328] bridge_slave_1: left allmulticast mode [ 182.194942][ T328] bridge_slave_1: left promiscuous mode [ 182.200707][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.208226][ T328] bridge_slave_0: left allmulticast mode [ 182.213949][ T328] bridge_slave_0: left promiscuous mode [ 182.219654][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.412402][ T328] veth1_macvtap: left promiscuous mode [ 182.417943][ T328] veth0_vlan: left promiscuous mode [ 182.423650][ T328] veth1_macvtap: left promiscuous mode [ 182.429224][ T328] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 183.467207][ T7057] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 183.474175][ T7057] ACPI: PM: Preparing to enter system sleep state S5 [ 183.481337][ T7057] kvm: exiting hardware virtualization [ 183.486875][ T7057] reboot: Power down serialport: VM disconnected.