last executing test programs: 4m5.14544792s ago: executing program 2 (id=793): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002208000000a2e6c3c3"], 0x0}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r2 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x20, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000003580)=0x29996, &(0x7f00000035c0)=0x4) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14) 4m4.627248058s ago: executing program 2 (id=796): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x802400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0xa, 0x20081) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x86) fchdir(r3) mkdirat(0xffffffffffffff9c, 0x0, 0x20) mkdir(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x4, 0x4) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000c, 0x1010, r0, 0x401f7000) 4m4.584439239s ago: executing program 2 (id=797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x4, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x200, 0x7, 0x10000, 0x100, 0x400000000009004, 0x0, 0x8, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0xa, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x1, 0x8, 0x6, 0x6, 0x6, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0xffffffffffffffff, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x9, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x8, 0xf6, 0x4, 0x5, 0x10, 0x7, 0xe53e, 0x2b, 0x8, 0x22933b2f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x981, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) r4 = eventfd(0x1) read$eventfd(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000200)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x3, 0x80000001, 0xda6, 0x1ff, 0x4}}, 0x118) fallocate(r5, 0x0, 0x5, 0x5) r6 = fcntl$dupfd(r0, 0x0, r0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x4}) r8 = socket(0x1, 0x2, 0x1) ioctl$SIOCGETLINKNAME(r8, 0x89e0, 0x0) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000017c0)={0x18, r7, 0x21, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4050) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc2800, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x2) ioctl$GIO_UNISCRNMAP(r9, 0x4b69, 0x0) setfsgid(0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents(r11, 0x0, 0x0) r12 = openat(r6, &(0x7f0000000040)='./file0\x00', 0x42063, 0x8) ioctl$KVM_CREATE_VCPU(r12, 0x770a, 0x2) 4m4.424357942s ago: executing program 2 (id=799): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xa0}, 0x1, 0xfffff000}, 0x8000) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)) mlock2(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 4m4.369489253s ago: executing program 2 (id=801): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e000101000000000000000008004100", @ANYRES32=0x0, @ANYBLOB='8'], 0x1c}], 0x1}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) cachestat(r1, &(0x7f0000000140)={0x6f, 0x6}, &(0x7f0000000180), 0x0) r2 = syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0x7ffffffff000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fchdir(r3) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000100)='smaps_rollup\x00') close_range(r1, 0xffffffffffffffff, 0x0) 4m4.164456625s ago: executing program 2 (id=812): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x189500, 0x0) (async) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x189500, 0x0) fchdir(r0) (async) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, &(0x7f00000002c0)) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffff}}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0x2020) 4m4.143220236s ago: executing program 32 (id=812): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x189500, 0x0) (async) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x189500, 0x0) fchdir(r0) (async) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, &(0x7f00000002c0)) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffff}}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0x2020) 2m7.943612641s ago: executing program 0 (id=2318): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_open_procfs(0x0, &(0x7f0000000480)='uid_map\x00') close(0x3) read(r1, &(0x7f0000000180)=""/234, 0xea) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg$can_bcm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/170, 0xaa}], 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000800)=ANY=[@ANYBLOB="a00000002100010027bd7000fbdbdf25ac1e00010000000000000000000000007f00004e2300004e220037020020a08700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6e000000000050001100ac1414aa00000000000000000000000000000000000000000000000000000001000000000000000000000000000000007f0000010000000000000000000000003c03000005350000020002"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x24040010) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\xa5\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\x9c\x9e\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xb0a\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbd(T$\xf7\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xe2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\x83\x05\x00\x00\x00\x00\x00\x00\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(\xca\xa5\xf5p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\r\xe4\xef\xf9\xff~\x13\xc22t\xf6\xf4Fs\xdd\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\xd3\t\xf6\xd1\"0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0) (async) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, 0x0) (async) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000000c0)={0x2, 0x1, @status={[0x8, 0x1, 0x2, 0x9e, 0xffffffffffff7fff, 0x81]}, [0x4, 0x6, 0x4, 0x7fff, 0x3, 0x10000, 0xf, 0xfffffffffffffe00, 0x4, 0x7f, 0x6c913147, 0x1, 0xfff, 0x401, 0x4, 0x0, 0x1, 0x5, 0x9, 0x97, 0xc0, 0x3, 0x7fffffff, 0x3, 0xffffffffffffffff, 0x52b800, 0x6, 0x0, 0x2055, 0x100000001, 0x18a4, 0x100, 0x8, 0x81, 0x8, 0xfffffffffffffffa, 0x8, 0xa, 0xbd80000000000000, 0x81, 0x5, 0xaa, 0x1, 0x8, 0x3, 0x837f, 0x0, 0x5, 0x3, 0x2, 0x5, 0x9, 0xfff, 0x101, 0xfffffffffffffff9, 0x0, 0x4, 0x3, 0x7fff, 0x4, 0x79, 0x37de, 0xfffffffe, 0x3]}) (async) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000000c0)={0x2, 0x1, @status={[0x8, 0x1, 0x2, 0x9e, 0xffffffffffff7fff, 0x81]}, [0x4, 0x6, 0x4, 0x7fff, 0x3, 0x10000, 0xf, 0xfffffffffffffe00, 0x4, 0x7f, 0x6c913147, 0x1, 0xfff, 0x401, 0x4, 0x0, 0x1, 0x5, 0x9, 0x97, 0xc0, 0x3, 0x7fffffff, 0x3, 0xffffffffffffffff, 0x52b800, 0x6, 0x0, 0x2055, 0x100000001, 0x18a4, 0x100, 0x8, 0x81, 0x8, 0xfffffffffffffffa, 0x8, 0xa, 0xbd80000000000000, 0x81, 0x5, 0xaa, 0x1, 0x8, 0x3, 0x837f, 0x0, 0x5, 0x3, 0x2, 0x5, 0x9, 0xfff, 0x101, 0xfffffffffffffff9, 0x0, 0x4, 0x3, 0x7fff, 0x4, 0x79, 0x37de, 0xfffffffe, 0x3]}) socket$nl_audit(0x10, 0x3, 0x9) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000b00)={0x2, {{0x2, 0x0, @private=0xa010102}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000b00)={0x2, {{0x2, 0x0, @private=0xa010102}}}, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000c40)={'ip6tnl0\x00', &(0x7f0000000bc0)={'syztnl2\x00', 0x0, 0x29, 0x9e, 0x7f, 0xfffffe58, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x18, 0x1, 0x7}}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)={[{@subsystem='pids'}]}) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x80880, 0x0) (async) r8 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x80880, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 2m4.394638677s ago: executing program 0 (id=2374): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) futex(0x0, 0x5, 0xfffefffe, 0x0, 0x0, 0x1) pread64(r0, &(0x7f0000000340)=""/48, 0x30, 0xce0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000740)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902a000030156c0020904000000010100000a24010101bb02010211240601040507000a00080003000200050524050e0f0f2406020504020002000a000900040a240402010600a7ce790924060502010610000924030303030505f5"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x44142, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r3, 0x0, 0x59) sendfile(r2, r1, 0x0, 0x800a121) 2m4.333126327s ago: executing program 0 (id=2378): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) (async) 2m4.278211659s ago: executing program 33 (id=2378): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) (async) 1m41.337052138s ago: executing program 5 (id=2660): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) (async) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) read$ptp(r2, &(0x7f0000000040)=""/45, 0x2d) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2=0xe0000001}}, {{0x2, 0x4e21, @local}}}, 0x108) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0xfffffffc, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000980)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f7395ee7ebb6f09b6e07fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b8"}) 1m41.336825828s ago: executing program 5 (id=2661): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='cramfs\x00', 0x2000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x160e) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x3}) r8 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r9, r9, 0x0) r10 = gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r11, 0x8, r10) sendmsg$inet(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)='\x00', 0x1}], 0x1}, 0x4044881) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x9, 0x1, 0x3b}, @flat=@binder={0x73622a85, 0x1, 0x8000000001}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 1m41.21354226s ago: executing program 5 (id=2664): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001380), r1) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000013c0)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004840) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x3837}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x80000000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044850}, 0x44000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m41.20735739s ago: executing program 5 (id=2665): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001300)='./binderfs/binder1\x00', 0x806, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8000000003, 0x3, 0x5, 0x6, 0x3, 0x1, {0x400000000001, 0x180, 0x20ff, 0x6, 0x89, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) pread64(r1, 0x0, 0xbd5695353d88c232, 0x2) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r3, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) setresuid(0xee00, 0xee00, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r5 = openat$kvm(0x0, &(0x7f0000000180), 0x82, 0x0) syz_clone(0xc0000000, &(0x7f0000000080)="de2f7f55a2", 0x5, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000300)="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") r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000240)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x5}) syz_socket_connect_nvme_tcp() sendto$inet_nvme_icreq_pdu(r1, &(0x7f0000000100)={{0x0, 0x0, 0x80, 0x65}, 0x0, 0x0, 0x1, 0x57}, 0x80, 0x0, 0x0, 0x0) syz_clone(0x1200200, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.120215452s ago: executing program 5 (id=2668): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpid() r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000500)=0xfffffffffffffffe, 0x12) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) 1m41.066709512s ago: executing program 5 (id=2669): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x8}, {0x2, 0x70000000}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x7, 0x1000000, 0x0}) 1m41.010838443s ago: executing program 34 (id=2669): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x8}, {0x2, 0x70000000}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x7, 0x1000000, 0x0}) 1m13.436618166s ago: executing program 4 (id=3065): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x28, 0x5, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) r3 = gettid() (async) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x1c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x27}) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r2, 0x4) (async) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0xe, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x34, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x7, 0x5, 0x4, 0x1, 0x40], [0x10, 0x9, 0x8000012d, 0x8004, 0x8000005, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0x10, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2af, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x0, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0xffffff6a, 0x3, 0x1, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120001, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xf41, 0x0, 0xb9, 0xce7, 0x1ff, 0xffffffff, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0xd4cf, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x0, 0x8, 0x6, 0x226, 0x5, 0x4005, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb0e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) (async) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x1) (async) fcntl$setlease(r5, 0x400, 0x0) (async) fcntl$setlease(r6, 0x400, 0x1) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) (async) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000140)={'\x00', 0x5, 0x26, 0x9, 0x1, 0x9, 0x0}) socket(0x1a, 0xa, 0x8) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x13, 0x0, @tid=r7}, &(0x7f0000000200)) (async) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) (async) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 1m13.401786476s ago: executing program 4 (id=3066): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x2}], 0xfffffffffffffd98, 0x0, &(0x7f00000003c0)="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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x178, 0x39, 0x20, 0x70bd2b, 0x25dfdbff, {0x12}, [@typed={0x8, 0x13a, 0x0, 0x0, @fd=r0}, @nested={0x15a, 0x0, 0x0, 0x1, [@generic="f486fb2542097b0c31d6b98228cc3b702f71ff4f786aa4ccc3c890aff937f797cec838f548474514aebfecbd1ecd0c834b9bf5f4984ba04ea845cecfcf16162483c9e43f9779a892f56a9002bc707f040355ff37a18219b567bbb7ffe510609bc9c3ddd9daabf18bcc57235975638f0085da70d0140801bc9a79641430501c54e395cf86b234c81840e5562923452221c59cec4dd6e8330d6a932f9de8df75b694c47963b14d2785ba178c9c314447e2631cbe343671a0596c99bb8a70faa2b2cf623ff3e5c28e4392f4fac46678aaa781da0b667160513843ef63f0e85ccaa7a98a0c2b13e2eb", @nested={0x4, 0x50}, @nested={0x4, 0x10c}, @typed={0x8, 0x7, 0x0, 0x0, @u32=0x3}, @generic="8d706b0fcffcb2c6866cb04c5c2ef6fc7e9c741ca670600774a6c6cd1cc0c58eb69a", @nested={0x4, 0x12d}, @generic="59eaf3a2f825364b4aa15f72c7fd5675b7d8ca6f6e5baff502055a0b30", @nested={0x4, 0x51}, @typed={0x14, 0x4a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}}, @nested={0x4, 0x2d}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) 1m13.341588957s ago: executing program 4 (id=3067): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcff"], 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x1, 0xeeee0000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) syz_pidfd_open(r4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m13.337812457s ago: executing program 4 (id=3068): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r2 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='iX\x98\xac\xf5\xbb\xe4\x1e.\xc5\x1c\xb8s\xb4\xd1y\xaf\x8f\x12\x04T\xef\xed\x92>\xb4\xc3\x90\xe0\x888\xed?\b\'\x82|X\xfa\xf9\x98|\xa9\xea\xff3S\x84n\xb1/\x7f\xbc\x13\xe4\xb9\x94%,\x88\xd8VHJ\xeb\xe2\x0e\xfbz:\xc9\xf3\x05\xcd^\x9a%)M\xe0\x81\xaf\a iU\x865s\x1e^D.^:\x13ETk4\xafm\xd5;\xd2\x8c\xaf\x06\xe7\xd6l\xb8\x9c|\x8c\'d\xaa\xd5C\xc0\xec\x83\x82o\xe1\r\x1c\xe8\xec5\v\x0f\xa2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05PR\x03\xa9\xc4r \x97t4*\xca\x0e\xbc~\xaf\x9f\x95C\xecOM2\xa8Tj\xbe\x93\'v\x95\xea\xf0\xa3\xcfB\xd7\x00\x00w\xa47\xb3\xfb;g\xa1\n\x1d', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) close_range(r0, 0xffffffffffffffff, 0x0) 1m13.337310168s ago: executing program 4 (id=3069): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000002540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf252500000008002f00ff00000008000200", @ANYRES32=r3, @ANYBLOB="05002a00040000003c5be65c1730d67938d1c0aaeeab90bfc4da5f4efefb7402fac6083ce438d0b226a4ec22d55bfecc9f9440d01cb005d4bc025346c9e55a38ce9d532393fd51d5982176c766afb80628396cafe475b6378cef576d655aaf7498a199b99891e2f24a489eccda5a5e5cbf72e13c8a2f9312ab1202d9fb8b74d92a"], 0x2c}, 0x1, 0x0, 0x0, 0x4008020}, 0x40814) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x14) ioctl$TCFLSH(r6, 0x400455c8, 0x0) 1m13.17498664s ago: executing program 4 (id=3074): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r2, 0xffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000040e0008001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080), 0x1c) fcntl$addseals(r2, 0x409, 0x7) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="0f06d9bb0b7d36d32b66f72cbaa000b87c18ef2e3e0fc75ca2f20f0736d8c8ba210066ed66f30f2331", 0x29}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x1000, 0xa000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000080)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1m13.115652721s ago: executing program 35 (id=3074): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r2, 0xffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000040e0008001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080), 0x1c) fcntl$addseals(r2, 0x409, 0x7) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="0f06d9bb0b7d36d32b66f72cbaa000b87c18ef2e3e0fc75ca2f20f0736d8c8ba210066ed66f30f2331", 0x29}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x1000, 0xa000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000080)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 37.56432235s ago: executing program 7 (id=3448): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000440)={'veth1_macvtap\x00', 0x4000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'veth1\x00', 0x100}) write$cgroup_subtree(r1, 0x0, 0xffe3) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) close(r0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x453, 0x4, 0x70bd2c, 0x25dfdbfc, "34e160"}, 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x40004) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000080)='f2fs\x00', 0x200000, 0x0) 37.381023183s ago: executing program 7 (id=3449): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="280000000000000000000000070000000718"], 0x28}}], 0x1, 0x40) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) umount2(&(0x7f0000000080)='./cgroup\x00', 0xd) 37.380588873s ago: executing program 7 (id=3450): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, 0x0, 0x10b200, 0x0) (async, rerun: 64) r1 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000004c0)) (async, rerun: 32) wait4(r1, 0x0, 0x40000000, 0x0) (async, rerun: 32) iopl(0xff) (async) io_setup(0x4, &(0x7f0000000100)) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@uexit={0x0, 0x18, 0x8000000000000001}, @code={0x1, 0x63, {"f080a77d2db2f0ae3ef33e81830068ffffc7000000450f780848b800000000000000000f23d80f21f835800000300f23f866b82f018ed8f30f09de9bfe5f0000410f0966baa00066ed660f38052d00000000"}}, @uexit={0x0, 0x18, 0x80000001}, @uexit={0x0, 0x18, 0xfffffffffffffffc}, @cpuid={0x2, 0x18, {0x0, 0x7}}, @cpuid={0x2, 0x18, {0xe, 0x4}}, @uexit={0x0, 0x18, 0x240000}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x60, {"36430fac110067660fc73166baf80cb84bba1b82ef66bafc0cb035ee0f01f80fc75900c4013973fcab0f78bb1933fc96b946020000b800000080ba000000000f30c4a171da860d000000c4a27913f9"}}, @code={0x1, 0x4c, {"2e46d9ad02000000b8010000000f01d9653e660fc7b0000000002e430f0139c442612d41f68f491893b0d65f416b640f06f00908440f21d641e00e"}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8}, @cpuid={0x2, 0x18, {0x80, 0x6}}, @cpuid={0x2, 0x18, {0x2, 0x4}}, @uexit={0x0, 0x18, 0x5}, @cpuid={0x2, 0x18, {0x1a, 0x7}}, @cpuid={0x2, 0x18, {0x0, 0x100}}, @uexit={0x0, 0x18, 0x800}, @cpuid={0x2, 0x18, {0x1, 0x1}}, @cpuid={0x2, 0x18, {0x1ff, 0x400}}, @uexit={0x0, 0x18, 0x7d6}, @code={0x1, 0x66, {"430f2127c74424000d000000c74424025c6e505ac7442406000000000f0114240fc75a0d420f358fe9a89a4500410f01cb36440f01ca8f0978c1810000000066bad104ec66baf80cb8115f4b83ef66bafc0cb0fdee"}}, @uexit={0x0, 0x18, 0x4}, @cpuid={0x2, 0x18, {0x6, 0x2}}, @uexit={0x0, 0x18, 0x7fff}, @code={0x1, 0x5a, {"66bad104ec640f01f8f3440f09410f01d0b9800000c00f3235004000000f30833a00440f20c0350f000000440f22c0b9800000c00f3235004000000f300f01cac482f9a99907f62fe7"}}, @cpuid={0x2, 0x18, {0x101, 0x8}}, @cpuid={0x2, 0x18, {0x8, 0x8}}, @uexit={0x0, 0x18, 0x7fffffff}, @code={0x1, 0x7c, {"440f20c0350a000000440f22c0440f01c20f69750048b83ff40000000000000f23c00f21f835010004000f23f866baf80cb8d8b86786ef66bafc0c66b8fc7c66eff267d9eb66430fc7345eb805000000b9000000000f01c166baf80cb86c2fe584ef66bafc0ced440f2203"}}], 0x48b}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000600)={{0x100000, 0x5000, 0xf, 0xfb, 0x7, 0x8, 0x8a, 0x7, 0x0, 0xff, 0x10, 0x2}, {0x2, 0x10000, 0x0, 0xf5, 0x24, 0x8, 0x5, 0x4, 0x4, 0x69, 0x0, 0x73}, {0x100000, 0x2000, 0xf, 0x9, 0x10, 0x0, 0x7f, 0x9, 0x3f, 0x3, 0x1, 0x40}, {0x3000, 0xdddd1000, 0x8, 0x5, 0x2, 0x4, 0x1, 0x2, 0x7, 0x9, 0xfd, 0x3}, {0xdddd1000, 0x3000, 0x10, 0x3, 0x7, 0x6, 0x80, 0xa, 0x6, 0x5, 0xc, 0x9}, {0xeeee0000, 0x4000, 0xa, 0x96, 0x1, 0x68, 0x7, 0xe4, 0x1, 0x3, 0x9, 0x8}, {0xffff1000, 0x8000000, 0x1, 0x80, 0x84, 0xd, 0xe, 0x9, 0x8, 0xc, 0x1, 0x5}, {0x0, 0xdddd1000, 0xb, 0x7, 0x1, 0xa, 0x0, 0x6, 0x0, 0x5, 0x4, 0x5}, {0x5000, 0xc}, {0xffff1000, 0x7}, 0xa0000004, 0x0, 0x2, 0x40406, 0xf, 0x400, 0x5000, [0x3, 0xc61f, 0x8, 0x80000000]}) 37.380035443s ago: executing program 7 (id=3451): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) poll(&(0x7f0000000140)=[{r0, 0x240}], 0x1, 0x6) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x1, 0x1, 0x8}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@handle={0x73682a85, 0x47fd1a062d1f7cba, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x16}}, 0x10}], 0x0, 0x0, 0x0}) 37.340628574s ago: executing program 7 (id=3452): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x1000000, 0x0}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000000c0)={0x5, {{0xa, 0x4e22, 0x6, @mcast2, 0x5}}}, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x3, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x2}, {0x3d}, {0x6}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req={0x4, 0x0, 0x7fff, 0x4}, 0x10) 36.494855227s ago: executing program 7 (id=3453): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, 0x0, &(0x7f0000000180)=0x3d) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x78) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always,uid=', @ANYRESHEX=0x0, @ANYBLOB="01abbbd19b933010c6077637edac170ebd920dfc78f9f2a4de02bb2cd77bdc137298f31403c95d2d6f486e853272494fb4167740b43468f7219c0d72665b43e674890b6af6d213b7c7b4fdc4c34f0086e14a804157552dee796b175414e9e219fc6bfe1d595536c19e6e1ffeb34388b65708c228eecc0b968e1bbee87ae69308a8ed38ca46a36b8f369fa20058158ca3f4045625b511db2ef8c395bb939927e650d1d39c8cfe"]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 20.789783893s ago: executing program 36 (id=3453): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, 0x0, &(0x7f0000000180)=0x3d) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x78) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always,uid=', @ANYRESHEX=0x0, @ANYBLOB="01abbbd19b933010c6077637edac170ebd920dfc78f9f2a4de02bb2cd77bdc137298f31403c95d2d6f486e853272494fb4167740b43468f7219c0d72665b43e674890b6af6d213b7c7b4fdc4c34f0086e14a804157552dee796b175414e9e219fc6bfe1d595536c19e6e1ffeb34388b65708c228eecc0b968e1bbee87ae69308a8ed38ca46a36b8f369fa20058158ca3f4045625b511db2ef8c395bb939927e650d1d39c8cfe"]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 7.724732628s ago: executing program 8 (id=3844): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x29}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x248, r1, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3a}}}}, [@NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x254b, 0x400, 0x0, 0x7ff, 0x0, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x128, 0x7, 0xfff9, 0x0, 0xf0f5, 0xfff8, 0x9, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0x5}, {0x0, 0x2}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x7}, {0x7, 0x5}, {0x0, 0x2}, {0x1, 0x5}, {0x6}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x7, 0x4}, {0x7, 0x1}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x6}, {0x1, 0x4}, {0x4, 0x8}, {0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x0, 0x4}, {0x1, 0x3}, {0x3, 0xa}, {0x0, 0x9}, {0x2, 0x3}, {0x4, 0xa}, {0x1, 0x9}, {0x1, 0x9}, {0x7, 0x2}, {0x4, 0xa}, {0x5, 0xa}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x6}, {0x6, 0x5}, {0x6, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x6, 0x6}, {0x2, 0x7}, {0x6, 0x8}, {0x6, 0x4}, {0x1}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x0, 0x3}, {0x6}, {0x1, 0x9}, {0x2, 0x5}, {0x6, 0x3}, {0x1, 0x5}, {0x1, 0xa}, {0x6, 0x6}, {0x7, 0x8}, {0x0, 0x9}, {0x2, 0x8}, {0x1}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x8, 0xb32a, 0xe, 0x701, 0x0, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0x1}, {0x7, 0x9}, {0x0, 0x9}, {0x4, 0x5}, {0x5, 0x2}, {0x2, 0x7}, {0x1, 0x5}, {0x1, 0x14}, {0x0, 0x8}, {0x7, 0x6}, {0x4, 0x6}, {0x0, 0x7}, {0x0, 0x4}, {0x2, 0x7}, {0x1, 0x6}, {0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x8}, {0x5, 0x4}, {0x4, 0xa}, {0x6, 0x3}, {0x2, 0x1}, {0x0, 0x5}, {0x4, 0xa}, {0x5}, {0x7, 0x3}, {0x1, 0x3}, {0x1, 0x2}, {0x7}, {0x0, 0x7}, {0x5, 0x8}, {0x3, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9ef7, 0xff, 0x1, 0x1c0, 0x8, 0xb950, 0xa]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0xa, 0x6, 0xd9c, 0x400, 0x3, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x60, 0x6c, 0x18, 0x9, 0x30, 0x6c, 0xb, 0x16, 0x72]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xe, 0x6, 0x1b, 0x36, 0x36, 0x5, 0x4, 0x3, 0x18, 0x24, 0x24, 0x6, 0x30, 0x18, 0x24, 0x16, 0x1b, 0x1, 0x3, 0x9, 0x18, 0x1b]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x2b, 0x115, "7ff3960ca07927fed4b35039434f52e0656615b94fb636537a3c6ac7bbf2f60bf412c5447a1ca8"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac04, 0xfac09]}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac09, 0xfac0b, 0xfac0c]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_AKM_SUITES={0x24, 0x4c, [0x0, 0xfac0f, 0xfac13, 0xfac03, 0xfac0e, 0xfac0c, 0xfac0b, 0xfac09]}, @NL80211_ATTR_SAE_PASSWORD={0xb, 0x115, "14dd9f8af3142d"}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x1}, @NL80211_ATTR_HE_BSS_COLOR={0x10, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x20}]}, @crypto_settings, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}]}, 0x248}, 0x1, 0x0, 0x0, 0x810}, 0x40014) sendmsg$netlink(r0, &(0x7f0000000800)={&(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)=[{&(0x7f0000000600)={0x1ac, 0x1b, 0x720, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0xed, 0x0, 0x0, @fd=r0}, @generic="80cb714c375a74261ab77d8fc91012cb0e7d149a0d1680af3e37da1b1379db0a33238f369ccfcee6e3effa8028daacfdef467d4e609a3ef44de9d961c2abef9a83afde03d1c825d007821a1405009f55da6033309200dfe21b592fd6da8b7441c81812443da9816ba77b16c5630be3a5d56ac9ca8305bd7148c32bdcb21755422917809dda21fa0e70c5b520da996c5a", @generic="7b217d5d6060cd93a5b1849ee79eb6c2f8945647656a9f8610f68bd450b7f75b65ea452d646e28afc36efde764d44011be997bbb004e91ff87c6830c427734e14fea1c2ac1abfc325f37ce032782f664259dbf7226868b038da4827b605de12dcba235ba27360062858880a5d47f1b1af2490f94cec3b658761d6068300aa7ca46008893b8766c97e2f5dfc9628244d08fd777dd3ca13442ce2ed8be5627db2d9724ac2b8f474611c94be67652733bac25c66b752077d4401a90e59276687e82a912a2c25fa261111f1820a35ac2a551f57430919bfcd29efba32cd441b081895419c29c4f5e727054174adf18dc9bfad01774054dd88c62e0"]}, 0x1ac}], 0x1, 0x0, 0x0, 0x20000040}, 0x14) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r1, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xe3c3, 0x12}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x45}, 0x20044005) chmod(&(0x7f0000000940)='./file0\x00', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a80)={'tunl0\x00', &(0x7f0000000a00)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x3, 0x2, {{0x9, 0x4, 0x3, 0x24, 0x24, 0x65, 0x0, 0x9, 0x2f, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0xe, 0x0, [{0x5, 0x8, "c7f3b80d69b2"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000ac0)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r6, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000d80)='./file0\x00', 0x100880, 0x101) bind$xdp(r7, &(0x7f0000000dc0)={0x2c, 0x9, r5, 0xd, r8}, 0x10) r9 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000e00)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x37a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x60, 0x5, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0xf6c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0xb, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x9, 0x93, 0x6}}]}}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x200, 0x2, 0x6, 0x5, 0x10, 0x20}, 0x29, &(0x7f0000000e80)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0xcf, 0xff00, 0xa, [0x3f00, 0xff3f00, 0xff0000, 0xc0, 0xff00, 0x3fcf]}]}, 0x2, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xf2, &(0x7f0000000f00)=@string={0xf2, 0x3, "afdea3004854673c1f8a46a45daebfbfba7fdf906de6ce4edd041641fe86e3d606726e69f84ab60966f055ed96cdaaa2ce0576c144a2dcf59a40a9163c12687f7fdfabda908c89f5872a07234041c5e094230ca8a5d942bcfcb60660bd510ce742c09d58b5acfa4f751795a7c3d1873368a70fac5e921378f8cc1d10f0d25d56238ee743b25e4a81b584a5d2a5e9e612b04a08b4c796753f32ccc138a58d9ebfebd99b5b9fb270d91bad5cc558501e8a8206a5ba99d994ecc931427c3d313d388b74e5fa4ccd9dbf19b1a7c7a07a39924f4d4950d9057d4e4b4899d55a4be36e05c799e19b06ba1099504bc15e59d0b5"}}]}) syz_usb_control_io(r9, &(0x7f0000001280)={0x2c, &(0x7f0000001040)={0x0, 0xc, 0x9a, {0x9a, 0x23, "0b858e0f899f3e873443ee23ec02eebdfe6f43e094a785cd8d2c5e573c2eb663e6f66756184f52f2a931cc315c41ba98494b3c47c1a7cfb712936d3ce266acda8427872518bd1d120d26215c806d57c5237978f095f44a515789f64d236d7fc785fd9625e470e48c3f0d0c8cf23f9e8695ff653fd591b3c97e9e09964132bfce805c1f00f6a133e97c39dc168ea3470381ca05b52e681e27"}}, &(0x7f0000001100)={0x0, 0x3, 0x5e, @string={0x5e, 0x3, "9da29b0272c62da19ee3138fb2c25916de13f7a16f1efc44757ca97dd67e9b4dbc632fc92118e24291f30ed36d4f5b9dadc10410ac1984beb4939c8f5e2e6e6ab9c041eb6bfb02fbf60a3ba73ea2ca39378d69522349fe488067cf7f"}}, &(0x7f0000001180)={0x0, 0xf, 0x50, {0x5, 0xf, 0x50, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x4, 0x4, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x14}, @ss_container_id={0x14, 0x10, 0x4, 0xf0, "6f63ebebf7bdf41e9e41b4ff0e2c6df3"}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x1ff, 0xf, 0x0, [0xff0000, 0xcf, 0xc0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x3, 0x8, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0xb, 0xfff8}]}}, &(0x7f0000001200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x0, 0x1, 0x81, "b04f571c", "8d115141"}}, &(0x7f0000001240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x2, 0x0, 0x80, 0x27, 0xfff, 0x7fff}}}, &(0x7f0000001740)={0x84, &(0x7f00000012c0)={0x0, 0x14, 0xa7, "89241028c5f1d6bad8632dc395d7ef9f062db3dd8cab3b9de5b4caed6eb804e2727f1f47963cb263eb363efe8c905706447098894ffb81b1841e877e4ec57e619f60fcb9b541ea0628eb27ba254a44c87226fac60f8f4ddf6e6c400145cd3a1264f8e8dbd42d11e678987240888374b0a57ded4a6b094b6287b2810cbd550b74e3c340d255bf49fcb4c6b41f2c9a70f0311d91fb582cd50bc318f3949d23514e1ae5eabc5d16ea"}, &(0x7f0000001380)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001400)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001440)={0x20, 0x0, 0x8, {0x1e0, 0x10, [0xf0]}}, &(0x7f0000001480)={0x40, 0x7, 0x2, 0xfa38}, &(0x7f00000014c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001500)={0x40, 0xb, 0x2, 'Ny'}, &(0x7f0000001540)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001580)={0x40, 0x13, 0x6, @local}, &(0x7f00000015c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001600)={0x40, 0x19, 0x2, "e0a3"}, &(0x7f0000001640)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001680)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000016c0)={0x40, 0x1e, 0x1, 0xf6}, &(0x7f0000001700)={0x40, 0x21, 0x1, 0x2}}) syz_usb_connect(0x4, 0x502, &(0x7f0000001800)={{0x12, 0x1, 0x300, 0x7, 0x1b, 0xbf, 0x40, 0xbb4, 0xa87, 0x998b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f0, 0x1, 0x8b, 0x7, 0x0, 0x44, [{{0x9, 0x4, 0x78, 0x3, 0x9, 0x9b, 0x2a, 0x88, 0x4, [@hid_hid={0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x18b}}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, '\a.'}, {0x5, 0x24, 0x0, 0xcb}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7f, 0x34, 0xff}, {0x6, 0x24, 0x1a, 0x21}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1ff, 0x6, 0x100}]}], [{{0x9, 0x5, 0x2, 0x0, 0x400, 0x8, 0xf8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x6}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x0, 0x1, 0x81, [@generic={0xfd, 0xd, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0xfff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x7a, 0x0, 0xf7, [@generic={0x97, 0x3b, "2889511b6c37e0eb80e24f62c18b81a293cb0866179bcc65edbedb04216a50b5f75cec742ecee96ca460ec65f086a0367ba4852a47e2e645aedf6289897b5dae320b00dcd7e314c3387e2ba4f1381c7fb917641709c4f8539856a66b4074355492f49a4c68d32e8f42a136f5b03e62748316bf885d81bee00dfc2c54cb47a40e33f387a211ff13383ad72435f24b734f9efa0ef4e2"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x2}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0xf, 0x8, 0x40, [@generic={0x2e, 0x31, "5565a1f5e8e01d0e9d4e6464f40d14beaa2e6065cc92a4b568d5b2e8b8f9f282d2d5448eea32c9d626c6978d"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xa, 0x1, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x8001}, @generic={0x55, 0xa, "7369a1a6d2034d2e80337b5f13b54938fb2f9c732f8f40fff550df298bfffffef09ec8637a797fd1737015e04c624d5cd4496f64af66d12f9c5950dfa923344d05806ae2e2941f7f3a7c5c89fb09d0233fca6d"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x7, 0x3, 0x3f, [@generic={0x8c, 0x5, "bf0b1d03d9aa9b9deffbeae9a55bf5822f6706b43294082a9bfff11a8e454387dcb76188b6b7dc3425be7c83b55d7e69d692ad756e4a399beaed2befe87775e74a923bf8c77ef20576769a08c7503d55f9100e4510e892f6e353ff877bf296eaea5d9df4cd0af4b9b9e060e01f79eb4f49a12c0f07f50e02c62ed15bac1c892f8e29847808b5b0f063f8"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0x40, 0xe8, 0x5}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x5, 0x1e, 0x4, [@generic={0xb0, 0x6, "228b6af399ec0e473b9698631beeed0e42cef91006dbb2d82e8133170626101cdf4a63fc8180f3278b1c3ce0dcb3189c4133c8bbd2adeb0b1e22820f193dfa54babbf5ff8053576c9f35ea57cf1878e8fd2c77dfa66828b6aac8b2f980affa9c4170dca8ff0696e9aa63d636bd8fbcf035a39ec8dd20c50d45478fcc6b6819f784c36826a43fd618464d475f94fa20fa96556ee3b798b6caaf49a137310473980a35652a753a0af778e295d4b948"}, @generic={0xe0, 0xa, "ff4e3d9d93f73326c04e12710fac3721c76c1aa4fd78b7f19bd9aff70d7a8b41f681a7bcfa748a18f2e886591b86ea809a9d824e3919042ee7867dd42b8725b043bbd40cf913fd5b11c0b05852d73001eb853728e4f545d4d224ff80ea75fc3efb11aaa2370bccbd94c01190fd7a44813bc58d77b92e46a39a3fab1f49584c60a97f268b1b2d7fa5179316c1043c2be88e376e6b7f565989a2a9ba8cea9159d032008fd483efd839fb5b7c1dabb25c03f224bf7bebf2c3eeafe276b475feedf486b249b45d768c2153c315ff3e2f342f2783774b9dd47327cc2e8144cf85"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x9, 0xc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x2}]}}]}}]}}]}}, &(0x7f0000002000)={0xa, &(0x7f0000001d40)={0xa, 0x6, 0x250, 0x0, 0x21, 0x9, 0x40, 0x2}, 0x76, &(0x7f0000001d80)={0x5, 0xf, 0x76, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x4, 0xff00, 0x5, [0x9fcf, 0xff3f3f, 0x1e, 0xf, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa4, 0x5, 0x0, 0x0, 0xfe}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x10001, 0xf00, 0x9, [0x3ebf, 0x30, 0x1013f0f, 0xff0000, 0xc0c0, 0xff3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xf2, 0xc6, 0xa040, 0xd}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x5f, 0x4, 0xb, 0xb}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x4, 0xf00f, 0x7}]}, 0x5, [{0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x42c}}, {0xc9, &(0x7f0000001f00)=@string={0xc9, 0x3, "32fd572860439deab314df4138d557fa19e6fa6b57a8b12550b440b4173614d3089d200b81795f2b8f6652461d9f71eea60167cee56052739907b8f32ed13f9cfb7de053fc5f51a779607ff5d674dcbae165687a14e1681d4d671ef42f9567c822ad2675eecd1d50ec39eae8b7f59deb1125a9e1355a231aae14004826befcab004e58e66bdba012ff67578929dfa3f78ee8c1bdcf650a7a107a898f652ce8104b90b999d017615c0b945760d5c778fbca117c2e14c631ca089d3ba1a42bac157dcf4563793e33"}}]}) r10 = getegid() lstat(&(0x7f0000004400)='./file0\x00', &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r8, &(0x7f00000044c0)='./file0\x00', 0x400, 0x561, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000004740), &(0x7f0000004780)=0x0, &(0x7f00000047c0)) stat(&(0x7f0000004800)='./file0\x00', &(0x7f0000004840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000048c0)={0x0, 0x0}, &(0x7f0000004900)=0xc) syz_fuse_handle_req(r8, &(0x7f0000002080)="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", 0x2000, &(0x7f0000008f00)={&(0x7f0000004080)={0x50, 0x0, 0x63f4, {0x7, 0x2b, 0x3, 0xffffffff80008000, 0x2338, 0xffff, 0x7ff, 0x9, 0x0, 0x0, 0x2, 0x68}}, &(0x7f0000004100)={0x18, 0x0, 0x8, {0xffffffffdf4bff81}}, &(0x7f0000004140)={0x18, 0x0, 0x20000000, {0x4}}, &(0x7f0000004180)={0x18, 0x0, 0x5, {0x2}}, &(0x7f00000041c0)={0x18, 0x0, 0x7, {0x6}}, &(0x7f0000004200)={0x28, 0x0, 0x9, {{0x1, 0x1ff, 0x1}}}, &(0x7f0000004240)={0x60, 0x54d34cc1fd27bb55, 0xa, {{0x5, 0x4, 0x7, 0x10, 0x1, 0x3ff, 0x7fffffff, 0x4}}}, &(0x7f00000042c0)={0x18, 0x0, 0xfffffffffffffbff, {0x3}}, &(0x7f0000004300)={0x14, 0x0, 0x81, {'wg0\x00'}}, &(0x7f0000004340)={0x20, 0x0, 0x8, {0x0, 0x10}}, &(0x7f0000004380)={0x78, 0xffffffffffffffda, 0x4a, {0x0, 0x8, 0x0, {0x4, 0xaf4b, 0x7, 0x7fffffff, 0x8, 0x795b, 0x4, 0x8, 0x3, 0x8000, 0x2, 0xee01, r10, 0x4151, 0x3}}}, &(0x7f0000004600)={0x90, 0x0, 0x1, {0x1, 0x3, 0x7, 0x2, 0x7, 0x0, {0x4, 0xd47, 0x0, 0x80, 0x2ed2, 0x80000001, 0x9, 0x6, 0x2, 0x4000, 0x80000001, r11, r12, 0x2, 0x3c}}}, &(0x7f00000046c0)={0x70, 0x0, 0x10, [{0x1, 0x6e04, 0x5, 0x3, 'TIPC\x00'}, {0x6, 0x7, 0x2, 0x6, '*-'}, {0x6, 0xfffffffffffffffe, 0x2, 0x1, '!@'}]}, &(0x7f0000004980)={0x1f0, 0xfffffffffffffff5, 0x40, [{{0x1, 0x1, 0x0, 0x1, 0x185, 0xfffffff8, {0x1, 0xffffffff, 0x2000000000000, 0x2, 0x0, 0x8000000000000001, 0xb252, 0x7, 0x0, 0x2000, 0x5, r13, 0xee00, 0x4, 0x8}}, {0x4, 0xaab, 0x0, 0x37cbced3}}, {{0x3, 0x1, 0x6, 0x1, 0x8, 0x8, {0x1, 0x1, 0x8, 0x8, 0x4, 0x4, 0x4, 0x8000, 0x7, 0x6000, 0xffffffff, 0xffffffffffffffff, r14, 0x5, 0x72}}, {0x1, 0x1, 0x2, 0xb, '!-'}}, {{0x0, 0x3, 0x6, 0x3, 0x7fff, 0x5, {0x3, 0xc885, 0x6, 0xa, 0x7, 0x2b5, 0x10001, 0xfffffff8, 0x5, 0xc000, 0x7, r15, 0x0, 0x20, 0xffffffff}}, {0x6, 0x8, 0xe, 0x4, '\xf9\':V+\\:.(^+[?-'}}]}, &(0x7f0000006bc0)={0xa0, 0x0, 0xc, {{0x2, 0x0, 0x6, 0x9, 0x1, 0x5, {0x0, 0xfffffffffffffffa, 0x9, 0x9, 0x6, 0x84, 0x6, 0x8, 0x4, 0xc000, 0x5, 0x0, 0x0, 0x5, 0x2}}, {0x0, 0x1d}}}, &(0x7f0000006c80)={0x20, 0x0, 0x7, {0x0, 0x0, 0x3ff, 0x3}}, &(0x7f0000008dc0)={0x130, 0xfffffffffffffffe, 0x7, {0xd323, 0xff000, 0x0, '\x00', {0x8, 0x4, 0x40, 0xcd, 0x0, 0x0, 0x4000, '\x00', 0xffffffff, 0x80, 0xfffffffffffffffc, 0x3, {0x100000000}, {0x8000, 0x15edb02}, {0x7fffffff, 0xc0000000}, {0x3, 0x7ff}, 0x5, 0x3, 0xc000, 0x2}}}}) 7.189425556s ago: executing program 8 (id=3850): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0], 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x8c, 0x4, 0x25, 0xf4, 0x200, 0x1}}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="20000800000060010400000f00009418710a6e2ee56d0004a9c6c227d4f0a54a775d7cd0fdecb57f5626d3f6598b2c0848a02f61a5725cb1b6f4fc041068e196f283a0aee5f745016ac77a4ad8cb00c1f79eb3ac9cad0ab5ed3135975d82ed0ae6980cbb54f31ee76e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x20102) r3 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r4, 0x0, 0x20040005) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x20, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x20000001) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RGETLOCK(r6, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(0xffffffffffffffff, r3, 0xfffffffffffffc01, 0x0) tee(r5, r7, 0x60000000000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x60303, 0x0) r8 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000000)={'ip6gretap0\x00', 0x400}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffffff, &(0x7f0000000380)='\x00', 0x8100) fchdir(r9) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) 4.217990204s ago: executing program 8 (id=3882): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x2000000, 0x5, 0x0, r1, 0x0}]) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000007c0)="17000000020001000002d68c5ee17688a200d3135447dd376874ae08bc447a32080300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff0601150039000000000000000002ffff02dfccebf6ba0008400300000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2127c3d0", 0xb8) (async) r5 = mmap$KVM_VCPU(&(0x7f0000303000/0x2000)=nil, 0x0, 0x2, 0x10, 0xffffffffffffffff, 0x0) (async) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000400)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x5422) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) (async, rerun: 64) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000001000)="cc1a3a3b34bf7e9f0d341078e8b46620e513ccb3d862b13ea48c150b553946f9671de17c40c0b652dfcb92fd7a2f66585910f88f92e551cae86f4eb94412b213366a0bcf8be38bc7", 0x0, 0x48) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) utimes(0x0, &(0x7f00000002c0)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x24, &(0x7f0000000200), 0x4) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000003600)={@empty, @local, 0x0}, &(0x7f0000003640)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000004fc0)={'ip6_vti0\x00', &(0x7f0000004f40)={'ip6_vti0\x00', 0x0, 0x2d, 0x8, 0x80, 0x8, 0x51, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x1, 0x1, 0x10, 0x1ff}}) (async) getpeername$packet(r2, &(0x7f0000005000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005040)=0x14) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000005100)={'syztnl2\x00', &(0x7f0000005080)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x0, 0xfffffffb, 0x20, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x1, 0x5, 0xfffffff7}}) (rerun: 64) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000053c0)={@dev, @remote, 0x0}, &(0x7f0000005400)=0xc) sendmmsg$inet(r8, &(0x7f00000056c0)=[{{&(0x7f0000001080)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002300)=[{&(0x7f00000010c0)="187b7e1f0c671b3ac97d80785c5f8d24cc0aa3ff4c", 0x15}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000001100)="b3f2bbb595eee984a985bb7f0f6e8f7213ba99376cc310a97227af9b620545822c785f57320ed1c8b7", 0x29}, {&(0x7f0000002180)="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", 0xfe}, {&(0x7f0000002280)="b2913820e3dcc22f24b6a4947eaa486fec33ff5294b8dc9dd614d51b4d55712f84a912bb1725a6c2d98f414b1ab3c612cf0cfc0e5c4214421cebf6ad862a92f38164ac0ae55d4e87fbc1bcbd212866164d8949dd8be1af0ec45d25", 0x5b}], 0x5, &(0x7f0000005880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfec3}}, @ip_retopts={{0x124, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @ssrr={0x89, 0x3, 0x93}, @timestamp={0x44, 0x20, 0xd1, 0x0, 0x0, [0x5, 0x1, 0x101, 0x5, 0x8, 0xb01, 0x0]}, @cipso={0x86, 0x5f, 0x1, [{0x5, 0x4, "b37a"}, {0x6, 0x10, "24d0fef1c863e3d2f8da9edc5675"}, {0x6, 0x12, "25d4b9b275a75bfa1feb830000000000"}, {0x6, 0x12, "8d65c7195518c81b22d3fb75dd6eb786"}, {0x0, 0xf, "5d7cc57d64df7acd107badbe91"}, {0x5, 0x12, "653facf8cee22ded98c1e06d8c2acae2"}]}, @cipso={0x86, 0xb, 0x3, [{0x5, 0x5, "75388c"}]}, @ssrr={0x89, 0x13, 0x8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @empty]}, @timestamp_addr={0x44, 0x34, 0x9c, 0x1, 0x3, [{@multicast2, 0x7f}, {@empty, 0x3}, {@local, 0x8}, {@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x90000}, {@private=0xa010102, 0x3}]}, @cipso={0x86, 0x38, 0x0, [{0x6, 0x6, "bb95ac5e"}, {0x0, 0xb, "421fb7a794afd752c6"}, {0x2, 0xc, "0390246a3c8f5d59c478"}, {0x7, 0xc, "e7fb1a2b30aef72e1e6d"}, {0x6, 0x9, "ea8f5915c9bfff"}]}]}}}], 0x140}}, {{&(0x7f0000002480)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000035c0)=[{&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="4d7227608c87b621712c41cce440749e45a543f2a1919780996df993c22d08b023b3b975b261dde0c75233533133462a0479e3a979f47944f84f75b70aaf9cb1897c373d1d40f3697973e8d998880ded37ac25bb914fa862e7e2ba762747500946d986bdf9a74f110f9be50f36b1d2120565453306763c78c4e1b9510d533f7a08cfc382ff36691aee0433c52b03a1a8f61025e35fe3c5d93dca2b52141ee15c6c7fb717211ffcc4e3b530cf392bdeb3515b560f3e4c50560f0f68465a04ceda6bd11151", 0xc4}], 0x2, &(0x7f0000003680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@cipso={0x86, 0x74, 0xffffffffffffffff, [{0x2, 0xd, "e40ca96c53c74dd07ff833"}, {0x0, 0xc, "54d8f5982282b0e6f61f"}, {0x1, 0xf, "12ca337e4a4197e53498655eaa"}, {0x0, 0xd, "1820e808448a65f1ba8ab7"}, {0x7, 0x11, "b85556a403602b2eec7dd2c00a2102"}, {0x5, 0xe, "bdbedee720320c83e6d64d0c"}, {0x6, 0xc, "6cc3d5290f5e2fdc46af"}, {0x1, 0xe, "304e6e4ec4f2a89c86bc4889"}]}, @rr={0x7, 0xf, 0x4e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x31}]}, @end, @end, @lsrr={0x83, 0x23, 0x89, [@remote, @private=0xa010101, @private=0xa010102, @private=0xa010104, @multicast1, @dev={0xac, 0x14, 0x14, 0xd}, @remote, @private=0xa010102]}, @generic={0x7, 0x12, "765b10b3fce79a3067d93cd1c6a13b52"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x120}}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f00000037c0)="6f6b67e4e41c983df5edfe753bdf9c51df627c50c97ea1f365700c17d56a6384187b4763a37322917714900890967916a2ff9e2a369042b4f7322e1ff0d0e8254d8cda83a68f3f08d2582e7aa9aa4e62507a618d73dc5a245d855893295d0fca5a5858acfe8ac32795d052282ac8ee9d", 0x70}, {&(0x7f0000003840)="ab691c739acc864cc217a48ea88d27b2442340341a777872c8a79c2291000040d8ea2ad946f6a8f7a0c889bdb5d7f7ca78e0d9c516c7dc66b1699f72afcf98b903c3335b4063dedcdb278f931ecae2b2e105bd7d7179561a8d7e91f23ba1fdce6d9da6975c5914d03692098a020b785c4ef03c4ed09dc91228f9c1c6c3c8e5cd610e218a7af2106967514789f93996a9566b", 0x92}, {&(0x7f0000003900)}], 0x3, &(0x7f0000003980)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0xe, [{@remote, 0xfbb}, {@rand_addr=0x64010102, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x7}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x35}}, @ip_retopts={{0x10}}], 0x80}}, {{&(0x7f0000003a40)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000003dc0)=[{&(0x7f0000003a80)="30f73169723c0cb86e3fda09bcd2a0e5ededcbdfc81b0d351b18af832a71413c34008dca7da41cd707ed195310705d7b7ef63dffa20df60958e9fc95eaee8b9507345f10f4b13b01c8c25a9c7fb6579d2bc89e057c7b53cb59dc2f404da9cf0056441065739edf5a532e47d21373561df02ad23720bb4c7c53a6f54467dc27aa9c970a5d8664e0734a1399c69c00623d77cf1af32bd03cfe4b406c76d48bf1db288cf180ce94648d0f2ded00886592ece5ba1ac1", 0xb4}, {&(0x7f0000003b40)="73dda59407c9002677ab3314a1ec1dab2a3a279f87a2c023413272c00757798f3e944536a6e80288cc3c13bd71d018606acf5f4340f6ef9f4b208c5a1fa9acd45132d5874cf403b4131aef90c87573ee06ed1377783aba725e27cac4b7b63553b04716cd01bc00f6e0190764445191c3aa57ac18b0c4025b6b167af736c11e6da594bcc4111e8951364095bd1a665477967c08b9954fedb2bef048983eecd0d9cb94e68c3d4f61bc141a9c42f52009f9e5be947d2d0eba477597b29d2436a931e8e5553abf2f6264936bc1c89b4a49b50e42176fdb11c8eb483517891ac6", 0xde}, {&(0x7f0000003c40)="fd444c306ff36b849866245ce90a64b3a9810132f04bd91c52c598c1d99e1bf17773f8a3df8389", 0x27}, {&(0x7f0000003c80)}, {&(0x7f0000003cc0)="de0b815d92758d60fc41adcd0cd2de51f88e81f339226497be727dcd821a53dbeadb5e3b9fb2ddb3a792d7c9cfe3dc", 0x2f}, {&(0x7f0000003d00)="3d786d6b5709643367017049da28b226f5cdbe5623cff88c56afa84aa4e30934ff0375170d65ebaa3026fcf31f5623e1739961244ce3f9fd01cb32aa02fb1012c09d1d417adc33c7c368b0ca0fe0b54178d289581cc6a7e0193138b808dea353ecd6b1b0c89e91a1e2b622b10a7af989470b6ff04910ef46a902e67b0a102e3f14fd6d18a79e4ff77b7525", 0x8b}], 0x6, &(0x7f0000003e40)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x60}}, {{&(0x7f0000003ec0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000004f00)=[{&(0x7f0000003f00)="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", 0x1000}], 0x1, &(0x7f0000005140)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @remote, @dev={0xac, 0x14, 0x14, 0x43}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @broadcast, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @rand_addr=0x64010100, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002380)="737113547635117a1963b42f600cb6bfe750c8911c36bf49ee58722e2c86e805946baaded48edb04daf801c4f4b044e7ff63c6b79604c93270ad7f28a7c69862c52dd35e7843d00400fcd82da55c67ea5dcb79bab5f72f0611b284bc767a4529b4b0c89574c799614173d708e04be52e16772308012b39a6cf9dd6c764d3547a645d6a17da73d26f8cf256f12d131975d08c03b224194090dd782d4dcec155d7f9a1fe", 0xa3}], 0x1, &(0x7f0000005440)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @private=0xa010101, @rand_addr=0x64010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x88}}, {{&(0x7f0000005500)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000005680)=[{&(0x7f0000005540)="48607cd7f8a3fe845b0953691f5a7c4fa461ee85fd683538ce353261b2b0e9ef4688c77df33f09d1d961124bc98aea67d27953173c3d708671e3a93f47355271c3a6edfae0154dc859c0b0aff1293ec83060d572054f83ce06ed7e3ac9e340149011af7580f9355fe789776983d10489cfca01c1bf28b4fe8bb332bbf1fb3fc90fad02d62340a6f3f8db79f79b47d8b979c50084e68955140a88c8eebb74d11398e1458ea257b14bd3097a87248ed588735ad9d3f1a227d4eb6fa2fcf6325c867543527f5540894da739", 0xca}, {&(0x7f0000005640)="1e071af3be37b4687614d6cd4bd7ea62985775e9e29762e7f0f4c23063303ddd5e2dd542474974e123504a448f129c8e95c65e509ec394efef", 0x39}], 0x2}}], 0x7, 0xc0) 1.171071121s ago: executing program 8 (id=3925): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r3, &(0x7f0000000140)="f09bda31", 0x4) sendfile(r2, r3, &(0x7f0000000000), 0xfffb) fcntl$addseals(r3, 0x409, 0x8) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000000980)=""/4, 0x4}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000000bc0)=""/215, 0xd7}], 0x6}, 0x81}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x1ff}, {{&(0x7f00000008c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001d80)=""/176, 0xb0}], 0x1, &(0x7f0000000700)=""/43, 0x2b}, 0x8e1}], 0x8, 0x2100, 0x0) r4 = socket$inet(0x2, 0x200000003, 0x84) getsockopt$inet_buf(r4, 0x0, 0x50, 0x0, &(0x7f00000000c0)=0x58) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r5 = eventfd(0xcb) r6 = eventfd2(0x4, 0x800) io_submit(0x0, 0x3, &(0x7f0000000940)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0xdc, r3, &(0x7f00000005c0)="f352d1d73990e59e058548effef8e8742fe9f14a3778e29ec6e67e543a9081b12e1948d3d8dfc39194204d30e7c94872f9e9dda6adf712472b05fcc221828de152eb30ce8c0fab158a9e9ec9699aff282e0e23bfb4d7", 0x56, 0x1000, 0x0, 0x0, r5}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x9, r3, &(0x7f0000000680)="9ce23cb6e0603d337298247f6ae2c668ccb83ad3bbca61fd253b904b78c6812d828387b1c5c1e8ca24ca6adb898659e42449ccb419ac8bfac897a0", 0x3b, 0x1, 0x0, 0x2, r6}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000007c0)="036a0b32609be73c594d841f6593e043fb6dfa0cfcc03243294cf663ad8d7bd46eacaddff970926eb854726a1e5b06c8b8e426336e817e73848422a402862d2c9734a06452b11514fc4bf7224e97638c0fdea7ae9c31a592841c619d589cc8aff5e578baf765453868ba3b05e43f7170c92b910f2984593c35f487cdbb54f4bc696990b1d68ebb87b6642468e9c387ee300e480468400fb81ed3", 0x9a, 0x9, 0x0, 0x1, r3}]) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb5\xba\xe8f\xd6Q}\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:P\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x97\xc6\xd6!0f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xf7\xef\xd2\x7f)s\x9f\xfa\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06\x03\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^\xd2t%\xffX\xd1\x9aj\x06\xcds\xca\xbb\xf6\x17\x1c_\xc9A\x17w#h\"C\x01\x8f\x89\xa0\xd8p\xab\xd7\xd0\x8a\x98w\xfbW\x06\xc9\f\xb4\xe1\xcb\x98\x03\xb3\x81\x190\x93\x0e\xe0H\f\xfd4F\x92%\v\xbbU\xf6@=\xda\xae\xa0g\x04\x1a\r\xdb6h') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 970.038374ms ago: executing program 8 (id=3930): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x160e) (async) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x160e) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x4000}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) (async) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) sendto$inet6(r5, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x46b) (async) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x46b) syz_open_procfs(r3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0) 881.453106ms ago: executing program 8 (id=3931): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x1, 0x200}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000540)='pagemap\x00') close_range(r0, 0xffffffffffffffff, 0x0) 701.480449ms ago: executing program 3 (id=3944): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) gettid() capset(0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) (async) r2 = signalfd4(r0, 0x0, 0x0, 0x80000) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) (async) ioctl$sock_FIOSETOWN(r2, 0x8901, 0x0) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000800)={0x120, 0x0, &(0x7f0000000680)=[@clear_death, @request_death={0x400c630e, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x2, 0x0, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/235, 0xeb, 0x9, 0xa}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @clear_death={0x400c630f, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x100, 0x3}, @fda={0x66646185, 0x5, 0x0, 0x1c}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/200, 0xc8, 0x2, 0xf}, @fda={0x66646185, 0x7, 0x0, 0x34}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}}, @decrefs, @dead_binder_done], 0x1d, 0x0, &(0x7f00000007c0)="03c86c654c0cd16178f5ea150a54003b4f6f5af2486a422243244de1ab"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0x9b, 0x40000ffffffff, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0xd]}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 688.811569ms ago: executing program 3 (id=3945): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) lsm_list_modules(0x0, &(0x7f0000000040), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) writev(r2, &(0x7f0000001540)=[{&(0x7f0000000300)="5d1b72799ce84b64a8d251a116e20eda4fe07c9d97d223fcabfec942e9097e1287759fc5480a62b8a8964c711bdb3263cfee", 0x32}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000380)='n', 0x1}, {&(0x7f0000001400)="32976972962d506ff3ae340876a5a370c6d3cfa620bf71be8a505611a3529530c18cd25febff0fe8add074c152beace5d6ecd1427906b1f22cb1a54c6c6670f9ca94b679db2e84154410eb87d2fc84669c00c3244daa4a21d31824be", 0x5c}, {&(0x7f00000021c0)="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", 0xffffff67}, {&(0x7f0000001500)="f75a82a0306ed5019342"}], 0x5) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) write$P9_RFLUSH(r2, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) 633.560879ms ago: executing program 3 (id=3946): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x160e) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "a4e44a930014165384c66701cb64f747"}) 632.98499ms ago: executing program 3 (id=3947): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x50, &(0x7f00000001c0)={0x0, 0x0}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000006480)={0x30, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}]}, 0x30}], 0x1}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000200)={0x20, 0xb, 0x9, "f08673e313cbd4cba4"}, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x80}, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0xe0, 0x20}}, 0x0, &(0x7f0000000640)={0x40, 0x9, 0x1, 0xee}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20131d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="12a1e389e7f7a5b5989bbfe91c723a945340463e9950087d95509acaef634a4602b3b47f2c59812e1953fce5df34c3b0b91ad80b28148535eaa1234bc5a568a1610a31acd765f5a1ddbb4b3aeb50ae221e928e25c187ed0e06c00ca29390681510645bf0", @ANYBLOB="6ec9404a50ac911c6d9e"], 0x32600) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r8, 0xfffff000) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r9, 0x0, 0x3, &(0x7f0000000300)=0x7fff, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000100)={0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdirat$cgroup(r7, &(0x7f0000000040)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r10, 0x99b33000) 632.73554ms ago: executing program 1 (id=3948): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) setuid(0xee00) mmap(&(0x7f000078b000/0x1000)=nil, 0x1000, 0x300000a, 0x22052, r0, 0x94cad000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 625.00712ms ago: executing program 1 (id=3949): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r8 = dup3(r1, r0, 0x80000) r9 = eventfd2(0x858, 0x400) r10 = eventfd2(0x2, 0x80001) io_submit(0x0, 0x7, &(0x7f0000001b00)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x401, r1, &(0x7f0000000400)="5bf09216632de120205e5b54ec2d242e94abae3cb2c73d0fd23dbc6f141e4d6b8b8088f141014edd49b0e88a6c4bb929d52ce1269001917c79f08bbe8973143d7093a9e7b7c75841993c2c46af3e28010f7c24fc6a76a257d2b5d8b389c5f9e75e3831b8bdc6a4e87e786b24c56c90bb193961e27ae4821ccc46ed817cee4078768e4cbc1ffaa94fa309fc911f688c43b9c2446515e948c4eac8b6fd22da218865bf0484bb861295cf99fd980e80c42ec44970338c914b1f872b21d5eec61ab41a", 0xc1, 0x1, 0x0, 0x6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f00000005c0)="be0cb5fbf259c2e02f0d025ff652bfea6f6eb0ec8b1c7362585d27eda51cc97a05b8f6938325c26c5c38f32b8cd193a8303521cdd0d2bd44fbe613b6b42d4acb997f58b92f1a536e3236803239cdcb7ce5b7bdaae30131fbb1055c89b2671d3fe5a78b42886f373ec009fc496951cc4d9a", 0x71, 0xfffffffffffffffb, 0x0, 0x1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x7ffe, r4, &(0x7f0000000640)="75925093036855248d1a3ec6851101db24764d3e7a7f98cbb0831f822af006bff69084ecc8cd6eb178461cb0efcbc32ada32dfbc4c3c", 0xfffffffffffffd6b, 0x7, 0x0, 0x3, r1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0xfffc, 0xffffffffffffffff, &(0x7f0000000740)="2d95beb81aca20c1b378d5e10808799b63e17dea07d1e44988eaf5bad7b0d2ccf5d078c453022b97ef9b16bc6f8078160ee57713d3f1bb64730b38119e6651b400d7a5bbbc424fb5e5b72e559ba8a48edfbd3793e8efae77b6e92ebde053da4d4c03bf836e5ac0917d374daee5ec54c69fb918676dee440b5a6ba119c4116b6925a387953953ce55d741cfb5fd9c996e352678613a8a1b5de669819b3be132d3aeea1dfe544b7b49f0a62f52cac48ff1e436d73c04c75b43e3a24778367b76e16788c9f824389197b03ad69f52071309ae5c528d5602308c3b563770c65355a7624b8273e91830385afc22c17a31", 0xee, 0x3, 0x0, 0x2, r7}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000840)="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", 0x1000, 0x64, 0x0, 0x1, r8}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x3, 0xd, r0, &(0x7f0000001880)="0b5eecb9bef36ba204e9429793cb1d7803f328b033a85b96d641fe3ff66628f5b455e5e804ed810ce5b52d2efb53113bdb4d2325d28c2a4f7cb95db48517f3f9649755a2f0d404f172a5d2beb08c08cc669a7cc542771f460389fc8ee066a812dc7deeabb45b95aabbf7316fa2a98815ab7cd7a8211edb8dbb517ecb2ae2cebb573b1b98c9f997aa7a7349b58b2423de2bba038cd5e9d26c7fcc2095fce3dadc0b7dd60a9159023ef7a7d244810583b1e1d44b3b32eff1952ef8322b34c9872f94f3fda8f76221759881dd0b8e2445bb0e223f6b72fdb538d2d68d55de10710003827e4d8abb3d", 0xe7, 0x6, 0x0, 0x3, r9}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x6, 0x2, r0, &(0x7f0000001a00)="189b6c6bc4e083ea654ee82ee065a8c4bf55171561c3d9c99ecbc0e5e8fd5c43d2bdd542733a7935c30dc91b3cd30b867af8123a4aa5c7f30a88342878627524f2192da681737006c726392604737007e8b10a25c4412a55817e94c9e239192305980e71dd4a3faebd620eaa6be8c36aa93def64da3f0febf10a2284d154f2bfdabd69a6449a11", 0x87, 0x7, 0x0, 0x3, r10}]) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r11 = socket$xdp(0x2c, 0x3, 0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r13, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) shutdown(r13, 0x1) ioctl$int_in(r13, 0x5452, &(0x7f0000000700)=0x1) sendto$inet6(r13, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000240)=0x4002, 0x4) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x1, r14, 0x0, r11}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x110b}) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xdfd) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 512.681222ms ago: executing program 1 (id=3950): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000001c0)=""/215) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = syz_clone3(&(0x7f0000002040)={0x20900000, &(0x7f0000000180), &(0x7f0000001ec0), &(0x7f0000001f00), {0x1}, &(0x7f0000001f40)=""/19, 0x13, &(0x7f0000001f80)=""/77, &(0x7f0000002000)=[0x0, 0x0], 0x2, {r0}}, 0x58) stat(&(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() r5 = syz_clone3(&(0x7f00000023c0)={0x14000000, &(0x7f0000002180), &(0x7f00000021c0), &(0x7f0000002200), {0x35}, &(0x7f0000002240)=""/100, 0x64, &(0x7f00000022c0)=""/168, &(0x7f0000002380)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getresgid(&(0x7f0000002500), &(0x7f0000002540), &(0x7f0000002580)=0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$pokeuser(0x6, r8, 0x358, 0xffff8881f6e4ea00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r10) setuid(r10) getresgid(&(0x7f00000025c0), &(0x7f0000002600)=0x0, &(0x7f0000002640)) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = accept$nfc_llcp(r0, 0x0, &(0x7f0000002680)) r14 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r15 = socket$nl_audit(0x10, 0x3, 0x9) lstat(&(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0xa, &(0x7f0000002780)=[0x0, 0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0xee01, 0xee01, 0xffffffffffffffff, 0xee00]) sendmsg$unix(r0, &(0x7f0000002900)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000000080)="3ab9ac6f6a59bed4b5c02dfc2e67c1cc4e9df06334716221afcc2e956454237c2c0c", 0x22}, {&(0x7f00000000c0)="7a26ac74a1c8569db2c5048b92f498056f70039923bfde703cc9506655811d2154d1c72b1ddefceaf8decd2f4115d9ab7cbb67eb7fa324f6c859d61555eb422a5464ec1cf05d6738ca219098135c2faac3b1c7229e830301856699de44a3", 0x5e}, {&(0x7f0000000ac0)="6350e82e045c987cc5762fb3259e50602194f142c22de63e315c006b952c92b994397ab2d3b7f92456e310c8d316a1b74e5cc7836111a544fff5a010ee65ba4f7c9a3d131eb3bf5a940d38c4627bab79686d2df68df7a6e98182991636bdbe1b3b31485f1c52ebbfc6", 0x69}, {&(0x7f0000000b40)="56af649f66bf9e2b7138de7e5edf051a30e7c0b5ee53ca26be6fcedf2c2f136e44808eeedf1bd0e100b9f2066d28d25f3a0236ceae7db33518fb38d4e3937b03270769a73a6bef4ae2ea96a257a4b63986de7388c50a9fe21c062e2236f245fe7b7e8d120b5efe8bd73e1ce24220fddeb42ba2b42fd9b72dc32190973907f88f880bd27be051660c8d955d441cfc2d7a42bcd06f654a9ee889f761fded918b06386fc0069b040df45b2f0cf5f98bd6d7623bb8c8e3cd0a76def1c637c2a5a3b7f921357efdf98ec3c01bd65af45f753d733ed0130161bdeb9f4d", 0xda}, {&(0x7f0000000c40)="931f8bc8ab5c9b719a55376d7b37d88cd31ce5ebd35d47d6f02b4ae50d04f28bb6df4dfa4339fad212e0bbfa7db5c67d5c96695d9a2f6d81ea8f314aca956b6193d1ba42002b0e8b5ebe780b0382c80b896276d0c995594a662925f21bcb19ffe4bd5d621041", 0x66}, {&(0x7f0000000cc0)="39f78be91174e4155af852bad962b048db6966543d0db9681f95f53444e43e429fd48c8238f74470abf26ee6d74be7c11e2c8706a6deaf91bded42e89d05d5dfa5e6c32776b31465139eb0e785f82855f22e632b472249a88f2213482b4173ff6e5ec7f9342a4e54e70d245ac491cdc622ecf04627eac329ccebb10eb8732f", 0x7f}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="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", 0xfb}], 0x8, &(0x7f00000027c0)=[@rights={{0x1c, 0x1, 0x1, [r0, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @rights={{0x28, 0x1, 0x1, [r0, r12, r0, r13, r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r14, 0xffffffffffffffff, r0, r0, r15, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r16, r17}}}], 0x130, 0x20000804}, 0x2404c051) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r19 = openat$cgroup_freezer_state(r18, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r19, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r19, &(0x7f0000000080)='THAWED\x00', 0x7) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000002c0)={0x0, 0x0, 0x2}) 429.635933ms ago: executing program 1 (id=3951): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) keyctl$clear(0x7, 0xfffffffffffffffb) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x30, r0, 0x1000) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x6, 0x10000, 0x4, 0x729, 0x0, 0xfffffffb, 0xfff}]}) 428.521623ms ago: executing program 1 (id=3952): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000), 0x30e000, 0x1000, 0x0, 0x4}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000002c0), 0x280, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r2, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e, 0x80800) 427.818733ms ago: executing program 1 (id=3953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'geneve1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x11) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 127.272698ms ago: executing program 3 (id=3955): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) inotify_init1(0x400) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x1, 0x0, 0x0) close(r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)={0x24, 0x28, 0x1, 0x70bd23, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0x1e}]}, 0x24}], 0x1}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/nf_conntrack_expect\x00') read$FUSE(r3, &(0x7f0000004640)={0x2020}, 0x2020) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x1}], 0xffffffffffffffb3, 0x0, 0x0}) 80.487328ms ago: executing program 6 (id=3956): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'sit0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x28, 0x13, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x1a, 0x0, 0x1, [@generic="1a1e45cb"]}]}, 0x28}], 0x1}, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000000c0)="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") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20044010) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x1000, 0x476, 0x4000000000000000, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x7, 0xffff}) 79.702119ms ago: executing program 3 (id=3957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) creat(&(0x7f0000001380)='./file0\x00', 0x11c) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='msdos\x00', 0x8000, 0x0) 79.336588ms ago: executing program 6 (id=3958): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'xfrm0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "e73d924d4b1fa0141555909d6357f7e6a019b9836fee0416b8e25b1622ecfab7", "75d1536b4553d07138dff241fa2b6652829393d7cc7528867d178a0f797d95a6", "624968dcaef91107ed2e11c12dfea4db74fd14034418e55246239bf117f1a9d2", "13d2d543f715de9edc88033e0d621acfd4ba72deb1ee3ae10d87c26b9d73cbe9", "5c92f21472bf8147cf79ee7c122feb46c0f5c79b9b07c9d756710967e182671f", "05c12b6342cc20c30dd131e8", 0x6, 0x8, 0xfff, 0xfffffffa, 0x2}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'xfrm0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "e73d924d4b1fa0141555909d6357f7e6a019b9836fee0416b8e25b1622ecfab7", "75d1536b4553d07138dff241fa2b6652829393d7cc7528867d178a0f797d95a6", "624968dcaef91107ed2e11c12dfea4db74fd14034418e55246239bf117f1a9d2", "13d2d543f715de9edc88033e0d621acfd4ba72deb1ee3ae10d87c26b9d73cbe9", "5c92f21472bf8147cf79ee7c122feb46c0f5c79b9b07c9d756710967e182671f", "05c12b6342cc20c30dd131e8", 0x6, 0x8, 0xfff, 0xfffffffa, 0x2}}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8000) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_setup(0x3ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) (async) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) readv(r3, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000001c0)=""/172, 0xac}], 0x2) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000b, 0x1010, r1, 0x4d75d000) 78.914448ms ago: executing program 6 (id=3960): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x2) read(r2, &(0x7f0000000040)=""/8, 0x8) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setreuid(0x0, 0xee01) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000140)={0xfffffe01, 0x7}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x9, 0x6}, {0x6, 0x7}, {0xfff2, 0x10}}}, 0x24}}, 0x49890) syz_pidfd_open(0x0, 0x0) setns(r3, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000099}]}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) openat(r3, &(0x7f00000000c0)='./cgroup\x00', 0x80001, 0x1) setsockopt$inet6_int(r9, 0x29, 0xd0, &(0x7f0000000000)=0xa5, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r12, 0x4010ae42, 0x0) unshare(0x44040200) socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)={'mangle\x00', 0x0, [0x3, 0x405, 0x2000000d, 0x0, 0x10]}, &(0x7f0000000bc0)=0x19) 13.630549ms ago: executing program 6 (id=3961): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) preadv(r0, &(0x7f00000012c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/213, 0xd5}, {&(0x7f00000011c0)=""/238, 0xee}], 0x3, 0x209, 0xfffffffc) 13.382559ms ago: executing program 6 (id=3962): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x68, &(0x7f00000015c0)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000040)=0x1020, 0x1) 0s ago: executing program 6 (id=3963): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x23c, r1, 0x4, 0xfffffffd, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xa58b, 0x75}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0xed, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xff}, @device_b, @device_a, @from_mac, {0x8, 0x9a}}, 0x6, @random=0xd, 0x8000, @void, @val={0x1, 0x5, [{0x60, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x5, 0x1}]}, @val={0x3, 0x1, 0x6}, @val={0x4, 0x6, {0x0, 0x8, 0xf, 0x32ef}}, @val={0x6, 0x2, 0x6}, @val={0x5, 0x81, {0x4, 0xe7, 0x3, "5dbd46cd8db4b0201149dfc92c498f3ab84480feb503118e6e0d35b9b347c04a1e843fb608f55664f1919c6f8489e3e5c6188c939378316667a6c27e668175bae592de4b411438ab7acc1e971f62cdfe9524a897b8bbd595a8680db3bb738d6580aafb8eeb8540d185ffdd0f56cfd8d2aa244428a2810aeead0b5d4f7dd4"}}, @void, @void, @void, @val={0x2d, 0x1a, {0x40, 0x1, 0x7, 0x0, {0xfffffffffffffffc, 0x2, 0x0, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x2e9a49e4b8592e42, 0x2, 0xe}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xfb, 0x9, 0x29, 0x7}}}}, @NL80211_ATTR_IE_PROBE_RESP={0xf0, 0x7f, [@random_vendor={0xdd, 0xea, "4814fda95d93c3320cee1e2b7a08d5036bc1a46a7722233ecc51d06d7ddaa0ef0fe5e6b00c21a7b24e5e409ca77eef8ed578478f6af1a2c5367579df31c81ce79a632319c9205245308bacef2026a9f74e38717fe11b1d22de1b5415e8bf39872208af50a98f614374ade896d19e1a17293eb9cd007c839fd4a49d3a5b00de9a9525a2f3ba476dd81ccd52b6c6ca4dff7523a643ec202fab117451dfdc7e5fb54364fac57127109587c5c0e106cd682b8a2b5168fc0fd9d5b0b29dc9abfa314a5e11d92a29041ed802bbe42532bfdcbb65320f0470128aa3eaf12ef6a888763e7238c3ca7942b44192f8"}]}], @NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40085}, 0x4004) mkdirat(r0, &(0x7f00000003c0)='./file0\x00', 0x100) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000440)={r4, 0x1, 0x6, @multicast}, 0x10) chroot(&(0x7f0000000480)='./file0/file0\x00') sendto$inet6(r0, &(0x7f00000004c0)="b13c531b64e758df3f94a38a7b07", 0xe, 0x40000, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000500)={0x0, 0x3, 0x800000000000, 0x9}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x9da, 0x1a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x92, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x32}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x73, 0x3, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x40, 0x5, 0x8}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0x2, 0x4, 0x6, 0x88f40cbe85a25fd, 0x8b}, 0x1c, &(0x7f00000005c0)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "3440853c20d0f2f0d59bcdf7df525481"}]}, 0x1, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x346b}}]}) mkdirat(r0, &(0x7f0000000680)='./file0\x00', 0xc4) close(r0) mount$9p_fd(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x80, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any}, {@fscache}, {@aname={'aname', 0x3d, 'blkio.bfq.io_queued_recursive\x00'}}], [{@dont_hash}, {@smackfsroot}]}}) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000800)={'netpci0\x00', {0x2, 0x0, @empty}}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000940)={'tunl0\x00', &(0x7f0000000840)={'sit0\x00', r4, 0x700, 0x20, 0x5, 0x7ff, {{0x38, 0x4, 0x0, 0x8, 0xe0, 0x66, 0x0, 0x80, 0x2f, 0x0, @rand_addr=0x64010102, @empty, {[@noop, @end, @timestamp={0x44, 0x2c, 0xf5, 0x0, 0x4, [0x0, 0x0, 0x4, 0x5, 0xe, 0xfffffff4, 0x1, 0x1, 0x7, 0x1000]}, @timestamp_addr={0x44, 0x24, 0x55, 0x1, 0x4, [{@empty, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@loopback, 0x6a}, {@dev={0xac, 0x14, 0x14, 0x16}, 0xb20c}]}, @lsrr={0x83, 0x1f, 0x8, [@multicast1, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}, @private=0xa010102, @multicast1, @remote]}, @rr={0x7, 0x13, 0x33, [@dev={0xac, 0x14, 0x14, 0x30}, @local, @rand_addr=0x64010100, @local]}, @cipso={0x86, 0x32, 0x2, [{0x6, 0x7, "5cb2aa0aee"}, {0x6, 0x11, "6953a1ec11e8f6d740099f77d514d6"}, {0x0, 0x6, "f6838f3c"}, {0x1, 0xe, "66190b29c62cf533593a029a"}]}, @timestamp_prespec={0x44, 0x14, 0x77, 0x3, 0xc, [{@local, 0x3}, {@rand_addr=0x64010102, 0x66ee}]}]}}}}}) getresuid(&(0x7f0000000a00)=0x0, &(0x7f0000000a40), &(0x7f0000000a80)) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) mount$fuse(0x0, &(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0), 0x400, &(0x7f0000000b80)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x10}}, {@blksize}, {@default_permissions}], [{@smackfsdef={'smackfsdef', 0x3d, 'tunl0\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}}) mknodat$loop(r0, &(0x7f0000000cc0)='./file0\x00', 0x100, 0x0) write$binfmt_misc(r0, &(0x7f0000000d00)="1eb45bb9a608f4e9eb6466397e172a0f7f18edd6b3399c73c359a0bd0b496152315eb097adbd06cb85de26eab8ff7d53883474530b030cda050784cba82069fc8a", 0x41) mount$incfs(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)='./file0/file0\x00', &(0x7f0000000e00), 0x800, &(0x7f0000000e40)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0xac9}}, {@readahead={'readahead', 0x3d, 0x1}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x60000000000}}], [{@subj_role={'subj_role', 0x3d, 'rootmode'}}, {@obj_type={'obj_type', 0x3d, '{&'}}]}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000f00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000f80)=0x8, 0x4) kernel console output (not intermixed with test programs): Device= 0.40 [ 260.642562][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.650823][ T9] usb 2-1: Product: syz [ 260.655050][ T9] usb 2-1: Manufacturer: syz [ 260.664953][ T9] usb 2-1: SerialNumber: syz [ 260.680730][T10185] SELinux: failed to load policy [ 260.710002][ T36] audit: type=1400 audit(2000000166.741:1736): avc: denied { setopt } for pid=10184 comm="syz.7.3081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 260.750748][T10185] kvm: pic: non byte write [ 260.880080][ T9] usb 2-1: 0:2 : does not exist [ 260.888801][ T9] usb 2-1: USB disconnect, device number 94 [ 261.056814][ T36] audit: type=1400 audit(2000000167.091:1737): avc: granted { setsecparam } for pid=10202 comm="syz.3.3086" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 261.080189][T10151] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 261.088524][T10151] rust_binder: Write failure EINVAL in pid:80 [ 261.193079][T10208] __vm_enough_memory: pid: 10208, comm: syz.7.3088, bytes: 70373039144960 not enough memory for the allocation [ 261.211385][T10211] __vm_enough_memory: pid: 10211, comm: syz.7.3088, bytes: 70373039144960 not enough memory for the allocation [ 261.295286][ T65] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 261.357800][T10213] rust_binder: Write failure EFAULT in pid:25 [ 261.394219][ T36] audit: type=1326 audit(2000000167.421:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.7.3090" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffba518e929 code=0x0 [ 261.446487][ T65] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 261.454662][ T65] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.464882][ T65] usb 4-1: config 0 has no interface number 0 [ 261.471076][ T65] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.484049][ T65] usb 4-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 261.493127][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.502391][ T65] usb 4-1: config 0 descriptor?? [ 261.513643][ T5383] udevd[5383]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 261.689202][ T36] audit: type=1400 audit(2000000167.721:1739): avc: denied { shutdown } for pid=10217 comm="syz.1.3091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 261.712949][ T65] usb 4-1: USB disconnect, device number 51 [ 261.739212][ T36] audit: type=1400 audit(2000000167.771:1740): avc: denied { search } for pid=10219 comm="syz.1.3092" name="/" dev="configfs" ino=1667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 261.975791][ T36] audit: type=1326 audit(2000000168.011:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10231 comm="syz.6.3095" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54ceb8e929 code=0x0 [ 262.065486][ T307] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 262.215250][ T307] usb 2-1: Using ep0 maxpacket: 32 [ 262.221917][ T307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.231085][ T307] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 262.239951][ T307] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 262.251004][ T307] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 262.260165][ T307] usb 2-1: config 128 has no interface number 0 [ 262.266752][ T307] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 262.278044][ T307] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.288174][ T307] usb 2-1: config 128 interface 127 has no altsetting 0 [ 262.303613][ T13] syzkaller0: tun_net_xmit 76 [ 262.309630][ T307] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 262.314723][ T13] syzkaller0: tun_net_xmit 48 [ 262.319492][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.325367][ T9] syzkaller0: tun_net_xmit 76 [ 262.335607][ T307] usb 2-1: Product: syz [ 262.340506][ T307] usb 2-1: Manufacturer: syz [ 262.353013][ T307] usb 2-1: SerialNumber: syz [ 262.481554][T10251] tmpfs: Unknown parameter 'oswI}ap;2\hMn;6Aʆ' [ 262.562407][T10230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:94 [ 262.660279][T10265] netlink: 'syz.3.3107': attribute type 4 has an invalid length. [ 262.677549][T10265] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3107'. [ 262.706998][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 262.707019][ T36] audit: type=1400 audit(2000000168.741:1743): avc: denied { setopt } for pid=10268 comm="syz.3.3108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 262.733968][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 262.802201][ T36] audit: type=1400 audit(2000000168.831:1744): avc: denied { attach_queue } for pid=10275 comm="syz.3.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 262.852206][T10280] fuse: Unknown parameter '' [ 262.885275][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 262.894107][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 262.905472][ T9] usb 8-1: config 1 has an invalid descriptor of length 141, skipping remainder of the config [ 262.922035][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 262.932776][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 262.947580][T10289] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 262.947614][T10289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:942 [ 262.958525][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a6, bcdDevice= 0.40 [ 262.977579][ T9] usb 8-1: New USB device strings: Mfr=173, Product=2, SerialNumber=3 [ 262.986133][ T9] usb 8-1: Product: syz [ 262.989935][ T36] audit: type=1400 audit(2000000169.021:1745): avc: denied { write } for pid=10290 comm="syz.3.3116" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 262.990336][ T9] usb 8-1: Manufacturer: syz [ 263.016231][T10292] raw_sendmsg: syz.6.3114 forgot to set AF_INET. Fix it! [ 263.018173][ T9] usb 8-1: SerialNumber: syz [ 263.028940][ T36] audit: type=1400 audit(2000000169.061:1746): avc: denied { create } for pid=10286 comm="syz.6.3114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 263.790224][T10297] fuse: Bad value for 'fd' [ 263.846230][ T36] audit: type=1400 audit(2000000169.881:1747): avc: denied { unmount } for pid=8799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 264.105268][ T5073] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 264.256444][ T5073] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 264.264775][ T5073] usb 7-1: config 1 has no interface number 0 [ 264.271101][ T5073] usb 7-1: config 1 interface 105 has no altsetting 0 [ 264.279724][ T5073] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 264.288943][ T5073] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.297022][ T5073] usb 7-1: Product: syz [ 264.301241][ T5073] usb 7-1: Manufacturer: syz [ 264.306072][ T5073] usb 7-1: SerialNumber: syz [ 264.515759][T10299] rust_binder: Error while translating object. [ 264.515824][T10299] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 264.522138][T10299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155 [ 264.533123][ T36] audit: type=1400 audit(2000000170.561:1748): avc: denied { mounton } for pid=10298 comm="syz.6.3118" path="/58/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 264.533724][T10299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.573737][T10299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.588907][ T5073] aqc111 7-1:1.105: probe with driver aqc111 failed with error -71 [ 264.599495][ T5073] usb 7-1: USB disconnect, device number 18 [ 264.713290][T10311] syz.6.3121 (10311): /proc/10310/oom_adj is deprecated, please use /proc/10310/oom_score_adj instead. [ 264.848680][ T307] usb 2-1: USB disconnect, device number 95 [ 264.856768][ T5383] udevd[5383]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 264.903213][T10320] exFAT-fs (rnullb0): invalid boot record signature [ 264.909957][T10320] exFAT-fs (rnullb0): failed to read boot sector [ 264.914680][T10322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.916731][T10320] exFAT-fs (rnullb0): failed to recognize exfat type [ 265.485294][ T9] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 265.502541][ T9] cdc_ncm 8-1:1.0: bind() failure [ 265.525132][ T9] usb 8-1: USB disconnect, device number 2 [ 265.669238][T10341] loop7: detected capacity change from 0 to 16384 [ 265.728361][T10341] I/O error, dev loop7, sector 2432 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 265.739740][T10342] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 265.748257][T10341] Buffer I/O error on dev loop7, logical block 304, lost async page write [ 265.757476][T10342] rust_binder: Write failure EINVAL in pid:52 [ 265.758377][T10341] Buffer I/O error on dev loop7, logical block 305, lost async page write [ 265.773568][T10341] Buffer I/O error on dev loop7, logical block 306, lost async page write [ 265.782436][T10341] Buffer I/O error on dev loop7, logical block 307, lost async page write [ 265.791582][T10341] Buffer I/O error on dev loop7, logical block 308, lost async page write [ 265.852875][T10341] Buffer I/O error on dev loop7, logical block 309, lost async page write [ 265.862699][T10341] Buffer I/O error on dev loop7, logical block 310, lost async page write [ 265.874255][T10341] Buffer I/O error on dev loop7, logical block 311, lost async page write [ 265.882892][T10341] Buffer I/O error on dev loop7, logical block 312, lost async page write [ 265.891558][T10341] Buffer I/O error on dev loop7, logical block 313, lost async page write [ 265.972429][ T36] audit: type=1400 audit(2000000172.001:1749): avc: denied { mount } for pid=10350 comm="syz.7.3136" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 265.972926][T10351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:57 [ 266.012406][ T36] audit: type=1400 audit(2000000172.041:1750): avc: denied { accept } for pid=10345 comm="syz.1.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 266.063032][T10357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:180 [ 266.134839][T10363] tipc: Started in network mode [ 266.149161][T10363] tipc: Node identity fffffffc, cluster identity 4711 [ 266.156199][T10363] tipc: Node number set to 4294967292 [ 266.162300][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3139'. [ 266.285262][ T691] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 266.435262][ T691] usb 4-1: Using ep0 maxpacket: 32 [ 266.446975][ T691] usb 4-1: unable to get BOS descriptor or descriptor too short [ 266.455466][ T691] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 266.463120][ T691] usb 4-1: can't read configurations, error -71 [ 266.611849][T10370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3142'. [ 266.611848][T10371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3142'. [ 266.644948][T10373] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 266.653869][T10373] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 266.716989][ T36] audit: type=1400 audit(2000000172.751:1751): avc: denied { setopt } for pid=10375 comm="syz.7.3144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 266.736648][ T36] audit: type=1400 audit(2000000172.761:1752): avc: denied { write } for pid=10375 comm="syz.7.3144" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 266.923839][T10397] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 267.025687][T10405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3153'. [ 267.068584][T10412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 267.068709][T10412] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 267.079297][T10412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:191 [ 267.293346][T10436] bpf: Bad value for 'mode' [ 267.335263][ T9] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 267.342948][ T1663] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 267.376052][T10444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 267.376219][T10443] rust_binder: Write failure EINVAL in pid:973 [ 267.495237][ T1663] usb 8-1: Using ep0 maxpacket: 8 [ 267.507722][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 267.519077][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.529121][ T1663] usb 8-1: unable to get BOS descriptor or descriptor too short [ 267.537005][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 267.546263][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.555281][ T9] usb 2-1: config 0 descriptor?? [ 267.560339][ T1663] usb 8-1: config 7 has an invalid interface number: 187 but max is 1 [ 267.568618][ T1663] usb 8-1: config 7 has an invalid interface number: 88 but max is 1 [ 267.576950][ T1663] usb 8-1: config 7 has no interface number 0 [ 267.583081][ T1663] usb 8-1: config 7 has no interface number 1 [ 267.589341][ T1663] usb 8-1: config 7 interface 187 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 267.602295][ T1663] usb 8-1: config 7 interface 187 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 267.613107][ T1663] usb 8-1: config 7 interface 88 altsetting 6 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 267.624742][ T1663] usb 8-1: config 7 interface 88 altsetting 6 has a duplicate endpoint with address 0x8A, skipping [ 267.635615][ T1663] usb 8-1: config 7 interface 187 has no altsetting 0 [ 267.642453][ T1663] usb 8-1: config 7 interface 88 has no altsetting 0 [ 267.651437][ T1663] usb 8-1: string descriptor 0 read error: -22 [ 267.657759][ T1663] usb 8-1: New USB device found, idVendor=05e0, idProduct=2008, bcdDevice=41.b1 [ 267.666907][ T1663] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.694384][T10457] FAT-fs (rnullb0): bogus number of reserved sectors [ 267.701226][T10457] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 267.723207][ T314] Bluetooth: hci0: Frame reassembly failed (-84) [ 267.878863][T10415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.879951][T10462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 267.889319][T10415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.908723][ T5073] usb 8-1: USB disconnect, device number 3 [ 267.948919][T10465] binder: Unknown parameter 'Sl' [ 268.003858][ T9] savu 0003:1E7D:2D5A.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 268.202946][T10416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.212389][T10416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.226787][ T5073] usb 2-1: USB disconnect, device number 96 [ 268.595269][ T5073] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 268.745250][ T5073] usb 2-1: Using ep0 maxpacket: 16 [ 268.751471][ T5073] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.761854][ T5073] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.772782][ T5073] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.781948][ T5073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.790418][ T5073] usb 2-1: Product: syz [ 268.794621][ T5073] usb 2-1: Manufacturer: syz [ 268.799738][ T5073] usb 2-1: SerialNumber: syz [ 268.840919][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 268.840938][ T36] audit: type=1400 audit(2000000174.869:1755): avc: denied { create } for pid=10486 comm="syz.7.3179" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 268.889035][ T36] audit: type=1400 audit(2000000174.869:1756): avc: denied { link } for pid=10486 comm="syz.7.3179" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 268.932897][ T36] audit: type=1400 audit(2000000174.869:1757): avc: denied { rename } for pid=10486 comm="syz.7.3179" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 268.997222][T10493] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.015067][ T5073] usb 2-1: 0:2 : does not exist [ 269.020756][T10493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:215 [ 269.024375][ T5073] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 269.056792][ T5073] usb 2-1: USB disconnect, device number 97 [ 269.215321][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 269.325249][ T307] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 269.365306][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 269.371680][ T9] usb 8-1: config 0 has no interfaces? [ 269.378840][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.387967][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.396031][ T9] usb 8-1: Product: syz [ 269.400207][ T9] usb 8-1: Manufacturer: syz [ 269.404808][ T9] usb 8-1: SerialNumber: syz [ 269.410434][ T9] usb 8-1: config 0 descriptor?? [ 269.475245][ T307] usb 7-1: Using ep0 maxpacket: 32 [ 269.481452][ T307] usb 7-1: config 0 has an invalid interface number: 244 but max is 0 [ 269.489716][ T307] usb 7-1: config 0 has no interface number 0 [ 269.497416][ T307] usb 7-1: New USB device found, idVendor=0403, idProduct=7c90, bcdDevice=fe.71 [ 269.506556][ T307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.514568][ T307] usb 7-1: Product: syz [ 269.518773][ T307] usb 7-1: Manufacturer: syz [ 269.523396][ T307] usb 7-1: SerialNumber: syz [ 269.533764][ T307] usb 7-1: config 0 descriptor?? [ 269.546679][ T307] ftdi_sio 7-1:0.244: FTDI USB Serial Device converter detected [ 269.555474][ T307] ftdi_sio ttyUSB0: unknown device type: 0xfe71 [ 269.617115][ T9] usb 8-1: USB disconnect, device number 4 [ 269.745527][ T1192] Bluetooth: hci0: command 0x1003 tx timeout [ 269.747604][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 269.753879][ T307] usb 7-1: USB disconnect, device number 19 [ 269.785607][ T307] ftdi_sio 7-1:0.244: device disconnected [ 269.922623][T10511] rust_binder: Write failure EFAULT in pid:143 [ 269.937049][T10513] rust_binder: Write failure EFAULT in pid:145 [ 270.147329][T10543] netlink: 'syz.3.3199': attribute type 2 has an invalid length. [ 270.163483][ T12] syzkaller0: tun_net_xmit 76 [ 270.168417][ T12] syzkaller0: tun_net_xmit 48 [ 270.295252][ T307] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 270.383270][T10574] rust_binder: Write failure EFAULT in pid:108 [ 270.446507][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.464091][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.473930][ T307] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 270.483070][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.492160][ T307] usb 2-1: config 0 descriptor?? [ 270.535250][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 270.685252][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 270.690872][ T9] usb 7-1: no configurations [ 270.695698][ T9] usb 7-1: can't read configurations, error -22 [ 270.825279][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 270.835264][ T1663] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 270.975258][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 270.980860][ T9] usb 7-1: no configurations [ 270.985589][ T9] usb 7-1: can't read configurations, error -22 [ 270.991996][ T9] usb usb7-port1: attempt power cycle [ 270.998268][ T1663] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 271.009221][ T1663] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 271.020387][ T1663] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 271.029597][ T1663] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.037927][ T1663] usb 8-1: Product: syz [ 271.042128][ T1663] usb 8-1: Manufacturer: syz [ 271.046784][ T1663] usb 8-1: SerialNumber: syz [ 271.052206][ T1663] usb 8-1: config 0 descriptor?? [ 271.058019][ T1663] hub 8-1:0.0: bad descriptor, ignoring hub [ 271.063980][ T1663] hub 8-1:0.0: probe with driver hub failed with error -5 [ 271.074791][ T1663] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 271.094943][ T6302] udevd[6302]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 271.111757][ T307] hid-led 0003:27B8:01ED.001E: probe with driver hid-led failed with error -71 [ 271.127134][ T307] usb 2-1: USB disconnect, device number 98 [ 271.171347][T10588] tipc: Enabling of bearer rejected, failed to enable media [ 271.197672][T10590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 271.197700][T10590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1026 [ 271.256445][T10598] tc_dump_action: action bad kind [ 271.269297][ T1663] usb 8-1: USB disconnect, device number 5 [ 271.271291][T10598] binder: Binderfs stats mode cannot be changed during a remount [ 271.335395][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 271.355755][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 271.361349][ T9] usb 7-1: no configurations [ 271.366172][ T9] usb 7-1: can't read configurations, error -22 [ 271.495335][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 271.515664][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 271.521233][ T9] usb 7-1: no configurations [ 271.525891][ T9] usb 7-1: can't read configurations, error -22 [ 271.532473][ T9] usb usb7-port1: unable to enumerate USB device [ 271.635307][ T6867] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 271.707079][ T36] audit: type=1400 audit(2000000177.739:1758): avc: denied { associate } for pid=10601 comm="syz.1.3218" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 271.786801][ T6867] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 271.800423][ T6867] usb 4-1: can't read configurations, error -22 [ 271.935264][ T6867] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 271.975240][ T9] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 272.086744][ T6867] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 272.094868][ T6867] usb 4-1: can't read configurations, error -22 [ 272.101558][ T6867] usb usb4-port1: attempt power cycle [ 272.107221][ T9] usb 2-1: device descriptor read/64, error -71 [ 272.345269][ T9] usb 2-1: device descriptor read/64, error -71 [ 272.445253][ T6867] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 272.468043][ T6867] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 272.476198][ T6867] usb 4-1: can't read configurations, error -22 [ 272.595249][ T9] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 272.605413][ T6867] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 272.638339][ T6867] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 272.651994][ T6867] usb 4-1: can't read configurations, error -22 [ 272.658750][ T6867] usb usb4-port1: unable to enumerate USB device [ 272.725269][ T9] usb 2-1: device descriptor read/64, error -71 [ 272.965447][ T9] usb 2-1: device descriptor read/64, error -71 [ 273.035308][ T45] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 273.075338][ T9] usb usb2-port1: attempt power cycle [ 273.185559][ T45] usb 8-1: Using ep0 maxpacket: 8 [ 273.191903][ T45] usb 8-1: config 0 interface 0 has no altsetting 0 [ 273.198656][ T45] usb 8-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 273.207747][ T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.216550][ T45] usb 8-1: config 0 descriptor?? [ 273.415298][ T9] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 273.436430][ T9] usb 2-1: device descriptor read/8, error -71 [ 273.566428][ T9] usb 2-1: device descriptor read/8, error -71 [ 273.631876][ T45] a4tech 0003:09DA:001A.001F: hidraw0: USB HID v0.00 Device [HID 09da:001a] on usb-dummy_hcd.7-1/input0 [ 273.805300][ T9] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 273.833046][ T9] usb 2-1: device descriptor read/8, error -71 [ 273.875792][ T6867] usb 8-1: USB disconnect, device number 6 [ 273.895604][ T36] audit: type=1400 audit(2000000179.929:1759): avc: denied { setattr } for pid=10633 comm="syz.6.3227" name="ttynull" dev="devtmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 273.953851][T10639] syzkaller0: entered promiscuous mode [ 273.959484][T10639] syzkaller0: entered allmulticast mode [ 273.966724][ T9] usb 2-1: device descriptor read/8, error -71 [ 274.075357][ T9] usb usb2-port1: unable to enumerate USB device [ 274.285305][ T6867] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 274.319980][ T36] audit: type=1400 audit(2000000180.349:1760): avc: denied { read } for pid=10642 comm="syz.3.3230" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 274.343153][ T36] audit: type=1400 audit(2000000180.349:1761): avc: denied { open } for pid=10642 comm="syz.3.3230" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 274.425243][ T6867] usb 7-1: device descriptor read/64, error -71 [ 274.425499][T10649] exFAT-fs (rnullb0): invalid boot record signature [ 274.445224][T10649] exFAT-fs (rnullb0): failed to read boot sector [ 274.451981][T10649] exFAT-fs (rnullb0): failed to recognize exfat type [ 274.665267][ T6867] usb 7-1: device descriptor read/64, error -71 [ 274.875664][ T45] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 274.905330][ T6867] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 275.026471][ T45] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.036758][ T45] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.046549][ T45] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 275.055280][ T6867] usb 7-1: device descriptor read/64, error -71 [ 275.055723][ T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 275.069970][ T45] usb 8-1: SerialNumber: syz [ 275.135263][ T9] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 275.225033][T10673] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 275.225064][T10673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1046 [ 275.285228][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 275.308600][ T6867] usb 7-1: device descriptor read/64, error -71 [ 275.317352][T10680] rust_binder: Error while translating object. [ 275.317393][T10680] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 275.323661][T10680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1053 [ 275.340028][ T9] usb 2-1: config 0 has no interfaces? [ 275.362005][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.370880][T10683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 275.371191][T10683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1055 [ 275.373938][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.381618][ T45] usb 8-1: MIDIStreaming interface descriptor not found [ 275.394720][ T9] usb 2-1: Product: syz [ 275.410621][ T9] usb 2-1: Manufacturer: syz [ 275.419940][ T6867] usb usb7-port1: attempt power cycle [ 275.425905][ T45] usb 8-1: USB disconnect, device number 7 [ 275.429915][ T9] usb 2-1: SerialNumber: syz [ 275.440297][ T36] audit: type=1400 audit(2000000181.469:1762): avc: denied { mounton } for pid=10684 comm="syz.3.3244" path="/proc/1057/cgroup" dev="proc" ino=62536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 275.478922][ T9] usb 2-1: config 0 descriptor?? [ 275.498657][T10690] netlink: 'syz.3.3245': attribute type 4 has an invalid length. [ 275.508205][T10690] netlink: 'syz.3.3245': attribute type 4 has an invalid length. [ 275.517514][T10689] netlink: 'syz.3.3245': attribute type 4 has an invalid length. [ 275.688532][ T65] usb 2-1: USB disconnect, device number 103 [ 275.775430][ T6867] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 275.796443][ T6867] usb 7-1: device descriptor read/8, error -71 [ 275.895336][ T45] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 275.915022][ T36] audit: type=1326 audit(2000000181.939:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10695 comm="syz.7.3247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffba518e929 code=0x0 [ 275.926646][ T6867] usb 7-1: device descriptor read/8, error -71 [ 276.056000][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 276.064596][ T45] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 276.073450][ T45] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 276.083697][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.094103][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.103223][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.111254][ T45] usb 4-1: Product: syz [ 276.115486][ T45] usb 4-1: Manufacturer: ࠒ [ 276.120099][ T45] usb 4-1: SerialNumber: syz [ 276.185252][ T6867] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 276.206937][ T6867] usb 7-1: device descriptor read/8, error -71 [ 276.253089][T10701] kvm: pic: non byte write [ 276.329027][ T36] audit: type=1400 audit(2000000182.359:1764): avc: denied { append } for pid=10693 comm="syz.3.3246" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 276.336434][ T6867] usb 7-1: device descriptor read/8, error -71 [ 276.407778][T10694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.416458][T10694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.430858][ T45] usb 4-1: 0:2 : does not exist [ 276.441987][ T45] usb 4-1: USB disconnect, device number 58 [ 276.450863][ T5383] udevd[5383]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 276.468417][ T6867] usb usb7-port1: unable to enumerate USB device [ 276.484164][T10708] exFAT-fs (rnullb0): invalid boot record signature [ 276.490883][T10708] exFAT-fs (rnullb0): failed to read boot sector [ 276.497490][T10708] exFAT-fs (rnullb0): failed to recognize exfat type [ 276.505641][T10708] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3250'. [ 276.847761][ T36] audit: type=1400 audit(2000000182.879:1765): avc: denied { listen } for pid=10726 comm="syz.1.3258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 276.848792][T10727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 276.868482][T10727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:187 [ 277.495246][ T6867] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 277.632367][T10748] x_tables: duplicate underflow at hook 1 [ 277.645260][ T6867] usb 7-1: device descriptor read/64, error -71 [ 277.668845][T10755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.668928][T10755] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 277.678820][T10752] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3266'. [ 277.685825][T10755] rust_binder: Write failure EINVAL in pid:198 [ 277.778715][T10763] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 277.820952][ T36] audit: type=1400 audit(2000000183.849:1766): avc: denied { create } for pid=10764 comm="syz.1.3271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 277.910094][T10773] SELinux: failed to load policy [ 277.915298][ T6867] usb 7-1: device descriptor read/64, error -71 [ 277.939287][T10778] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.945325][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 278.085266][ T1663] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 278.097526][T10796] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 278.105259][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 278.124662][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.135257][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.141151][T10804] netlink: 5308 bytes leftover after parsing attributes in process `syz.1.3281'. [ 278.145997][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 278.162429][ T6867] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 278.170228][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.185309][ T9] usb 4-1: Product: syz [ 278.189541][ T9] usb 4-1: Manufacturer: syz [ 278.197115][ T9] usb 4-1: SerialNumber: syz [ 278.246617][ T1663] usb 8-1: unable to get BOS descriptor or descriptor too short [ 278.254736][ T1663] usb 8-1: not running at top speed; connect to a high speed hub [ 278.263342][ T1663] usb 8-1: config 14 has an invalid interface number: 222 but max is 0 [ 278.271872][ T1663] usb 8-1: config 14 has no interface number 0 [ 278.278187][ T1663] usb 8-1: config 14 interface 222 has no altsetting 0 [ 278.286699][ T1663] usb 8-1: New USB device found, idVendor=1608, idProduct=0019, bcdDevice=40.7c [ 278.295832][ T1663] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.303836][ T1663] usb 8-1: Product: syz [ 278.308054][ T1663] usb 8-1: Manufacturer: syz [ 278.312708][ T1663] usb 8-1: SerialNumber: syz [ 278.325238][ T6867] usb 7-1: device descriptor read/64, error -71 [ 278.404278][T10752] 9p: Unknown access argument 00000000000000000000$: -22 [ 278.430785][ T9] usb 4-1: 0:2 : does not exist [ 278.438294][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 278.449882][ T9] usb 4-1: USB disconnect, device number 59 [ 278.458521][ T5383] udevd[5383]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 278.549882][ T1663] usb 8-1: USB disconnect, device number 8 [ 278.565306][ T6867] usb 7-1: device descriptor read/64, error -71 [ 278.675400][ T6867] usb usb7-port1: attempt power cycle [ 279.015301][ T6867] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 279.036507][ T6867] usb 7-1: device descriptor read/8, error -71 [ 279.064518][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 279.166427][ T6867] usb 7-1: device descriptor read/8, error -71 [ 279.405331][ T6867] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 279.426358][ T6867] usb 7-1: device descriptor read/8, error -71 [ 279.556396][ T6867] usb 7-1: device descriptor read/8, error -71 [ 279.665773][ T6867] usb usb7-port1: unable to enumerate USB device [ 280.217584][T10833] netlink: 'syz.6.3290': attribute type 4 has an invalid length. [ 280.225516][T10833] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.3290'. [ 280.475290][ T65] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 280.626948][ T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.638246][ T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.648036][ T65] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.661142][ T65] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.670238][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.678993][ T65] usb 7-1: config 0 descriptor?? [ 280.685926][ T1663] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 280.836495][ T1663] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 280.848982][ T1663] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.859217][ T1663] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 280.873678][ T1663] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 280.882816][ T1663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.890881][ T1663] usb 4-1: Product: syz [ 280.895069][ T1663] usb 4-1: Manufacturer: syz [ 280.899697][ T1663] usb 4-1: SerialNumber: syz [ 280.905077][ T1663] usb 4-1: config 0 descriptor?? [ 280.910998][ T1663] usb-storage 4-1:0.0: USB Mass Storage device detected [ 280.919007][ T1663] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 281.086607][ T65] plantronics 0003:047F:FFFF.0020: unknown main item tag 0xd [ 281.095427][ T65] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 281.104397][ T65] plantronics 0003:047F:FFFF.0020: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 281.116868][ T1192] Bluetooth: hci0: command 0x1003 tx timeout [ 281.122914][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 281.285055][T10854] tipc: Started in network mode [ 281.290760][T10854] tipc: Node identity 6a0c501764ed, cluster identity 4711 [ 281.298143][T10854] tipc: Enabled bearer , priority 0 [ 281.346553][ T65] usb 7-1: USB disconnect, device number 32 [ 281.355521][T10862] 9pnet_fd: Insufficient options for proto=fd [ 281.478551][T10853] tipc: Disabling bearer [ 281.551774][T10882] rust_binder: Write failure EFAULT in pid:245 [ 281.553720][ T36] audit: type=1400 audit(2000000187.579:1767): avc: denied { map } for pid=10881 comm="syz.1.3305" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_lib_t:s0" [ 281.642792][ T65] usb 4-1: USB disconnect, device number 60 [ 281.667696][ T36] audit: type=1400 audit(2000000187.699:1768): avc: denied { write } for pid=10888 comm="syz.1.3307" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 281.725266][ T307] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 281.760344][T10902] netlink: 'syz.3.3311': attribute type 32 has an invalid length. [ 281.785288][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.792777][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.800601][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.808074][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.815759][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.823182][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.830751][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.838252][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.845736][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.853171][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.860682][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.868187][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.875729][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.883151][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.890744][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.898229][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.905785][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.913274][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.920861][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.928337][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.935929][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.943428][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.951009][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.955286][ T691] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 281.958555][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.973673][ T307] usb 8-1: config 192 has an invalid interface number: 162 but max is 0 [ 281.982108][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 281.989558][ T307] usb 8-1: config 192 has no interface number 0 [ 281.995919][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.003331][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.010763][ T307] usb 8-1: config 192 interface 162 has no altsetting 0 [ 282.017825][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.025342][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.032878][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.040392][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.047965][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.055505][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.063090][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.070828][ T307] usb 8-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 282.080639][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.088386][ T307] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.096464][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.103887][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.111383][ T307] usb 8-1: Product: syz [ 282.115643][ T307] usb 8-1: Manufacturer: syz [ 282.120344][ T307] usb 8-1: SerialNumber: syz [ 282.125286][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.125422][ T691] usb 2-1: Using ep0 maxpacket: 16 [ 282.132706][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.132740][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.153553][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.161322][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.161533][ T691] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 282.168831][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.179330][ T691] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 282.196845][ T691] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.197018][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.210312][ T691] usb 2-1: config 1 interface 0 has no altsetting 0 [ 282.218067][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.229535][ T691] usb 2-1: New USB device found, idVendor=0525, idProduct=d5a8, bcdDevice= 0.00 [ 282.231520][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.245379][ T691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.248212][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.257768][T10912] kvm: kvm [10910]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000051) = 0x0 [ 282.263387][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.272409][ T691] usb 2-1: Product: syz [ 282.280203][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.291531][ T691] usb 2-1: Manufacturer: syz [ 282.291913][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.303947][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.309036][ T691] usb 2-1: SerialNumber: syz [ 282.311636][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.323458][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.330938][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.338433][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.345900][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.353339][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.360814][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.368279][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.375795][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.383242][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.390705][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.398158][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.405623][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.413085][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.420902][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.429243][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.436751][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.444206][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.451897][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.459761][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.467284][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.474885][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.482372][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.489847][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.497332][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.504782][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.515585][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.523059][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.530513][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.542997][ T691] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 104 if 0 alt 255 proto 1 vid 0x0525 pid 0xD5A8 [ 282.552047][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.570157][ T691] usb 2-1: USB disconnect, device number 104 [ 282.575320][T10924] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 282.579966][T10924] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 282.588082][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.589300][ T691] usblp0: removed [ 282.595056][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.595102][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.595156][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.630444][T10924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:278 [ 282.644279][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.661864][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.669763][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.681137][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.704879][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.712430][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.719928][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.727578][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.735050][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.742551][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.750034][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.757911][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.765547][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.773229][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.781004][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.789134][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.797149][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.804689][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.818046][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.825783][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.833286][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.841361][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.849453][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.857176][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.864704][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.872474][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.880150][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.887841][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.895471][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.902938][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.910602][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.918252][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.925746][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.933200][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.940704][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.948193][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.955675][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.963145][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.965520][ T9] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 282.970669][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.970704][ T45] hid-generic 0000:009B:07FF.0021: unknown main item tag 0x0 [ 282.971649][ T45] hid-generic 0000:009B:07FF.0021: hidraw0: HID v0.03 Device [syz1] on syz1 [ 283.007241][T10933] fido_id[10933]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 283.044484][T10937] rust_binder: Error while translating object. [ 283.044515][T10937] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 283.050956][T10937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1104 [ 283.078766][T10939] tmpfs: Unknown parameter 'no' [ 283.105255][ T6867] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 283.125244][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 283.131934][ T9] usb 7-1: config 0 has no interfaces? [ 283.139022][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.148137][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.156233][ T9] usb 7-1: Product: syz [ 283.160447][ T9] usb 7-1: Manufacturer: syz [ 283.165112][ T9] usb 7-1: SerialNumber: syz [ 283.170590][ T9] usb 7-1: config 0 descriptor?? [ 283.255229][ T6867] usb 2-1: Using ep0 maxpacket: 32 [ 283.255282][T10941] incfs_lookup_dentry err:-36 [ 283.261713][ T6867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.276159][ T6867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.277265][T10941] incfs_lookup_dentry err:-36 [ 283.286161][ T6867] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 283.299967][ T6867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.310138][ T6867] usb 2-1: config 0 descriptor?? [ 283.319883][ T6867] usbhid 2-1:0.0: can't add hid device: -22 [ 283.331532][ T6867] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 283.385556][T10944] fuseblk: Bad value for 'fd' [ 283.409256][ T6867] usb 7-1: USB disconnect, device number 33 [ 283.520812][ T9] usb 2-1: USB disconnect, device number 105 [ 283.625238][ T45] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 283.776212][ T45] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 283.786256][ T45] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 283.797603][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 283.806753][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.814790][ T45] usb 4-1: Product: 怗釣ℸ鏼緝젞ꢐ䕛祓贅ᣜῲ䥹ሯ岢囵ᐒ雵텾ꡥ㴟ᖦ穠⯬뭭榴땝뵷죙뻤蟨㪬ᵋ꩕⯌焗跺꽷男鯱밧旞妳誐稬卪簹桃睭䌑﯆논ꗣӾﻴ迲ꌌ釥諱劏棋┡驕篬륢ꎒϏ쥷衃떺唉죴〩냋䍝഼젺짋馂麛ඵ㆜ਜ姙 [ 283.844227][ T45] usb 4-1: Manufacturer: 阱 [ 283.849245][ T45] usb 4-1: SerialNumber: syz [ 283.855159][T10944] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 283.862530][T10944] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 283.922370][T10946] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.922648][T10946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:282 [ 283.942273][T10949] binder: Bad value for 'stats' [ 284.060255][T10962] usb usb1: usbfs: process 10962 (syz.6.3333) did not claim interface 0 before use [ 284.172536][ T36] audit: type=1400 audit(2000000190.199:1769): avc: denied { accept } for pid=10965 comm="syz.1.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 284.281342][ T45] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 284.294274][ T45] usb 4-1: USB disconnect, device number 61 [ 284.301709][ T45] usblp0: removed [ 284.305523][ T65] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 284.322658][T10978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:282 [ 284.455219][ T65] usb 7-1: Using ep0 maxpacket: 32 [ 284.475266][ T65] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 284.484917][ T65] usb 7-1: config 0 has no interface number 0 [ 284.491179][ T65] usb 7-1: config 0 interface 184 has no altsetting 0 [ 284.503427][ T65] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 284.514962][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.523930][ T307] usb-storage 8-1:192.162: USB Mass Storage device detected [ 284.532316][ T65] usb 7-1: Product: syz [ 284.541506][ T307] usb-storage 8-1:192.162: device ignored [ 284.549375][ T65] usb 7-1: Manufacturer: syz [ 284.554042][ T65] usb 7-1: SerialNumber: syz [ 284.562956][ T65] usb 7-1: config 0 descriptor?? [ 284.573860][ T65] smsc75xx v1.0.0 [ 284.580417][ T307] usb 8-1: USB disconnect, device number 9 [ 284.589696][T10995] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 284.589849][T10996] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 284.599041][T10995] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 284.605719][T10995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222 [ 284.664187][T11004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 284.817379][T11015] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 284.835266][T11015] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 284.843852][T11015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:242 [ 285.025198][T11020] binder: Bad value for 'defcontext' [ 285.115248][ T691] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 285.175975][ T65] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 285.186915][ T65] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 285.325236][ T691] usb 4-1: Using ep0 maxpacket: 32 [ 285.331610][ T691] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 285.340029][ T691] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 285.348690][ T691] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 285.376308][ T65] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 285.387428][ T65] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 285.397520][ T65] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 285.408139][ T65] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 285.417848][ T65] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 285.455380][ T691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 285.465097][ T691] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 285.474915][ T691] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 285.487933][ T691] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 285.497029][ T691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.506386][ T691] usb 4-1: config 0 descriptor?? [ 285.588035][T11034] syz.1.3353: attempt to access beyond end of device [ 285.588035][T11034] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 285.631555][ T36] audit: type=1326 audit(2000000191.660:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.1.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773ab8e929 code=0x7ffc0000 [ 285.655231][ T36] audit: type=1326 audit(2000000191.660:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.1.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f773ab8e929 code=0x7ffc0000 [ 285.679099][ T36] audit: type=1326 audit(2000000191.660:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.1.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773ab8e929 code=0x7ffc0000 [ 285.702914][ T36] audit: type=1326 audit(2000000191.660:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.1.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773ab8e929 code=0x7ffc0000 [ 285.726663][ T36] audit: type=1326 audit(2000000191.660:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.1.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f773ab8e929 code=0x7ffc0000 [ 285.753148][T11040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:309 [ 285.753775][ T691] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 285.763490][ T36] audit: type=1326 audit(2000000191.670:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.1.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773ab8e929 code=0x7ffc0000 [ 285.799562][T11041] rust_binder: Error in use_page_slow: ESRCH [ 285.799586][T11041] rust_binder: use_range failure ESRCH [ 285.804617][ T36] audit: type=1326 audit(2000000191.670:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.1.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f773ab8e929 code=0x7ffc0000 [ 285.805867][T11041] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 285.834554][T11041] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 285.842810][T11041] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:309 [ 285.955359][ C1] usblp0: nonzero read bulk status received: -71 [ 285.971218][ T45] usb 4-1: USB disconnect, device number 62 [ 286.160788][T11018] usblp0: removed [ 286.505900][ T691] usb 7-1: USB disconnect, device number 34 [ 286.522377][T11048] fuseblk: Unknown parameter 'gro*&_id' [ 286.549666][T11045] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11045 comm=syz.1.3356 [ 286.634216][T11058] rust_binder: Error while translating object. [ 286.634243][T11058] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 286.640752][T11058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:322 [ 286.925301][ T691] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 287.095711][ T691] usb 4-1: Using ep0 maxpacket: 16 [ 287.150220][ T691] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 16 [ 287.165289][ T691] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 32 [ 287.186285][ T691] usb 4-1: config 1 interface 0 has no altsetting 0 [ 287.194449][ T691] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 287.203787][ T691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.211951][ T691] usb 4-1: Product: ꎷ㫹陟便뤋꿕밼ꋓ鍘 [ 287.219334][ T691] usb 4-1: Manufacturer: 疎蚳ﾝ﹀慹롽敏뺅ᰳ궴ⓕﭿ諔ἑ痁㓶彞뽮鱩 [ 287.228990][ T691] usb 4-1: SerialNumber: ဉ [ 287.234625][ T691] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 287.243422][ T691] usb 4-1: no configuration chosen from 1 choice [ 287.299431][T11071] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 287.308516][T11071] overlayfs: missing 'lowerdir' [ 287.545238][ T65] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 287.675295][ T65] usb 7-1: device descriptor read/64, error -71 [ 287.765315][ T45] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 287.917101][ T65] usb 7-1: device descriptor read/64, error -71 [ 287.924965][ T45] usb 2-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.938207][ T45] usb 2-1: config 1 interface 0 has no altsetting 0 [ 287.948168][ T45] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.40 [ 287.957731][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.965769][ T45] usb 2-1: Product: 謱⸈巢槇⮘頗䂴↕촖形꒽漉 [ 287.972827][ T45] usb 2-1: Manufacturer: 、 [ 288.155247][ T65] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 288.235265][ T307] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 288.285260][ T65] usb 7-1: device descriptor read/64, error -71 [ 288.312718][ T45] usbhid 2-1:1.0: can't add hid device: -71 [ 288.319080][ T45] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 288.328105][ T45] usb 2-1: USB disconnect, device number 106 [ 288.396476][ T307] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 288.405054][ T307] usb 8-1: config 179 has no interface number 0 [ 288.411799][ T307] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 288.423121][ T307] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 288.434284][ T307] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 is Bulk; changing to Interrupt [ 288.444664][ T307] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 288.458008][ T307] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 288.467134][ T307] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.476157][T11076] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 288.483364][T11076] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 288.565275][ T65] usb 7-1: device descriptor read/64, error -71 [ 288.675710][ T65] usb usb7-port1: attempt power cycle [ 288.867059][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 288.867081][ T36] audit: type=1400 audit(2000000194.900:1810): avc: denied { map } for pid=11083 comm="syz.1.3370" path="/proc/336" dev="proc" ino=65075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 288.905802][T11086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:338 [ 288.990635][T11094] overlay: ./file0 is not a directory [ 289.007141][T11094] input: syz1 as /devices/virtual/input/input46 [ 289.015276][ T65] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 289.038111][ T65] usb 7-1: device descriptor read/8, error -71 [ 289.064228][T11098] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 289.136577][T11105] binder: Bad value for 'stats' [ 289.175470][ T36] audit: type=1400 audit(2000000195.210:1811): avc: denied { bind } for pid=11108 comm="syz.1.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 289.196602][ T65] usb 7-1: device descriptor read/8, error -71 [ 289.334240][T11112] rust_binder: Write failure EINVAL in pid:364 [ 289.337914][T11112] kvm: kvm [11111]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 289.435235][ T65] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 289.456196][ T65] usb 7-1: device descriptor read/8, error -71 [ 289.586908][ T65] usb 7-1: device descriptor read/8, error -71 [ 289.645267][ T691] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 289.691912][ T9] usb 4-1: USB disconnect, device number 63 [ 289.696226][ T65] usb usb7-port1: unable to enumerate USB device [ 289.776424][T11116] cgroup: fork rejected by pids controller in /syz3 [ 289.795261][ T691] usb 2-1: Using ep0 maxpacket: 32 [ 289.801547][ T691] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 289.810035][ T691] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 289.819212][ T691] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 289.828272][ T691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 289.838036][ T691] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 289.847935][ T691] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 289.861238][ T691] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 289.870373][ T691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.885658][ T691] usb 2-1: config 0 descriptor?? [ 290.096744][ T691] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 107 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 290.113639][ T45] usb 2-1: USB disconnect, device number 107 [ 290.122687][ T45] usblp0: removed [ 290.157783][T11160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:375 [ 290.197577][ T36] audit: type=1400 audit(2000000196.230:1812): avc: denied { map } for pid=11163 comm="syz.1.3388" path="socket:[65316]" dev="sockfs" ino=65316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 290.374170][T11178] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 290.583254][T11181] overlayfs: failed to resolve './file0': -2 [ 290.695272][ T691] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 290.767297][ T36] audit: type=1400 audit(2000000196.800:1813): avc: denied { write } for pid=11183 comm="syz.3.3395" name="/" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 290.825236][ T691] usb 7-1: device descriptor read/64, error -71 [ 290.977345][T11192] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 291.032901][T11196] SELinux: syz.1.3400 (11196) set checkreqprot to 1. This is no longer supported. [ 291.032905][ T36] audit: type=1400 audit(2000000197.060:1814): avc: denied { setcheckreqprot } for pid=11195 comm="syz.1.3400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 291.065499][ T691] usb 7-1: device descriptor read/64, error -71 [ 291.074145][ T6867] usb 8-1: USB disconnect, device number 10 [ 291.074176][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 291.090697][ C1] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 291.112187][T11198] rust_binder: Write failure EFAULT in pid:1162 [ 291.121918][T11200] rust_binder: Error while translating object. [ 291.128381][T11200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 291.140801][T11200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:391 [ 291.261626][ T36] audit: type=1400 audit(2000000197.290:1815): avc: denied { write } for pid=11214 comm="syz.7.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 291.291886][T11215] input: syz1 as /devices/virtual/input/input47 [ 291.305232][ T691] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 291.317130][T11218] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 291.317163][T11218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:260 [ 291.429734][T11222] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.439555][T11222] rust_binder: Error while translating object. [ 291.446257][ T691] usb 7-1: device descriptor read/64, error -71 [ 291.449277][T11222] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 291.458752][T11222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:262 [ 291.605277][ T65] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 291.636760][T11238] binder: Bad value for 'stats' [ 291.685273][ T691] usb 7-1: device descriptor read/64, error -71 [ 291.765242][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 291.771584][ T65] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 291.779878][ T65] usb 2-1: config 0 has no interface number 0 [ 291.786048][ T65] usb 2-1: config 0 interface 230 has no altsetting 0 [ 291.794289][ T65] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 291.803417][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.805394][ T691] usb usb7-port1: attempt power cycle [ 291.811459][ T65] usb 2-1: Product: syz [ 291.821128][ T65] usb 2-1: Manufacturer: syz [ 291.825964][ T65] usb 2-1: SerialNumber: syz [ 291.831257][ T65] usb 2-1: config 0 descriptor?? [ 291.837263][ T65] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 291.845336][ T65] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 292.155295][ T691] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 292.176481][ T691] usb 7-1: device descriptor read/8, error -71 [ 292.255321][ T6867] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 292.293934][T11258] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 292.302314][T11258] rust_binder: Write failure EINVAL in pid:289 [ 292.306420][ T691] usb 7-1: device descriptor read/8, error -71 [ 292.349072][T11260] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.349529][T11260] rust_binder: Failed to allocate buffer. len:4192, is_oneway:false [ 292.356149][T11260] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 292.364201][T11260] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:291 [ 292.387118][T11262] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.396435][ T6867] usb 4-1: device descriptor read/64, error -71 [ 292.396926][T11262] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 292.409245][T11262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 292.417506][T11262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:293 [ 292.555416][ T691] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 292.586322][ T691] usb 7-1: device descriptor read/8, error -71 [ 292.635298][ T6867] usb 4-1: device descriptor read/64, error -71 [ 292.716649][ T691] usb 7-1: device descriptor read/8, error -71 [ 292.825387][ T691] usb usb7-port1: unable to enumerate USB device [ 292.845251][ T1663] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 292.875248][ T6867] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 292.996361][ T1663] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.006559][ T6867] usb 4-1: device descriptor read/64, error -71 [ 293.012849][ T1663] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.025264][ T1663] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.034335][ T1663] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.042371][ T1663] usb 8-1: Product: syz [ 293.046627][ T1663] usb 8-1: Manufacturer: syz [ 293.051246][ T1663] usb 8-1: SerialNumber: syz [ 293.245259][ T6867] usb 4-1: device descriptor read/64, error -71 [ 293.355345][ T6867] usb usb4-port1: attempt power cycle [ 293.389125][T11276] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 293.389496][T11276] rust_binder: Error while translating object. [ 293.396054][T11276] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 293.402284][T11276] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:327 [ 293.426452][T11278] loop2: detected capacity change from 0 to 7 [ 293.443372][T11278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 293.443970][T11278] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 293.450882][T11278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:329 [ 293.705226][ T6867] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 293.736183][ T6867] usb 4-1: device descriptor read/8, error -71 [ 293.765467][ T1663] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 293.771532][ T1663] cdc_ncm 8-1:1.0: bind() failure [ 293.777569][ T1663] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 293.784417][ T1663] cdc_ncm 8-1:1.1: bind() failure [ 293.790592][ T1663] usb 8-1: USB disconnect, device number 11 [ 293.866275][ T6867] usb 4-1: device descriptor read/8, error -71 [ 294.105321][ T6867] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 294.126360][ T65] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 294.126749][ T6867] usb 4-1: device descriptor read/8, error -71 [ 294.266121][ T65] usb 2-1: USB disconnect, device number 108 [ 294.266452][ T6867] usb 4-1: device descriptor read/8, error -71 [ 294.385551][ T6867] usb usb4-port1: unable to enumerate USB device [ 294.800864][T11308] tmpfs: Bad value for 'huge' [ 294.806785][ T36] audit: type=1400 audit(2000000200.840:1816): avc: denied { create } for pid=11307 comm="syz.1.3436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 294.846835][ T36] audit: type=1400 audit(2000000200.880:1817): avc: denied { bind } for pid=11311 comm="syz.7.3438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 295.096599][T11328] rust_binder: Write failure EFAULT in pid:319 [ 295.097009][T11328] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 295.110486][T11328] rust_binder: Write failure EINVAL in pid:319 [ 295.151659][T11332] fuse: Bad value for 'fd' [ 295.163181][T11332] fuse: Bad value for 'fd' [ 295.167973][T11332] fuse: Bad value for 'fd' [ 295.172526][T11332] fuse: Bad value for 'fd' [ 295.327578][T11343] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 295.335821][T11343] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 295.344218][T11343] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 295.353488][T11343] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 295.383471][T11346] FAT-fs (rnullb0): bogus number of reserved sectors [ 295.390377][T11346] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 295.397351][ T36] audit: type=1107 audit(2000000201.360:1818): pid=11342 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='4`' [ 295.568575][T11354] rust_binder: Error while translating object. [ 295.568604][T11354] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 295.574873][T11354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:342 [ 295.602206][ T36] audit: type=1326 audit(2000000201.630:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.7.3452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffba518e929 code=0x0 [ 295.634456][ T307] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 295.786673][ T307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 295.794750][ T307] usb 2-1: not running at top speed; connect to a high speed hub [ 295.803253][ T307] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 295.812988][ T307] usb 2-1: config 8 interface 0 has no altsetting 0 [ 295.821153][ T307] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 295.830274][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.838314][ T307] usb 2-1: Product: syz [ 295.842499][ T307] usb 2-1: Manufacturer: syz [ 295.847169][ T65] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 295.854793][ T307] usb 2-1: SerialNumber: syz [ 296.005289][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 296.012565][ T65] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 296.023821][ T65] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 296.033746][ T65] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 296.045000][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.054111][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.062319][ T65] usb 4-1: Product: 뛽刻遁ꂞ흷顸鍱옪ꤿ麫㔩䄱㊟灼딊૵斓谼냮졣ᄇ㫿尀↌⫽딬긐ֆ븯倶侩隈ဍ䙩殣໒礓燑ﷺ脻뼯鼐Âꍼ菎Ꟛ娛 [ 296.080225][ T65] usb 4-1: Manufacturer: с [ 296.084770][ T65] usb 4-1: SerialNumber: 랜랡꯻स䛫㇮錝嵂㕃分䛜ꠈ펡캞뽏혂挵뼳풔瓇ꄪⶋ鮬偽ﷸ鯋痘椲拶挥닱캗鑜㈶麍▎ﺻ㿇ѓ鸼粐訛만轱䳔儮衽궤买䍾繅ꟲ풺柩⁄ᢲ彞츴洖ɴ痹о祶蔀とẚ翑갰쵝灢ࠩ쨽朗작칯⦆䤰㿢㘝䫕竄⛇餼ы톞颫䀞䅤諭䅦凷刬 [ 296.319272][ T65] cdc_ncm 4-1:1.0: bind() failure [ 296.325355][ T65] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 296.332186][ T65] cdc_ncm 4-1:1.1: bind() failure [ 296.338648][ T65] usb 4-1: USB disconnect, device number 68 [ 296.440310][ T36] audit: type=1400 audit(2000000202.470:1820): avc: denied { setattr } for pid=10146 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 296.838598][ T36] audit: type=1326 audit(2000000202.870:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.3.3454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e5278e929 code=0x0 [ 297.981319][ T307] usb 2-1: selecting invalid altsetting 0 [ 297.994975][ T307] snd-usb-audio 2-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 298.017075][ T307] usb 2-1: USB disconnect, device number 109 [ 298.042500][ T6302] udevd[6302]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 298.107205][T11370] binder: Unknown parameter 'zo!CY}J}WFl]&qo2&CY*aejh1pkjzʐ{VU"A|' [ 298.455249][ T307] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 298.626587][ T307] usb 2-1: not running at top speed; connect to a high speed hub [ 298.645449][ T307] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 298.665231][ T307] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 298.695255][ T307] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 959, setting to 64 [ 298.707972][ T307] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.717354][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.725578][ T307] usb 2-1: Product: syz [ 298.735373][ T307] usb 2-1: Manufacturer: syz [ 298.745213][ T307] usb 2-1: SerialNumber: syz [ 298.756353][T11370] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 299.165751][ T307] cdc_ncm 2-1:1.0: bind() failure [ 299.174152][ T307] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 299.187962][ T307] cdc_ncm 2-1:1.1: bind() failure [ 299.207321][ T307] usb 2-1: USB disconnect, device number 110 [ 299.611498][ T36] audit: type=1400 audit(2000000205.640:1822): avc: denied { create } for pid=11362 comm="syz.3.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 299.780662][T11363] rust_binder: Error while translating object. [ 299.780710][T11363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 299.805296][T11363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1184 [ 299.825856][ T36] audit: type=1400 audit(2000000205.860:1823): avc: denied { bpf } for pid=11373 comm="syz.1.3460" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 300.120154][T11384] fuse: Bad value for 'group_id' [ 300.127803][T11384] fuse: Bad value for 'group_id' [ 300.516013][ T307] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 300.665237][ T307] usb 4-1: Using ep0 maxpacket: 32 [ 300.671569][ T307] usb 4-1: config 121 has an invalid interface number: 228 but max is 0 [ 300.680282][ T307] usb 4-1: config 121 has no interface number 0 [ 300.686813][ T307] usb 4-1: config 121 interface 228 has no altsetting 0 [ 300.695482][ T307] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice=e5.51 [ 300.704860][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.713211][ T307] usb 4-1: Product: syz [ 300.717636][ T307] usb 4-1: Manufacturer: syz [ 300.722277][ T307] usb 4-1: SerialNumber: syz [ 300.937750][T11386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.947155][T11386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.956188][T11386] overlayfs: overlapping lowerdir path [ 300.962485][T11386] 9pnet_fd: Insufficient options for proto=fd [ 300.970438][T11386] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 300.982626][ T307] usb 4-1: USB disconnect, device number 69 [ 301.513583][T11391] veth0: entered promiscuous mode [ 301.526275][T11391] veth0: left promiscuous mode [ 301.756487][T11408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.816324][T11410] rust_binder: Write failure EINVAL in pid:351 [ 302.665780][ T36] audit: type=1400 audit(2000000208.700:1824): avc: denied { view } for pid=11421 comm="syz.6.3477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 303.053365][T11441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 303.053405][T11441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:431 [ 303.137431][ T314] tipc: Subscription rejected, illegal request [ 303.519081][ T36] audit: type=1400 audit(2000000209.550:1825): avc: denied { mounton } for pid=11449 comm="syz.6.3485" path="/129/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 303.548599][T11456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.556487][T11456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:371 [ 304.245243][ T9] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 304.288094][ T36] audit: type=1400 audit(2000000210.320:1826): avc: denied { mounton } for pid=11502 comm="syz.3.3502" path="/395/file0" dev="tmpfs" ino=2201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 304.330204][ T36] audit: type=1400 audit(2000000210.360:1827): avc: denied { setopt } for pid=11505 comm="syz.3.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 304.406292][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.425234][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.445483][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 304.475229][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 304.494575][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.515676][ T9] usb 2-1: config 0 descriptor?? [ 304.641143][T11515] fuse: Unknown parameter 'group_id-00000000000000000000' [ 304.659213][T11515] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 304.712847][T11517] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3508'. [ 304.733378][T11517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:396 [ 304.733710][T11517] batadv_slave_1: entered promiscuous mode [ 304.790990][T11516] batadv_slave_1: left promiscuous mode [ 304.924690][ T9] plantronics 0003:047F:FFFF.0022: unknown main item tag 0xd [ 304.934394][ T9] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 304.956827][ T9] plantronics 0003:047F:FFFF.0022: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 305.075240][ T6867] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 305.182983][T11528] random: crng reseeded on system resumption [ 305.245210][ T6867] usb 7-1: Using ep0 maxpacket: 16 [ 305.251903][ T6867] usb 7-1: too many configurations: 201, using maximum allowed: 8 [ 305.326371][ T6867] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 305.336387][ T6867] usb 7-1: can't read configurations, error -61 [ 305.343106][ T9] usb 2-1: USB disconnect, device number 111 [ 305.465273][ T6867] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 305.536056][T11485] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3221225471 [ 305.544387][T11485] rust_binder: Write failure EINVAL in pid:436 [ 305.615373][ T6867] usb 7-1: Using ep0 maxpacket: 16 [ 305.635268][ T6867] usb 7-1: too many configurations: 201, using maximum allowed: 8 [ 305.644322][ T6867] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 305.652047][ T6867] usb 7-1: can't read configurations, error -61 [ 305.658607][ T6867] usb usb7-port1: attempt power cycle [ 305.995252][ T6867] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 306.025571][ T6867] usb 7-1: Using ep0 maxpacket: 16 [ 306.031405][ T6867] usb 7-1: too many configurations: 201, using maximum allowed: 8 [ 306.043470][ T6867] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 306.051518][ T6867] usb 7-1: can't read configurations, error -61 [ 306.195268][ T6867] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 306.215617][ T6867] usb 7-1: Using ep0 maxpacket: 16 [ 306.221285][ T6867] usb 7-1: too many configurations: 201, using maximum allowed: 8 [ 306.231648][ T6867] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 306.239527][ T6867] usb 7-1: can't read configurations, error -61 [ 306.246303][ T6867] usb usb7-port1: unable to enumerate USB device [ 306.927588][T11562] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 306.927633][T11562] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.029213][T11577] tipc: Enabled bearer , priority 0 [ 307.043619][T11577] tipc: Disabling bearer [ 307.324760][T11604] batadv_slave_1: entered promiscuous mode [ 307.331082][T11603] batadv_slave_1: left promiscuous mode [ 307.505237][ T6867] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 307.665377][ T6867] usb 2-1: Using ep0 maxpacket: 32 [ 307.672697][T11592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.681542][T11592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.691243][ T36] audit: type=1326 audit(2000000213.720:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11591 comm="syz.1.3530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f773ab8e929 code=0x7fbf0000 [ 308.213893][ T6867] usb 2-1: unable to get BOS descriptor or descriptor too short [ 308.235781][ T6867] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 308.243417][ T6867] usb 2-1: can't read configurations, error -71 [ 308.420351][T11632] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 308.420381][T11632] rust_binder: Read failure Err(EFAULT) in pid:480 [ 308.560420][T11638] rust_binder: Write failure EINVAL in pid:486 [ 308.720463][ T45] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 308.885238][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 308.891657][ T45] usb 7-1: config 8 has an invalid interface number: 213 but max is 0 [ 308.900028][ T45] usb 7-1: config 8 has no interface number 0 [ 308.906171][ T45] usb 7-1: config 8 interface 213 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 64 [ 308.916276][ T45] usb 7-1: config 8 interface 213 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 308.927319][ T45] usb 7-1: config 8 interface 213 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 308.938361][ T45] usb 7-1: config 8 interface 213 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 308.949272][ T45] usb 7-1: config 8 interface 213 altsetting 1 endpoint 0x6 has invalid maxpacket 1080, setting to 64 [ 308.960637][ T45] usb 7-1: config 8 interface 213 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 308.971559][ T45] usb 7-1: config 8 interface 213 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 308.986714][ T45] usb 7-1: config 8 interface 213 has no altsetting 0 [ 308.997462][ T45] usb 7-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=7a.f0 [ 309.006748][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.014784][ T45] usb 7-1: Product: 䞺섗㔝㑶렧⠴枨鑊꾂㏳虵ﬡૼ㔶䲵）ꅅ萕捌 [ 309.025134][ T45] usb 7-1: Manufacturer: Ѓ [ 309.029699][ T45] usb 7-1: SerialNumber: ᔱ렧착놦호샩쉖⺆遼礤攖馈઒髞꒘탧 [ 309.045782][T11640] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 309.063265][T11640] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 309.305361][ T6867] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 309.455272][ T6867] usb 2-1: Using ep0 maxpacket: 16 [ 309.465003][ T6867] usb 2-1: config 0 has no interfaces? [ 309.479112][ T6867] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.495494][T11640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.504015][ T6867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.513596][T11640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.521742][ T6867] usb 2-1: Product: syz [ 309.527068][ T9] usb 7-1: USB disconnect, device number 47 [ 309.533575][ T6867] usb 2-1: Manufacturer: syz [ 309.540864][ T6867] usb 2-1: SerialNumber: syz [ 309.546574][ T6867] usb 2-1: config 0 descriptor?? [ 309.627306][ T36] audit: type=1400 audit(2000000215.660:1829): avc: denied { ioctl } for pid=11669 comm="syz.3.3554" path="socket:[69017]" dev="sockfs" ino=69017 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 309.652156][ T36] audit: type=1400 audit(2000000215.660:1830): avc: denied { map } for pid=11669 comm="syz.3.3554" path="socket:[69017]" dev="sockfs" ino=69017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 309.675663][ T36] audit: type=1400 audit(2000000215.660:1831): avc: denied { read } for pid=11669 comm="syz.3.3554" path="socket:[69017]" dev="sockfs" ino=69017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 309.760773][ T307] usb 2-1: USB disconnect, device number 113 [ 310.051879][ T36] audit: type=1400 audit(2000000216.080:1832): avc: denied { ioctl } for pid=11673 comm="syz.6.3555" path="socket:[69030]" dev="sockfs" ino=69030 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 310.077331][ T36] audit: type=1400 audit(2000000216.080:1833): avc: denied { listen } for pid=11673 comm="syz.6.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 310.334284][ T36] audit: type=1400 audit(2000000216.360:1834): avc: denied { unmount } for pid=9864 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 310.410887][T11686] binder: Bad value for 'stats' [ 311.259446][T11724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3572'. [ 311.595237][ T45] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 311.755223][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 311.761738][ T45] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 311.770490][ T45] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 311.779453][ T45] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 311.788869][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 311.798848][ T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 311.808872][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 311.822280][ T45] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 311.831788][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.845513][ T45] usb 2-1: config 0 descriptor?? [ 312.063324][ T45] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 114 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 312.256374][T11741] tipc: Enabling of bearer rejected, failed to enable media [ 312.261484][ C1] usblp0: nonzero read bulk status received: -71 [ 312.271861][ T45] usb 2-1: USB disconnect, device number 114 [ 312.314463][T11746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:417 [ 312.349546][T11742] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.366299][T11742] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.373619][T11742] bridge_slave_0: entered allmulticast mode [ 312.382433][T11742] bridge_slave_0: entered promiscuous mode [ 312.389418][T11755] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3583'. [ 312.399228][T11742] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.406778][T11742] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.414066][T11742] bridge_slave_1: entered allmulticast mode [ 312.422153][T11742] bridge_slave_1: entered promiscuous mode [ 312.432954][ T314] bridge_slave_1: left allmulticast mode [ 312.438789][ T314] bridge_slave_1: left promiscuous mode [ 312.444499][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.452639][ T314] bridge_slave_0: left allmulticast mode [ 312.458462][ T314] bridge_slave_0: left promiscuous mode [ 312.464119][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.498984][T11732] usblp0: removed [ 312.578032][ T314] veth0_vlan: left promiscuous mode [ 312.656013][T11742] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.663163][T11742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.670541][T11742] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.677631][T11742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.703396][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.710782][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.720746][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.727845][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.737987][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.745075][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.773687][T11742] veth0_vlan: entered promiscuous mode [ 312.784878][T11742] veth1_macvtap: entered promiscuous mode [ 313.115611][ T6867] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 313.268191][ T6867] usb 9-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 313.277436][ T6867] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.285508][ T6867] usb 9-1: Product: syz [ 313.289712][ T6867] usb 9-1: Manufacturer: syz [ 313.294350][ T6867] usb 9-1: SerialNumber: syz [ 313.418455][T11797] overlayfs: failed to clone upperpath [ 313.438759][ T36] audit: type=1400 audit(2000000219.470:1835): avc: denied { map } for pid=11798 comm="syz.6.3596" path="socket:[69728]" dev="sockfs" ino=69728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 313.767062][ T6867] usb 9-1: Found UVC 0.00 device syz (093a:2476) [ 313.773598][ T6867] usb 9-1: No valid video chain found. [ 313.783790][ T6867] usb 9-1: USB disconnect, device number 2 [ 313.793850][T11822] binder: Unknown parameter 'secl`bxtl' [ 313.920814][T11833] kvm: pic: non byte write [ 314.295239][ T6867] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 314.345244][ T5073] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 314.425287][ T6867] usb 9-1: device descriptor read/64, error -71 [ 314.471318][ T36] audit: type=1400 audit(2000000220.500:1836): avc: denied { create } for pid=11896 comm="syz.6.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 314.495242][ T5073] usb 2-1: Using ep0 maxpacket: 32 [ 314.507715][ T5073] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 314.515408][ T5073] usb 2-1: can't read configurations, error -61 [ 314.550312][T11905] 8021q: VLANs not supported on sit0 [ 314.645382][ T5073] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 314.665269][ T6867] usb 9-1: device descriptor read/64, error -71 [ 314.781997][T11918] fuse: Unknown parameter ' ' [ 314.795368][ T5073] usb 2-1: Using ep0 maxpacket: 32 [ 314.802056][ T5073] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 314.810026][ T5073] usb 2-1: can't read configurations, error -61 [ 314.816742][ T5073] usb usb2-port1: attempt power cycle [ 314.905350][ T6867] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 315.035245][ T6867] usb 9-1: device descriptor read/64, error -71 [ 315.155272][ T5073] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 315.175583][ T5073] usb 2-1: Using ep0 maxpacket: 32 [ 315.182156][ T5073] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 315.190291][ T5073] usb 2-1: can't read configurations, error -61 [ 315.275230][ T6867] usb 9-1: device descriptor read/64, error -71 [ 315.325389][ T5073] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 315.346000][ T5073] usb 2-1: Using ep0 maxpacket: 32 [ 315.352584][ T5073] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 315.360281][ T5073] usb 2-1: can't read configurations, error -61 [ 315.366777][ T5073] usb usb2-port1: unable to enumerate USB device [ 315.385349][ T6867] usb usb9-port1: attempt power cycle [ 315.725284][ T6867] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 315.732794][ T36] audit: type=1400 audit(2000000221.760:1837): avc: denied { read } for pid=11932 comm="syz.6.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 315.766411][ T6867] usb 9-1: device descriptor read/8, error -71 [ 315.829097][T11941] fuse: Invalid rootmode [ 315.896337][ T6867] usb 9-1: device descriptor read/8, error -71 [ 315.905692][T11942] fuse: Invalid rootmode [ 315.942989][ T36] audit: type=1400 audit(2000000221.970:1838): avc: denied { mounton } for pid=11947 comm="syz.3.3647" path="/file0" dev="ramfs" ino=70257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 316.145226][ T6867] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 316.166389][ T6867] usb 9-1: device descriptor read/8, error -71 [ 316.283421][T11957] /dev/rnullb0: Can't lookup blockdev [ 316.307239][ T6867] usb 9-1: device descriptor read/8, error -71 [ 316.425346][ T6867] usb usb9-port1: unable to enumerate USB device [ 317.160568][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 317.238287][T12007] syzkaller0: refused to change device tx_queue_len [ 317.245260][T12007] binder: Unknown parameter 'd1ྤߏ' [ 317.432561][ T36] audit: type=1400 audit(2000000223.460:1839): avc: denied { sqpoll } for pid=12010 comm="syz.3.3670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 317.864704][ T36] audit: type=1400 audit(2000000223.890:1840): avc: denied { accept } for pid=12019 comm="syz.6.3672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 317.883159][T12022] netlink: 'syz.6.3673': attribute type 4 has an invalid length. [ 317.892219][T12022] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.3673'. [ 318.321740][T12038] 9pnet_fd: Insufficient options for proto=fd [ 318.335255][ T6867] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 318.456332][ T36] audit: type=1400 audit(2000000224.490:1841): avc: denied { setattr } for pid=12056 comm="syz.6.3686" path="socket:[69612]" dev="sockfs" ino=69612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 318.505281][ T6867] usb 2-1: Using ep0 maxpacket: 32 [ 318.511871][ T6867] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 318.520182][ T6867] usb 2-1: config 0 has no interface number 0 [ 318.526441][ T6867] usb 2-1: config 0 interface 184 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 318.537357][ T6867] usb 2-1: config 0 interface 184 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 318.549689][ T6867] usb 2-1: New USB device found, idVendor=05d1, idProduct=3011, bcdDevice=9c.cd [ 318.558839][ T6867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.566897][ T6867] usb 2-1: Product: syz [ 318.571058][ T6867] usb 2-1: Manufacturer: syz [ 318.575715][ T6867] usb 2-1: SerialNumber: syz [ 318.580945][ T6867] usb 2-1: config 0 descriptor?? [ 318.586259][T12031] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 318.594246][ T6867] ftdi_sio 2-1:0.184: FTDI USB Serial Device converter detected [ 318.602497][ T6867] ftdi_sio ttyUSB0: unknown device type: 0x9ccd [ 318.856372][ T307] usb 2-1: USB disconnect, device number 119 [ 318.863338][ T307] ftdi_sio 2-1:0.184: device disconnected [ 318.941105][T12074] SELinux: policydb magic number 0x21d3479 does not match expected magic number 0xf97cff8c [ 318.951388][T12074] SELinux: failed to load policy [ 318.957215][T12074] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 318.990693][T12085] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37 sclass=netlink_audit_socket pid=12085 comm=syz.6.3694 [ 319.003336][T12085] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=12085 comm=syz.6.3694 [ 319.016068][T12085] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=12085 comm=syz.6.3694 [ 319.144801][T12096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=12096 comm=syz.3.3698 [ 319.185250][ T1192] Bluetooth: hci0: command 0x1003 tx timeout [ 319.191338][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 319.223117][T12100] rust_binder: Write failure EFAULT in pid:47 [ 319.285291][ T307] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 319.391250][T12115] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=12115 comm=syz.3.3705 [ 319.444899][T12127] /dev/rnullb0: Can't lookup blockdev [ 319.450382][ T307] usb 2-1: Using ep0 maxpacket: 16 [ 319.456959][ T307] usb 2-1: config 0 has no interfaces? [ 319.464696][ T307] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.474072][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.482164][ T307] usb 2-1: Product: syz [ 319.486403][ T307] usb 2-1: Manufacturer: syz [ 319.491029][ T307] usb 2-1: SerialNumber: syz [ 319.497797][ T307] usb 2-1: config 0 descriptor?? [ 319.876399][ T65] usb 2-1: USB disconnect, device number 120 [ 320.359349][T12163] SELinux: failed to load policy [ 320.408600][ T36] audit: type=1400 audit(2000000226.440:1842): avc: denied { create } for pid=12169 comm="syz.3.3723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 320.481572][ T36] audit: type=1326 audit(2000000226.510:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12179 comm="syz.1.3727" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f773ab8e929 code=0x0 [ 320.505623][ T36] audit: type=1326 audit(2000000226.540:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12179 comm="syz.1.3727" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f773ab8e929 code=0x0 [ 320.606616][T12209] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 320.628108][T12216] overlayfs: failed to clone upperpath [ 320.650793][T12220] overlayfs: failed to clone upperpath [ 320.685244][ T6867] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 320.756763][ T36] audit: type=1400 audit(2000000226.790:1845): avc: denied { getopt } for pid=12249 comm="syz.6.3750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 320.815256][ T6867] usb 9-1: device descriptor read/64, error -71 [ 320.838778][T12274] overlayfs: failed to clone upperpath [ 320.861935][T12282] futex_wake_op: syz.3.3760 tries to shift op by -1; fix this program [ 320.929846][ T36] audit: type=1400 audit(2000000226.960:1846): avc: denied { getattr } for pid=12296 comm="syz.3.3765" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=71899 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 321.055251][ T6867] usb 9-1: device descriptor read/64, error -71 [ 321.165306][ T691] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 321.295222][ T6867] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 321.315237][ T691] usb 2-1: Using ep0 maxpacket: 8 [ 321.321434][ T691] usb 2-1: config 0 interface 0 has no altsetting 0 [ 321.328195][ T691] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 321.337571][ T691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.346501][ T691] usb 2-1: config 0 descriptor?? [ 321.425259][ T6867] usb 9-1: device descriptor read/64, error -71 [ 321.480704][ T36] audit: type=1400 audit(2000000000.510:1847): avc: denied { create } for pid=12300 comm="syz.3.3767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 321.500147][T12303] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3768'. [ 321.544393][T12307] overlayfs: failed to resolve './file0': -2 [ 321.665289][ T6867] usb 9-1: device descriptor read/64, error -71 [ 321.710406][ T36] audit: type=1400 audit(2000000000.740:1848): avc: denied { listen } for pid=12315 comm="syz.6.3772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 321.755044][T12320] overlayfs: failed to clone upperpath [ 321.763001][ T691] usbhid 2-1:0.0: can't add hid device: -71 [ 321.776673][ T6867] usb usb9-port1: attempt power cycle [ 321.782236][ T691] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 321.793485][ T691] usb 2-1: USB disconnect, device number 121 [ 321.905626][ T36] audit: type=1400 audit(2000000000.940:1849): avc: denied { shutdown } for pid=12325 comm="syz.6.3777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 322.125247][ T6867] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 322.146309][ T6867] usb 9-1: device descriptor read/8, error -71 [ 322.276398][ T6867] usb 9-1: device descriptor read/8, error -71 [ 322.333016][T12336] kvm: Disabled LAPIC found during irq injection [ 322.515222][ T6867] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 322.522995][T12361] rust_binder: Error in use_page_slow: ESRCH [ 322.523017][T12361] rust_binder: use_range failure ESRCH [ 322.531813][T12361] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 322.541938][T12361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 322.546489][ T6867] usb 9-1: device descriptor read/8, error -71 [ 322.554600][T12361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:604 [ 322.567701][ T36] audit: type=1400 audit(2000000001.600:1850): avc: denied { create } for pid=12359 comm="syz.1.3790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 322.676936][T12386] cgroup: Name too long [ 322.739041][ T6867] usb 9-1: device descriptor read/8, error -71 [ 322.857018][ T6867] usb usb9-port1: unable to enumerate USB device [ 323.110305][T12411] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3807'. [ 323.355247][ T6867] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 323.494843][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 323.494863][ T36] audit: type=1326 audit(2000000002.520:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.8.3813" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa42738e929 code=0x0 [ 323.524370][ T6867] usb 2-1: Using ep0 maxpacket: 32 [ 323.530654][ T6867] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 323.539077][ T6867] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 323.547814][ T6867] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 323.556860][ T6867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 323.566564][ T6867] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 323.576273][ T6867] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 323.589329][ T6867] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 323.598431][ T6867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.607227][ T6867] usb 2-1: config 0 descriptor?? [ 323.813790][ T6867] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 122 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 323.877570][T12427] netlink: 'syz.3.3814': attribute type 4 has an invalid length. [ 323.885441][T12427] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3814'. [ 324.016670][T12413] fuse: Bad value for 'fd' [ 324.022760][ T5073] usb 2-1: USB disconnect, device number 122 [ 324.030022][ T5073] usblp0: removed [ 324.449132][ T36] audit: type=1400 audit(2000000003.480:1855): avc: denied { map } for pid=12450 comm="syz.8.3823" path="socket:[71281]" dev="sockfs" ino=71281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 324.578574][ T36] audit: type=1326 audit(2000000003.610:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12463 comm="syz.6.3828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54ceb8e929 code=0x0 [ 324.639747][T12471] binder: Unknown parameter '' [ 324.680600][ T36] audit: type=1400 audit(2000000003.710:1857): avc: denied { append } for pid=12473 comm="syz.8.3832" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 324.719993][T12476] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 324.727492][T12476] rust_binder: Write failure EINVAL in pid:81 [ 324.727706][T12476] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 324.741239][T12476] rust_binder: Write failure EINVAL in pid:81 [ 324.759110][T12482] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 324.777062][T12482] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 324.777086][T12482] rust_binder: Error while translating object. [ 324.792907][T12482] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 324.799314][T12482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:616 [ 324.809307][T12482] binder: Bad value for 'max' [ 324.841803][T12484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 325.098251][T12489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:89 [ 325.134723][T12493] rust_binder: Write failure EFAULT in pid:93 [ 325.341439][T12511] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 325.347682][T12511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:618 [ 325.424536][ T36] audit: type=1400 audit(2000000004.450:1858): avc: denied { read } for pid=12515 comm="syz.6.3848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 325.655242][ T5073] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 325.806254][ T5073] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 325.815540][ T5073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.824150][ T5073] usb 2-1: config 0 descriptor?? [ 325.945254][ T6867] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 326.075236][ T6867] usb 9-1: device descriptor read/64, error -71 [ 326.315235][ T6867] usb 9-1: device descriptor read/64, error -71 [ 326.341376][T12533] 9pnet_fd: Insufficient options for proto=fd [ 326.555240][ T6867] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 326.685254][ T6867] usb 9-1: device descriptor read/64, error -71 [ 326.925244][ T6867] usb 9-1: device descriptor read/64, error -71 [ 327.035323][ T6867] usb usb9-port1: attempt power cycle [ 327.066984][ T5073] usb 2-1: Cannot set autoneg [ 327.071839][ T5073] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 327.084376][ T5073] usb 2-1: USB disconnect, device number 123 [ 327.375258][ T6867] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 327.396293][ T6867] usb 9-1: device descriptor read/8, error -71 [ 327.526302][ T6867] usb 9-1: device descriptor read/8, error -71 [ 327.594667][T12551] syzkaller0: entered allmulticast mode [ 327.601101][T12551] overlayfs: failed to clone upperpath [ 327.607221][T12550] syzkaller0: left allmulticast mode [ 327.642110][ T36] audit: type=1326 audit(2000000006.670:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12548 comm="syz.1.3860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f773ab8e929 code=0x0 [ 327.743188][T12572] overlayfs: failed to clone upperpath [ 327.765227][ T6867] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 327.779907][T12577] bridge0: entered allmulticast mode [ 327.796445][ T6867] usb 9-1: device descriptor read/8, error -71 [ 327.926352][ T6867] usb 9-1: device descriptor read/8, error -71 [ 328.035327][ T6867] usb usb9-port1: unable to enumerate USB device [ 328.312162][T12583] fuse: Bad value for 'user_id' [ 328.317152][T12583] fuse: Bad value for 'user_id' [ 328.509015][T12594] kvm: pic: non byte write [ 328.648832][T12603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.657487][T12603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.885281][ T5073] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 329.036320][ T5073] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.046629][ T5073] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 329.056253][ T5073] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 329.065374][ T5073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 329.073381][ T5073] usb 2-1: SerialNumber: syz [ 329.222789][ T36] audit: type=1400 audit(2000000008.250:1860): avc: denied { shutdown } for pid=12628 comm="syz.3.3889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 329.279866][T12604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=12604 comm=syz.1.3881 [ 329.303919][ T5073] usb 2-1: 0:2 : does not exist [ 329.310824][T12644] /dev/rnullb0: Can't lookup blockdev [ 329.317562][ T5073] usb 2-1: USB disconnect, device number 124 [ 329.386368][ T5383] udevd[5383]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 330.015270][ T9] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 330.165215][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 330.171654][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.182853][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.192737][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 330.205741][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 330.212381][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 330.221563][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.230324][ T9] usb 2-1: config 0 descriptor?? [ 330.897532][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 330.903583][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 330.912361][ T9] usb 2-1: USB disconnect, device number 125 [ 331.887640][T12755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=12755 comm=syz.6.3928 [ 332.189830][T12797] netlink: 'syz.3.3942': attribute type 4 has an invalid length. [ 332.197706][T12797] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3942'. [ 332.255251][ T1663] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 332.405223][ T1663] usb 9-1: Using ep0 maxpacket: 16 [ 332.416020][ T1663] usb 9-1: config 0 has no interfaces? [ 332.424220][ T1663] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 332.433631][ T1663] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.441900][ T1663] usb 9-1: Product: syz [ 332.446294][ T1663] usb 9-1: Manufacturer: syz [ 332.451013][ T1663] usb 9-1: SerialNumber: syz [ 332.458619][ T1663] usb 9-1: config 0 descriptor?? [ 332.501475][T12822] geneve1: tun_chr_ioctl cmd 1074025672 [ 332.507252][T12822] geneve1: ignored: set checksum enabled [ 332.514915][T12822] can0: slcan on ptm0. [ 332.665940][ T307] usb 9-1: USB disconnect, device number 15 [ 332.748609][ T36] audit: type=1326 audit(2000000011.780:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.6.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ceb8e929 code=0x7fc00000 [ 332.772217][ T36] audit: type=1326 audit(2000000011.780:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.6.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54ceb8e929 code=0x7fc00000 [ 332.775267][ T1663] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 332.827958][T12844] /dev/rnullb0: Can't lookup blockdev [ 332.959646][ T1663] usb 2-1: config 0 has no interfaces? [ 332.985347][ T1663] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 333.001155][ T1663] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.015235][ T1663] usb 2-1: Product: syz [ 333.025347][ T1663] usb 2-1: Manufacturer: syz [ 333.030158][ T1663] usb 2-1: SerialNumber: syz [ 333.039563][ T1663] usb 2-1: config 0 descriptor?? [ 333.052456][T12857] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.062348][T12857] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.069534][T12857] bridge_slave_0: entered allmulticast mode [ 333.075891][T12857] bridge_slave_0: entered promiscuous mode [ 333.084404][T12857] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.091516][T12857] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.098709][T12857] bridge_slave_1: entered allmulticast mode [ 333.105027][T12857] bridge_slave_1: entered promiscuous mode [ 333.117911][ T1663] ================================================================== [ 333.126040][ T1663] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 333.132820][ T1663] Write of size 8 at addr 0000000000000098 by task kworker/0:4/1663 [ 333.140905][ T1663] [ 333.143243][ T1663] CPU: 0 UID: 0 PID: 1663 Comm: kworker/0:4 Not tainted 6.12.30-syzkaller-g1493f0937f6d #0 325d72c54d94b91201d3e1db29193146d3b17a0d [ 333.143268][ T1663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.143281][ T1663] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 333.143339][ T1663] Call Trace: [ 333.143346][ T1663] [ 333.143355][ T1663] __dump_stack+0x21/0x30 [ 333.143377][ T1663] dump_stack_lvl+0x10c/0x190 [ 333.143397][ T1663] ? __cfi_dump_stack_lvl+0x10/0x10 [ 333.143419][ T1663] print_report+0x3d/0x70 [ 333.143438][ T1663] kasan_report+0x163/0x1a0 [ 333.143464][ T1663] ? down_write+0x83/0x2a0 [ 333.143486][ T1663] ? down_write+0x83/0x2a0 [ 333.143508][ T1663] kasan_check_range+0x299/0x2a0 [ 333.143534][ T1663] __kasan_check_write+0x18/0x20 [ 333.143554][ T1663] down_write+0x83/0x2a0 [ 333.143575][ T1663] ? __cfi_down_write+0x10/0x10 [ 333.143596][ T1663] ? _raw_spin_lock+0x8c/0x120 [ 333.143620][ T1663] ? __cfi__raw_spin_lock+0x10/0x10 [ 333.143645][ T1663] ? mutex_unlock+0x8b/0x240 [ 333.143664][ T1663] ? __cfi_mutex_unlock+0x10/0x10 [ 333.143685][ T1663] rust_binderfs_remove_file+0x6c/0x110 [ 333.143707][ T1663] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 333.143740][ T1663] ? update_curr_dl_se+0x10c/0xb20 [ 333.143763][ T1663] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 333.143783][ T1663] ? update_curr+0x60d/0xc60 [ 333.143806][ T1663] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 333.143838][ T1663] ? update_load_avg+0x506/0x19a0 [ 333.143855][ T1663] ? detach_entity_load_avg+0x7b0/0x7b0 [ 333.143880][ T1663] ? dequeue_entity+0x354/0x1750 [ 333.143899][ T1663] ? __switch_to+0xc7b/0x1310 [ 333.143919][ T1663] ? plist_del+0x3e3/0x400 [ 333.143945][ T1663] ? __cfi___switch_to+0x10/0x10 [ 333.143965][ T1663] ? tg_unthrottle_up+0x980/0x980 [ 333.143983][ T1663] ? dequeue_pushable_task+0x161/0x2e0 [ 333.144003][ T1663] ? _raw_spin_unlock+0x45/0x60 [ 333.144019][ T1663] ? kvm_sched_clock_read+0x15/0x30 [ 333.144040][ T1663] ? sched_clock_noinstr+0xd/0x30 [ 333.144059][ T1663] ? sched_clock+0x44/0x60 [ 333.144077][ T1663] ? sched_clock_cpu+0x75/0x400 [ 333.144096][ T1663] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 333.144116][ T1663] ? __cfi_sched_clock_cpu+0x10/0x10 [ 333.144135][ T1663] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 333.144159][ T1663] ? __kasan_check_write+0x18/0x20 [ 333.144179][ T1663] ? __switch_to+0xc7b/0x1310 [ 333.144199][ T1663] ? psi_group_change+0xb44/0x1130 [ 333.144218][ T1663] ? __cfi___switch_to+0x10/0x10 [ 333.144239][ T1663] ? _raw_spin_unlock+0x45/0x60 [ 333.144255][ T1663] ? __switch_to_asm+0x3d/0x70 [ 333.144277][ T1663] ? __schedule+0x1463/0x1f10 [ 333.144295][ T1663] ? kick_pool+0xb9/0x550 [ 333.144311][ T1663] process_scheduled_works+0x7d2/0x1020 [ 333.144338][ T1663] worker_thread+0xc58/0x1250 [ 333.144364][ T1663] kthread+0x2ca/0x370 [ 333.144388][ T1663] ? __cfi_worker_thread+0x10/0x10 [ 333.144411][ T1663] ? __cfi_kthread+0x10/0x10 [ 333.144441][ T1663] ret_from_fork+0x64/0xa0 [ 333.144461][ T1663] ? __cfi_kthread+0x10/0x10 [ 333.144486][ T1663] ret_from_fork_asm+0x1a/0x30 [ 333.144510][ T1663] [ 333.144517][ T1663] ================================================================== [ 333.477346][ T1663] Disabling lock debugging due to kernel taint [ 333.483542][ T1663] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 333.484244][ T307] usb 2-1: USB disconnect, device number 126 [ 333.491361][ T1663] #PF: supervisor write access in kernel mode [ 333.491380][ T1663] #PF: error_code(0x0002) - not-present page [ 333.491405][ T1663] PGD 8000000114533067 P4D 8000000114533067 PUD 0 [ 333.491438][ T1663] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 333.509733][ T36] audit: type=1400 audit(2000000012.510:1863): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 333.516167][ T1663] CPU: 0 UID: 0 PID: 1663 Comm: kworker/0:4 Tainted: G B 6.12.30-syzkaller-g1493f0937f6d #0 325d72c54d94b91201d3e1db29193146d3b17a0d [ 333.516206][ T1663] Tainted: [B]=BAD_PAGE [ 333.516216][ T1663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.523063][ T36] audit: type=1400 audit(2000000012.510:1864): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.544155][ T1663] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 333.544242][ T1663] RIP: 0010:down_write+0x9a/0x2a0 [ 333.544275][ T1663] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 333.568327][ T36] audit: type=1400 audit(2000000012.510:1865): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.573647][ T1663] RSP: 0018:ffffc9001013f500 EFLAGS: 00010256 [ 333.573673][ T1663] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 333.573691][ T1663] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9001013f520 [ 333.595547][ T36] audit: type=1400 audit(2000000012.510:1866): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.611770][ T1663] RBP: ffffc9001013f598 R08: ffffc9001013f527 R09: 1ffff92002027ea4 [ 333.611793][ T1663] R10: dffffc0000000000 R11: fffff52002027ea5 R12: dffffc0000000000 [ 333.611811][ T1663] R13: 1ffff92002027ea0 R14: ffffc9001013f520 R15: 0000000000000000 [ 333.611829][ T1663] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 333.611848][ T1663] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.611865][ T1663] CR2: 0000000000000098 CR3: 0000000135d88000 CR4: 00000000003526b0 [ 333.611885][ T1663] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 333.611899][ T1663] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 333.611916][ T1663] Call Trace: [ 333.611924][ T1663] [ 333.611934][ T1663] ? __cfi_down_write+0x10/0x10 [ 333.618131][ T36] audit: type=1400 audit(2000000012.510:1867): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 333.636572][ T1663] ? _raw_spin_lock+0x8c/0x120 [ 333.636615][ T1663] ? __cfi__raw_spin_lock+0x10/0x10 [ 333.658299][ T36] audit: type=1400 audit(2000000012.510:1868): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 333.664072][ T1663] ? mutex_unlock+0x8b/0x240 [ 333.664108][ T1663] ? __cfi_mutex_unlock+0x10/0x10 [ 333.672506][ T36] audit: type=1400 audit(2000000012.510:1869): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 333.680059][ T1663] rust_binderfs_remove_file+0x6c/0x110 [ 333.680095][ T1663] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 333.680145][ T1663] ? update_curr_dl_se+0x10c/0xb20 [ 333.680174][ T1663] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 333.890159][ T1663] ? update_curr+0x60d/0xc60 [ 333.894774][ T1663] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 333.907986][ T1663] ? update_load_avg+0x506/0x19a0 [ 333.913021][ T1663] ? detach_entity_load_avg+0x7b0/0x7b0 [ 333.918584][ T1663] ? dequeue_entity+0x354/0x1750 [ 333.923532][ T1663] ? __switch_to+0xc7b/0x1310 [ 333.928228][ T1663] ? plist_del+0x3e3/0x400 [ 333.932671][ T1663] ? __cfi___switch_to+0x10/0x10 [ 333.937652][ T1663] ? tg_unthrottle_up+0x980/0x980 [ 333.942711][ T1663] ? dequeue_pushable_task+0x161/0x2e0 [ 333.948186][ T1663] ? _raw_spin_unlock+0x45/0x60 [ 333.953049][ T1663] ? kvm_sched_clock_read+0x15/0x30 [ 333.958266][ T1663] ? sched_clock_noinstr+0xd/0x30 [ 333.963306][ T1663] ? sched_clock+0x44/0x60 [ 333.967749][ T1663] ? sched_clock_cpu+0x75/0x400 [ 333.972631][ T1663] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 333.978751][ T1663] ? __cfi_sched_clock_cpu+0x10/0x10 [ 333.984054][ T1663] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 333.989990][ T1663] ? __kasan_check_write+0x18/0x20 [ 333.995112][ T1663] ? __switch_to+0xc7b/0x1310 [ 333.999807][ T1663] ? psi_group_change+0xb44/0x1130 [ 334.004931][ T1663] ? __cfi___switch_to+0x10/0x10 [ 334.009969][ T1663] ? _raw_spin_unlock+0x45/0x60 [ 334.014827][ T1663] ? __switch_to_asm+0x3d/0x70 [ 334.019602][ T1663] ? __schedule+0x1463/0x1f10 [ 334.024285][ T1663] ? kick_pool+0xb9/0x550 [ 334.028621][ T1663] process_scheduled_works+0x7d2/0x1020 [ 334.034184][ T1663] worker_thread+0xc58/0x1250 [ 334.038881][ T1663] kthread+0x2ca/0x370 [ 334.042966][ T1663] ? __cfi_worker_thread+0x10/0x10 [ 334.048100][ T1663] ? __cfi_kthread+0x10/0x10 [ 334.052709][ T1663] ret_from_fork+0x64/0xa0 [ 334.057137][ T1663] ? __cfi_kthread+0x10/0x10 [ 334.061833][ T1663] ret_from_fork_asm+0x1a/0x30 [ 334.066613][ T1663] [ 334.069645][ T1663] Modules linked in: [ 334.073553][ T1663] CR2: 0000000000000098 [ 334.077713][ T1663] ---[ end trace 0000000000000000 ]--- [ 334.083206][ T1663] RIP: 0010:down_write+0x9a/0x2a0 [ 334.088358][ T1663] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 334.108081][ T1663] RSP: 0018:ffffc9001013f500 EFLAGS: 00010256 [ 334.114194][ T1663] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 334.122173][ T1663] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9001013f520 [ 334.130155][ T1663] RBP: ffffc9001013f598 R08: ffffc9001013f527 R09: 1ffff92002027ea4 [ 334.138174][ T1663] R10: dffffc0000000000 R11: fffff52002027ea5 R12: dffffc0000000000 [ 334.146154][ T1663] R13: 1ffff92002027ea0 R14: ffffc9001013f520 R15: 0000000000000000 [ 334.154154][ T1663] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 334.163178][ T1663] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.169773][ T1663] CR2: 0000000000000098 CR3: 0000000135d88000 CR4: 00000000003526b0 [ 334.177848][ T1663] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 334.185824][ T1663] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 334.193932][ T1663] Kernel panic - not syncing: Fatal exception [ 334.200310][ T1663] Kernel Offset: disabled [ 334.204642][ T1663] Rebooting in 86400 seconds..