last executing test programs: 17.621693977s ago: executing program 0 (id=1): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000300)={[{@readahead={'readahead', 0x3d, 0xfffffffffffffffb}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x4}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x200}}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fowner_lt={'fowner<', r0}}]}) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000580)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r3, 0x45809000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17.558589902s ago: executing program 0 (id=8): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="9f7ee049743585c1cd24d93a20c23413a5f782f041bb5c6d64b30ff7d93ed52db1f6d802028ad45bf0600674779408af7205d238a4123227d0166700d01c8d873e6b70ff3099a937937b1f792b505944074430fb22db845475b6aa2d162ed900e8bd4837d4c71f0e354a58090ad796149546592f3e462e903a2669d6af0801b02d71292bf8aab1901ce015d15c6dc02f9df5d5b24c16778bab75f6a6d42e2c1d6d8abebec2920f5c4cb6a4694e298d8ac45bd09af5c7c165d15b3452f310", @ANYRES16=r1, @ANYBLOB="000227bd7000ffdbdf251b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0008000000080001007063690011000200303030303a30303a31302e300000000008000b007f000000080001007063690011000200303030303a30303a31302e300000000008000b00ff010000080001007063690011000200303030303a30303a31302e300000000008000b0000020000080001007063690011000200303030303a30303a31302e300000000008000b00fdffffff"], 0xcc}, 0x1, 0x0, 0x0, 0x24008004}, 0x2c040800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0x7, 0x6, 0x3000000002, 0xffffffffffffffed]}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000440)=0xd4, 0x4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x40000, 0x1}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r7, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000004, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r7, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[], 0x50}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b0e20000", @ANYRES16=r5, @ANYBLOB="000129bd7000fbdbdf25030000000c0001800800050003000000080006000000000008000400debc0000080004000300000008000400402000005000018008000b007369700014000300fe8000000000000000000000000000bb080005000200000006000100020000000c000700080000002300000014000300fc0200000000000000000000000000012000038014000600fc0100000000000000000000000000000800030000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket(0x1d, 0x4, 0x2) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x40000100000200) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r9]) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26008, 0x13, r8, 0x22e7c000) 17.454163541s ago: executing program 0 (id=14): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1={0xff, 0x11}}}}], 0x28, 0x7ffffff7}}], 0x19, 0x0) sendfile(r0, r0, 0x0, 0xd) 17.413881484s ago: executing program 32 (id=14): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1={0xff, 0x11}}}}], 0x28, 0x7ffffff7}}], 0x19, 0x0) sendfile(r0, r0, 0x0, 0xd) 4.961302702s ago: executing program 3 (id=139): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in=@private}}, &(0x7f0000000200)=0xe8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="0100", 0x2}], 0x1}, 0x4048841) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="04fe", 0x2}], 0x1}, 0x1) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/64, 0x40}], 0x1}, 0x20160) r3 = socket(0x29, 0xa, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141a03, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002300), 0x80802, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000240)={0x1, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="0f20e06635800000000f22e00f20d86635080000000f22d866b88273000066b8d0a700000f23c00f21f8663501000d000f23f8f0108800800f8901dfbaf80c66d3e4b2228abafc0ced66b97e02000066b88a46723166ba8794bd590f300f01c50fff3cbad00466b80b00000066ef", 0x6e}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r10, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000180), &(0x7f0000000240)=0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r11 = userfaultfd(0x801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) 4.784063006s ago: executing program 3 (id=140): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x290d02, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') 4.722238271s ago: executing program 3 (id=141): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x15) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') 4.721829261s ago: executing program 3 (id=142): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r2, &(0x7f0000000080)='FROZEN\x00', 0x7) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000004c0)={'#! ', '', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd04\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaK\xces\x04\x1e*p\x9e\xf2\x16\x01`\xd2+FG\tX)\x910\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xabo\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xf3\xa7*O\xe3\xc3L\xd6H\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e34~\xa8\xb8aQtp\xc8r_\x14K\xd35;\x8f_\xe0|Y\x8b'}]}, 0xb8) close(r3) openat$cgroup_ro(r3, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) syz_usb_ep_write(r0, 0x3, 0x0, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = creat(&(0x7f0000000380)='./file1\x00', 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x1, 0x0, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0x9, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) 3.502717739s ago: executing program 3 (id=148): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x808}]}]}, 0x30}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x1, 0x4, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x10}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9c6b}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x200}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10001}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x8050}, 0x810) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x1c5) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000480)={&(0x7f0000001980)={0x2f8, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x258, 0x84, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x19, 0x1, @random="bbdd785e23ef7c7b013cf1fe1de5f0cba00a22e293"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="eaf40c35f519"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xe6dae37d}]}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x60000000}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x401}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7ff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffffd}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7d}, @NL80211_BAND_LC={0x8, 0x5, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x91c}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x10000}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x180}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="128bc2895421"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x10, 0x1, @random="7e1e79ce85222f948b234ece"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xea}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xe}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x7f}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x80000001}]}]}, {0x78, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="f700b1de6af8"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x200}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x27}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xd}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffff7}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}]}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x34cb35f6}, @NL80211_ATTR_SCAN_SSIDS={0x60, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x4}, {0x6, 0x0, @random="8aff"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x6, 0x0, @random="805b"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x2f8}, 0x1, 0x0, 0x0, 0xc091}, 0x10) 3.038511566s ago: executing program 1 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 3.037996147s ago: executing program 1 (id=158): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x44442, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfd*o=', @ANYRESHEX=r4, @ANYRES16=r3]) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') socket$inet(0x2, 0x1, 0x0) read$FUSE(r1, &(0x7f0000002b80)={0x2020}, 0x59ff6c4eb18c0cfa) syz_usb_connect(0x5, 0x49, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110032994664021042d0449da0102030109023700010405004d09046d02000202ff960524060001052400fb000d240f0105000000800080000706241a00800404240600042413"], &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) socket$unix(0x1, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x40009}, 0x1c) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000240)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4, 0x0, 0xa, 0x0, 0x2, 0x7, 0x7f, 0x8, 0x7, 0x10, 0x9, 0x0, 0x5, 0x1, 0x5, 0x7, [0x1, 0x4]}}) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f0000001600)={0x29, 0x1}) listen(r5, 0x204) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000b4ed54eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000", 0x58}], 0x1) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde", 0x35}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8000) 2.554213065s ago: executing program 3 (id=169): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r2 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "0297"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) lgetxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x24000010) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1.773441808s ago: executing program 1 (id=175): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0xc084) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x884d, 0x27}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x40000) r3 = syz_open_dev$mouse(&(0x7f0000000280), 0x7ff, 0x0) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000002c0)={0x1, 0xffffffff, 0x8, 0x40, 0x0, 0x5a7f, 0x6, 0x1, 0xa3, 0x10, 0xfffffff9, 0xf1f8, 0x1, 0x8}) sendmsg$netlink(r3, &(0x7f0000000a80)={&(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdbff, 0x100000}, 0xc, &(0x7f0000000a40)=[{&(0x7f0000000340)={0x42c, 0x2e, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@generic="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", @typed={0x8, 0xfa, 0x0, 0x0, @ipv4=@multicast1}, @generic="060c2bf01b80d1bb5231676bb2e919cf13427c646b9f8c9ae8b3b1f09cb697a243f49d83aa676a3a48b008331414a3a8fbabb9215fff0dd083c47ed279374f7fb8bd2c458732b38f0831595ba3a0f6005a6b0e5879b3c992517cec3f1dc99c7ab06410026465d010135018829cb89cd5cef64701c00e61a7da6baad6dd78ac5709ca7f0e03cdee438519e57c11ca92a110885adfcb6e09e5f4d6cec4f4997600134a29e1b0b6b75d2ea7d1034b8fc0e01f119d671eff0014a65179", @nested={0x10c, 0x21, 0x0, 0x1, [@nested={0x4, 0x14b}, @nested={0x4, 0x74}, @generic="c6c29807d489e3ffe0fb64c5abe2fc15b015c796a07adbacc1e87e76b22fcdf398fbb854d13c5613163bbc87414ee22cd8302d1e5e32b5005b579bca9201d385799d851369c1b080b8861a7827f25d4bc12986686133ca74b21305e6c8c8f1abc1020c6e0bee015f05a1eb2c460230d17f50f2282d0b1178ee50c2733a5e33887f790bc32aa8609907b2c12a9623ce3141f4dee8c843012ba78c3ea5701c0622e4bce394", @typed={0x50, 0xc0, 0x0, 0x0, @binary="a4cb0991648e2ba7c70c0fc403dd4ed53dba43ae549535d53f0a1d4d2cb834ec71fe8abf01d9d5a9dfbc9ef1b45a145ad516674099169cb57c0312bad9a3ebd09333f2273e568929cb0ed587"}, @nested={0x4, 0xfa}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x5}]}, @generic="c51308bca725aac11167d12fee285a70920235de5969c03786c291881325d79cb3878b046ee0f2c5268dd36893e2feba56f693cf806055c35983d9660beeb2998ca209930e6bb221b4b585dc1638f7a6b88eb3dd", @nested={0xe1, 0x77, 0x0, 0x1, [@generic="a8ffc764a955bc745d542d46cbfc", @generic="b742484db8a35de12ec51225de778850337d49dbafc053b913c501cd9dde42938beac7461cdf837107055d106ab3d3d77f989996e8874b6802101f6feba64ef184d5ffd18274f308a798fd91c83650d6cf9ad251f25746975873c0aaa1151be3780f1a", @typed={0x5c, 0xb65, 0x0, 0x0, @binary="3c053b96a177972d207917b180079be235f7fa0a1235b2ad27fdaa7bdd7ac7248dabd0e544950be3776872c5141d63f99ead0225a00d8f0319d814654203f6c426c5cbab0e4bf42552450c3da532a4bae647c3b637782e56"}, @typed={0xc, 0x1f, 0x0, 0x0, @str='\x16I}^#.\\\x00'}, @nested={0x4, 0x127}]}, @nested={0x13, 0x34, 0x0, 0x1, [@generic="47371338facf6730ca503e79873bac"]}]}, 0x42c}, {&(0x7f0000000780)={0x19c, 0x11, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x9f, 0x7, 0x0, 0x0, @binary="8b8f987aafd1f7511eddb292ad0b16d7d8d9f26fb0ff94d8fa415f9098c8629e7a577d8e35933528fbad270ffb2b189903a732efc6c5ddf287c4d90003124b5ba454e5025e345b5fd49dd1b8740217583eede79999fb343bde539dcd6c676ed7f8ef1f3d4d7fd905ad34ffaf1bb115e07ab17ad4ac0c068d815a80edf2d3a132b3108e7195bc2ee4b299d7bf57e3f8559a764a50402cac79565057"}, @generic="c917757b5c42c325daffb8fc90a41371a1cf82834eaed23e2fb41df7f7571b11ec6d03be512b45cce014816bad22dfc3bca59ea606db0694985092c0b4a4b649683ad538e8e24f2813e27f964b0ef7c1f77d", @generic="9c0f3fa09ced7665c044d9b630f0123ce0a64ca2dca7ceb916d7e2578b76f112893a996b9555f08e39dceafeb769f700321122d6f11fe352db279f48f55bd0c91e1fef41c907936d331ef71311e5c39e45758c1dad604c6c155b7a14408c514fb8305fa61f45ab7da9b055cfb61dea70cacf0e3046f51304c0e298a391355930f8e920b2f6714210627ea41ed374a80d2e3c3bd9968529887418"]}, 0x19c}, {&(0x7f0000000940)={0xc4, 0x2c, 0x10, 0x70bd2b, 0x25dfdbff, "", [@typed={0xc, 0x47, 0x0, 0x0, @u64=0xfffffffffffffff8}, @generic="97e990b1c9035679e8a305a20f373fb310fbf65ee987c65c4521e59a0e1a37ab2e86e06eb6105d6c01fc3593cd6a1e830e3f6597a420fd0c527ace886cd4e8c923868063032512d0b4096387da40c1f990529adfc908e7fcf645e9ef7ec6a79bbd2826c23468d3c62040ccb36426aafe42b31bd94280b788a8fefd9aaea3220144025d0a0f5874132d19100ba3a516a4c6a2863efc76760822f607a0eb138fef5e49a0d60d1138cd"]}, 0xc4}], 0x3, 0x0, 0x0, 0x800}, 0x10) write(r3, &(0x7f0000000ac0)="3a8600b60114d99a9774e4196dafe38f3ce4a611d3514d43d1d1ba341cefe137432ff8e97ade484a6a40d7dca752738d00c1461f9426cd945fd002ab631e4867b49e76110c49f1484d89d5b9b39ea9d46f3fdfa9f7c0471e403d778011596a78d8dbff37bf0d11780b2423875ce5e099e051028a72a4d8fa9cf78e402a3c576b18d159bf93b74209c70b2475734844804abb9767c0de8a53aa18", 0x9a) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, r4, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xeb}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040000}, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4c0c0) socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xf8, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0xe4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1b440ad3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fe4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40080}, 0x4048000) syz_genetlink_get_family_id$nfc(&(0x7f0000001040), r0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000001080)={0x28, 0x0, 0x2710, @hyper}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r3) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000001280)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xf8, r9, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x14, 0xa, "a1fee8dd05e4f19fac3aa90b4c73026d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c7753d4885c9db554a6f5b7b75"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x84, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_SEQ={0x14, 0x4, "677da5313bce0442572220477988a217"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0xc, 0x4, "29ad540d4e81199d"}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000014}, 0x24048800) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) ioctl$TIOCGLCKTRMIOS(r10, 0x5456, &(0x7f0000001300)={0x8, 0x9, 0x10, 0x8, 0x18, "1e67729cbb5b9f63d5556bb5e0320a601c01d9"}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r4, 0x800, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x990}, 0x4004) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001480), r3) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000001740)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001700)={&(0x7f00000014c0)={0x22c, r11, 0x707, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe6}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x688}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x393f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa0}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NET={0x4}]}, 0x22c}, 0x1, 0x0, 0x0, 0x1}, 0x80c1) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001780)='./binderfs2/custom0\x00', 0x422725250b65f1db, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000001800)={0x2, 0x10001, 0x31, &(0x7f00000017c0)=""/49}) ioctl$BINDER_SET_MAX_THREADS(r12, 0x40046205, &(0x7f0000001840)=0x2) 1.718213803s ago: executing program 1 (id=176): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x89e0, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) (async) listen(r2, 0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4000011) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000007c0)={{0x1, 0x0, 0x80, {0x5000, 0xdddd1000}}, "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", "1d0b05981d904b134fa7ede8a8696d858a7b8db0c6b443bd460675d12d8e31b966ede58748f1025c8ace9d341f9e9cf5706a38b9c070c1f375932e7acf07c657eeb78cad5df7bcec3eb9b5b685377b092a52b46a984d8b573b36a8ca611151e8782c07ebe8d78f4d320a61e56fb643d6256f1f3d64cbd9e7a3911f4595eb7f8136c6d85c3e993f00355e994400d82e71f983301563b932651c0f4569e7448341715ba1730b0a50d84a3c8c607f08fd41d78279c87f353eb26da1033ad0b7a91aa271d8cd00c28f6acc08776a58ca5e716eeb009286a60ca7fbd88d7a075430a99051fc8b133420a566274940b970e657f00b5cc5ff9501abc7cb33e59a9f6a826e805dbec84e9102cc17e913789448fa7e48330006d6d7e004aeb50eeb624294f87365d4c66102b4c44c3b8ffa4cb8d467bbb7f5cf4ee0d89b9091de1a5c092f9700a2f07ed855b97b392a2e6d9564b34313e18129cb20a102707a2ec2dfcd09482c4b4bff49e808281a1b2ce0733f8126c4229fa3e78a2ba27931e6c72a2ac904857605ab8c9320e9103d60f4306390b54cd0aadf4a2bfbfc3bdb1292ae1aea4a0dec566d5b42c8bc882d773e395e32fac84213cd3399fa8d5d0841659978794c392997c5106c9203245a37269af159fe9b059d8fbfd08f9331b246989f87ef8236bb87b1a9550cf6eb531c526c0c2198ac8051884e78febd2cfd246b48f09f61030c81031669495d15fd48651ce1d6b55c608c839b1a3512b9d0dfa16473213e7f8559c95b896916baafcb90fe0b5e84017503737ccf5c5920ef5c33862e585443ea3995364ba2471d32d2c7e9bd49669a8368ef05868e3d3e707c7a3ca781bf49acfe1174df6f48ef5822982f655884d6dc120042072e0f9deb49ba122ca66e0b4b6a91a54414fa3fad5184631f9b333d3f36756d7f09b3178a0d67ba87524841f92da19c3669b4b2f1614a0eb7453dfe7784a3f9b37eff65528e898f22d75f01b32aea5d80cb04ee4277f7a9709ee96b778d629ff81024236aef22a51b2820d7f84436cebf05ed2d76b31fc7118073b34c1f41e40e711c3b553a60d5ad7d7c3a1f8b5bd826c33b498d7c2d688ac821dacb8cb741c8d7eb6150ceff0e3783478d2a604f1205e73e892329a900d6e20c3f110b00d5028541a335b61fc1a79bb0818d883893213684a360a8cc1ade1f63b109e9cf96e2126d7b02cd71316c2ccac3584bb7800752a62651e810c23625caf249b2d5e854e31efefe4485dac45dcbe9aaa37402f6cc7b4b2ce59572e6946126001ab9717ddfa58c1ec7ae8d93b79cd52dbe0fcb26fa43de46f8a3cc6ecb6529c322f9c23d39d92fe0b34017170072884976ce8b01dc981b913302c811489b81a157117488224536d509a1227275245f71231af6bfe12162835e208636d074f081d88e61cabb40c93f08613ab15b8e6009b97a83accbfa49b39374bf08a745bf4eedbef5d2b420438bf316a5e2d6024a71919c24d3ccfb46987768f167361f4d2ab91f1fa29819f0d0bcc930f05818c8c6c3b555e2f97094c087232be3404830d215d6b092df6281c7ccf1bdb9402270330c0039e03f276bc368e9530821882a50dce6d1b5190b7606f34d84e375a54f4b130e5f526b9dcdc98f429039495f40ec1e1f445f50ec6aa7606cc3cb3bd74c5f95510413c5fdd85ee5b16cd7f9511f3e1dc395596439b45ac0344a4d2d141128d597d8318528325278e3a5709cd64e9a49b8d5ba107983644c452f6f8053e7ec32fc56898362f287596dc1bea6b26396e6909aff73f9ac6feb19a8d87f126e1d2374c4cb7f6e312a8a17197fee5906e5adb32e02ac304cd83c23969767a9f9e9384a3fc0d7a263ba829c8744cc4279d8d4309434f7ef6536ba1d8319870d18916188de2490c68fa4ef83dab1640b65e707a7c4c6fe35c6cf215dd0a95f7b67bc2eeefd74cd29effef4357b85db1beefdeb4dc810cca17839c27620d750aeb28aa0efecb9f4a22fa0b0f32366f0b4b75b4be811e5940ed284e850ea2ce9caedc925b1417ae3f34d13747b4be32fede1362e2c3316814000a5d0171d98a1bdaa6af59dcae8008b8a9d6a836b70171f5ec4febeecbc4f832777d753a7033b8681f20f4cafa1355ca669fabe2cc3d0a65401a6a47a352f0f81ba35e700785a7ce021a5b2b79542513fa413b787733da9d59117e5b1fea5ae4ee56ba22f1af177a37db339b40a9ac7c280db0535df32e94b50fbadd362050d776d5ca40ffc682cb39cf3caf076555a73c3564053538d778ff020c3529a655a0698052a353640c4151e628b548fc048e95a44e16578ef1fc9547b23c1b19410b4e2159a175287268d809a0f21950b1239efa2b3de57f79dd96ca9c09185d2e573ec69e1e47b7eb87b7a10a1cb0a5529cf5aa714332b75199d03a0d54420dc65bb190431348b059f20ed36670d723eec04688f23203f20cb0e8651c753e3f376917eeaee66e015676b71d25e11585a1c4cb6ba688cf0637c739f1153ab008ea00307d6be89689b1c05ea52aab73f33086e676ca1bff9ca79bbfde53b0c1ccef7abffd95d05b5884fd1ab28f0173626d700c7c81112cbf04012ec3689f3c5841e2c0ec60a74b53319d67d4c513656c5f894d1da1e62b5afccc29a2d8dca636f01ca5fddfe19d366fb95b264e48ed108968490b01faa248f46a9c3d2908d00c00d21257edb78cd22e808019fbae49853f8cb367e9cdee49401fe61b12f4319857048f40c25cc65640f2e3af487e4224b6289637044934887e49f8222d467c9401cf8f0b777bd93a6dcd6ccf19d49124acc63af4e80b610a6f49c0c3bff77d914b626c6deb0fb70edd356ae753e804786231642720d545795ccc3b65ae343a5672da03507a59476bb5146985152cd8ef4dbb3778221a1b8557c53341786c0398033ad3e7f893960b775e4b19baf230ca75994168345cd1dd4e713d06915ac66ba4e4fd71a6f144e5271322139e62b29212a8826ccf3ce455c881b7c22c787666546b2cab8da97bd328fee684ce5220db4aea6dd176572567c3b8cad9816e23380577bf032df399b9b33c45cfc869a28c8838efc2bb3baabb76d3804ae721ceaa5cb6627db8d984710489df12ca1a59973f9349f3560795addf3ff4ffd4621497c51fb8f8da57ad30c9d02020d7664281229763dd11df0acb2703151f0b24ede22feaf784a66d23e363474371b5c9483ec4da6c87abc07f20dc73fff6e07c3532cf90f80235689d3101047d35725ed99ce368747493bd009905854e66d9573aaf3aff5b8a9b6ada658766a899c25f8ff26859b3d629fc95a2cc5fb3679ef93178338d77e04e926e3843f59e52e7a6d078307040940a75f78cbc5104474e4e6b9c924315ee4565b696262726e27da07ba6ed4ad1e6c77d46136ed8dd3a45901f10460ae7f3a1d1afba64ee6b59daf4d090b811f440145ab2adcad20fae6f04b1e46f49154069f69eec58eeb8555e5c8e2e23a9c40453e434713d3e3cb7ff704149a3d59129e4e33df5673a664348c1829e000e1abae37c90a1ab660d4929b772536334ef4184aeb1394bb71d10bd44ba2d7ee352e15294a673f349526665f751af43542b3ee47226b013c01348653290fb5b55d7fc4b69e10b7b09369a8bfef2db5c7263ebf07ce77e666254583b7a7bd76575f44385fc7549bf582a58814fe0db64c4b7aed5d0fb72e82747175f936193a9a7b4a8b5941bbaf47f6b3c87220d434233c0caed41d1ac9115d62974273db957d9cb47f850fb0e6b59689f4e81388ed1b132da8a6d88bd61b9f2982c765a84a987631c4083aefe3ba1e50cb4a1607585b5939b31693fd9c0fcf59e0111a6d49ce1a5e47d4e4c576e10b0d4cdc4b2e289505551bdcfb76d7023b30b0a104b9c3411a717710a5b01be3203f7a16c099815cf1148ae8d3653dde135c5b2dc33fa8c42f79a8d3f5a381cdbf204328bef06e3d1510bcae705aafdd26c2c70cf8e81328d4771367a2ff5f018bff7aa89da560b044ea253f8aabaebab2a0e00de801572c04f85cb0b381e718b715f8d296cabc25d0aaaa0a9efd88102c9d021d97eb5a5c14c636f5501d7e6e82e378384d63134a1a9ea0152d51ccf71b4ed9b60bee0bbb6b86477fdead731ef7cbf70aec678a8b35456b2c2c6726513e32aeede7390d895975cc72000551d252181816dee8e122177b1beaebbf2e3c9f4dca3951990e5d6499e1138f5ec3ad53433ec7cbe3927b2cfeb5a33e4727e94f33e75497b903d6b471cdf03e326465d5e089b292091971c0558e910c4bfe0299beeec720cb1aa0a0f2593612af135dd9f94da74b09343919361911c1ba316c5314060c0aa12b0b7e5b4efff6842d92a8a5bacc2093266c3a72c54747f8730665bf8b93d27ea6425bf321ee49a4610e8f443c57321f35a6211d4247c3483d59e9c3e943756eb8f153e5d3f571dd311d3693fc77378b209d10030e5961525a7fa20936a248021970c9df553f26e5025f61c40ec9e4c1b632fa2b8d16f6c51398637b839fc862bfeacf6da53280c75da9f6c747adfa9e85590346d3dc292e88c543c7124f2f19825c6ca2d55ca69b0725f068c0eb0d85bd4b69136dfe2e586f200fea86b2a260612e2fac84c45324fcbd73441bfbdc85d516035d17a67c154d038e58a7ee5bdda290a3855ec980ef061d52640804ce792773da5308ec34aebfe2b6b90a671495d84f98610afed6389b3d7aa0f1513b333630619a384a75cd8669c35947be86e4d441ddb2836af863dc9345e0d64b2c53da9756e6dcf5538683746aeb71ff97dae46420c9f037ea4516fc792deba733e3abce020f94445020bb58e0fe9ff5604bb4f414246ab058c053e57e1db1d447a8b25e5bee1edfebd4a0b40041d1f7ca3beebb2a57db4098deddcbad5b4d1969848890947a77442f08d78947f8e4de9955fa9a1f3a3b24f9a79d0aa9bc005fb243639dfb0db802ae72922274ca1fcbda194128d1b1924caca27767eb06f5721a2dec96749ad9b02c7a763af022320334e90e2e8cd0cf18accde7a01ca76e86d73dffb90bbe704a88af2ca66b1d9d599dddd68c0cbb67974bf75b1226f480d54ba610054d4d044845fd21eb7062f4880b3e09eba12e8a777cd9335c4a4c0cdac8a05694976c438fb6f765755233a7f71747f47a8ab01deea567e35c6eb892bd09cc14fd9a39dab1f21cb269118039f6495eee2a29500f8ac87db364fe9acbc08886b8ef67da6bb2a9ccc7b9a509b08352eeeb0e527ddd67844de230f93c99031600e10fd86c9e9f89d537c78e979ec2882176db766770e82161260e1c43701c6ab9f20b9d2e939c7653263f13e05e4862ccb42c7c504ddee8b0d2f4e78293038d904b3c545ec78911bf3adae26fa5bdd4d917bc031acc5a7789246c0237cf2da1ba4212755facf84734932b672ef69e9f599a6b5be01b16e58fd51c0e2b08abdf5a28409f7aba95f0bb176afcaca72336acd540b2d211586d42bb94308c5ed00de0540d48b8d5078ccaddc2b4f13b67b76a30f91af535c47fbc14b8d95a3876703ebacece929d519d64499a16781fa753e11bac5fa538b1ea8d592c0902d274297f8e4fc4629b85584fe777bd455952a45cc896a1ea456416855f0c997c55ddd72c8542f42e7231ed07c24d1b6a3c30defa6401d8c9a489e59fd1b1f47a3fd2a633ef78eb0aabc009dcb9070dbb38d0671ead072f08deec5dc939a55cc5b4a6f1142a101b9a3038b28965d235b8795e3f7b4c7593309f5f67ef8be83630890f425d69ac377b5efc634f13"}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = accept4(r2, 0x0, 0x0, 0x80800) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000200)) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2000}) (async) ioctl$TUNSETLINK(r7, 0x400454cd, 0x103) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 1.679790766s ago: executing program 1 (id=177): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000401080008001d000000", 0x24) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x2}}, 0x0, 0x0, 0x2d, 0x0, "20ce4c66e56cdb89398a3e47753f79ca08ee8ec909694c8dfb5107a738a6904cdb4eeb3a3a2a51df96e9d9cd18626ae57b64dea81548906bca797406f6e1bc083dc9d01cdc334144842dfba64727fd91"}, 0xd8) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) 1.418149677s ago: executing program 1 (id=179): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) io_submit(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000001cc0)=""/212, 0xd4}, {&(0x7f00000007c0)=""/4082, 0xff2}], 0x5}, 0xc}], 0x1, 0x40000000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x1413, r0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x10000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r6, 0x4, 0x2400) unshare(0x8000400) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, 0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000017c0)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) 353.348212ms ago: executing program 4 (id=189): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) timerfd_create(0x1, 0x80800) shutdown(r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 347.606563ms ago: executing program 4 (id=190): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00040175e5ff", @ANYRES16=r2, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) 270.582969ms ago: executing program 4 (id=191): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030025332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2080}, 0x40040) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000009100)={0x14, 0x18, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030025332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2080}, 0x40040) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000009100)={0x14, 0x18, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) (async) 270.222519ms ago: executing program 4 (id=192): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000500)='./bus\x00', 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x189040, 0x10a) fsync(r3) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x80000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x1) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000000240)=ANY=[], 0x65) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0002004}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 186.262575ms ago: executing program 4 (id=193): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e23, 0x4000, @empty, 0xfffffe01}}}, 0x108) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 185.876306ms ago: executing program 4 (id=195): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = socket$inet(0x2, 0x5, 0xfffffffd) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) modify_ldt$read(0x0, &(0x7f0000000100)=""/107, 0xffffffffffffff09) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x1d) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendto$packet(r2, &(0x7f0000000200)="d80df128be399d3a3b6ec870c20b9f7f26476e9840ca05df74eaeaab9991c20322c7cd138b9893cc5053b6ec35a1", 0x2e, 0x40, &(0x7f00000002c0)={0x11, 0x18, r4, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000100)=0x2a5d, 0x4) syz_usb_connect(0x5, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="1201100318062d40ac0531b2008501020160490904da0700fffd01060000000000000000e58e6b8180155b0de6bb075ebfa46507076bed5da2e4933baca8407b35b2a06381d361b0218e5168796ba3a55a8eacfe083756c78638cc40fd8c9fc155b698d454c7fccd1f286d6a8cfe1982a6a0b3e0eff1e564e8177ce304b1c5fbadd3747eec6f8be7079532cbd82e864284ae48af13552f4e79505766fbdf8ce6271f280cf26a3239c50800000000000000f1891a0482fafdbd229324d9b61dc7c23529a9a7e67e020910691679b99651c1be78d89bf290e1d8ea44dbf3212e8be9ca6c6e6b6452f6fa59c0fbdb0046"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r6, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020ded4c9310457da979fa4388dd60154c23004923f7779ccd9606613089b740e01af8b422a04ea9e9c2e65e081c183f2283700c3bad0f9af818f4c6c2151fa182948", 0x5b, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) 185.183796ms ago: executing program 2 (id=196): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/custom1\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x10}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x10}) timerfd_create(0x1, 0x800) syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000400)='ns/user\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202440, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) (async) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYRES16=r1], 0xfdef) munmap(&(0x7f000000d000/0x2000)=nil, 0x2000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x424503, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0xe}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x74, 0x0, 0x0, 0xfffffffd}]}) userfaultfd(0x80001) (async) r7 = userfaultfd(0x80001) r8 = memfd_create(&(0x7f0000000480)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa1\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x88m\x10L\xec\xfdWF\x7fj\xbb\xed\xc6V\xfe\xad\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4m[Ai\x13\x02\xf0\x06c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x1b\xa8\xdb!\x88\x01\xabY\xf63\x96|XA\xfbMX\xc3!\xb2C\x9b\xc9\xfb+T\xc4N0k\xda\xa1\x10\x96/\x02\xcb\xb8\xb3n5\xa8\x060\xc8\xbd\xd8h\xbf\x9f\tF\xaf\xfc<\x9c\xab\x19\x97CsFI)Z\x02\x00e\xe07F!*\xb4)\xa4|\xe0\x1f$\xa3\x1e\x98\xcb\xb6\x89L\xa6\vS\xfe\x8e#\x96egZ9\xed\a\x1c\xd1!\xe6\xeb:\xaa\xdc\x1f>\x9f5jf\n+\xc6J\x1c~\xc9\n\xe1\xd43\xd1m\x7f\xcd\xd1&', 0x3) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xc, 0x2010, r8, 0x5405000) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)) (async) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)) r9 = ioctl$USERFAULTFD_IOC_NEW(r5, 0xaa00) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00005e9000/0x3000)=nil, 0x3000, 0x2}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r10, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x7, 0x0, &(0x7f0000000340)) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000240)=[@decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) 163.079177ms ago: executing program 2 (id=197): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f00000000c0)=""/112, 0x334000, 0x1000, 0xff3, 0x2}, 0x20) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x0, 0x5, 0x1}}, 0x50) r2 = getpid() syz_pidfd_open(r2, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x1, 0x1, @tid=r2}, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) utime(&(0x7f0000000200)='.\x00', &(0x7f0000000240)={0x8000000000000000, 0xffffffffc86d5209}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000001c0)=0xffffffff, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup(r4) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, 0x0, 0x0) removexattr(&(0x7f0000000940)='./file0\x00', 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000340)={[{0x5f7, 0x8003, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x4, 0x9, 0x0, 0x0, 0x5}, {0x3, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 142.998709ms ago: executing program 2 (id=198): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x60a01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x4, r1, &(0x7f0000000380), 0x10000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000001040)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"\xb1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\x7f\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\x7fi\x03\x97\xc6\x9b\x8f\n2C\x1d/k5\xa2C\xb7\xec_z\b\x86\xe8\xfe\xf1Jk\x15\x93{\xf3\xb2\xd6n\x9c>\xf7\xd6\xa5\x80\xc2\x13\xe1\n\xc3\xdc\xab\xe74\rUf\xe6&\x14(r\xfe=\x94p\x00\xc9\x19\x9clZ\x99\x84\x11\xcfmP:\x7fi\xb4\x83\xdd\xe1\x8f\xd74\x99\x06\xd7\xfb#\xd8\xcc\xf8}=|j\x15\x96F\x9f;\xa8_X0ra.\n') r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180), 0x600, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x6) close_range(r2, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0xfffffffffffff7f3, 0x200000) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x280000a, 0x810, r6, 0xc6) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYRESOCT=r0], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4008051) 82.061744ms ago: executing program 2 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0]) mkdir(&(0x7f0000000300)='./bus\x00', 0x564cd8f511a8aef1) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)={0x18, 0x69, 0x15, 0x8000000, 0xffffffff, "", [@generic="fdee1438fa"]}, 0x18}], 0x1}, 0x8000) ioctl$TIOCNXCL(r1, 0x540d) close(r0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r4, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0x4d27, 0x1, 0x1, 0xc3}, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001900010000000000fbdbcf251d01090050000f"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) 57.997896ms ago: executing program 2 (id=200): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x1, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f000002eff0)={0x0, 0x0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 2 (id=201): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000080)={0xffffffffffffffff, 0x30, [0x401, 0x1, 0x3, 0x7], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x0, 0x0, 0x1}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/cpu_byteorder', 0x428c2, 0xca) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. [ 22.126272][ T36] audit: type=1400 audit(1755400163.610:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.127423][ T281] cgroup: Unknown subsys name 'net' [ 22.148907][ T36] audit: type=1400 audit(1755400163.610:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.176203][ T36] audit: type=1400 audit(1755400163.640:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.176375][ T281] cgroup: Unknown subsys name 'devices' [ 22.314829][ T281] cgroup: Unknown subsys name 'hugetlb' [ 22.320420][ T281] cgroup: Unknown subsys name 'rlimit' [ 22.471650][ T36] audit: type=1400 audit(1755400163.950:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.494833][ T36] audit: type=1400 audit(1755400163.950:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.505857][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.519558][ T36] audit: type=1400 audit(1755400163.950:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.551165][ T36] audit: type=1400 audit(1755400164.020:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.562063][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.576535][ T36] audit: type=1400 audit(1755400164.020:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.610735][ T36] audit: type=1400 audit(1755400164.040:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.636250][ T36] audit: type=1400 audit(1755400164.040:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.366552][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.373749][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.380785][ T288] bridge_slave_0: entered allmulticast mode [ 23.387091][ T288] bridge_slave_0: entered promiscuous mode [ 23.394637][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.401659][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.408730][ T288] bridge_slave_1: entered allmulticast mode [ 23.415036][ T288] bridge_slave_1: entered promiscuous mode [ 23.451047][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.458125][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.465357][ T291] bridge_slave_0: entered allmulticast mode [ 23.471487][ T291] bridge_slave_0: entered promiscuous mode [ 23.482216][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.489268][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.496396][ T291] bridge_slave_1: entered allmulticast mode [ 23.502627][ T291] bridge_slave_1: entered promiscuous mode [ 23.546897][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.554004][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.561275][ T290] bridge_slave_0: entered allmulticast mode [ 23.567533][ T290] bridge_slave_0: entered promiscuous mode [ 23.582714][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.589752][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.596956][ T290] bridge_slave_1: entered allmulticast mode [ 23.603137][ T290] bridge_slave_1: entered promiscuous mode [ 23.654707][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.661740][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.668912][ T289] bridge_slave_0: entered allmulticast mode [ 23.675178][ T289] bridge_slave_0: entered promiscuous mode [ 23.681485][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.688541][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.695635][ T289] bridge_slave_1: entered allmulticast mode [ 23.701772][ T289] bridge_slave_1: entered promiscuous mode [ 23.764894][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.771933][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.779211][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.786238][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.832927][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.839973][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.847268][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.854392][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.869282][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.876334][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.883601][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.890610][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.907480][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.914744][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.921862][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.929500][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.936958][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.944384][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.958079][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.965118][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.977548][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.984608][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.030182][ T288] veth0_vlan: entered promiscuous mode [ 24.043714][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.050750][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.062532][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.069574][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.077367][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.084441][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.092173][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.099218][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.133262][ T288] veth1_macvtap: entered promiscuous mode [ 24.142692][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.149726][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.157358][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.164402][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.193119][ T291] veth0_vlan: entered promiscuous mode [ 24.208821][ T290] veth0_vlan: entered promiscuous mode [ 24.220251][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.223447][ T291] veth1_macvtap: entered promiscuous mode [ 24.244316][ T289] veth0_vlan: entered promiscuous mode [ 24.258618][ T290] veth1_macvtap: entered promiscuous mode [ 24.269132][ T289] veth1_macvtap: entered promiscuous mode [ 24.371628][ T340] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.390094][ T345] incfs: Options parsing error. -22 [ 24.396547][ T345] incfs: mount failed -22 [ 24.447171][ T353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7'. [ 24.564686][ T334] bridge_slave_1: left allmulticast mode [ 24.570503][ T334] bridge_slave_1: left promiscuous mode [ 24.576679][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.584537][ T334] bridge_slave_0: left allmulticast mode [ 24.590231][ T334] bridge_slave_0: left promiscuous mode [ 24.596001][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.724897][ T334] veth1_macvtap: left promiscuous mode [ 24.730532][ T334] veth0_vlan: left promiscuous mode [ 24.762481][ T329] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.874365][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.881424][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.891896][ T384] bridge_slave_0: entered allmulticast mode [ 24.898621][ T388] Zero length message leads to an empty skb [ 24.905315][ T384] bridge_slave_0: entered promiscuous mode [ 24.922307][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.930562][ T329] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 24.942420][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.949822][ T384] bridge_slave_1: entered allmulticast mode [ 24.955762][ T329] usb 4-1: config 0 has no interface number 0 [ 24.966425][ T384] bridge_slave_1: entered promiscuous mode [ 24.974939][ T329] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 24.991991][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.014727][ T329] usb 4-1: Product: syz [ 25.018921][ T329] usb 4-1: Manufacturer: syz [ 25.043803][ T329] usb 4-1: SerialNumber: syz [ 25.057657][ T329] usb 4-1: config 0 descriptor?? [ 25.115456][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.122541][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.129819][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.136879][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.163398][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.180985][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.182373][ T400] ======================================================= [ 25.182373][ T400] WARNING: The mand mount option has been deprecated and [ 25.182373][ T400] and is ignored by this kernel. Remove the mand [ 25.182373][ T400] option from the mount to silence this warning. [ 25.182373][ T400] ======================================================= [ 25.225108][ T400] binder: Unknown parameter '' [ 25.233321][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.240379][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.251200][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.258279][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.270385][ T362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.280738][ T362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.291010][ T329] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 25.299784][ T329] usb 4-1: No valid video chain found. [ 25.307335][ T329] usb 4-1: USB disconnect, device number 2 [ 25.326969][ T384] veth0_vlan: entered promiscuous mode [ 25.342351][ T384] veth1_macvtap: entered promiscuous mode [ 25.366115][ T412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 25.432789][ T421] capability: warning: `syz.4.15' uses deprecated v2 capabilities in a way that may be insecure [ 25.489509][ T423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 25.489542][ T423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:19 [ 25.516184][ T45] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 25.521790][ T425] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.668762][ T432] netlink: 60 bytes leftover after parsing attributes in process `syz.3.30'. [ 25.678901][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 25.680289][ T432] IPv4: Oversized IP packet from 172.20.20.170 [ 25.690420][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.696326][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 25.706430][ T45] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 25.712092][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 25.721425][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.730405][ T64] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.737354][ T45] usb 2-1: config 0 descriptor?? [ 25.748844][ T432] IPv4: Oversized IP packet from 172.20.20.170 [ 25.755198][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 25.761446][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 25.769476][ T432] IPv4: Oversized IP packet from 172.20.20.170 [ 25.775930][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 25.782121][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 25.789057][ T432] IPv4: Oversized IP packet from 172.20.20.170 [ 25.901684][ T437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'. [ 25.911673][ T64] usb 5-1: config 0 has an invalid interface number: 95 but max is 0 [ 25.919994][ T64] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.930120][ T64] usb 5-1: config 0 has no interface number 0 [ 25.936457][ T64] usb 5-1: config 0 interface 95 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 25.946320][ T64] usb 5-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 25.957739][ T64] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 25.966809][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.974839][ T64] usb 5-1: Product: syz [ 25.979016][ T64] usb 5-1: Manufacturer: syz [ 25.983630][ T64] usb 5-1: SerialNumber: syz [ 25.988864][ T64] usb 5-1: config 0 descriptor?? [ 26.170775][ T45] isku 0003:1E7D:319C.0001: item fetching failed at offset 3/7 [ 26.178571][ T45] isku 0003:1E7D:319C.0001: parse failed [ 26.184794][ T45] isku 0003:1E7D:319C.0001: probe with driver isku failed with error -22 [ 26.196892][ T421] rust_binder: Write failure EFAULT in pid:2 [ 26.360545][ T439] rust_binder: Error while translating object. [ 26.366662][ T439] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 26.372899][ T439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:25 [ 26.382363][ T403] bpf: Bad value for 'gid' [ 26.413769][ T446] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 26.413796][ T446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:32 [ 26.478686][ T45] usb 2-1: USB disconnect, device number 2 [ 26.708750][ T64] usb 5-1: MIDIStreaming interface descriptor not found [ 26.723517][ T64] usb 5-1: USB disconnect, device number 2 [ 26.752749][ T417] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 26.903896][ T417] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.914031][ T417] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 26.922911][ T417] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 26.933789][ T417] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 26.942831][ T417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.951585][ T457] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 26.959342][ T417] hub 3-1:1.0: bad descriptor, ignoring hub [ 26.965601][ T417] hub 3-1:1.0: probe with driver hub failed with error -5 [ 26.973068][ T417] cdc_wdm 3-1:1.0: skipping garbage [ 26.978275][ T417] cdc_wdm 3-1:1.0: skipping garbage [ 26.984273][ T417] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 26.990185][ T417] cdc_wdm 3-1:1.0: Unknown control protocol [ 27.032480][ T64] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 27.159589][ T458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.168202][ T458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.193645][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.203477][ T64] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 27.212573][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.221027][ T64] usb 5-1: config 0 descriptor?? [ 27.272542][ T417] usb 3-1: USB disconnect, device number 2 [ 27.632369][ T64] nintendo 0003:057E:200E.0002: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.4-1/input0 [ 27.702507][ T64] nintendo 0003:057E:200E.0002: Failed charging grip handshake [ 27.710158][ T64] nintendo 0003:057E:200E.0002: Failed to initialize controller; ret=-110 [ 27.719320][ T64] nintendo 0003:057E:200E.0002: probe - fail = -110 [ 27.725992][ T64] nintendo 0003:057E:200E.0002: probe with driver nintendo failed with error -110 [ 27.832013][ T469] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 27.839190][ T469] rust_binder: 9: no such ref 2 [ 27.844665][ T337] usb 5-1: USB disconnect, device number 3 [ 27.936411][ T486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 27.946890][ T486] rust_binder: Failed copying remainder into alloc: EFAULT [ 27.946912][ T486] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 27.947565][ T36] kauditd_printk_skb: 114 callbacks suppressed [ 27.947581][ T36] audit: type=1400 audit(1755400169.430:188): avc: denied { transfer } for pid=485 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 27.954239][ T486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 27.988184][ T486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:44 [ 28.023042][ T36] audit: type=1400 audit(1755400169.510:189): avc: denied { mount } for pid=492 comm="syz.2.48" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 28.053920][ T36] audit: type=1400 audit(1755400169.520:190): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 28.080421][ T497] rust_binder: Fixups oob 156 120 160 164 [ 28.080447][ T497] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 28.086252][ T497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.094590][ T497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:55 [ 28.113701][ T36] audit: type=1400 audit(1755400169.597:191): avc: denied { ioctl } for pid=498 comm="syz.2.51" path="socket:[4923]" dev="sockfs" ino=4923 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.148045][ T36] audit: type=1400 audit(1755400169.597:192): avc: denied { bind } for pid=498 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.167537][ T36] audit: type=1326 audit(1755400169.597:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=498 comm="syz.2.51" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4dd598ebe9 code=0x0 [ 28.217266][ T36] audit: type=1400 audit(1755400169.690:194): avc: denied { read } for pid=501 comm="syz.1.52" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.240507][ T36] audit: type=1400 audit(1755400169.690:195): avc: denied { open } for pid=501 comm="syz.1.52" path="net:[4026532301]" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.269068][ T36] audit: type=1400 audit(1755400169.690:196): avc: denied { setopt } for pid=501 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 28.288602][ T36] audit: type=1400 audit(1755400169.690:197): avc: denied { bind } for pid=501 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 28.312340][ T508] netlink: 'syz.1.54': attribute type 4 has an invalid length. [ 28.321008][ T506] netlink: 'syz.1.54': attribute type 4 has an invalid length. [ 28.328584][ T508] netlink: 'syz.1.54': attribute type 4 has an invalid length. [ 28.338884][ T506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.347634][ T506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.411813][ T512] fuse: Bad value for 'rootmode' [ 28.596993][ T329] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.757371][ T329] usb 2-1: Using ep0 maxpacket: 8 [ 28.762894][ T329] usb 2-1: too many configurations: 94, using maximum allowed: 8 [ 28.770692][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 28.779238][ T329] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 28.786837][ T329] usb 2-1: can't read configurations, error -61 [ 28.928480][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 28.933669][ T329] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.942745][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 28.951084][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.961265][ T45] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 28.970291][ T45] usb 5-1: config 1 has no interface number 1 [ 28.976390][ T45] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 28.988675][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.998069][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.006085][ T45] usb 5-1: Product: syz [ 29.010236][ T45] usb 5-1: Manufacturer: syz [ 29.015018][ T45] usb 5-1: SerialNumber: syz [ 29.099608][ T329] usb 2-1: Using ep0 maxpacket: 8 [ 29.105130][ T329] usb 2-1: too many configurations: 94, using maximum allowed: 8 [ 29.114006][ T329] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 29.121589][ T329] usb 2-1: can't read configurations, error -61 [ 29.127931][ T329] usb usb2-port1: attempt power cycle [ 29.240846][ T45] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 29.252291][ T45] usb 5-1: USB disconnect, device number 4 [ 29.263349][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.495267][ T329] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 29.517078][ T329] usb 2-1: Using ep0 maxpacket: 8 [ 29.522538][ T329] usb 2-1: too many configurations: 94, using maximum allowed: 8 [ 29.531599][ T329] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 29.544186][ T329] usb 2-1: can't read configurations, error -61 [ 29.545486][ T536] rust_binder: Failed copying remainder into alloc: EFAULT [ 29.550518][ T536] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 29.557821][ T536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.566675][ T536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:63 [ 29.687757][ T329] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 29.720265][ T329] usb 2-1: Using ep0 maxpacket: 8 [ 29.725682][ T329] usb 2-1: too many configurations: 94, using maximum allowed: 8 [ 29.735145][ T329] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 29.742759][ T329] usb 2-1: can't read configurations, error -61 [ 29.749232][ T329] usb usb2-port1: unable to enumerate USB device [ 29.837675][ T417] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.019283][ T417] usb 4-1: Using ep0 maxpacket: 32 [ 30.025818][ T417] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.037083][ T417] usb 4-1: config 0 interface 0 has no altsetting 0 [ 30.044558][ T417] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 30.051328][ T337] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 30.053896][ T417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.071469][ T417] usb 4-1: config 0 descriptor?? [ 30.234502][ T337] usb 5-1: not running at top speed; connect to a high speed hub [ 30.243131][ T337] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 30.254204][ T337] usb 5-1: config 1 interface 0 has no altsetting 0 [ 30.262428][ T337] usb 5-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 30.271528][ T337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.279538][ T337] usb 5-1: Product: 沑봣쪏방㟥䬯⧅켢ﺌ‣ㆦ [ 30.287144][ T337] usb 5-1: SerialNumber: ﬽끆⎬꤉뫡㢱Ȋ洠鲇⌀戄娯 [ 30.296180][ T543] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 30.508939][ T417] wacom 0003:056A:032C.0003: hidraw0: USB HID vb.27 Device [HID 056a:032c] on usb-dummy_hcd.3-1/input0 [ 30.724042][ T538] netlink: 'syz.3.64': attribute type 20 has an invalid length. [ 30.732222][ T538] /dev/rnullb0: Can't open blockdev [ 30.738786][ T329] usb 4-1: USB disconnect, device number 3 [ 30.754319][ T337] usb 5-1: USB disconnect, device number 5 [ 31.195568][ T337] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 31.297577][ T556] netlink: 'syz.3.69': attribute type 2 has an invalid length. [ 31.359947][ T337] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 31.374965][ T337] usb 5-1: config 0 interface 0 has no altsetting 0 [ 31.383183][ T337] usb 5-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.00 [ 31.392573][ T337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.409702][ T337] usb 5-1: config 0 descriptor?? [ 31.559142][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 31.582424][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.598449][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.616521][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.634180][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.652248][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.662983][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.676967][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.693564][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.711487][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.729018][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.741114][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.742443][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.758621][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.769485][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.777715][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 31.790794][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.792917][ T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 31.806987][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.807066][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.822451][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.822577][ T9] usb 4-1: config 0 descriptor?? [ 31.834674][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.835530][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 31.849207][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.850532][ T337] wacom 0003:056A:030E.0004: item fetching failed at offset 3/5 [ 31.864010][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.866126][ T337] wacom 0003:056A:030E.0004: parse failed [ 31.876896][ T337] wacom 0003:056A:030E.0004: probe with driver wacom failed with error -22 [ 31.876934][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.892711][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.899824][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.907016][ T570] overlay: filesystem on ./bus not supported as upperdir [ 31.914154][ T570] overlay: filesystem on ./bus not supported as upperdir [ 32.077081][ T329] usb 5-1: USB disconnect, device number 6 [ 32.190088][ T337] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 32.320211][ T580] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 32.320237][ T580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:73 [ 32.342641][ T585] rust_binder: Read failure Err(EFAULT) in pid:78 [ 32.351638][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.369521][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.379538][ T337] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.386481][ T588] rust_binder: Write failure EFAULT in pid:81 [ 32.392652][ T337] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.408240][ T337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.418401][ T337] usb 2-1: config 0 descriptor?? [ 32.431520][ T595] rust_binder: Write failure EFAULT in pid:88 [ 32.573381][ T603] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 32.579856][ T603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 32.638424][ T574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.662114][ T574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.683818][ T337] usbhid 2-1:0.0: can't add hid device: -71 [ 32.701146][ T337] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 32.711698][ T337] usb 2-1: USB disconnect, device number 7 [ 32.732611][ T623] rust_binder: Error while translating object. [ 32.732658][ T623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.739006][ T623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 32.768146][ T630] capability: warning: `syz.4.90' uses 32-bit capabilities (legacy support in use) [ 32.926349][ T640] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 32.970978][ T643] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 32.992303][ T329] rust_binder: 632: removing orphan mapping 0:112 [ 33.006592][ T329] rust_binder: 0: removing orphan mapping 112:1048 [ 33.149633][ T654] cgroup: fork rejected by pids controller in /syz4 [ 33.374054][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 33.374070][ T36] audit: type=1400 audit(1755400174.516:237): avc: denied { ioctl } for pid=722 comm="syz.4.98" path="socket:[6435]" dev="sockfs" ino=6435 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.617294][ T36] audit: type=1400 audit(1755400174.740:238): avc: denied { create } for pid=730 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 33.636564][ T417] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 33.805527][ T417] usb 5-1: Using ep0 maxpacket: 32 [ 33.806230][ T36] audit: type=1326 audit(1755400174.927:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.1.102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff626f8ebe9 code=0x0 [ 33.811916][ T417] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 33.833523][ T36] audit: type=1326 audit(1755400174.927:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.1.102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff626f8ebe9 code=0x0 [ 33.842120][ T417] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 33.872951][ T417] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 33.881923][ T417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 33.892886][ T417] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 33.902814][ T329] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.910329][ T417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 33.920149][ T417] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 33.930187][ T417] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 33.943165][ T417] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 33.952208][ T417] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.960978][ T417] usb 5-1: config 0 descriptor?? [ 33.966226][ T723] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 33.973895][ T417] usblp0: Disabling reads from problematic bidirectional printer [ 33.991191][ T36] audit: type=1400 audit(1755400175.095:241): avc: denied { read } for pid=742 comm="syz.1.103" name="/" dev="configfs" ino=2434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 33.992497][ T743] 9pnet_fd: Insufficient options for proto=fd [ 34.013278][ T36] audit: type=1400 audit(1755400175.095:242): avc: denied { open } for pid=742 comm="syz.1.103" path="/" dev="configfs" ino=2434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 34.040903][ T36] audit: type=1400 audit(1755400175.095:243): avc: denied { append } for pid=742 comm="syz.1.103" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.063960][ T36] audit: type=1400 audit(1755400175.095:244): avc: denied { mounton } for pid=742 comm="syz.1.103" path="/" dev="configfs" ino=2434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 34.067007][ T745] rust_binder: Write failure EFAULT in pid:78 [ 34.099924][ T36] audit: type=1400 audit(1755400175.189:245): avc: denied { bind } for pid=746 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.126190][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.138142][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.148074][ T329] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 34.157125][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.166133][ T329] usb 3-1: config 0 descriptor?? [ 34.201603][ T417] usblp 5-1:0.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 34.219198][ T417] usb 5-1: USB disconnect, device number 7 [ 34.229804][ T417] usblp0: removed [ 34.248353][ T36] audit: type=1400 audit(1755400175.329:246): avc: denied { mounton } for pid=753 comm="syz.4.107" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 34.378012][ T764] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 34.390939][ T764] fuse: Unknown parameter 'd' [ 34.517065][ T417] usb 4-1: USB disconnect, device number 4 [ 34.607272][ T329] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 34.671811][ T780] rust_binder: Write failure EINVAL in pid:111 [ 34.703370][ T329] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 34.754177][ T329] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 34.788888][ T329] usb 3-1: USB disconnect, device number 3 [ 34.816315][ T329] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 35.081085][ T776] x_tables: unsorted underflow at hook 4 [ 35.185151][ T794] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 35.185182][ T794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:97 [ 35.205860][ T329] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 35.257445][ T802] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.261080][ T804] can0: slcan on ptm0. [ 35.275670][ T802] mmap: syz.1.123 (802) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.387512][ T329] usb 3-1: Using ep0 maxpacket: 8 [ 35.399273][ T329] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.419528][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.432964][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.448485][ T329] usb 3-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 35.466984][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.483649][ T329] usb 3-1: config 0 descriptor?? [ 35.526537][ T9] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 35.623223][ T825] netlink: 188 bytes leftover after parsing attributes in process `syz.1.125'. [ 35.657013][ T828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:104 [ 35.711903][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.731366][ T9] usb 5-1: config 0 has no interfaces? [ 35.736903][ T9] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 35.746257][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.763477][ T9] usb 5-1: config 0 descriptor?? [ 35.884492][ T836] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.980917][ T329] rust_binder: 834: removing orphan mapping 0:24 [ 35.995652][ T329] rust_binder: 0: removing orphan mapping 24:1120 [ 36.004544][ T841] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.005165][ T841] rust_binder: Got transaction with invalid offset. [ 36.012040][ T404] usb 5-1: USB disconnect, device number 8 [ 36.018524][ T841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.038574][ T841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:116 [ 36.051075][ T804] can0 (unregistered): slcan off ptm0. [ 36.081888][ T853] input: syz0 as /devices/virtual/input/input7 [ 36.152883][ T329] usb 3-1: USB disconnect, device number 4 [ 36.251693][ T873] fuse: Bad value for 'fd' [ 36.392753][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 36.553135][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 36.559510][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 36.567869][ T9] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 36.576385][ T9] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 36.586484][ T9] usb 2-1: config 4 has no interface number 0 [ 36.594863][ T9] usb 2-1: string descriptor 0 read error: -22 [ 36.601134][ T9] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 36.610200][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.625201][ T886] netlink: 'syz.4.136': attribute type 27 has an invalid length. [ 36.928411][ T893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 36.943580][ T893] erspan0: default FDB implementation only supports local addresses [ 37.077444][ T9] usb 2-1: USB disconnect, device number 8 [ 37.184096][ T329] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.347003][ T329] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 37.356137][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.364182][ T329] usb 3-1: Product: syz [ 37.368531][ T329] usb 3-1: Manufacturer: syz [ 37.373174][ T329] usb 3-1: SerialNumber: syz [ 37.529647][ T907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42881 sclass=netlink_route_socket pid=907 comm=syz.4.143 [ 37.558359][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.719974][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 37.733748][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.742902][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 37.751088][ T9] usb 4-1: SerialNumber: syz [ 37.768710][ T910] rust_binder: Write failure EFAULT in pid:129 [ 37.779905][ T912] netlink: 57 bytes leftover after parsing attributes in process `syz.1.145'. [ 37.878092][ T921] rust_binder: 919 RLIMIT_NICE not set [ 37.980735][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 37.996344][ T9] usb 4-1: USB disconnect, device number 5 [ 38.552720][ T923] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 38.731758][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 38.731774][ T36] audit: type=1400 audit(1755400179.519:286): avc: denied { ioctl } for pid=925 comm="syz.1.149" path="socket:[7152]" dev="sockfs" ino=7152 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.731870][ T926] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 38.762309][ T926] rust_binder: Error in use_page_slow: EFAULT [ 38.772912][ T926] rust_binder: use_range failure EFAULT [ 38.779056][ T926] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 38.784721][ T926] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 38.792975][ T926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:134 [ 38.797083][ T936] /dev/rnullb0: Can't open blockdev [ 38.818104][ T36] audit: type=1400 audit(1755400179.603:287): avc: denied { write } for pid=935 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 38.849899][ T36] audit: type=1400 audit(1755400179.631:288): avc: denied { bind } for pid=937 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.868956][ T36] audit: type=1400 audit(1755400179.631:289): avc: denied { search } for pid=941 comm="syz.4.154" name="/" dev="configfs" ino=2434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 38.901811][ T36] audit: type=1400 audit(1755400179.687:290): avc: denied { setattr } for pid=943 comm="syz.4.155" name="NETLINK" dev="sockfs" ino=7193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.943234][ T36] audit: type=1400 audit(1755400179.724:291): avc: denied { remount } for pid=947 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 38.962932][ T36] audit: type=1400 audit(1755400179.724:292): avc: denied { mounton } for pid=947 comm="syz.1.157" path="/42/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 39.110261][ T36] audit: type=1400 audit(1755400179.883:293): avc: denied { listen } for pid=960 comm="syz.4.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.237288][ T404] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 39.272275][ T36] audit: type=1400 audit(1755400180.033:294): avc: denied { write } for pid=972 comm="syz.4.166" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.293893][ T36] audit: type=1400 audit(1755400180.033:295): avc: denied { remove_name } for pid=972 comm="syz.4.166" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.399139][ T404] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.407611][ T404] usb 2-1: config 4 has an invalid interface number: 109 but max is 0 [ 39.421723][ T404] usb 2-1: config 4 has no interface number 0 [ 39.427830][ T404] usb 2-1: config 4 interface 109 has no altsetting 0 [ 39.438804][ T404] usb 2-1: New USB device found, idVendor=0421, idProduct=042d, bcdDevice=da.49 [ 39.447949][ T404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.455966][ T404] usb 2-1: Product: syz [ 39.460183][ T404] usb 2-1: Manufacturer: syz [ 39.464792][ T404] usb 2-1: SerialNumber: syz [ 39.687485][ T9] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 39.710636][ T404] usb 2-1: bad CDC descriptors [ 39.716248][ T404] usb 2-1: USB disconnect, device number 9 [ 39.847890][ T9] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 39.857003][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.865680][ T9] usb 4-1: config 0 descriptor?? [ 39.925721][ T337] usb 3-1: USB disconnect, device number 5 [ 39.939134][ T985] binder: Unknown parameter 'fowner' [ 40.513775][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 40.526216][ T9] asix 4-1:0.0: probe with driver asix failed with error -32 [ 40.873429][ T329] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 41.034888][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.045846][ T329] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 41.054863][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.063408][ T329] usb 2-1: config 0 descriptor?? [ 41.180994][ T1023] syz.4.181(1023): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 41.397176][ T1032] rtc_cmos 00:00: Alarms can be up to one day in the future [ 41.498529][ T329] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 41.507997][ T329] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0008/input/input8 [ 41.571974][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 41.589940][ T329] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 41.603941][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 41.621365][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 41.640908][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 41.649104][ T45] rtc rtc0: __rtc_set_alarm: err=-22 [ 41.689926][ T1050] 9pnet_fd: Insufficient options for proto=fd [ 41.710609][ T1052] netlink: 5 bytes leftover after parsing attributes in process `syz.4.191'. [ 41.720743][ T1052] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.737287][ T1052] netlink: 5 bytes leftover after parsing attributes in process `syz.4.191'. [ 41.765450][ T1058] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 41.775181][ T1058] SELinux: failed to load policy [ 41.825942][ T1066] rust_binder: Write failure EINVAL in pid:147 [ 41.843474][ T1069] rust_binder: 149: no such ref 3 [ 41.867468][ T1073] tipc: Trying to set illegal importance in message [ 41.911933][ T1079] overlayfs: conflicting lowerdir path Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK [ 42.067037][ T1089] ------------[ cut here ]------------ [ 42.072601][ T1089] WARNING: CPU: 1 PID: 1089 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 42.082495][ T1089] Modules linked in: [ 42.086401][ T1089] CPU: 1 UID: 0 PID: 1089 Comm: syz.2.201 Not tainted 6.12.38-syzkaller-g3f3a5c5e782d #0 c9247809a66a5ebb3467d1c2e99b1dedbd707993 [ 42.099798][ T1089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.109908][ T1089] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 42.115851][ T1089] Code: 00 48 8b 5d a0 74 08 48 89 df e8 12 43 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 42.135488][ T1089] RSP: 0018:ffffc9000ba7fc88 EFLAGS: 00010202 [ 42.141553][ T1089] RAX: 1ffffd1ffff86422 RBX: ffffc9000cb628e8 RCX: ffffffff816dc249 [ 42.149560][ T1089] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc32110 [ 42.157579][ T1089] RBP: ffffc9000ba7fcf0 R08: ffffe8ffffc32117 R09: 1ffffd1ffff86422 [ 42.165562][ T1089] R10: dffffc0000000000 R11: fffff91ffff86423 R12: dffffc0000000000 [ 42.173562][ T1089] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc32110 [ 42.181663][ T1089] FS: 00007f4dd68616c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 42.190655][ T1089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.197267][ T1089] CR2: 00005555928da4a8 CR3: 0000000114b72000 CR4: 00000000003526b0 Stopping crond: [ 42.205301][ T1089] Call Trace: [ 42.209968][ T1089] [ 42.212962][ T1089] kvm_put_kvm+0x1100/0x12b0 [ 42.217585][ T1089] ? __cfi_kvm_vm_release+0x10/0x10 stopped /usr/sbi[ 42.222845][ T1089] kvm_vm_release+0x47/0x70 n/crond (pid 193[ 42.228750][ T1089] __fput+0x1fb/0xa00 ) [ 42.234151][ T1089] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 42.239960][ T1089] ____fput+0x20/0x30 [ 42.243996][ T1089] task_work_run+0x1e0/0x250 [ 42.248606][ T1089] ? __cfi_task_work_run+0x10/0x10 OK[ 42.253781][ T1089] ? __kasan_check_write+0x18/0x20 [ 42.259056][ T1089] resume_user_mode_work+0x36/0x50 [ 42.264247][ T1089] syscall_exit_to_user_mode+0x64/0xb0 [ 42.269821][ T1089] do_syscall_64+0x64/0xf0 [ 42.274261][ T1089] ? clear_bhb_loop+0x50/0xa0 [ 42.278996][ T1089] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.284916][ T1089] RIP: 0033:0x7f4dd598ebe9 [ 42.289396][ T1089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.309055][ T1089] RSP: 002b:00007f4dd6861038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 Stopping dhcpcd.[ 42.317540][ T1089] RAX: 0000000000000000 RBX: 00007f4dd5bb5fa0 RCX: 00007f4dd598ebe9 [ 42.326902][ T1089] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 .. [ 42.334912][ T1089] RBP: 00007f4dd5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 42.343234][ T1089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.351257][ T1089] R13: 00007f4dd5bb6038 R14: 00007f4dd5bb5fa0 R15: 00007ffe0c3bfaa8 [ 42.359250][ T1089] stopped /sbin/dh[ 42.362303][ T1089] ---[ end trace 0000000000000000 ]--- cpcd (pid 147)[ 42.369166][ T45] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 42.372523][ T9] usb 2-1: USB disconnect, device number 10 Stopping network: OK Stopping iptables: OK Stopping system message bus: [ 42.543754][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 42.551421][ T45] usb 5-1: too many configurations: 96, using maximum allowed: 8 [ 42.560175][ T45] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 42.567863][ T45] usb 5-1: can't read configurations, error -61 done [ 42.662596][ T9] usb 4-1: USB disconnect, device number 6 Stopping klogd: [ 42.712772][ T45] usb 5-1: new high-speed USB device number 10 using dummy_hcd OK Stopping acpid: [ 42.874577][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 42.882282][ T45] usb 5-1: too many configurations: 96, using maximum allowed: 8 [ 42.891002][ T45] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 42.898594][ T45] usb 5-1: can't read configurations, error -61 [ 42.904933][ T45] usb usb5-port1: attempt power cycle [ 43.268862][ T45] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 43.291992][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 43.299678][ T45] usb 5-1: too many configurations: 96, using maximum allowed: 8 [ 43.308426][ T45] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 43.316035][ T45] usb 5-1: can't read configurations, error -61 [ 43.461365][ T45] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 43.484585][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 43.492331][ T45] usb 5-1: too many configurations: 96, using maximum allowed: 8 [ 43.501252][ T45] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 43.508829][ T45] usb 5-1: can't read configurations, error -61 [ 43.515165][ T45] usb usb5-port1: unable to enumerate USB device OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK umount: can't remount debugfs read-only Connection to 10.128.0.8 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 44.297832][ T335] bridge_slave_1: left allmulticast mode [ 44.303495][ T335] bridge_slave_1: left promiscuous mode [ 44.309185][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.316915][ T335] bridge_slave_0: left allmulticast mode [ 44.322563][ T335] bridge_slave_0: left promiscuous mode [ 44.328200][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.447272][ T335] veth1_macvtap: left promiscuous mode [ 44.452786][ T335] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 46.197373][ T1132] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 46.204091][ T1132] ACPI: PM: Preparing to enter system sleep state S5 [ 46.210919][ T1132] kvm: exiting hardware virtualization [ 46.216389][ T1132] reboot: Power down serialport: VM disconnected.