last executing test programs: 2m35.261363829s ago: executing program 2 (id=247): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x1000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0x2, 0xd}) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xe800, 0x118000}) close_range(r0, 0xffffffffffffffff, 0x0) 2m35.20903214s ago: executing program 2 (id=249): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r1, 0x4758f000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, 0x0, 0x0, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) 2m35.20874756s ago: executing program 2 (id=250): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f00000020c0)={[{@subsystem='memory'}, {@subsystem='cpu'}]}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) preadv2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/220, 0xdc}], 0x1, 0xfffffffe, 0x6, 0x15) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2m35.20803198s ago: executing program 2 (id=251): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x4000, 0x100000001, 0xffffffffffffffff}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x20010, r0, 0xc6590000) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x57) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x3, 0x6, [0x4, 0x7, 0x92, 0x1, 0x4, 0x8], 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], &(0x7f0000000080)=""/6}, &(0x7f0000000280)=0x78) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x8008770b, &(0x7f0000000840)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00qs]\xa1A\x02e\x98\x19,0\x8f^G\x900\f\xfb\xb1Q\x8f\x0e$S\xd8\xa6\x8as\f\xb6\xd4_\x10\r\x97uaM\x96\x8f\xdf\xe7\x18y\x9fv\xa4\x96\xdep\x7f\x8a\xe3\x83\xb5i\x87i\x16Nu\xba\x99 \x9dI\x1eZ\x96\xae+\vE5\xc2P\x8a\x06\xef*r \xb5s\xdc\xdb\x8c@\x97\xa0\xe5cD\xfe9!V\xe3\xfd\xca\xbc\x1e\xfcs\xe0I\x1d\xf0\xe3\x02\xbfr.1EZ\xc1y\xb2\x94\xae\x90\xae\x1aj\x8cB\x1e\x98\xa6\xa5\xd4\xa7\xe9\x85\x12\x1e\xb4') 2m35.19998367s ago: executing program 2 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x9, 0x6, 0xf, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x7ff, 0x6, 0x5, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0x4, 0xa}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) pread64(r0, &(0x7f00000003c0)=""/164, 0xa4, 0x7f) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x80004000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$SIOCGIFMTU(r2, 0x8913, &(0x7f00000001c0)={'veth0\x00'}) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) clock_adjtime(0x4, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x768e2d3a, 0x5, 0x4e, 0x0, 0x5, 0x9, 0x1, 0xc153, 0x7, 0x7, 0x1, 0x7f, 0x4, 0x4, 0x3, 0x2dee, 0x9, 0x1, 0xbbc, 0x8, 0x5, 0xffffffffffffffff, 0x30b}) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f0000000480)=ANY=[@ANYBLOB="b6ed5ce1fd0d59adcc2581c8e912a3d0c405f7eb8093e3249dd3aa206a389cffbd92bc6d7743415ec452312c76fd90f0f6e3a2f5d89a5ea0cdc9d22dd418d6d5eced3f78e3f34b997829ceaf0fa8ae3c782ded38b93f841389b66893538fc7d4417c2214bc0c00f65fa00ce66efcc69c7f34c3d1142b02eb87b09c7082949b56e779e18313a11194e3b09176b78767369455b10000000000000000", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0x6, 0x6, 0x5, 0x7, "ea00000019000000e2260200", 0x2, 0x4}) mknodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8, 0x0) read(r3, &(0x7f00000003c0)=""/72, 0x48) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) read$FUSE(r4, &(0x7f0000001640)={0x2020}, 0x2020) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46"], 0x69) close(r6) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 2m35.015076753s ago: executing program 2 (id=259): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@directio}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@directio}], [], 0x6b}}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000140)={0x0, 0xc6b, 0xc43}) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000140)={0x0, 0xc6b, 0xc43}) 2m19.929652092s ago: executing program 32 (id=259): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@directio}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@directio}], [], 0x6b}}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000140)={0x0, 0xc6b, 0xc43}) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000140)={0x0, 0xc6b, 0xc43}) 2m16.413777076s ago: executing program 3 (id=577): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x4, 0x0) (async, rerun: 32) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1964874, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0]) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1, 0x0, 0xc08, 0x2}) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x7}) (async) lseek(r0, 0x10001, 0x0) 2m16.394590566s ago: executing program 3 (id=578): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = syz_clone(0x80, &(0x7f0000000140)="19b87bec437a41035188fa5de647270cb13b00538ec053622a479c", 0x1b, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000300)="05000000fdb501e534c22c0505000000000000002b24a3ab3be0721409007b10aa812d25023088039a91a699717c098128f56eda4bb2cef5fcf8ff980b2795e39f567dbabe1e00007800"/87) syz_open_procfs(r4, &(0x7f00000002c0)='attr/keycreate\x00') write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\xb79V\xd9\xfeO\x17\xa8\xd2\xe5\xd5V\x9f\xceF\x85\x1a\a\x9e\x0fz\xb6k\xa9\xad?\xe7O\xb1\xc67T\xca\xec\x15\xc6t\xd3\xa1\x1e\xa4s\a\x19\xac\v\bN;\x02\x9ab\x9ae\x1a/\xae\xc6\xe1\x86\xd34\xb1\xfc;\xdd\x85\x93\xd3\xb6\x99]\xb5\xc4\x1d\xe5\"\xc7\x9cwKl\xa2\x9a\x9cx\f\xa6f*d\xa0z\x9c\xc1\xb1\x18\x01\xf8\xc1)F\xbd`\xac[\x860\xff\xc7\x8c\x18^\x84\x18`\xab\x0e\xb0\xe7/\x8f\x95\x87\xd6\xdb\xa5]\x01y\x15p\x8e\\\x93\xc7v\x96:\xf0v\x91\xb1{\xc3\xa09\xc8OGPI\x8e\xae\xf2_Ge\x9c\xa7\xf4\x9c\x91\xda}\x00\xa2\'$\xc4\xf4\xb0\v=d\xa9z\'Qv\x01\x13\xa6\xe9\xeb\xf9\xcf\xdc\xe3\xc0\n=\x80Y\x119\xbf'}}]}}) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r0, 0x0, 0x80000000) truncate(&(0x7f0000000280)='./file1\x00', 0x7) 2m16.294657258s ago: executing program 3 (id=579): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$cont(0x9, r0, 0x1, 0x95) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000050) r5 = dup(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', r6, 0x4, 0x2, 0x2, 0x3, 0x4, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x7, 0x7f}}) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', './file0', [{0x20, 'mptcp_pm\x00'}, {0x20, ' \x01\x00'}, {}, {0x20, 'batadv_slave_1\x00'}, {0x20, '/&!%'}, {0x20, 'syztnl1\x00'}], 0xa, "6aba0fa40b0bc3f8dcce3eb9e90b00d843a1c7aad33d18a0d2716315c39d41ec12f37d7a7dfc9b01446337afa7e070ad068656958de5f97079ee93f412023be83df09ffa444715aed2b915ed6cbfd3854f4b989711152cf74ecce35f6adc10057dca5dfdd81a3dc76fd7b68324e9a86d63d55a682c493181ef3fffc54ccc0e490c40f492148d7802fd0521fcf0ebdee5e6447950c87070c752b586e16e83640a02a298cc419503c01e9ec805f3581d2421ea916505b51d5678f1ec1814b1b1f8628355ba3ac2ba67b55faf"}, 0x103) read$FUSE(r5, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000002440), r1) ioctl$TCSBRKP(r5, 0x5425, 0x4) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000002e40)=0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000002e80)={'\x00', 0x8, 0x9, 0xfc2, 0x3, 0x1, r9}) sendmsg$netlink(r5, &(0x7f0000002f40)={&(0x7f0000002480)=@proc={0x10, 0x0, 0x25dfdbff, 0x80}, 0xc, &(0x7f0000002dc0)=[{&(0x7f00000024c0)={0x180, 0x10, 0x4, 0x70bd26, 0x25dfdbfb, "", [@typed={0x4, 0xf1}, @typed={0x4, 0x65}, @nested={0x15c, 0x29, 0x0, 0x1, [@generic="62433275528ab348ac4a6f32e770482c5ab23ae745eae1b6307021cd121e79240567b07d5427d3764b21eb84845b9ccb6825f3a938455bdc9ad63204f00db0fa4a55f83ce5ce0eb50c6282c072f96f55a965fc6b3d7b1e576eabd87a965b46c5ef", @generic="6c77f882eb547df62bd6ca5a49409e2eadf94fec1de0a64fcb71ef293e04ecc500e95d45dd266608585dbfe83c09b089779717fd0cc9de0b7798cfeb2b7503d48b1bf9c8c660f098160f4376b02f6030493eecfe8edcc192d1a5b66d06681c1c28ad2c426e08894cc9d519381b72c1c5d7a57780ee", @generic="4ab4b28708328ead0346368d0c18efb7c2271784ccc18a58b7bda17ac0c1452566d5a70464eee3218fedef573a826e8702d3e12ad2c658f5139377c63c29c4ec2e82718d909161e1c8b698e83d8606aeb20c8ef212985cc3808f0f1167eb1c30cc99096e847d", @nested={0x4, 0xd7}, @typed={0x8, 0x85, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x4e, 0x0, 0x0, @pid=r0}, @typed={0x8, 0x5f, 0x0, 0x0, @ipv4=@remote}]}, @nested={0xc, 0xc2, 0x0, 0x1, [@typed={0x8, 0xa2, 0x0, 0x0, @fd=r2}]}, @generic]}, 0x180}, {&(0x7f0000002640)={0xbc, 0x36, 0x400, 0x70bd29, 0x25dfdbff, "", [@nested={0xa8, 0x19, 0x0, 0x1, [@generic="0df807ba903895d2d5c7fe0344a78375d349c4ba6811bdb349bb64d01f21f8ffb8acbc386193cfefdffbba862e9a6872a3a9b61cb1beca0c3d0d1b302e6f6aa968247b8b4505e136bcbf2f17a97e720fc68c160e1e719d3f18e66babd61066b7fccfc38b5d69443427e9293d4510ab742405c99f09b3d074a9989095c2b281462ddff52fb998bc0100767ca5866fdcf82885727e6842f9a307eecd3d80d6ef9b48cb23dd"]}, @typed={0x4, 0x5e}]}, 0xbc}, {&(0x7f0000002700)={0x14, 0x41, 0x300, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x4, 0x37}]}, 0x14}, {&(0x7f0000002740)={0x138, 0x2d, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x8, 0xbc, 0x0, 0x0, @fd=r1}, @nested={0x120, 0x140, 0x0, 0x1, [@nested={0x4, 0x61}, @nested={0x4, 0xc8}, @typed={0x8, 0x13b, 0x0, 0x0, @fd=r1}, @generic="e991ad21fe5f6aeb7186b107bfd89ba54e2a91336217be5dec9ab153cd01b1814b938ff7f2386d20b7495d0062374b1d4d6bca3e282c66390b5584f8a6ad0386fa94a77bde90ee65d3e008dd63fbfc679c502e9aeeb79b659379a99bdbcacb3cb06dadf3480fe4a31eda9ff8fd4833b130ff7afa78eb192f2759f743de3205f78ff2bf01b27c81a02190ad79a8b53d816efdb14c3b1bc0fee39a6a22c5111663ebde262ca4c533078119f2f9c5dc8d1b3e60ccee81cf75518483df975b95e8daed8b2b7503a7471ad7a46dcc7deaabb92a10be7b80a338b3842a56", @generic="2a4fe634fc816527c09d0c4a7917e3c50c40c4857b65b02ab70d50cf68a8b55c5a29e5032ced614cdc", @typed={0x8, 0x2d, 0x0, 0x0, @fd=r10}]}]}, 0x138}, {&(0x7f0000002880)={0x170, 0x1f, 0x1, 0x70bd26, 0x25dfdbfb, "", [@generic="68ce0b35d77b364797687ac02e60cb288ecbff75dd389dc0050f515218a3ef120b860eee6db2d423473ba4e06097ab8d569919b2e21a323922e82f85141d0311d2bae4d0efa4117caef1d9db3e70be2735b027afc00128f82626906ca6a22e27bbe9b0f6555429e8fe7eba89066b9034f37f7c456e5baffcd02074688720e81a79fddc163878a0e5675dab31440349b6571bdcde3fead81caf94e30908ecf95ae13dc1e7c046abfa52b346958cc55936db1629b76dce8427acc7f10a92dc22cd671f7c0e085f40a9770d00987aeeb68185e91f77b9a89ced500b5091c51ebeddb4c100478253b6eaa14d9c2795", @typed={0x7, 0xa8, 0x0, 0x0, @str='#! '}, @nested={0x65, 0x43, 0x0, 0x1, [@typed={0xc, 0x17, 0x0, 0x0, @u64=0x4}, @generic="72abbda96da612207921733ca389328bc15911f03f9560351741508470320fe1edf8ad62482dd9ea2811a41a8752f06c452fe84b69205e3e8522f91b0b4b870475d182eb744421ca57a38d51f08ecc062f6dd0a29e"]}]}, 0x170}, {&(0x7f0000002a00)={0x224, 0x41, 0x800, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x4, 0x6d}, @generic="dbdd91bc6b783d40415db1bd297bc9dfee0e23db06a9deed1e695a9ddcbc22b93d565c33028ca9c5b9ebd06e693e0bc7eb6b8fd8d5912efaec98f410d7906f1115947b61efb7c4f478", @nested={0xca, 0x11d, 0x0, 0x1, [@generic="6ecca4fcdebe1f5bf77f4902875630fbff27e47cf05c339db9ebc81f2631b1df3345a885910fb281df1d609c8b7d0b2ce4e4ef21eab32d35123447fa18399910ba4c95e935198e95a4c01d5cbf6f00ffaf1d749d03271f3210b84da7e8920d7aa1421f15d3f438d1ee", @generic="9e2f63a2b302c5a3314d140210214035dc2b12f69e1e594711c0b4a91bd3fa85feba3037cb205989ec105e8c65ff130f8ac0b6623b4a31d38a69e127542f49687ba0a040c1e69c935fce9e3ff16cf99bdfbab5929fcdace8ffe0e5e565"]}, @generic="0527987624d4ead2cf3c9fffabb10b2fd3ac1d2d400cb889e33ce7dd24e32fbe3defda2c319c3dc72eac4bef557f547d9f4ca7fd8009070babb4c9ac3fc17320de1db56130c138f5fb712137b7d10c7ddcc2f132765813299abc36f9d17e67db29ec33de23734791386bfe951a45286a5b383575b53fa891e1f7127cc94dcf233b5e57732adf412ad8e225e24bcd1d61de69142a0bc5601d857fca2f55a1ba7483ba7d1ed36e2bed53069d94a58b965fc5f726ad834d9ff426238a42b4717fb445825f", @generic="505614df33154b0a6fec3f18b81806eb353d38778e11b72a1113a7ce817a191ff4893f65da52428486ec284536b81f7fd313c00a481086ed"]}, 0x224}, {&(0x7f0000002c40)={0x178, 0x1f, 0x800, 0x70bd27, 0x25dfdbfd, "", [@generic="4a7e6c8b93106052d45cb4be6c4875ffcbfe44c93da7a57d0c7787288112ebcdbbdf8e05af3e3383d48ba3d8cf1ac81cfecb3b1ebbce9df518b4af7793ead39826a27cdc02e5c2513462a8a188a954f80924d9ccd2344ad801498092107b", @nested={0x85, 0x75, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x4, 0x62}, @generic="48e956865399a7c96303afe321accc71663a202396c343a9e74797367ad5065b6a845bee0b906f911749ad85c6e5fbd4fc90d4ba0b6e9c5d8d561c2e0b674ef0c536f949388cb4e9ed964d0d58c578a9da37f171e7289f2a0adaea6c93d624e14a7eecb1ffc5e7a0f3164c3e3e47917deb"]}, @typed={0x7d, 0x11d, 0x0, 0x0, @binary="9a4edf539994b03f16fcf187a604a51c390ce8b6c0b19bd8280c45e56e797123083bc77d6c898c7604902418e84e60e73a1bdecd4496425ff3a5a16d31b7b35a289e19a74544d0bce9bb6ea58d1b3fcc85b86891e8e4510a6810fb79844c39d61265f9d32cd64d315a8b71b5d36352b64fb80fb85547683314"}]}, 0x178}], 0x7, &(0x7f0000002f00)=[@cred={{0x1c, 0x1, 0x2, {r11, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0x0, r8}}}], 0x40, 0xd8c95647512d63a7}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002f80), r5) fchmodat(r5, &(0x7f0000002fc0)='./file0\x00', 0x20) recvmsg$can_bcm(r5, &(0x7f0000004340)={&(0x7f0000003000)=@can, 0x80, &(0x7f00000042c0)=[{&(0x7f0000003080)=""/141, 0x8d}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/30, 0x1e}, {&(0x7f0000004180)=""/91, 0x5b}, {&(0x7f0000004200)=""/155, 0x9b}], 0x5}, 0x2000) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f0000004380)) read$char_usb(r5, &(0x7f00000043c0)=""/64, 0x40) prlimit64(r11, 0x0, &(0x7f0000004400)={0x7f, 0x90ed}, &(0x7f0000004440)) syz_usb_connect$cdc_ecm(0x1, 0xa4, &(0x7f0000004480)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x1, 0x1, 0x8, 0xe0, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x7, 0x24, 0x6, 0x0, 0x0, "35b8"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x40, 0x1, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x4}, @mdlm_detail={0x36, 0x24, 0x13, 0x5, "3816710fb15cd8b7cfffdac7b8485a88e8983b05d15427ecd345e73a3575a9109c6bea0a5211483fea974df569d88fb9179f"}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x0, 0xe2}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x68}, @dmm={0x7, 0x24, 0x14, 0x7, 0x3}, @ncm={0x6, 0x24, 0x1a, 0x1, 0xbc2ca8a15b37f0d5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x240, 0x1, 0xfc, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0xf8, 0xe0}}}}}]}}]}}, &(0x7f0000004880)={0xa, &(0x7f0000004540)={0xa, 0x6, 0x110, 0x8, 0x1, 0x5, 0x40, 0x4}, 0xb1, &(0x7f0000004580)={0x5, 0xf, 0xb1, 0x3, [@generic={0xa2, 0x10, 0xa, "cf91a9352f6c486a3302aad3412c31adaf18803c9222b4cfa8314b458e76a595af8cfe2c81ed9806a9ff42ea9cdaa1b8b393b44bb1df6bb2590d0278afa5c8d111575f5e909ceeba770498804879d0b6d5d3629b1519477bcf2b35095e1393f9de89a6ccf40b3925e11055e3b20268a0aede93115ce02c770bf17abafef4002f6f3435a422dadeb90df0eb8eb208a050f0e7f0bf349e8f00d4b10fac704fe7"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x3, 0x6}]}, 0x6, [{0x4, &(0x7f0000004640)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000004680)=@lang_id={0x4, 0x3, 0x425}}, {0x8a, &(0x7f00000046c0)=@string={0x8a, 0x3, "a39cfdbe4c9a075ab1e261045a534fbbe0442f635fdecbfd821a1e18bc2c5f3898556daeac3b0f6f8d4fb23dba88aa0075cb10a941e84a51db28e06102d057d0a8a70fa84eb140fc6393d94f569f97df5f0c27e96e4d31e9a6eb6f7f8e24d4f03ab183d1ee8df25819a8260eee00702809bcb10ca390dcb631ccdf3f65ab41fa01540c6589f29ef2"}}, {0x4, &(0x7f0000004780)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f00000047c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x53, &(0x7f0000004800)=@string={0x53, 0x3, "75ddfb9b7fce6578ebd519408c116c83579c3ef1bc31288a2620dde62b4242c74bb5316fbb34b0481d90adef98eab4880dfee6adb178049d249646065c9e64657907c0e6cb87ece7ea88bd494ab242a40e"}}]}) io_setup(0xbbc0, &(0x7f0000004900)=0x0) io_cancel(r13, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0xd, 0x9, r10, &(0x7f0000004940)="4deb7a3f501be458344f290876b27af6c2e7ae3baba5cc0012b23370b36a8f84fed9fe55135aab2b5b38d5c7140b377587bf419af930a1aad25101425fb6a90b27821dd07d481d6d42b4546b20ddf015c58f4703e413d800d87a321b3c9a5d414d571a881f175a90c1aaced6fc45929197ab495c2be18d5d372da28335211c215fce02b70132e49b6b72aac92e332562c78306e3fa7bde6a7d209b9f62a22a93269e3db38699655e453d4d67be14282ec74fd66f1b3b4c6a5cfce4cf68b615bec6a85d453c8397f073f4f0560f6114a4d599e504cec470037e8792d13c8e3dcad6d23d5648f82424", 0xe8, 0x1, 0x0, 0x3, r5}, &(0x7f0000004a80)) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000005580)={&(0x7f0000004ac0), 0xc, &(0x7f0000005540)={&(0x7f0000004b00)={0xa08, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x6b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/&!%'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#! '}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xab70346}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff3f}]}]}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x12}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '#&/@(#/}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x93\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x180000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',%\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/&!%'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*3@\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '[-,[#{{:]}%\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xe6, 0x5, "601e68a902872f3f13bc8df0d28a1639d48597954a8fd87a3368e25171e20f824b6aef3d55531109970bf42bee6c86abb70eadb0e37303311cf7470a85cde6265c24f17c84a865f8df82672975602de74826eb7f24bfa6783f9f0280afe040ff4fda22a67d221864eb5fe6f568fa91ec65756ca8bda7a5739a6a6c60469b1b2e1693371871796a8bed49849016583fabf4202c9a989ec911dd12793fc92d3df229a952ce8595cc34ddac37a94c237f473133dbc95850493ca39c37833b2087cd40c4c33c7efb9ae5a8b9e4bac9ee4f80452f65f4844e761cc6a20b7b06f38d4c2e0e"}, @ETHTOOL_A_BITSET_VALUE={0x84, 0x4, "253b478400aa73cec6c33d465ba67cab6567382e1262c2a05fc527cbaa47f1ad650868ef75ba8397c4c8f730cec4703560b1f5a88a894a369d63a680da7efe5cc8b1fbc1168b70dba4efcf6dd3d8da0251529c6b21f4c4c153d55a368a77324b0b742e9abcdad987730dc0c77b6b32f4a3ac26f060e69fc33742105ed692d432"}, @ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "058e8f65eda31aaa1d70d3360d89886f7867e93c9e9c9730a800c735e785c1a867bba225f200be95888efc70e552720bd25cb17c0e0456e57b0b5920f10435f1683678f665eb394663b19ea1d6376a20ad476356fba2b019b2d8ba36a7a63da8ae55a211566ad1ff245cc486a112b1dd76bd228ed522601d536021ce0aa51cb88dfd9e834681b8f5f0c7ccb3897b203085a253aedab394ebf39db0fa0d9c26621aece02b54ba8c302da88813b7d71e66013d39dfa52ffd71314ef18c929d5a7793c71ab60b10c7f6e3f77aaefbf2f423dbf153e7c3bbc25e4916becf3eb514"}, @ETHTOOL_A_BITSET_VALUE={0xbe, 0x4, "1a9a343b3c6ea818a79861bc39a6dcb7c24eabab45b0319df97a771f7449ced75aedae0c089b08288fbcef6150f97fa242f72cb4b47bc861fcf50e1a2f7596ec820f9b62c4f70e406d52a8cec3df94a277a9248e6810649a5bb2a0f21a839dfc32c3fd5dbbaa5ca0a0e575f0b8119b9ce20d51ab4e1185963f31fc0d13bcd0ffb949558d4c422697ed4258d6c5e8da2ac7e33c8b11a54916b76af0886ade4f286dc0292f30729b0dd4d259abb6a7f151cc16842acd74045cd59f"}, @ETHTOOL_A_BITSET_BITS={0x16c, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@\\($\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa5}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\#\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfc4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#+\x7f\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&\'!.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x96}]}]}]}, @ETHTOOL_A_WOL_SOPASS={0x22, 0x3, "ee0483afd465e9edd446cd4898f9b8f094bfea66ab357e551551cd415d05"}, @ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_WOL_MODES={0x29c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '[-,*%%#]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#! '}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#! '}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xb9, 0x5, "b026275398d2af1c24e5efde1367e4d298e51e4f617b3885244cf28dd7c22caddf305d568668752b0de969a999176f3edab4951f1e9e9d47e6c6d48aa5596057f9721f3be87cc6ec365d081348e755796a0bbefe37dea958b3d8be18b9ee740cbee02932a63d9469aa355f251ee912411728a18ee0b563d3b5e5b0ab358aa81b728570bd3611a0fd017c159d3c4e665c26391727f9b1ff18a4740dd42f8422b3bd647928411cc788802c5e40e56eb4befc7e28bd21"}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-@\'#)-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#! '}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[}(&-\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/&!%'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '/-(^[4\xf9:!,,&+\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x2e, 0x5, "f63e6271eb014e1e1cc700f68deec264934a3bac1a7f50a833554371c3555a3e7bbb11c48f209b7f47cc"}, @ETHTOOL_A_BITSET_MASK={0x20, 0x5, "b469822f97371aa99c6562fc8024130cb4253b7f6425e43be3c6c9c9"}]}, @ETHTOOL_A_WOL_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xa08}, 0x1, 0x0, 0x0, 0x80}, 0x4044811) syz_genetlink_get_family_id$nl80211(&(0x7f00000055c0), r3) bind$unix(r1, &(0x7f0000005600)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 2m13.249015874s ago: executing program 3 (id=641): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) (async) r3 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) (async, rerun: 64) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000040)=""/81, &(0x7f0000000140)=0x51) (rerun: 64) statx(r1, &(0x7f0000001200)='./file0\x00', 0x4000, 0x8, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) unshare(0xa000600) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2m13.228868474s ago: executing program 3 (id=642): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0xc008aec1, &(0x7f0000000080)=@x86={0x5, 0x1, 0x2, 0x0, 0x40, 0x6, 0xfb, 0x89, 0x18, 0xd, 0x7, 0x4, 0x0, 0x1000, 0x1000, 0x2, 0xc, 0x7, 0x19, '\x00', 0x3, 0x8000000000000001}) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)={[{0x56, 'cpu'}, {0x2d, 'cpu'}, {0x2b, 'net_prio'}, {0x2b, 'net_prio'}]}, 0x1e) (async) timer_create(0x9, 0x0, &(0x7f0000002c40)) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m12.951071899s ago: executing program 3 (id=648): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365e1d569643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r5, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r3, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='0\x00'/16], 0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x8000}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'ip6gretap0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e03d3ff008c71ef2885634a8270e71111"], 0xffdd) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x109122, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f9, &(0x7f0000000a40)={'ip6gre0\x00', 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 2m12.949091179s ago: executing program 33 (id=648): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365e1d569643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r5, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r3, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='0\x00'/16], 0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x8000}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'ip6gretap0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e03d3ff008c71ef2885634a8270e71111"], 0xffdd) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x109122, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f9, &(0x7f0000000a40)={'ip6gre0\x00', 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 50.456324353s ago: executing program 1 (id=1745): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x141342, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x2b, 0x0, 0x101}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') unshare(0x22020600) lseek(r4, 0x10001, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x21, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x88}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) sched_setscheduler(r6, 0x1, &(0x7f0000000040)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) 49.558939726s ago: executing program 1 (id=1758): gettid() (async) r0 = gettid() r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz1\x00', {}, 0x0, [], [0x80000000]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, 0x0, 0x0) (async) write$uinput_user_dev(r1, 0x0, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="fbfbc40f968bef84134faa38adb6323e74df8fa271ae645de63a2a", 0x1b}], 0x1) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="fbfbc40f968bef84134faa38adb6323e74df8fa271ae645de63a2a", 0x1b}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x2140) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r5, &(0x7f0000000040)=""/27, 0x1b) getdents(r5, &(0x7f0000001f80)=""/4096, 0x1000) (async) getdents(r5, &(0x7f0000001f80)=""/4096, 0x1000) ppoll(&(0x7f0000000180)=[{r3, 0x6000}, {r4, 0xc180}, {r1, 0x1061}, {r1, 0x6010}, {r1, 0x20}, {r1, 0x1011}, {r5, 0x4000}], 0x7, &(0x7f0000000240), &(0x7f00000002c0)={[0x7]}, 0x8) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, 0x0, &(0x7f0000000200)) read(r6, &(0x7f0000000080)=""/93, 0xffffff6c) (async) read(r6, &(0x7f0000000080)=""/93, 0xffffff6c) 49.443133098s ago: executing program 1 (id=1759): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40854) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001d0001160000f356fc1de90007"], 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace(0x4206, r0) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/72, 0x48) waitid(0x2, r0, 0x0, 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0xa18404, 0x0) chdir(0x0) 49.421891858s ago: executing program 1 (id=1760): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x4a301, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x29, 0x1, 0x800, 0xbe2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r3, &(0x7f0000003980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003b40)=""/154, 0x9a}, 0xc}], 0x1, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) fsopen(&(0x7f0000000000)='befs\x00', 0x1) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)='e', 0x1}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r4, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472796c6f636b2069be"], 0xf) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000000000000000000ff929c6100000000000087010000000000000200000000000000"]) 49.207075462s ago: executing program 1 (id=1761): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000fea000/0x14000)=nil, 0x14000, 0x0, 0x40010, r0, 0xa6ae6000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x400000b5, 0x0, 0x9}]}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) 49.038877114s ago: executing program 1 (id=1762): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200800c, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x56075680c479704b) 49.002884495s ago: executing program 34 (id=1762): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200800c, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x56075680c479704b) 36.267078258s ago: executing program 6 (id=1896): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000500)=@canfd={{0x2, 0x1}, 0x14, 0x1, 0x0, 0x0, "95ad093889bf8d0686b18b798a5a72795b880f7c382b1a93a17563c749642c242cfbda68dffabe55b43d0293e1a95833cab108f8bcc92eeffdbeb3eb8f4524a7"}, 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x44) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r5, 0x147a5000) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x6) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) 36.230459639s ago: executing program 6 (id=1897): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3dc) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000ec8102"]) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="00b541cff363b9f649bb729f1500"]) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 36.16344366s ago: executing program 6 (id=1898): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0xb5bc40808908ed1) (async) shutdown(r0, 0xb5bc40808908ed1) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) arch_prctl$ARCH_GET_CPUID(0x1011) (async) arch_prctl$ARCH_GET_CPUID(0x1011) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6f3d74a8a56ae442d1fab990152a76d7a0baa90d886e82b0fd2da805142b6e02199dbc48a64795b2998d2b83bd194fd492f11d9e658428ac1e6030fb2df755340ede8d32e6430b8ddd852a2ebd6f", @ANYRESHEX=r1, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000280)='./file1\x00', 0x3e1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=""/58, 0x3a) (async) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=""/58, 0x3a) read$FUSE(r3, &(0x7f0000000f00)={0x2020}, 0x2020) 36.090333541s ago: executing program 6 (id=1899): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) syz_io_uring_setup(0x6042, 0xfffffffffffffffe, 0x0, 0x0) setresuid(r0, r0, 0x0) setfsuid(0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r2, &(0x7f0000000100)=@abs={0x27}, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000), 0x4) 36.090125061s ago: executing program 6 (id=1900): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0xb0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(r3, &(0x7f0000000100)='./file0\x00', 0x2, 0xfdf8) chdir(&(0x7f00000000c0)='./file0\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@ignoreqv}]}}) getresuid(&(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000440)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 35.951062763s ago: executing program 6 (id=1903): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x26e1, 0x900) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000440)={'veth1_macvtap\x00', 0x4000}) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) close_range(r0, 0xffffffffffffffff, 0x0) 20.909455942s ago: executing program 35 (id=1903): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x26e1, 0x900) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000440)={'veth1_macvtap\x00', 0x4000}) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) close_range(r0, 0xffffffffffffffff, 0x0) 12.124056116s ago: executing program 0 (id=2165): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240480, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x2, 0x0, 0xb152, 0x1, 0x954b, 0x0, 0x5}}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 12.123030286s ago: executing program 4 (id=2166): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@clear_death={0x400c6313, 0x1}], 0xfffffe0b, 0x0, 0x0}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x2008b22, 0x0, 0x5, 0x15, 0x1c, "fee8a2ab78fc979fd1e0fb950720b7fb810000000000b26b000000000000000000000000002300000000000000000000000000000000000000000800", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b520a1a93c060000000000027a8f3d45cdd4992861ac000000000000000000000000000000000400", "f422741b13103e52f40000ed06000000000200989d8d4200", [0x0, 0x2000000000001]}}) rt_sigqueueinfo(0x0, 0x39, &(0x7f0000000340)={0x2b, 0xfffffffd, 0x400}) wait4(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x41) 12.122657726s ago: executing program 5 (id=2167): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) syz_clone(0x800400, &(0x7f0000000300)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000001300)="eda92bf6d45fd3410e125c5dd05a329cdbf496683ee1286de1dc9a553905f963b710589e867757b5387eb1c65cbaed54bee53d739a942e5a5d14ebda5f2d136a6fffde6ea9764e0da23917dc80ba918fd77bdc500265a6d25b9b62622bcdc0c4f66593a8b18bf63bdaad0c30c9c7e413f89dbd4e826246f53fd2305d45eca657265c831fe607429bfd9aa7502a3a280f22b50b560e1ae8773771d14c8fbdd26e37708ce9c86fa5ee43a70cb5d5a70ed92921ac8336e5e0fc0914538af15dab62860c69f80ced040a6c6474f0ae9f56945dc2cdba7d32293638734aeae42138677f07848ad9") mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10.655084618s ago: executing program 0 (id=2168): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000500)=[@acquire_done={0x40106309, 0x5}], 0x10f, 0x0, &(0x7f0000000140)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb1744113697ca8c48f4489a222612051f612948246a00435a9c66011429504326cb2380c168c554de48751e51fa40dc93715a99e42a418bb1f397cd34e5c3604a8cf5a974673081ee4cb8cae939b605fbab867f463204c3d2e7ad39db2904f870b5383dad3f3441ee7b7001c47465f8f17272f849dc9aa0cd2e9f29e15b4c971ec647b841a8001e51159ec2e1be587dbcd5d91ee5ee263e83cd7505e763320382a3e5aebf635305e790f2a46cc052ca6c8f92346acfd9def5464c3f2ac7758a08d94ce1e115"}) 10.654251258s ago: executing program 4 (id=2169): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) unshare(0x62040200) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/connector\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet(0x2, 0x200000003, 0x84) getsockopt$inet_buf(r1, 0x0, 0x50, 0x0, &(0x7f00000000c0)=0x58) syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 10.653918578s ago: executing program 5 (id=2170): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x121f00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) fstat(r4, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x8}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000000)) (async) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='totmaps\x00') (async) r9 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000040)={0x100008, 0x7c, 0x40000, {r9}}, 0x20) (async) unshare(0x22020600) 7.553300805s ago: executing program 0 (id=2171): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4000}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)=0x6}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x99b33000) 7.551559255s ago: executing program 4 (id=2172): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000200)=0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.549903425s ago: executing program 5 (id=2173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) futex(&(0x7f0000000080)=0x2, 0x0, 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xf5e8d0b131c6a560) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1541, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.774976062s ago: executing program 0 (id=2174): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x519100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="94020000", @ANYRES16=r2, @ANYBLOB="20002abd7000fcdbdf254f00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x8001}, 0x40001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(0x3) sendmmsg$unix(r7, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="140000"], 0x18, 0x40000}}], 0x1, 0x4004080) r8 = syz_usb_connect$cdc_ecm(0x2, 0x7c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003020000302505a1a440000102030109026a0001010610490904000103020600d7052406000005240000000d240f01ff030000050006001507240a08060465042402010e240709000008000900000107000724140002010006245406e9af0905810300040c070a0905820000044004020905030240007d0046"], &(0x7f0000000880)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x351, 0x5, 0x0, 0x1, 0x10, 0x53}, 0x121, &(0x7f0000000540)={0x5, 0xf, 0x121, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xa, "1a1923891e2b499ade83eecf9fc04f00"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x5, 0x15, 0x1fef, 0x69}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "bceed2a756c7977a3a943c15ca2906cf"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "6f52c369da2142786e3cc8a71ee21b61"}, @generic={0xcb, 0x10, 0x4, "32a266d6243e4597512f599378aa6552871dde21ec088d803f75ec5e815a845264371fb99dd5add1ad23a6e31c74ed0d430fbf89651ca61719053f98ab53c160af0ab8cf1aca48396bcbc1b7d9b2896373a6786d7bf07e928dfe01982295257dd754e2682991cd79153f120e59aa94cef699880a2cca594763a536a739081d051ced017450393615dd53016a348645f50c03749b837e9f91c1467c62f4dff0983bf4316f515e661b9af995ab5bd61674ac0d28c7fb778223db9e6e10be5343c3ca4142971d14caad"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x9, 0x4a}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41e}}, {0xfd, &(0x7f0000000680)=@string={0xfd, 0x3, "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"}}, {0x6c, &(0x7f0000000f00)=ANY=[@ANYBLOB="6c032b5fbb2fe4694b9eaa96e56582ea9a015268f430a033359988cb74f3b7d4184d7455b12d00016704a53a4e5c0d638ea629e270729a99439e8d1b08bb463ddf84791ff53c25d13506cfd5fc924d5a42b2e7838516f709ad7d08c9d641f5109919a70774acd87c069558eccfea49dee41e4d64e8bfe303e255b454e32af8fec3279ca2e029692cc61cf030e492360ed396a8fde87eb3565a7d445506bc2664eb273d0264d5d37b4fcc226e0811b2761a81d9c458db873a499930f92f9b661829e3fb1457987d5bf69862bb614030085feca0a999053d0ca43823ffaf44b2e5c2c68bfa0564ed2f25b153817b115694f0c65e089d40849447fb62575d06f8f85bce352918b0d3b2a7ffe7df3d7340ba3512df43105ceaa9c2f49cd454c59d69110fa77abe6f0e5b343509e65eaaaafe4010125c7e22b76a54ad05cfcd054c141a69c42735b0061a11f9dbd0689ad905a0cc8ecb71f36a109fac311842d49b995fc00636b3f7b306ac3388b68bf9c57246bfb2cac92e7071fe9eecf64bed26e99f2a78d0c01937ad528357b9d6427bcc721219fe666680cbadf70869fbbbf62cccbf30b6731845b51d962a9de2c82ab0efc62f59ce8631ebe4407dcf015c"]}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x402}}]}) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x14d2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000b80)=""/76, 0x4c}, {&(0x7f0000000940)=""/231, 0xe7}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000a40)={0x14, &(0x7f0000000900)={0x40, 0x24, 0xf7, {0xf7, 0xe, "ebf76189f8d518187c4e998f9edcfecf029b9edba3fd49e58b486fdea0b4a2116a1719c0d93cf9685073100f29d21a48ef2bfee007df29d0b049c53da170a8f80d751a29e86a8188e0834f581cb725591f9987767585040899c04db03a7ce4f671990b8cd39502c429bf6181d402685b2f59a9fc4262f7f6bad969491424e7c61a3f59261449c25743047c72dc1d24c459e4da9ec854b6e050b69b4cfea08b7649aa4695f33cee2f573c2912c3c1ec53452b27107ce67a222e3cbd3d1df9d9131d8225a8c1d0039ea010f9fe9cb71de364d242fa3dcd09c58f805e8a45355dc2f2b9a3c61b0729f9d847af5a40623d4a6fb1b6a14e"}}, &(0x7f0000000a00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b40)={0x1c, &(0x7f0000000a80)={0x0, 0xd, 0x5, "3c5a3026e6"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x4}}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') preadv(r10, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) accept$inet6(r10, 0x0, &(0x7f00000002c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x44000, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0) 5.770796952s ago: executing program 4 (id=2175): mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3], 0x378}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, &(0x7f0000000080)) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r7, &(0x7f00000027c0)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233beaa311ecc5fe3fa158d", 0xa1}, {&(0x7f0000000cc0)="e35f7e5e5ac5e9f0cd5260605ba7cda81ba1559f17393edeb50e129851c8070000000000000005d4b034d0ce1f6e0be5b65e1ea3aab64fb19483ed222b9d51007de194d43163a764136ee239c65b382cbf2c46ced59f283332621e64913a530016bc320cb091f6fc2c8b8af6884caccb5a8cef9382455f4b1540ad90b9308269b06fe596f2f4935802420035d8efc47278940beabec4d40fa02b2a7b3f179ac1d1c332424093c93924b0fb97f23a2ce3a5ffd46a4ca58d205e8263de6c8f35ae0bdf26e7665d4521dc583997930691d414e950900194775678184d57e2a7bfbbb812ed678dee3f02a1c54cfd4c2faee9cd398d28b9f4f5fb8eb0290290399155c805fc6c3f6329e625d718b0215af67c4482ab8af756b973664ab0a372ecea980cf89a63de97a4f0721aab97a9", 0x12d}, {&(0x7f0000001040)="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", 0x113}, {&(0x7f00000007c0)="ae01c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06bb2c2bd781286e3af37ba4d1bac9280fe71822e0900ef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750b72373cfc7c03b20d68bac0e03f2957d4cebb8fbef6e200989cdb3c826109a322a771d15a939ef2b800089a8694e29cbdf81792bb8117526046ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f", 0xa7}, {&(0x7f0000000580)="6b9cacb7f6804c331a3aa9379734ec2aedb597c32af634ddb581e3cef4c3058812b5118b70a11b4169426d7df4887c10782a5cfc7f8ea9995dea4ac79993469d55895298a177c1e96fbc02b422b2f658450f124c1f7fbb0ffc995cac4fb8186835e2811d77f90cd9a4d933cb708bc5a346e7fc85379cca848191ce387c3aba4c12d2c7a110b4ce3114b3bd8d1b7b116a803bd8ce2405f7c43700329ad680dfa721b65823c09cca147a24f365e0cbc678092ae44a632b5c8da7f3e8b31ceaf1b5577b783908da7734f30d7ade6113b3adfebb2b03ed05", 0xd6}, {&(0x7f0000001180)="c545b8e6891930d00e0c9f9a34b60edab22431d599675d86f2f876ea962ace703f8afaf9c4262d97ed63349f484d868856c1bc9cca3150f7e96d42e36ab839caeb28614673b668f1d4bfbc2ffdc9bbb7faa421ca301c10368c46010ec37a088c3414908889082d9fdffe5f74be78e4ab3d545c22d3148d9b024b52ac9280db8ea86894997c083e31229fa2365a8bceb69178468b0b7741df61069d66365ec555624cf395e1359669aec4eb18c84c59149442a7315383dd26efb1c7e3ad05", 0xbe}], 0x6}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)="65582f9359a0131171dfb403e1249c431ad1fe8b66afd6ef0c978154f4a27eb98cb25896eeff99e775a758a7a4ce88468b651e65c9e3cc83087a7dcdd49f36ab642104112fe047a567b071020000002aab74fc8c960ad78df3473fa60d537ecf5a373c13a0c8a6b5686cee856ff661c9399efe5bfe82d20be58ac1339835874e9dcb22e56e677e7218b4b0b55703e820c71d4c0648e4c80fc2c904e5b6da2968d903e46a4b57efa90aba3e496bc3857a2bbb53d14afacc02fcc10eb69cc46440d0095381cb018d", 0xc7}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="010b6b4c033efd07d3dcfeb5a252cb3544dec64f834e8efa2653b036d0749213be84b8da4e7b04c038742e9dbafdcc01f8108fc26cf6fdca84f4eeed3cda0b6f8dcd2fc2d0c63d9065057f82db0f50f8a046228b2203f4daf13c583df301a0c064fc015e09eb73e547eb6a3f2776ef57b7ca6da90e24b32b5e23fae1ccd236ade2a53af5a8", 0x85}, {&(0x7f00000001c0)="9c5df74de6a27d213c93018a89858cb88a793befc5692a71c3ae16ae3d", 0x1d}, {&(0x7f0000000a00)="cbd7351debcc1c04ee42912465b1a9a1bd8cb4e1b0b12540cb18a7b7d0041b02633ab5378111f3baad066fe29a8ba1d16c28dde8f27fea4bf8c118adc7351c0d36e5c6e7b2aaf5e65d5887baa79a0d1507dd83398f4b21f5324eda156d3f49f9b566c81ffc0430e68f506b9be642c0fade12b59f6776f1eeb96313990249d56245138e8654d383e69f365277bfb1844bc86963d87afb035b1c86be89c1695619f2c97bae1def4d9b21029a4d24117a557ea218aced1093651407afd44cc2adfdd88d8489bf4363a00287c60800bbde8f2645c0782b48c3ad6d7c59bf79", 0xdd}], 0x3}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000880)="08880357eb8cced53b629cce1db4f07dd76582653c4533a993761297fe5d9108269918f6e0a360b27cddabbab9b73a916d3b1ecf876f4636598f9cc34d2e640d94a83d9a44cef674ae38a59464ca8d2009b53e0904e88d481cbc6c645a542575fbb1e1106d01dcabef2f91c3b655c131b1d95715c950019d56a9b7bf183b0142e514271b22bdb03c2b37b8874cbeae", 0x8f}, {&(0x7f0000000f00)="6d8c60bd4beedca70305d780d1bf73d21d31388291e69b885a79872c2a884733d7f440ae29e84006a1b9ef6da3e87e7898a2ba5db78f59a489e57417240f36c6f404a0122835e04b1cf860e71dbf30f0a7ff3b56745a7cf73e02e8e00f18298138f658773121c608504480672d5d75795366427c86002f0d904f387cf81e7f5623255a85d9f3e6b5b71b703561dd8e6acb976dec1a806b4174ea2583e7504b8a391a7da7ab616e5a6dd200792f66d930e98c4ce02ebfc8449bf6d5a15ce1a15ec69aa548441b801750da010691a3abcfab62b28b770f7fc37d71b86f781dcc8d9682121692477162fdddbe204b0cf8c99559b2f185dd0d", 0xf7}, {&(0x7f0000001240)="4259fd73d39db3bb1ceee6e8c5223e8bc78625e6d0ab6954901f557ba2b6881b3b8713582fbf910960a6b3d99b93677a1ecd11e7db6eba96d077522afe419228d981a192cfce82ae9b2785d3457db6925ca4e428c21520436ef4632e687afbc0e12ddb0591696711e35abde0a7c099a344bd7d4c09c0695f65991d2aad791a3aaed99a85ffe5e5d6086497e2905f1adf544bad8d2cf4a5cab2a92364150003e999c9f06095d5420f72c4203c5c2815c572e8d8e6a2a2ad5ed4dfbc3066ea717127e3f3a55e22eca7888ba6e43625b39c3fd531646aa5b6b226741e7f7e1de66e8ef18369082d34e8a7e535", 0xeb}, {&(0x7f0000000b00)="5b7bcf49779fb6e583772573c90e241c1db694f9b1b84717981dc8f828df6ca97e2119a767911b1037f78a136395206bb6a25555a72f9b0eb56e3c1e6772370e1be26f60fd0e0a10d0fe0b3d51a2082c571ed0dfffc2c0338384e6d214a8d3b601ab64dbc487a6f7e9a46b4c63b10bfd0502510b56c2202fa28100b9e33fd66b80d340b2ed4ed8af9ba093754158680239", 0x91}, {&(0x7f0000000c40)="45c57fe0b4a90d8f815d314e3309a852c218fd9888a034bff3f18619448ef7795be45420f946dddadf03b032f864d0b68820513dd57d66e71e9d349a2afea682000267da9806d606018239b62ef2d95440691eb2892e240f8cd6f2c774eb1937f3b1ba8eca1137ff670535363857", 0x6e}, {&(0x7f0000001340)="12d4d4c5a2d5c166a14cfa7c80ffb79ac32af0ff001ed1d4376992ef1e2fc45f8ae930a3e4fdf7b8f123089f54c2758909f0e2abdd40ce2ee4ac7045b8a9e6f852fe477167f9b42ee635b580d452e87ec99ca093e3149d84c205050a163e1cecf88b568c35766caf2264a7a14405614e97245ab30693523429d44a89cc8877f1276d8a8433a0563585f65f87bb5b540b1c0e69b8fb46474edceccf7d57efe0562133397685215fb9809fc4770c8b4ae591e7804623c7b993396e3daba133dba21dfa7563673a4009477eacf2da92", 0xce}, {&(0x7f0000001000)="8ab94eb8d723c7c65dce3e6fbb23ce09c2d039fe9ff331aefb53", 0x1a}], 0x7}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001580)="e716e33766f5fec3c962c0ef68d89d3c66d74ed4e0da023a22db0316012369bdadd5d82c70a4dcef16d6a5df2af4daf3aea794d2515f4ead0193dfd3a92d5001803330184d2ebfb4789031501dc98735af1f17b956deaba9df23bc9f0fefd5340f247355", 0x64}, {&(0x7f0000001600)="1ccbe2c8bbeb6cf36aa85b513d19f7e754948bedde2230a68d3522f8c05107c86c931142f61c5863152ddf68c43997ea560844ee4d37efa31654b7be5d5736088c36a170dbe84fd18c88d1", 0x4b}, {&(0x7f0000002a40)="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", 0x1000}], 0x3}}], 0x6, 0xc044) write$binfmt_misc(r7, &(0x7f0000000300), 0x5b0) r8 = eventfd(0x80) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e22, 0x30, @ipv4={'\x00', '\xff\xff', @local}, 0xf}, 0x1c) sendto$inet6(r10, 0x0, 0x0, 0x200008c5, &(0x7f0000000000)={0xa, 0x2, 0x2, @loopback, 0x4}, 0x1c) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01090050001280"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) splice(r0, &(0x7f0000000100), r2, &(0x7f0000000140)=0x8, 0x0, 0x6) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffffb, 0x2, 0x8, r8, 0x8}) syz_clone3(&(0x7f0000000080)={0x120296480, 0x0, 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0, 0x0, {0x0}}, 0x58) close_range(r4, 0xffffffffffffffff, 0x0) 5.769561662s ago: executing program 5 (id=2176): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1541, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) close_range(r2, r2, 0x0) 2.065247218s ago: executing program 0 (id=2177): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$P9_RLERROR(r1, &(0x7f0000000100)={0xf, 0x7, 0x2, {0x6, '-@-..,'}}, 0xf) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) write$cgroup_pid(r2, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0x2, 0x101}, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x3}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000140)=""/126, 0x7e}], 0x1, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) 2.061373049s ago: executing program 4 (id=2178): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x63c962ba4cb49e1a}, 0x6) (async) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 2.059610449s ago: executing program 5 (id=2179): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x1, 0x202812, r0, 0x7dfff000) 48.514689ms ago: executing program 0 (id=2180): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) write$ppp(r5, &(0x7f0000000240)="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", 0x1000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x20003, 0x10020f5b, 0x0, [{}, {}, {}, {0x0, 0x35}, {0x20}, {0x5}, {0x0, 0x0, 0x6}, {0x1, 0x6}, {0x0, 0x1}, {0xf, 0x1, 0x2, '\x00', 0x1}, {0xb, 0xb6, 0xfe}, {}, {0xfe, 0x0, 0x8}, {0x0, 0x0, 0x2}, {0x7, 0xb, 0x0, '\x00', 0x39}, {0x0, 0xa, 0x0, '\x00', 0xb}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x3, 0x0, 0xfa}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}]}}) ioctl$KVM_RUN(r8, 0x8004ae98, 0x20e10000) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 1.07686ms ago: executing program 4 (id=2181): add_key$user(0x0, 0x0, &(0x7f0000000140)="f8200b6e93f6ae3e0cbddda78b7488da38db61948220bffe4729f7b4b5715b788a1e76a2774a4e0bc0183d4ed22818952f178da81e3eee65177ce2391ba6f4d5e6b25b0abdeff083223b5f090f4d02f5e31f9659a2e024969c83a11da3561c6c50a72bb62cc825903d9a67661bfe0c5555b57db4988c962edbef8866c4e9694fff3245b75fc34b6d90ba04d5971e267cdf5f34bcfbe3e516a98e24ed65a377e72f8e3237deaa9bfef275c7ce3996393eecc05e45323d69e8725700b78bf48003c4b9f1a4104b0152", 0xc8, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006600"], 0x1c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x41400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0', [{0x20, 'ethtool\x00'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '#! '}]}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xa0d, 0x0, 0x5}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00') r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000440)=[@cpuid={0x2, 0x18, {0x8, 0x6}}, @code={0x1, 0x4e, {"470f01d10fc73166400ff7cf8fe828b692008000000366baf80cb88f311c80ef66bafc0cb08aee0f09b9720000400f32c46169650ac44129e5c2400f32"}}, @code={0x1, 0x67, {"66b8d2000f00d067430f52d766ba4200ed470fdc77006564420fc737c744240077000000c744240200000080ff1c24b9800000c00f3235004000000f306426f30fba2b00656636f3410fc7b5040d000066b83d008ed0"}}, @uexit={0x0, 0x18, 0x5}, @cpuid={0x2, 0x18, {0x19, 0x10000}}, @cpuid={0x2, 0x18, {0x2, 0x7}}, @cpuid={0x2, 0x18, {0x2, 0x8}}, @code={0x1, 0x6b, {"3e673e2e2e0f01c82645f4b9770a0000b8f8ffffffbaffffffff0f308f69189bb50000000048b80a01c0fe000000000f23c00f21f835000002000f23f865f30f09400fc7b2a3510000c442a90862d3673e26cf66b843000f00d8"}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0x7, 0xffffffff}}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x7a, {"b9500b00000f32c7442400a8330000c744240259bed9fac7442406000000000f011c240f20c035000004000f22c0c4020d2e6efb8f29e891e6440f010e67f2470faef466440f38815600b95f0b00000f3248b800000000008000000f23c80f21f8350c0080000f23f8"}}, @uexit={0x0, 0x18, 0xbd}, @code={0x1, 0x47, {"670f01cac4e23bf6870f0000000f01c9df35000000800fc71af30f5e0c50f30f1a66f166b86d008ee066440fc772106426663e43df3f"}}, @cpuid={0x2, 0x18, {0x0, 0x8}}, @code={0x1, 0x6f, {"66400f09c441405c2ab9c00b00000f32c74424005b000000c744240208000000c7442406000000000f01142466baf80cb8fc9da28def66bafc0cb83c1455faef0f55ae00000080f3c169364cc4c131e56db90f21f7f20f7cbcf001000000"}}, @cpuid={0x2, 0x18, {0x5}}, @cpuid={0x2, 0x18, {0x4, 0x3}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x18}, @uexit={0x0, 0x18, 0x8000000000000001}, @code={0x1, 0x72, {"c7442400b8000000c74424026f91b09dc7442406000000000f011c24c44269917c0607640f0014d4670f001b6536f3460f0966baf80cb8bccc468eef66bafc0ced81a5b5c0000063d300006766430f3882590036420f231e410f0fb1e1000000bf"}}, @code={0x1, 0x56, {"c4631179ff08b805000000b9008000000f01c1420ffcf466baa00066ed8f89f812c0650f01c8c4c1295e2c18c4e2b1453b66baf80cb82504e683ef66bafc0cb000ee420f07"}}, @code={0x1, 0x58, {"6436400f01c4460f00814400000066ba210066ed48b87e00c0fe000000000f23d00f21f835200000010f23f83ef247aa66b83a018ed83e45de3a66363626ca0000410f350f2181"}}, @code={0x1, 0x65, {"0fc72966b814010f00d0c744240000900000c7442402fa000000c7442406000000000f01142466ba420066b8005066efc481b9fda54f000000c4a2f92a5c110026460f01d164640f233b40d9f066b8b3000f00d8"}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0x0, 0x5}}, @cpuid={0x2, 0x18, {0x8, 0x9310}}, @code={0x1, 0x7c, {"0f20e035000004000f22e066baf80cb8a4ed0284ef66bafc0cb807fe0000efc7442400444bbfd4c744240200000100c7442406000000000f01142442da4d808f0978c224fdcc4a00000f2243c4e105f21065440fc79e0500000066b813008ed00f20e035000002000f22e0"}}, @uexit={0x0, 0x18, 0x80000000}], 0x649}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) fremovexattr(r9, &(0x7f0000001240)=@known='system.sockprotoname\x00') read$FUSE(r5, &(0x7f0000000f00)={0x2020}, 0x2020) 0s ago: executing program 5 (id=2182): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x7, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{r1, r2+10000000}, {0x0, 0x989680}}, 0x0) setrlimit(0x8, &(0x7f0000000100)={0x2c22, 0xfffffffffffffffd}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x30f803, 0x0) read(r3, &(0x7f00000002c0)=""/120, 0x78) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) timer_create(0x9, &(0x7f0000002c00)={0x0, 0x25, 0x1}, &(0x7f0000002c40)=0x0) timer_settime(r4, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) timer_settime(r4, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): [ T10] usb 6-1: Found UVC 0.00 device (0002:0000) [ 102.687684][ T10] usb 6-1: No valid video chain found. [ 102.894040][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.951716][ T3497] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 102.954826][ T3494] syzkaller0: entered promiscuous mode [ 102.964327][ T3494] syzkaller0: entered allmulticast mode [ 103.001607][ T292] tipc: Subscription rejected, illegal request [ 103.029361][ T3499] tipc: Started in network mode [ 103.034388][ T3499] tipc: Node identity 7, cluster identity 4711 [ 103.040706][ T3499] tipc: Node number set to 7 [ 103.151385][ T3512] /dev/rnullb0: Can't lookup blockdev [ 103.200729][ T3522] overlayfs: failed to clone upperpath [ 103.633973][ T10] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 103.763977][ T10] usb 2-1: device descriptor read/64, error -71 [ 104.004006][ T10] usb 2-1: device descriptor read/64, error -71 [ 104.137776][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 104.137797][ T36] audit: type=1326 audit(2000000051.855:47174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.0.1091" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb26178e929 code=0x0 [ 104.197409][ T36] audit: type=1400 audit(2000000051.915:47175): avc: denied { mount } for pid=3541 comm="syz.4.1093" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 104.220419][ T3542] overlayfs: failed to clone lowerpath [ 104.227460][ T36] audit: type=1326 audit(2000000051.945:47176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3541 comm="syz.4.1093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41c998e929 code=0x0 [ 104.244012][ T10] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 104.277429][ T36] audit: type=1326 audit(2000000051.995:47177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3541 comm="syz.4.1093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41c998e929 code=0x0 [ 104.384659][ T10] usb 2-1: device descriptor read/64, error -71 [ 104.624009][ T10] usb 2-1: device descriptor read/64, error -71 [ 104.734093][ T10] usb usb2-port1: attempt power cycle [ 104.933992][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.934017][ T1183] Bluetooth: hci0: command 0x1003 tx timeout [ 104.950145][ T456] usb 6-1: USB disconnect, device number 13 [ 105.073999][ T10] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 105.095305][ T10] usb 2-1: device descriptor read/8, error -71 [ 105.225179][ T10] usb 2-1: device descriptor read/8, error -71 [ 105.464002][ T10] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 105.467962][ T3561] rust_binder: Error while translating object. [ 105.471543][ T3561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 105.471567][ T36] audit: type=1400 audit(2000000053.185:47178): avc: denied { setopt } for pid=3560 comm="syz.5.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.477884][ T3561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:296 [ 105.505247][ T10] usb 2-1: device descriptor read/8, error -71 [ 105.655438][ T10] usb 2-1: device descriptor read/8, error -71 [ 105.739731][ T3577] cannot load conntrack support for proto=3 [ 105.764194][ T10] usb usb2-port1: unable to enumerate USB device [ 105.984013][ T451] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 106.145292][ T451] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 106.153587][ T451] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 106.162697][ T451] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 106.173001][ T451] usb 6-1: config 220 has no interface number 2 [ 106.179332][ T451] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 106.192498][ T451] usb 6-1: config 220 interface 0 has no altsetting 0 [ 106.199317][ T451] usb 6-1: config 220 interface 76 has no altsetting 0 [ 106.206267][ T451] usb 6-1: config 220 interface 1 has no altsetting 0 [ 106.215488][ T451] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 106.225273][ T451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.233584][ T451] usb 6-1: Product: syz [ 106.238385][ T451] usb 6-1: Manufacturer: syz [ 106.243596][ T451] usb 6-1: SerialNumber: syz [ 106.454642][ T3577] rust_binder: Error while translating object. [ 106.454690][ T3577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 106.461008][ T3577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:308 [ 106.609711][ T3630] overlayfs: failed to clone upperpath [ 106.830850][ T3671] fuse: Bad value for 'rootmode' [ 106.982416][ T451] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 106.988864][ T451] usb 6-1: No valid video chain found. [ 106.994524][ T451] usb 6-1: selecting invalid altsetting 0 [ 107.003021][ T451] usb 6-1: USB disconnect, device number 14 [ 107.201504][ T36] audit: type=1400 audit(2000000054.915:47179): avc: denied { unmount } for pid=1784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 107.228210][ T3696] SELinux: failed to load policy [ 107.523977][ T305] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 107.644275][ T3736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.644922][ T3738] rust_binder: Error while translating object. [ 107.650180][ T3739] incfs: Options parsing error. -22 [ 107.651608][ T3738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.658551][ T3739] incfs: mount failed -22 [ 107.663141][ T3738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:326 [ 107.693954][ T305] usb 5-1: Using ep0 maxpacket: 16 [ 107.711408][ T305] usb 5-1: config 247 has an invalid interface number: 79 but max is 0 [ 107.720558][ T305] usb 5-1: config 247 has no interface number 0 [ 107.723446][ T3741] kvm: pic: non byte write [ 107.727433][ T305] usb 5-1: config 247 interface 79 altsetting 233 has a duplicate endpoint with address 0x9, skipping [ 107.739529][ T3744] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=9 (144 ns) > initial count (48 ns). Using initial count to start timer. [ 107.743014][ T305] usb 5-1: config 247 interface 79 altsetting 233 has a duplicate endpoint with address 0x9, skipping [ 107.777501][ T305] usb 5-1: config 247 interface 79 altsetting 233 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 107.793075][ T305] usb 5-1: config 247 interface 79 altsetting 233 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 107.804432][ T305] usb 5-1: config 247 interface 79 altsetting 233 has an invalid descriptor for endpoint zero, skipping [ 107.817187][ T305] usb 5-1: config 247 interface 79 has no altsetting 0 [ 107.825902][ T305] usb 5-1: New USB device found, idVendor=03eb, idProduct=2002, bcdDevice= 1.00 [ 107.827484][ T3754] block device autoloading is deprecated and will be removed. [ 107.837249][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.851259][ T305] usb 5-1: Product: syz [ 107.852790][ T36] audit: type=1400 audit(2000000055.565:47180): avc: denied { ioctl } for pid=3753 comm="syz.0.1166" path="/448/file0" dev="tmpfs" ino=2471 ioctlcmd=0x301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.855526][ T305] usb 5-1: Manufacturer: syz [ 107.885437][ T305] usb 5-1: SerialNumber: syz [ 108.097647][ T305] usb-storage 5-1:247.79: USB Mass Storage device detected [ 108.105937][ T305] usb-storage 5-1:247.79: Quirks match for vid 03eb pid 2002: 20 [ 108.180678][ T305] usb 5-1: USB disconnect, device number 12 [ 108.613554][ T3777] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.613797][ T3778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:377 [ 108.620666][ T3778] rust_binder: Error while translating object. [ 108.630607][ T3778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 108.637065][ T3778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:377 [ 108.654324][ T3781] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 108.659612][ T36] audit: type=1400 audit(2000000056.365:47181): avc: denied { setopt } for pid=3780 comm="syz.5.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.703884][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.775200][ T3793] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 108.775229][ T3793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 108.783866][ T3793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:567 [ 108.809306][ T3796] binder: Binderfs stats mode cannot be changed during a remount [ 108.890109][ T36] audit: type=1400 audit(2000000056.605:47182): avc: denied { checkpoint_restore } for pid=3803 comm="syz.1.1184" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.291055][ T3855] fuse: Bad value for 'fd' [ 109.994017][ T45] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 110.145134][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 24929, setting to 64 [ 110.153996][ T456] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 110.157961][ T45] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 110.173041][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.181134][ T45] usb 6-1: Product: syz [ 110.185346][ T45] usb 6-1: Manufacturer: syz [ 110.189944][ T45] usb 6-1: SerialNumber: syz [ 110.195320][ T45] usb 6-1: config 0 descriptor?? [ 110.200550][ T3885] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 110.209877][ T45] hub 6-1:0.0: bad descriptor, ignoring hub [ 110.216035][ T45] hub 6-1:0.0: probe with driver hub failed with error -5 [ 110.316414][ T456] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 110.325594][ T456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.333597][ T456] usb 2-1: Product: syz [ 110.337820][ T456] usb 2-1: Manufacturer: syz [ 110.342434][ T456] usb 2-1: SerialNumber: syz [ 110.416697][ T3903] 9pnet_fd: Insufficient options for proto=fd [ 110.440814][ T45] usb 6-1: USB disconnect, device number 15 [ 110.774014][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 110.774045][ T1183] Bluetooth: hci0: command 0x1003 tx timeout [ 110.959818][ T3934] input: syz1 as /devices/virtual/input/input42 [ 110.983191][ T3939] cgroup: Unknown subsys name 'io' [ 110.988967][ T3939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1621 sclass=netlink_route_socket pid=3939 comm=syz.4.1229 [ 111.083454][ T3955] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.084520][ T3957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 111.084653][ T36] audit: type=1400 audit(2000000287.805:47183): avc: denied { create } for pid=3954 comm="syz.5.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.091245][ T3957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:369 [ 111.134269][ T3959] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.144497][ T3959] rust_binder: Error in use_page_slow: ESRCH [ 111.150932][ T3959] rust_binder: use_range failure ESRCH [ 111.157142][ T3959] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 111.162625][ T3959] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 111.170773][ T3959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:373 [ 111.209815][ T36] audit: type=1400 audit(2000000287.925:47184): avc: denied { accept } for pid=3965 comm="syz.5.1236" path="socket:[20678]" dev="sockfs" ino=20678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.213090][ T3967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.251682][ T3967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.261360][ T36] audit: type=1400 audit(2000000287.975:47185): avc: denied { nlmsg_write } for pid=3965 comm="syz.5.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 111.282486][ T36] audit: type=1400 audit(2000000287.975:47186): avc: denied { write } for pid=3965 comm="syz.5.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.364006][ T305] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 111.443986][ T456] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 111.485325][ T36] audit: type=1326 audit(2000000288.205:47187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26178e929 code=0x7fc00000 [ 111.509177][ T305] usb 5-1: device descriptor read/64, error -71 [ 111.583997][ T456] usb 6-1: device descriptor read/64, error -71 [ 111.753988][ T305] usb 5-1: device descriptor read/64, error -71 [ 111.823967][ T456] usb 6-1: device descriptor read/64, error -71 [ 111.994018][ T305] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 112.063972][ T456] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 112.123966][ T305] usb 5-1: device descriptor read/64, error -71 [ 112.213991][ T456] usb 6-1: device descriptor read/64, error -71 [ 112.364001][ T305] usb 5-1: device descriptor read/64, error -71 [ 112.454093][ T456] usb 6-1: device descriptor read/64, error -71 [ 112.474214][ T305] usb usb5-port1: attempt power cycle [ 112.564158][ T456] usb usb6-port1: attempt power cycle [ 112.814003][ T305] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 112.837699][ T305] usb 5-1: device descriptor read/8, error -71 [ 112.846016][ T36] audit: type=1326 audit(2000000289.565:47188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.0.1259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb26178e929 code=0x0 [ 112.903977][ T456] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 112.916839][ T45] usb 2-1: USB disconnect, device number 24 [ 112.926249][ T456] usb 6-1: device descriptor read/8, error -71 [ 112.975835][ T305] usb 5-1: device descriptor read/8, error -71 [ 113.055335][ T456] usb 6-1: device descriptor read/8, error -71 [ 113.213994][ T305] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 113.235029][ T305] usb 5-1: device descriptor read/8, error -71 [ 113.264010][ T45] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 113.304036][ T456] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 113.325158][ T456] usb 6-1: device descriptor read/8, error -71 [ 113.365265][ T305] usb 5-1: device descriptor read/8, error -71 [ 113.414236][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 113.420935][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.431914][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.441880][ T45] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 113.450993][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.459773][ T45] usb 2-1: config 0 descriptor?? [ 113.465459][ T456] usb 6-1: device descriptor read/8, error -71 [ 113.474071][ T305] usb usb5-port1: unable to enumerate USB device [ 113.574223][ T456] usb usb6-port1: unable to enumerate USB device [ 113.874694][ T45] savu 0003:1E7D:2D5A.0007: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 113.936325][ T4068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'. [ 113.946092][ T4068] veth0_macvtap: entered allmulticast mode [ 114.135396][ T10] usb 2-1: USB disconnect, device number 25 [ 114.143832][ T4086] kvm: emulating exchange as write [ 114.237054][ T4105] netlink: 'syz.5.1286': attribute type 4 has an invalid length. [ 114.431500][ T36] audit: type=1400 audit(2000000291.145:47189): avc: denied { read } for pid=94 comm="acpid" name="event#" dev="devtmpfs" ino=553 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 114.453411][ T36] audit: type=1400 audit(2000000291.145:47190): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event#" dev="devtmpfs" ino=553 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 114.476497][ T45] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 114.481441][ T36] audit: type=1400 audit(2000000291.145:47191): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event#" dev="devtmpfs" ino=553 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 114.510574][ T4123] rust_binder: Error while translating object. [ 114.510606][ T4123] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 114.517490][ T4123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:392 [ 114.535745][ T4129] overlayfs: failed to clone upperpath [ 114.549389][ T4131] 9pnet_fd: Insufficient options for proto=fd [ 114.562969][ T4131] kvm: kvm [4130]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 114.618703][ T36] audit: type=1400 audit(2000000291.335:47192): avc: denied { ioctl } for pid=4134 comm="syz.5.1297" path="socket:[20434]" dev="sockfs" ino=20434 ioctlcmd=0x9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.663972][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 114.675173][ T45] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 114.686789][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 114.696723][ T45] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 114.706845][ T45] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 114.718179][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 114.732919][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.742487][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 114.750839][ T45] usb 5-1: SerialNumber: syz [ 114.757649][ T4101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 114.768494][ T45] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 114.778908][ T45] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 114.808839][ T4149] fuse: Unknown parameter 'dont_appraise' [ 114.815273][ T4149] binder: Unknown parameter 'defcontext01777777777777777777777' [ 114.893965][ T10] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 114.996139][ T45] usb 5-1: USB disconnect, device number 17 [ 115.023974][ T10] usb 6-1: device descriptor read/64, error -71 [ 115.038866][ T4161] binder: Binderfs stats mode cannot be changed during a remount [ 115.264000][ T10] usb 6-1: device descriptor read/64, error -71 [ 115.503987][ T10] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 115.529603][ T4177] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.532351][ T4177] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:426 [ 115.553807][ T4179] binder: Bad value for 'stats' [ 115.589529][ T4181] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 115.589551][ T4181] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 115.598311][ T4181] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:430 [ 115.634024][ T10] usb 6-1: device descriptor read/64, error -71 [ 115.838364][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 115.845045][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 115.847768][ T4197] netlink: 'syz.1.1318': attribute type 4 has an invalid length. [ 115.853544][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 115.867582][ T4197] netlink: 'syz.1.1318': attribute type 4 has an invalid length. [ 115.884929][ T10] usb 6-1: device descriptor read/64, error -71 [ 115.971667][ T4204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:442 [ 115.995191][ T10] usb usb6-port1: attempt power cycle [ 116.011731][ T4212] overlayfs: failed to clone upperpath [ 116.017877][ T4212] overlayfs: failed to clone upperpath [ 116.023713][ T4212] overlayfs: failed to clone upperpath [ 116.029675][ T4212] overlayfs: failed to clone upperpath [ 116.035572][ T4212] overlayfs: failed to clone upperpath [ 116.042247][ T4212] overlayfs: failed to clone upperpath [ 116.053497][ T4212] overlayfs: failed to clone upperpath [ 116.064339][ T4212] overlayfs: failed to clone upperpath [ 116.070336][ T4212] overlayfs: failed to clone upperpath [ 116.076839][ T4212] overlayfs: failed to clone upperpath [ 116.084578][ T4212] overlayfs: failed to clone upperpath [ 116.090649][ T4212] overlayfs: failed to clone upperpath [ 116.096939][ T4212] overlayfs: failed to clone upperpath [ 116.103196][ T4212] overlayfs: failed to clone upperpath [ 116.109357][ T4212] overlayfs: failed to clone upperpath [ 116.115680][ T4212] overlayfs: failed to clone upperpath [ 116.121722][ T4212] overlayfs: failed to clone upperpath [ 116.127746][ T4212] overlayfs: failed to clone upperpath [ 116.133612][ T4212] overlayfs: failed to clone upperpath [ 116.140167][ T4212] overlayfs: failed to clone upperpath [ 116.146255][ T4212] overlayfs: failed to clone upperpath [ 116.152126][ T4212] overlayfs: failed to clone upperpath [ 116.158108][ T4212] overlayfs: failed to clone upperpath [ 116.164102][ T4212] overlayfs: failed to clone upperpath [ 116.169911][ T4212] overlayfs: failed to clone upperpath [ 116.175840][ T4212] overlayfs: failed to clone upperpath [ 116.181634][ T4212] overlayfs: failed to clone upperpath [ 116.187520][ T4212] overlayfs: failed to clone upperpath [ 116.193378][ T4212] overlayfs: failed to clone upperpath [ 116.199264][ T4212] overlayfs: failed to clone upperpath [ 116.205117][ T4212] overlayfs: failed to clone upperpath [ 116.210909][ T4212] overlayfs: failed to clone upperpath [ 116.216955][ T4212] overlayfs: failed to clone upperpath [ 116.283505][ T4228] overlayfs: failed to resolve './file0': -2 [ 116.333502][ T4236] netlink: 'syz.0.1331': attribute type 10 has an invalid length. [ 116.333744][ T4237] netlink: 'syz.0.1331': attribute type 10 has an invalid length. [ 116.354002][ T456] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 116.361736][ T10] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 116.385045][ T10] usb 6-1: device descriptor read/8, error -71 [ 116.469958][ T4258] batadv_slave_1: entered promiscuous mode [ 116.476074][ T4259] batadv_slave_1: left promiscuous mode [ 116.493971][ T456] usb 5-1: device descriptor read/64, error -71 [ 116.515004][ T10] usb 6-1: device descriptor read/8, error -71 [ 116.566055][ T4273] netlink: 'syz.0.1345': attribute type 4 has an invalid length. [ 116.574026][ T4273] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1345'. [ 116.614350][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 116.614370][ T36] audit: type=1400 audit(2000000293.335:47194): avc: denied { mount } for pid=4274 comm="syz.0.1346" name="/" dev="ramfs" ino=21485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 116.734015][ T456] usb 5-1: device descriptor read/64, error -71 [ 116.754029][ T10] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 116.775477][ T10] usb 6-1: device descriptor read/8, error -71 [ 116.905073][ T10] usb 6-1: device descriptor read/8, error -71 [ 116.974018][ T456] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 117.014121][ T10] usb usb6-port1: unable to enumerate USB device [ 117.104016][ T456] usb 5-1: device descriptor read/64, error -71 [ 117.343961][ T456] usb 5-1: device descriptor read/64, error -71 [ 117.454081][ T456] usb usb5-port1: attempt power cycle [ 117.803992][ T456] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 117.825036][ T456] usb 5-1: device descriptor read/8, error -71 [ 117.893990][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 117.894007][ T4198] Bluetooth: hci1: command 0x1003 tx timeout [ 117.894038][ T1183] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 117.965391][ T456] usb 5-1: device descriptor read/8, error -71 [ 118.054214][ T45] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 118.214019][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 118.214049][ T456] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 118.228910][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 118.235173][ T456] usb 5-1: device descriptor read/8, error -71 [ 118.237485][ T45] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 118.253980][ T45] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.266901][ T45] usb 6-1: config 1 interface 0 has no altsetting 0 [ 118.275478][ T45] usb 6-1: New USB device found, idVendor=0b05, idProduct=1837, bcdDevice= 0.40 [ 118.284692][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.292830][ T45] usb 6-1: Product: syz [ 118.297033][ T45] usb 6-1: Manufacturer: syz [ 118.301648][ T45] usb 6-1: SerialNumber: syz [ 118.375190][ T456] usb 5-1: device descriptor read/8, error -71 [ 118.483995][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 118.492021][ T456] usb usb5-port1: unable to enumerate USB device [ 118.569684][ T45] usbhid 6-1:1.0: can't add hid device: -71 [ 118.575750][ T45] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 118.586662][ T45] usb 6-1: USB disconnect, device number 24 [ 118.646922][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 118.656102][ T9] usb 2-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 118.664872][ T9] usb 2-1: Product: syz [ 118.669112][ T9] usb 2-1: Manufacturer: syz [ 118.673743][ T9] usb 2-1: SerialNumber: syz [ 118.679329][ T9] usb 2-1: config 0 descriptor?? [ 118.996468][ T36] audit: type=1400 audit(2000000295.715:47195): avc: denied { map } for pid=4322 comm="syz.0.1363" path="socket:[22656]" dev="sockfs" ino=22656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.289558][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 119.433997][ T305] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 119.584033][ T305] usb 6-1: Invalid ep0 maxpacket: 32 [ 119.690337][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 119.700585][ T9] asix 2-1:0.0: probe with driver asix failed with error -61 [ 119.713982][ T305] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 119.863961][ T305] usb 6-1: Invalid ep0 maxpacket: 32 [ 119.869495][ T305] usb usb6-port1: attempt power cycle [ 119.942863][ T4372] netlink: 'syz.0.1380': attribute type 12 has an invalid length. [ 120.224837][ T305] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 120.263370][ T36] audit: type=1400 audit(2000000296.975:47196): avc: denied { read } for pid=4310 comm="syz.1.1358" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 120.291060][ T305] usb 6-1: Invalid ep0 maxpacket: 32 [ 120.329150][ T4396] netlink: 'syz.4.1388': attribute type 2 has an invalid length. [ 120.424015][ T305] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 120.444342][ T305] usb 6-1: Invalid ep0 maxpacket: 32 [ 120.449874][ T305] usb usb6-port1: unable to enumerate USB device [ 120.648505][ T4423] binder: Bad value for 'max' [ 120.673536][ T4427] binder: Unknown parameter 'fscontext?}' [ 121.385022][ T45] usb 2-1: USB disconnect, device number 26 [ 121.412566][ T4441] overlay: filesystem on ./bus not supported as upperdir [ 121.441056][ T4445] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.444215][ T4445] rust_binder: inc_ref_done called when no active inc_refs [ 121.450814][ T4445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:496 [ 122.220019][ T4486] bridge_slave_0: left allmulticast mode [ 122.234955][ T4486] bridge_slave_0: left promiscuous mode [ 122.240680][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.252085][ T36] audit: type=1400 audit(2000000298.965:47197): avc: denied { connect } for pid=4485 comm="syz.5.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 122.561607][ T4505] binder: Unknown parameter 'smackfsdef' [ 122.592503][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.597696][ T4498] kvm: pic: non byte write [ 122.617626][ T4493] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.625161][ T4493] bridge_slave_0: entered allmulticast mode [ 122.631642][ T4493] bridge_slave_0: entered promiscuous mode [ 122.638961][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.646444][ T4493] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.655791][ T4493] bridge_slave_1: entered allmulticast mode [ 122.662230][ T4493] bridge_slave_1: entered promiscuous mode [ 122.722944][ T12] bridge_slave_1: left allmulticast mode [ 122.729610][ T12] bridge_slave_1: left promiscuous mode [ 122.735387][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.743322][ T12] bridge_slave_0: left allmulticast mode [ 122.750194][ T12] bridge_slave_0: left promiscuous mode [ 122.767422][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.818025][ T12] bridge0 (unregistering): left allmulticast mode [ 122.942113][ T12] tipc: Left network mode [ 122.953123][ T12] veth1_macvtap: left promiscuous mode [ 122.963976][ T12] veth0_vlan: left promiscuous mode [ 123.024267][ T305] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 123.063733][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.070851][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.098813][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.105954][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.143061][ T4493] veth0_vlan: entered promiscuous mode [ 123.157457][ T4493] veth1_macvtap: entered promiscuous mode [ 123.196418][ T305] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.209693][ T305] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 123.223715][ T305] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.231024][ T305] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 123.241195][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.250269][ T305] usb 2-1: config 0 descriptor?? [ 123.257175][ T4516] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.477063][ T4534] fuse: Bad value for 'fd' [ 123.483085][ T4535] fuse: Bad value for 'fd' [ 123.653750][ T4541] fuse: Unknown parameter '#A;"' [ 123.666310][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 123.675786][ T305] usbhid 2-1:0.0: can't add hid device: -71 [ 123.681770][ T305] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 123.691117][ T305] usb 2-1: USB disconnect, device number 27 [ 123.815548][ T36] audit: type=1400 audit(2000000300.535:47198): avc: denied { bind } for pid=4542 comm="syz.5.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.188856][ T4546] 9pnet_virtio: no channels available for device syz [ 124.197946][ T4546] overlayfs: failed to resolve './file0': -2 [ 124.513995][ T456] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 124.643992][ T456] usb 2-1: device descriptor read/64, error -71 [ 124.795803][ T4563] tipc: Started in network mode [ 124.800774][ T4563] tipc: Node identity ., cluster identity 4711 [ 124.807085][ T4563] tipc: Enabling of bearer rejected, failed to enable media [ 124.894031][ T456] usb 2-1: device descriptor read/64, error -71 [ 124.903307][ T36] audit: type=1400 audit(2000000301.615:47199): avc: denied { setattr } for pid=4566 comm="syz.5.1445" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.134098][ T456] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 125.274035][ T456] usb 2-1: device descriptor read/64, error -71 [ 125.417015][ T4581] netlink: 393 bytes leftover after parsing attributes in process `syz.4.1451'. [ 125.474020][ T305] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 125.514297][ T456] usb 2-1: device descriptor read/64, error -71 [ 125.624992][ T456] usb usb2-port1: attempt power cycle [ 125.643983][ T305] usb 6-1: Invalid ep0 maxpacket: 16 [ 125.774015][ T305] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 125.933950][ T305] usb 6-1: Invalid ep0 maxpacket: 16 [ 125.939468][ T305] usb usb6-port1: attempt power cycle [ 125.963995][ T456] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 125.985362][ T456] usb 2-1: device descriptor read/8, error -71 [ 126.115251][ T456] usb 2-1: device descriptor read/8, error -71 [ 126.283982][ T305] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 126.304345][ T305] usb 6-1: Invalid ep0 maxpacket: 16 [ 126.353986][ T456] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 126.376208][ T456] usb 2-1: device descriptor read/8, error -71 [ 126.440452][ T305] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 126.452860][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 126.464309][ T305] usb 6-1: Invalid ep0 maxpacket: 16 [ 126.469739][ T305] usb usb6-port1: unable to enumerate USB device [ 126.505158][ T456] usb 2-1: device descriptor read/8, error -71 [ 126.614105][ T456] usb usb2-port1: unable to enumerate USB device [ 127.338764][ T36] audit: type=1400 audit(2000000304.055:47200): avc: denied { map } for pid=4598 comm="syz.1.1457" path="socket:[25125]" dev="sockfs" ino=25125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.363234][ T36] audit: type=1400 audit(2000000304.055:47201): avc: denied { accept } for pid=4598 comm="syz.1.1457" path="socket:[25125]" dev="sockfs" ino=25125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.454041][ T1183] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.454327][ T4198] Bluetooth: hci0: command 0x1003 tx timeout [ 128.612488][ T4632] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 128.624188][ T2461] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 128.804857][ T2461] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.825390][ T2461] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 128.843938][ T2461] usb 6-1: config 0 interface 0 has no altsetting 0 [ 128.854359][ T2461] usb 6-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 128.869657][ T2461] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.883541][ T2461] usb 6-1: config 0 descriptor?? [ 128.989798][ T36] audit: type=1400 audit(2000000305.705:47202): avc: denied { create } for pid=4655 comm="syz.1.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 129.029725][ T4661] binder: Unknown parameter ' xBsF)]3+ex+F_R*xVsGUIL3C6 [ 129.029725][ T4661] d` t+hy9/y}^' [ 129.035915][ T36] audit: type=1400 audit(2000000305.705:47203): avc: denied { getopt } for pid=4655 comm="syz.1.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 129.296922][ T2461] logitech 0003:046D:C286.0008: unknown main item tag 0x6 [ 129.304935][ T2461] logitech 0003:046D:C286.0008: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.5-1/input0 [ 129.317096][ T2461] logitech 0003:046D:C286.0008: no inputs found [ 129.333958][ T456] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 129.404003][ T4673] 9pnet: Could not find request transport: xen [ 129.411070][ T4673] /dev/rnullb0: Can't open blockdev [ 129.500816][ T31] usb 6-1: USB disconnect, device number 33 [ 129.514397][ T456] usb 2-1: Using ep0 maxpacket: 16 [ 129.541567][ T456] usb 2-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 129.552250][ T456] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 129.561515][ T456] usb 2-1: config 1 has no interface number 1 [ 129.568052][ T456] usb 2-1: too many endpoints for config 1 interface 2 altsetting 93: 248, using maximum allowed: 30 [ 129.584960][ T456] usb 2-1: config 1 interface 2 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 129.602523][ T456] usb 2-1: config 1 interface 2 has no altsetting 0 [ 129.619617][ T456] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.629009][ T456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.643975][ T456] usb 2-1: Product: ꐺӟ풿⧪躸愠붩苎둺죷Ⰲ볩嚀捑餁㦳ᘟꟇ巄꧰么퇉ꧮᯎ䢼ꩦ屮捡⹓백拿鼮䷀箄鐫珩紴뙭꾭欗ถ䈟습페겡罔樓䢟纑ꇗ᯷자泻腮ぱ䭘ꘜⳓ삕䯿擸殊ꍴ釴纼ꌮ씪柯ᇮ뷗੠밄뫵鏍ﮡ袋ꊎ肉অ匰ẃ㪂ꇢ赓皻ᑷﱶ쓤䵑맳魍䅏頇퐬蠺 [ 129.676495][ T456] usb 2-1: Manufacturer: ☔뵊努鼃熚억ᦤ舏ᙎ쯞쿶뺌।藧밋⎧쎶冮ꆹ嵎砵틺捚뢌納퇊ᬖ磕䦱᩻楕뎗∧鬒鶤죤ｨꠧ裦尒䟡繖ⲛ㇨鋤눨渍惈澛㻖㮬蹔㠞鏿똭땞瓺歁ꆻ尌䷤ᾉ㟿᣷양⧟ᶫ쀉擐ए띰ₙ곸햽늾圶鶔﹘꠹⤵뿦䐟广퓭졊悮恿夨 [ 129.706152][ T456] usb 2-1: SerialNumber: Ж [ 129.914928][ T4704] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1493'. [ 130.003330][ T4711] overlayfs: failed to resolve './file0': -2 [ 130.054771][ T4717] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1498'. [ 130.991734][ T36] audit: type=1400 audit(2000000307.705:47204): avc: denied { relabelfrom } for pid=4732 comm="syz.5.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 131.012519][ T36] audit: type=1400 audit(2000000307.705:47205): avc: denied { relabelto } for pid=4732 comm="syz.5.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 131.083968][ T305] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 131.214190][ T305] usb 5-1: device descriptor read/64, error -71 [ 131.393954][ T45] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 131.453986][ T305] usb 5-1: device descriptor read/64, error -71 [ 131.524069][ T45] usb 6-1: device descriptor read/64, error -71 [ 131.694026][ T305] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 131.763969][ T45] usb 6-1: device descriptor read/64, error -71 [ 131.823959][ T305] usb 5-1: device descriptor read/64, error -71 [ 132.004010][ T45] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 132.063990][ T305] usb 5-1: device descriptor read/64, error -71 [ 132.124735][ T456] usb 2-1: USB disconnect, device number 32 [ 132.134354][ T45] usb 6-1: device descriptor read/64, error -71 [ 132.175038][ T305] usb usb5-port1: attempt power cycle [ 132.384003][ T45] usb 6-1: device descriptor read/64, error -71 [ 132.443971][ T456] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 132.494166][ T45] usb usb6-port1: attempt power cycle [ 132.514073][ T305] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 132.535275][ T305] usb 5-1: device descriptor read/8, error -71 [ 132.606045][ T456] usb 2-1: not running at top speed; connect to a high speed hub [ 132.615048][ T456] usb 2-1: config 1 interface 0 altsetting 196 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 132.626329][ T456] usb 2-1: config 1 interface 0 altsetting 196 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.639546][ T456] usb 2-1: config 1 interface 0 has no altsetting 0 [ 132.647902][ T456] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 132.657059][ T456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.665224][ T456] usb 2-1: Product: syz [ 132.669411][ T456] usb 2-1: Manufacturer: syz [ 132.674180][ T456] usb 2-1: SerialNumber: syz [ 132.680006][ T4746] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 132.685318][ T305] usb 5-1: device descriptor read/8, error -71 [ 132.834077][ T45] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 132.855420][ T45] usb 6-1: device descriptor read/8, error -71 [ 132.889045][ T4744] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 132.905275][ T456] usbhid 2-1:1.0: can't add hid device: -71 [ 132.911361][ T456] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 132.920582][ T456] usb 2-1: USB disconnect, device number 33 [ 132.934000][ T305] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 132.955234][ T305] usb 5-1: device descriptor read/8, error -71 [ 132.985111][ T45] usb 6-1: device descriptor read/8, error -71 [ 133.051014][ T4749] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 133.085093][ T305] usb 5-1: device descriptor read/8, error -71 [ 133.124403][ T4760] binder: Bad value for 'stats' [ 133.204163][ T305] usb usb5-port1: unable to enumerate USB device [ 133.223983][ T45] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 133.245325][ T45] usb 6-1: device descriptor read/8, error -71 [ 133.375198][ T45] usb 6-1: device descriptor read/8, error -71 [ 133.484140][ T45] usb usb6-port1: unable to enumerate USB device [ 133.853529][ T4784] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.991733][ T4789] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.228054][ T4804] futex_wake_op: syz.5.1530 tries to shift op by -1; fix this program [ 134.285360][ T4811] x_tables: duplicate entry at hook 1 [ 134.608236][ T4825] fuseblk: Unknown parameter 'fkUad' [ 134.634710][ T36] audit: type=1400 audit(2000000311.355:47206): avc: denied { create } for pid=4826 comm="syz.1.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 134.686110][ T36] audit: type=1400 audit(2000000311.405:47207): avc: denied { map } for pid=4832 comm="syz.1.1541" path="socket:[27053]" dev="sockfs" ino=27053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 134.943638][ T36] audit: type=1400 audit(2000000311.655:47208): avc: denied { lock } for pid=4855 comm="syz.1.1548" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 135.019806][ T4860] binder: Unknown parameter 'smackfstransmute' [ 135.026454][ T4860] binder: Unknown parameter 'smackfstransmute' [ 135.037217][ T4861] tipc: Started in network mode [ 135.042450][ T4861] tipc: Node identity , cluster identity 4711 [ 135.049072][ T4861] tipc: Failed to obtain node identity [ 135.054965][ T4861] tipc: Enabling of bearer rejected, failed to enable media [ 135.168658][ T4874] /dev/md0: Can't lookup blockdev [ 135.205196][ T36] audit: type=1326 audit(2000000311.925:47209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.5.1555" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb26b98e929 code=0x0 [ 135.283986][ T10] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 135.435302][ T10] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.446517][ T10] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 135.457384][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 135.464140][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 135.473252][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.481947][ T10] usb 2-1: config 0 descriptor?? [ 135.487688][ T4863] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 135.897366][ T10] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 135.906198][ T10] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 135.914375][ T10] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 136.064015][ T305] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 136.101356][ T4747] usb 2-1: USB disconnect, device number 34 [ 136.214013][ T305] usb 5-1: Using ep0 maxpacket: 32 [ 136.220408][ T305] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 136.228814][ T305] usb 5-1: config 0 has no interface number 0 [ 136.234998][ T305] usb 5-1: config 0 interface 196 has no altsetting 0 [ 136.243617][ T305] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 136.252922][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.260951][ T305] usb 5-1: Product: syz [ 136.265165][ T305] usb 5-1: Manufacturer: syz [ 136.269802][ T305] usb 5-1: SerialNumber: syz [ 136.275500][ T305] usb 5-1: config 0 descriptor?? [ 136.541561][ T4881] binder: Unknown parameter '0x0000000000000005' [ 136.567248][ T305] ipheth 5-1:0.196: Unable to find endpoints [ 136.574595][ T305] usb 5-1: USB disconnect, device number 26 [ 136.843992][ T2461] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 136.854104][ T10] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 136.995309][ T2461] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 137.002946][ T2461] usb 6-1: can't read configurations, error -61 [ 137.010990][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 137.019139][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 137.027661][ T10] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 137.036061][ T10] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 137.044268][ T10] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 137.053411][ T10] usb 2-1: config 129 has no interface number 0 [ 137.059715][ T10] usb 2-1: config 129 has no interface number 1 [ 137.066009][ T10] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 137.079715][ T10] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 137.093510][ T36] audit: type=1400 audit(2000000313.815:47210): avc: denied { watch } for pid=4887 comm="syz.4.1559" path="/" dev="ramfs" ino=26256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 137.115042][ T10] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 137.128411][ T10] usb 2-1: config 129 interface 135 has no altsetting 0 [ 137.135584][ T2461] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 137.143928][ T10] usb 2-1: config 129 interface 5 has no altsetting 0 [ 137.154908][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 137.164001][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.171986][ T10] usb 2-1: Product: syz [ 137.177069][ T10] usb 2-1: Manufacturer: syz [ 137.181694][ T10] usb 2-1: SerialNumber: syz [ 137.201309][ T36] audit: type=1400 audit(2000000313.915:47211): avc: denied { append } for pid=4889 comm="syz.4.1560" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 137.295298][ T2461] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 137.302975][ T2461] usb 6-1: can't read configurations, error -61 [ 137.309591][ T2461] usb usb6-port1: attempt power cycle [ 137.398435][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 137.410146][ T10] usb 2-1: USB disconnect, device number 35 [ 137.423365][ T3085] udevd[3085]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 137.653990][ T2461] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 137.676034][ T2461] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 137.683813][ T2461] usb 6-1: can't read configurations, error -61 [ 137.813982][ T2461] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 137.835957][ T2461] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 137.843937][ T2461] usb 6-1: can't read configurations, error -61 [ 137.850506][ T2461] usb usb6-port1: unable to enumerate USB device [ 138.092109][ T4913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.093453][ T4913] input: syz1 as /devices/virtual/input/input44 [ 138.307768][ T36] audit: type=1400 audit(2000000315.025:47212): avc: denied { getattr } for pid=4921 comm="syz.1.1571" name="/" dev="incremental-fs" ino=1536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 138.353954][ T2461] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 138.380781][ T4931] /dev/rnullb0: Can't open blockdev [ 138.403984][ T4939] tipc: Can't bind to reserved service type 2 [ 138.503993][ T2461] usb 5-1: Using ep0 maxpacket: 32 [ 138.510524][ T2461] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.521651][ T2461] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.535937][ T2461] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 138.545459][ T2461] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 138.553829][ T2461] usb 5-1: Product: syz [ 138.558129][ T2461] usb 5-1: Manufacturer: syz [ 138.564955][ T2461] hub 5-1:4.0: USB hub found [ 138.765038][ T2461] hub 5-1:4.0: 1 port detected [ 138.968581][ T4913] rust_binder: Error while translating object. [ 138.968627][ T4913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 138.974930][ T4913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:630 [ 138.985887][ T2461] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 139.003937][ T2461] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 139.024300][ T2461] usb 5-1: USB disconnect, device number 27 [ 139.504935][ T4949] rust_binder: Error while translating object. [ 139.504983][ T4949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 139.511386][ T4949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:632 [ 139.548400][ T4951] incfs: mount failed -22 [ 139.763640][ T4970] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 139.844013][ T305] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 139.974027][ T305] usb 5-1: device descriptor read/64, error -71 [ 140.074009][ T45] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 140.214012][ T305] usb 5-1: device descriptor read/64, error -71 [ 140.223996][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 140.230320][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.241471][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.251420][ T45] usb 6-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.00 [ 140.260515][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.269208][ T45] usb 6-1: config 0 descriptor?? [ 140.454078][ T305] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 140.462678][ T4995] rust_binder: Error in use_page_slow: ESRCH [ 140.462706][ T4995] rust_binder: use_range failure ESRCH [ 140.466923][ T36] audit: type=1400 audit(2000000317.175:47213): avc: denied { lock } for pid=4994 comm="syz.0.1595" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 140.469391][ T4995] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 140.497748][ T4995] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 140.505820][ T4995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:82 [ 140.507936][ T45] usbhid 6-1:0.0: can't add hid device: -71 [ 140.546045][ T45] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 140.561403][ T45] usb 6-1: USB disconnect, device number 42 [ 140.623939][ T305] usb 5-1: device descriptor read/64, error -71 [ 140.722542][ T5005] netlink: 2072 bytes leftover after parsing attributes in process `syz.0.1596'. [ 140.873954][ T305] usb 5-1: device descriptor read/64, error -71 [ 140.974005][ T45] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 140.984229][ T305] usb usb5-port1: attempt power cycle [ 141.003982][ T10] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 141.127159][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 141.133555][ T45] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 141.142354][ T45] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 141.151318][ T45] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 141.161056][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 141.171435][ T45] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 141.174008][ T10] usb 2-1: Invalid ep0 maxpacket: 16 [ 141.181708][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 141.201780][ T45] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 141.211172][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.220871][ T45] usb 6-1: config 0 descriptor?? [ 141.324029][ T10] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 141.344014][ T305] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 141.364943][ T305] usb 5-1: device descriptor read/8, error -71 [ 141.427969][ T45] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 141.483988][ T10] usb 2-1: Invalid ep0 maxpacket: 16 [ 141.489622][ T10] usb usb2-port1: attempt power cycle [ 141.505360][ T305] usb 5-1: device descriptor read/8, error -71 [ 141.629249][ T36] audit: type=1400 audit(2000000318.345:47214): avc: denied { read write } for pid=5012 comm="syz.5.1600" name="lp0" dev="devtmpfs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 141.635874][ T45] usb 6-1: USB disconnect, device number 43 [ 141.653331][ T36] audit: type=1400 audit(2000000318.345:47215): avc: denied { open } for pid=5012 comm="syz.5.1600" path="/dev/usb/lp0" dev="devtmpfs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 141.666573][ T45] usblp0: removed [ 141.683485][ T36] audit: type=1400 audit(2000000318.355:47216): avc: denied { write } for pid=5012 comm="syz.5.1600" name="/" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 141.744013][ T305] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 141.765099][ T305] usb 5-1: device descriptor read/8, error -71 [ 141.834004][ T10] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 141.854472][ T10] usb 2-1: Invalid ep0 maxpacket: 16 [ 141.894949][ T305] usb 5-1: device descriptor read/8, error -71 [ 141.984045][ T10] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 142.004095][ T305] usb usb5-port1: unable to enumerate USB device [ 142.004393][ T10] usb 2-1: Invalid ep0 maxpacket: 16 [ 142.016125][ T10] usb usb2-port1: unable to enumerate USB device [ 142.544023][ T10] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 142.693968][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 142.700471][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.711577][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.721693][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 142.737718][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.742586][ T5033] kvm: pic: non byte write [ 142.748318][ T10] usb 6-1: config 0 descriptor?? [ 142.759704][ T10] hub 6-1:0.0: USB hub found [ 142.959199][ T10] hub 6-1:0.0: 1 port detected [ 143.043960][ T64] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 143.194066][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 143.200493][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.211462][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.221278][ T64] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 143.230459][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.239586][ T64] usb 5-1: config 0 descriptor?? [ 143.246738][ T64] hub 5-1:0.0: USB hub found [ 143.446673][ T64] hub 5-1:0.0: 1 port detected [ 143.561329][ T456] hub 6-1:0.0: activate --> -90 [ 143.648710][ T64] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 143.655246][ T64] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 143.664321][ T64] usbhid 5-1:0.0: can't add hid device: -71 [ 143.670344][ T64] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 143.694312][ T64] usb 5-1: USB disconnect, device number 32 [ 143.763404][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 143.763988][ T36] audit: type=1400 audit(2000000320.475:47217): avc: denied { execute } for pid=5030 comm="syz.5.1606" path="/179/cpu.stat" dev="tmpfs" ino=998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.770842][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 143.801952][ T456] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 143.803615][ T305] usb 6-1: USB disconnect, device number 44 [ 143.982712][ T36] audit: type=1400 audit(2000000320.695:47218): avc: denied { map } for pid=5054 comm="syz.1.1615" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 144.195889][ T5069] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.229881][ T36] audit: type=1400 audit(2000000320.945:47219): avc: denied { getopt } for pid=5071 comm="syz.1.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.315962][ T5074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 144.316002][ T5074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95 [ 144.404873][ T305] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 144.490650][ T5086] rust_binder: Write failure EINVAL in pid:870 [ 144.573965][ T305] usb 5-1: Using ep0 maxpacket: 16 [ 144.587620][ T5103] vlan1: entered allmulticast mode [ 144.588501][ T305] usb 5-1: config index 0 descriptor too short (expected 64967, got 165) [ 144.592952][ T5103] veth0_vlan: entered allmulticast mode [ 144.602126][ T305] usb 5-1: config 1 has an invalid descriptor of length 73, skipping remainder of the config [ 144.608644][ T5103] vlan1: left allmulticast mode [ 144.617938][ T305] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.623823][ T5103] veth0_vlan: left allmulticast mode [ 144.633799][ T305] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.646326][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.654914][ T305] usb 5-1: Product: syz [ 144.659435][ T305] usb 5-1: Manufacturer: syz [ 144.667883][ T305] usb 5-1: SerialNumber: syz [ 144.672147][ T5108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1635'. [ 144.884754][ T305] usb 5-1: 0:2 : does not exist [ 144.893386][ T305] usb 5-1: USB disconnect, device number 33 [ 144.973319][ T456] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.981144][ T456] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.991090][ T456] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.998795][ T456] rtc_cmos 00:00: Alarms can be up to one day in the future [ 145.006144][ T456] rtc rtc0: __rtc_set_alarm: err=-22 [ 145.332478][ T5145] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 145.332507][ T5145] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 145.340572][ T5145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:896 [ 145.402871][ T5151] SELinux: policydb magic number 0xa577a2e2 does not match expected magic number 0xf97cff8c [ 145.422922][ T5151] SELinux: failed to load policy [ 145.437524][ T5151] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 145.447574][ T5151] SELinux: failed to load policy [ 145.455716][ T5155] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 145.463977][ T5155] rust_binder: Write failure EINVAL in pid:654 [ 145.504005][ T456] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 145.675105][ T456] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.686118][ T456] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.696012][ T456] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.709292][ T456] usb 6-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 145.718475][ T456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.729933][ T456] usb 6-1: config 0 descriptor?? [ 145.753112][ T36] audit: type=1400 audit(2000000322.465:47220): avc: denied { map } for pid=5172 comm="syz.1.1659" path="socket:[29400]" dev="sockfs" ino=29400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 145.832516][ T5182] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 145.939376][ T5139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.956025][ T5139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.964377][ T5139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.975177][ T5186] batadv_slave_1: entered promiscuous mode [ 145.981115][ T5139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.992523][ T5139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.001278][ T5139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.010472][ T5139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.020047][ T5139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.028448][ T5139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.037142][ T5139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.050679][ T5188] batadv_slave_1: left promiscuous mode [ 146.252524][ T456] usb 6-1: language id specifier not provided by device, defaulting to English [ 146.269030][ T456] uclogic 0003:5543:0047.000A: failed retrieving Huion firmware version: -71 [ 146.290163][ T456] uclogic 0003:5543:0047.000A: failed probing parameters: -71 [ 146.298032][ T456] uclogic 0003:5543:0047.000A: probe with driver uclogic failed with error -71 [ 146.321036][ T456] usb 6-1: USB disconnect, device number 45 [ 146.364287][ T36] audit: type=1400 audit(2000000323.085:47221): avc: denied { mounton } for pid=5214 comm="syz.1.1670" path="/319/file0" dev="tmpfs" ino=1782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 146.387524][ T5216] 9pnet: Could not find request transport: n/Go=0x0000000000000003 [ 146.503428][ T5232] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.507322][ T5234] rust_binder: Error while translating object. [ 146.514150][ T5234] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 146.520346][ T5234] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:667 [ 146.588590][ T36] audit: type=1400 audit(2000000323.305:47222): avc: denied { create } for pid=5235 comm="syz.5.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 146.633953][ T10] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 146.785418][ T10] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 146.793708][ T10] usb 2-1: config 0 has no interface number 0 [ 146.799932][ T10] usb 2-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid maxpacket 12352, setting to 64 [ 146.812640][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 146.821762][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.829795][ T10] usb 2-1: Product: syz [ 146.833995][ T10] usb 2-1: Manufacturer: syz [ 146.838603][ T10] usb 2-1: SerialNumber: syz [ 146.843868][ T10] usb 2-1: config 0 descriptor?? [ 146.913961][ T456] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 147.065002][ T456] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 147.074948][ T456] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 147.086360][ T456] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 147.095547][ T456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.103662][ T456] usb 6-1: Product: syz [ 147.107934][ T456] usb 6-1: Manufacturer: syz [ 147.112569][ T456] usb 6-1: SerialNumber: syz [ 147.118379][ T456] usb 6-1: config 0 descriptor?? [ 147.123670][ T5240] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 147.130951][ T5240] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 147.250484][ T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 147.260984][ T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 147.270881][ T10] asix 2-1:0.251: probe with driver asix failed with error -5 [ 147.281149][ T10] usb 2-1: USB disconnect, device number 41 [ 147.339606][ T5240] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 147.347777][ T5240] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 147.645334][ T5249] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1681'. [ 147.655816][ T5249] input: syz1 as /devices/virtual/input/input45 [ 147.664175][ T5249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5249 comm=syz.4.1681 [ 147.761941][ T5240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.774289][ T5240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.790742][ T456] Error reading MAC address [ 147.802834][ T456] usb 6-1: USB disconnect, device number 46 [ 147.978625][ T5280] binder: Unknown parameter 'fscontext?}' [ 148.101308][ T5292] tipc: Enabled bearer , priority 0 [ 148.109062][ T5292] tipc: Disabling bearer [ 148.163983][ T10] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 148.247270][ T5304] netlink: 'syz.1.1700': attribute type 4 has an invalid length. [ 148.255279][ T5304] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1700'. [ 148.324866][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.353701][ T10] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 148.363204][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.379157][ T10] usb 5-1: config 0 descriptor?? [ 148.624032][ T456] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 148.775150][ T456] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 148.783557][ T456] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 148.794263][ T10] nintendo 0003:057E:200E.000B: unknown main item tag 0x0 [ 148.801583][ T10] nintendo 0003:057E:200E.000B: unknown main item tag 0x0 [ 148.808852][ T456] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 148.819228][ T456] usb 2-1: config 220 has no interface number 2 [ 148.825586][ T10] nintendo 0003:057E:200E.000B: unknown main item tag 0x0 [ 148.832765][ T10] nintendo 0003:057E:200E.000B: unknown main item tag 0x0 [ 148.839969][ T456] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 148.853296][ T10] nintendo 0003:057E:200E.000B: unknown main item tag 0x0 [ 148.860486][ T456] usb 2-1: config 220 interface 0 has no altsetting 0 [ 148.867357][ T10] nintendo 0003:057E:200E.000B: unknown main item tag 0x0 [ 148.874683][ T456] usb 2-1: config 220 interface 76 has no altsetting 0 [ 148.881621][ T456] usb 2-1: config 220 interface 1 has no altsetting 0 [ 148.888463][ T10] nintendo 0003:057E:200E.000B: unknown main item tag 0x0 [ 148.896822][ T10] nintendo 0003:057E:200E.000B: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.4-1/input0 [ 148.908391][ T456] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 148.917536][ T456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.925630][ T456] usb 2-1: Product: syz [ 148.929896][ T456] usb 2-1: Manufacturer: syz [ 148.934674][ T456] usb 2-1: SerialNumber: syz [ 148.974002][ T10] nintendo 0003:057E:200E.000B: Failed charging grip handshake [ 148.981613][ T10] nintendo 0003:057E:200E.000B: Failed to initialize controller; ret=-110 [ 148.990968][ T10] nintendo 0003:057E:200E.000B: probe - fail = -110 [ 148.997739][ T10] nintendo 0003:057E:200E.000B: probe with driver nintendo failed with error -110 [ 149.141263][ T5315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.149995][ T5315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.161273][ T456] usb 2-1: selecting invalid altsetting 0 [ 149.167460][ T456] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 149.174032][ T456] usb 2-1: No valid video chain found. [ 149.185761][ T456] usb 2-1: USB disconnect, device number 42 [ 149.467571][ T306] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 149.479165][ T36] audit: type=1400 audit(2000000326.195:47223): avc: denied { create } for pid=5331 comm="syz.0.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 149.623983][ T306] usb 6-1: Using ep0 maxpacket: 16 [ 149.630466][ T306] usb 6-1: config 0 has no interfaces? [ 149.637515][ T306] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.646646][ T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.654724][ T306] usb 6-1: Product: syz [ 149.658898][ T306] usb 6-1: Manufacturer: syz [ 149.663581][ T306] usb 6-1: SerialNumber: syz [ 149.669199][ T306] usb 6-1: config 0 descriptor?? [ 149.707103][ T5336] /dev/rnullb0: Can't open blockdev [ 149.877688][ T456] usb 6-1: USB disconnect, device number 47 [ 150.027226][ T5352] rust_binder: Write failure EFAULT in pid:139 [ 150.027380][ T5352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:139 [ 150.517190][ T36] audit: type=1326 audit(2000000327.235:47224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz.5.1722" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb26b98e929 code=0x0 [ 150.931067][ T45] usb 5-1: USB disconnect, device number 34 [ 150.950922][ T5388] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 150.982989][ T5393] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=5393 comm=syz.0.1730 [ 150.986899][ T36] audit: type=1400 audit(2000000327.705:47225): avc: denied { mounton } for pid=5389 comm="syz.4.1731" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 151.023943][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 151.174018][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 151.181449][ T10] usb 2-1: config 2 has an invalid interface number: 108 but max is 2 [ 151.189756][ T10] usb 2-1: config 2 has an invalid interface number: 117 but max is 2 [ 151.197971][ T10] usb 2-1: config 2 has an invalid interface number: 8 but max is 2 [ 151.206061][ T10] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 151.215060][ T10] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 151.225189][ T10] usb 2-1: config 2 has no interface number 0 [ 151.231286][ T10] usb 2-1: config 2 has no interface number 1 [ 151.237640][ T10] usb 2-1: config 2 has no interface number 2 [ 151.244082][ T10] usb 2-1: config 2 interface 108 altsetting 10 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 151.255550][ T10] usb 2-1: config 2 interface 108 altsetting 10 endpoint 0x3 has invalid maxpacket 6773, setting to 64 [ 151.266728][ T10] usb 2-1: config 2 interface 108 altsetting 10 has an endpoint descriptor with address 0x21, changing to 0x1 [ 151.278511][ T10] usb 2-1: config 2 interface 108 altsetting 10 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 151.289670][ T10] usb 2-1: config 2 interface 108 altsetting 10 endpoint 0xB has invalid maxpacket 1648, setting to 64 [ 151.300753][ T10] usb 2-1: config 2 interface 108 altsetting 10 has a duplicate endpoint with address 0x3, skipping [ 151.311732][ T10] usb 2-1: config 2 interface 117 altsetting 11 endpoint 0x9 has invalid wMaxPacketSize 0 [ 151.321691][ T10] usb 2-1: config 2 interface 117 altsetting 11 bulk endpoint 0x9 has invalid maxpacket 0 [ 151.331655][ T10] usb 2-1: config 2 interface 117 altsetting 11 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 151.343236][ T10] usb 2-1: config 2 interface 117 altsetting 11 has a duplicate endpoint with address 0x9, skipping [ 151.358977][ T10] usb 2-1: config 2 interface 117 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 151.376077][ T10] usb 2-1: config 2 interface 117 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 151.387070][ T10] usb 2-1: config 2 interface 117 altsetting 11 has a duplicate endpoint with address 0xB, skipping [ 151.397907][ T10] usb 2-1: config 2 interface 117 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 151.408755][ T10] usb 2-1: config 2 interface 117 altsetting 11 has a duplicate endpoint with address 0xB, skipping [ 151.421231][ T10] usb 2-1: config 2 interface 8 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.434216][ T10] usb 2-1: config 2 interface 108 has no altsetting 0 [ 151.441151][ T10] usb 2-1: config 2 interface 117 has no altsetting 0 [ 151.447980][ T10] usb 2-1: config 2 interface 8 has no altsetting 0 [ 151.456970][ T10] usb 2-1: New USB device found, idVendor=d926, idProduct=04c4, bcdDevice=db.1c [ 151.466199][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.474422][ T10] usb 2-1: Product: Њ [ 151.478510][ T10] usb 2-1: Manufacturer: 桰 [ 151.483122][ T10] usb 2-1: SerialNumber: syz [ 151.574656][ T5408] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 151.632797][ T5420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1741'. [ 151.675558][ T36] audit: type=1400 audit(2000000328.397:47226): avc: denied { execmem } for pid=5423 comm="syz.4.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 151.684281][ T5424] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1742'. [ 151.699185][ T10] usb 2-1: Found UVC 0.00 device Њ (d926:04c4) [ 151.705191][ T5424] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1742'. [ 151.711226][ T10] usb 2-1: No valid video chain found. [ 151.719585][ T5424] netlink: 'syz.4.1742': attribute type 6 has an invalid length. [ 151.732092][ T10] usb 2-1: USB disconnect, device number 43 [ 151.732631][ T5424] netlink: 'syz.4.1742': attribute type 5 has an invalid length. [ 151.749888][ T5424] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1742'. [ 151.780270][ T5429] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 151.803964][ T45] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 151.866788][ T5431] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 151.964037][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 151.970783][ T45] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 151.980152][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.989917][ T45] usb 6-1: config 0 descriptor?? [ 152.395971][ T36] audit: type=1400 audit(2000000329.117:47227): avc: denied { sys_nice } for pid=5436 comm="syz.1.1745" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 152.473995][ T5439] SELinux: Context system_u:object_r:unconfined_exec_t:s0 is not valid (left unmapped). [ 152.484442][ T36] audit: type=1400 audit(2000000329.207:47228): avc: denied { relabelto } for pid=5438 comm="syz.0.1746" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0" [ 152.533509][ T36] audit: type=1400 audit(2000000329.207:47229): avc: denied { associate } for pid=5438 comm="syz.0.1746" name="rnullb0" dev="devtmpfs" ino=31 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_exec_t:s0" [ 152.576996][ T36] audit: type=1400 audit(2000000329.207:47230): avc: denied { read write } for pid=5438 comm="syz.0.1746" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0" [ 152.609386][ T36] audit: type=1400 audit(2000000329.207:47231): avc: denied { open } for pid=5438 comm="syz.0.1746" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0" [ 152.685216][ T5445] rust_binder: Error while translating object. [ 152.685262][ T5445] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 152.699498][ T5445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:188 [ 152.716508][ T45] usb 6-1: USB disconnect, device number 48 [ 152.865599][ T36] audit: type=1400 audit(2000000329.577:47232): avc: denied { read write } for pid=5455 comm="syz.4.1751" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.903976][ T36] audit: type=1400 audit(2000000329.577:47233): avc: denied { open } for pid=5455 comm="syz.4.1751" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.927802][ T36] audit: type=1400 audit(2000000329.577:47234): avc: denied { ioctl } for pid=5455 comm="syz.4.1751" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.011287][ T5462] block device autoloading is deprecated and will be removed. [ 153.024490][ T5462] syz.5.1754: attempt to access beyond end of device [ 153.024490][ T5462] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 153.103972][ T4747] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 153.142429][ T5465] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 153.185530][ T5467] /dev/rnullb0: Can't open blockdev [ 153.251304][ T5472] input: syz1 as /devices/virtual/input/input46 [ 153.264427][ T4747] usb 5-1: Invalid ep0 maxpacket: 16 [ 153.393962][ T4747] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 153.412024][ T5475] /dev/rnullb0: Can't open blockdev [ 153.474010][ T10] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 153.554017][ T4747] usb 5-1: Invalid ep0 maxpacket: 16 [ 153.559474][ T4747] usb usb5-port1: attempt power cycle [ 153.604096][ T10] usb 6-1: device descriptor read/64, error -71 [ 153.863957][ T10] usb 6-1: device descriptor read/64, error -71 [ 153.914033][ T4747] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 153.934406][ T4747] usb 5-1: Invalid ep0 maxpacket: 16 [ 153.952016][ T5483] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.959445][ T5483] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.967393][ T5483] bridge_slave_0: entered allmulticast mode [ 153.973779][ T5483] bridge_slave_0: entered promiscuous mode [ 153.980747][ T5483] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.987894][ T5483] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.995029][ T5483] bridge_slave_1: entered allmulticast mode [ 154.001538][ T5483] bridge_slave_1: entered promiscuous mode [ 154.061910][ T5483] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.064154][ T4747] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 154.069412][ T5483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.084249][ T5483] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.091287][ T5483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.094427][ T4747] usb 5-1: Invalid ep0 maxpacket: 16 [ 154.105452][ T10] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 154.105546][ T4747] usb usb5-port1: unable to enumerate USB device [ 154.128009][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.135806][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.145902][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.152968][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.162129][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.169271][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.196625][ T5483] veth0_vlan: entered promiscuous mode [ 154.208383][ T5483] veth1_macvtap: entered promiscuous mode [ 154.243960][ T10] usb 6-1: device descriptor read/64, error -71 [ 154.484004][ T10] usb 6-1: device descriptor read/64, error -71 [ 154.594074][ T10] usb usb6-port1: attempt power cycle [ 154.934704][ T10] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 154.955164][ T10] usb 6-1: device descriptor read/8, error -71 [ 155.087702][ T10] usb 6-1: device descriptor read/8, error -71 [ 155.167544][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.176525][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.184583][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.192635][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.200645][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.209057][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.216997][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.225294][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.233257][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.241215][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.249114][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.258503][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.266398][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.275015][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.282876][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.290740][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.298758][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.306737][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.314916][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.325123][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.332988][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.340952][ T10] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 155.349398][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.357409][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.365292][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.373109][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.380991][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.389043][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.396955][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.404891][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.413033][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.421004][ T10] usb 6-1: device descriptor read/8, error -71 [ 155.428210][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.436383][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.444242][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.451996][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.459887][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.467693][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.475533][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 155.484102][ T9] hid-generic 0000:007F:FFFFFFFE.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 155.504309][ T5500] fido_id[5500]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 155.555546][ T10] usb 6-1: device descriptor read/8, error -71 [ 155.652023][ T5511] SELinux: security_context_str_to_sid (nconuined_u) failed with errno=-22 [ 155.667485][ T10] usb usb6-port1: unable to enumerate USB device [ 155.688375][ T5514] SELinux: failed to load policy [ 155.788420][ T5516] SELinux: security_context_str_to_sid () failed with errno=-22 [ 156.043950][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 156.063512][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 156.063582][ T36] audit: type=1400 audit(2000000332.777:47240): avc: denied { write } for pid=5535 comm="syz.4.1780" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 156.088144][ T5536] batadv_slave_1: entered promiscuous mode [ 156.193991][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 156.200516][ T10] usb 7-1: config 247 has an invalid interface number: 79 but max is 0 [ 156.208914][ T10] usb 7-1: config 247 has no interface number 0 [ 156.215535][ T10] usb 7-1: config 247 interface 79 has no altsetting 0 [ 156.223935][ T10] usb 7-1: New USB device found, idVendor=03eb, idProduct=2002, bcdDevice= 1.18 [ 156.233069][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.245796][ T10] usb 7-1: Product: syz [ 156.250318][ T10] usb 7-1: Manufacturer: syz [ 156.255241][ T10] usb 7-1: SerialNumber: syz [ 156.284337][ T36] audit: type=1400 audit(2000000333.007:47241): avc: denied { ioctl } for pid=5537 comm="syz.5.1781" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0" [ 156.333993][ T45] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 156.416786][ T5541] netlink: 'syz.5.1782': attribute type 40 has an invalid length. [ 156.474043][ T10] usb 7-1: USB disconnect, device number 2 [ 156.485342][ T45] usb 5-1: not running at top speed; connect to a high speed hub [ 156.494150][ T45] usb 5-1: config 1 interface 0 has no altsetting 0 [ 156.502361][ T45] usb 5-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.40 [ 156.511474][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.519562][ T45] usb 5-1: Product: syz [ 156.523777][ T45] usb 5-1: Manufacturer: syz [ 156.528396][ T45] usb 5-1: SerialNumber: syz [ 156.684012][ T64] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 156.736817][ T5535] batadv_slave_1: left promiscuous mode [ 156.745476][ T45] usbhid 5-1:1.0: can't add hid device: -71 [ 156.751569][ T45] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 156.760526][ T45] usb 5-1: USB disconnect, device number 39 [ 156.833977][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 156.840968][ T64] usb 6-1: config 1 interface 0 altsetting 192 bulk endpoint 0x82 has invalid maxpacket 1024 [ 156.851262][ T64] usb 6-1: config 1 interface 0 altsetting 192 bulk endpoint 0x3 has invalid maxpacket 16 [ 156.861251][ T64] usb 6-1: config 1 interface 0 altsetting 192 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.874671][ T64] usb 6-1: config 1 interface 0 has no altsetting 0 [ 156.882852][ T64] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.892463][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.900606][ T64] usb 6-1: Product: 靠鑍䀓◧ⰰ갤鍮厼超샅먥吟ⱷ埔鳗׷껌淰鈙꿸₇ȏ둏騲爼腅辢ᲁ呄鉩㡞ଁ豐鉼់ꉀ⿩뤋꒔㘮皭쮽췀ᳬ鎏럃㠘혴ࢻ搮껻䞍紋팓骧齢杏╎嫺忲茮㏗㩼倇妁捞돇䗀絹îៜ썬ྒὅ鎝籺䙰䣩拟昗 [ 156.927818][ T64] usb 6-1: Manufacturer: 䄆▘救ޓ죷唈槇붓檂ꞡ礠佈뺟ᓧ [ 156.936549][ T64] usb 6-1: SerialNumber: ␁ [ 156.942164][ T5546] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 156.949719][ T5546] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 157.141732][ T12] tipc: Subscription rejected, illegal request [ 157.159141][ T5546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.167821][ T5546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.180910][ T5561] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.181242][ T64] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 157.181340][ T5561] rust_binder: Error while translating object. [ 157.195971][ T64] usb 6-1: USB disconnect, device number 53 [ 157.199023][ T5561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 157.208244][ T5561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 157.799353][ T5584] 9pnet_fd: Insufficient options for proto=fd [ 158.233511][ T36] audit: type=1326 audit(2000000334.947:47242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.5.1803" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb26b98e929 code=0x0 [ 158.414000][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 158.503941][ T45] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 158.564042][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 158.570291][ T10] usb 5-1: config 0 has an invalid interface number: 150 but max is 0 [ 158.578737][ T10] usb 5-1: config 0 has an invalid interface number: 112 but max is 0 [ 158.587009][ T10] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 158.595059][ T10] usb 5-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 158.604229][ T10] usb 5-1: config 0 has no interface number 0 [ 158.610314][ T10] usb 5-1: config 0 has no interface number 1 [ 158.616513][ T10] usb 5-1: config 0 has no interface number 2 [ 158.622639][ T10] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.635782][ T10] usb 5-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 158.647296][ T10] usb 5-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 158.660687][ T10] usb 5-1: config 0 interface 150 has no altsetting 0 [ 158.667621][ T10] usb 5-1: config 0 interface 112 has no altsetting 0 [ 158.673961][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 158.674487][ T10] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 158.680986][ T45] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.688752][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.707061][ T45] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.708780][ T10] usb 5-1: config 0 descriptor?? [ 158.727088][ T45] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 158.737921][ T45] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 158.746994][ T45] usb 6-1: Product: syz [ 158.751478][ T45] usb 6-1: Manufacturer: syz [ 158.759477][ T45] hub 6-1:4.0: USB hub found [ 158.963981][ T45] hub 6-1:4.0: 1 port detected [ 158.972621][ T36] audit: type=1400 audit(2000000335.687:47243): avc: denied { write } for pid=5618 comm="syz.0.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 158.975528][ T5619] devpts: called with bogus options [ 159.003981][ T305] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 159.028210][ T36] audit: type=1400 audit(2000000335.747:47244): avc: denied { mounton } for pid=5620 comm="syz.0.1810" path="/syzcgroup/unified/syz0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 159.028293][ T5621] /dev/nbd0: Can't lookup blockdev [ 159.083837][ T5624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1811'. [ 159.126919][ T10] usb 5-1: string descriptor 0 read error: -71 [ 159.133932][ T305] usb 7-1: device descriptor read/64, error -71 [ 159.136645][ T10] usb 5-1: USB disconnect, device number 40 [ 159.366607][ T5609] input: syz1 as /devices/virtual/input/input48 [ 159.375138][ T5609] fuse: Unknown parameter 'fd<0:chyǡփQ?s i0*Sr8(ʈq!N&t؆f%JHƷ֯e970x0000000000000006' [ 159.384046][ T305] usb 7-1: device descriptor read/64, error -71 [ 159.398190][ T45] hub 6-1:4.0: set hub depth failed [ 159.406489][ T45] usb 6-1: USB disconnect, device number 54 [ 159.644836][ T305] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 159.774013][ T305] usb 7-1: device descriptor read/64, error -71 [ 160.013977][ T305] usb 7-1: device descriptor read/64, error -71 [ 160.124073][ T305] usb usb7-port1: attempt power cycle [ 160.224062][ T4747] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 160.239978][ T36] audit: type=1400 audit(2000000336.957:47245): avc: denied { execute } for pid=5651 comm="syz.4.1819" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0" [ 160.354035][ T4747] usb 6-1: device descriptor read/64, error -71 [ 160.463999][ T305] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 160.485066][ T305] usb 7-1: device descriptor read/8, error -71 [ 160.550908][ T5657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1821'. [ 160.564490][ T5657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1821'. [ 160.593971][ T4747] usb 6-1: device descriptor read/64, error -71 [ 160.615405][ T305] usb 7-1: device descriptor read/8, error -71 [ 160.834000][ T4747] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 160.853977][ T305] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 160.875113][ T305] usb 7-1: device descriptor read/8, error -71 [ 160.903986][ T45] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 160.963941][ T4747] usb 6-1: device descriptor read/64, error -71 [ 161.005168][ T305] usb 7-1: device descriptor read/8, error -71 [ 161.053989][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 161.060450][ T45] usb 5-1: config 1 interface 0 altsetting 132 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 161.071763][ T45] usb 5-1: config 1 interface 0 has no altsetting 0 [ 161.080005][ T45] usb 5-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.40 [ 161.089281][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.097393][ T45] usb 5-1: Product: 뙎舋㞜頝縀ㅺ㲃객ꍰⰭ殛Ϧ늸虶쏍﹠뵱蹊䒸꬧Ѝ혪癅쏊硝愂鄷奃㼓睿ມ팶컆㿀츴嘚ꈝ塗혒㿿ﺟ↨㢇찥鏲≰᮸엡䔐䊂Სｙ濌ਉ⋢憌ꩺ脪ꍁ [ 161.118022][ T305] usb usb7-port1: unable to enumerate USB device [ 161.124876][ T45] usb 5-1: Manufacturer: Ц [ 161.129402][ T45] usb 5-1: SerialNumber: Х [ 161.203943][ T4747] usb 6-1: device descriptor read/64, error -71 [ 161.314118][ T4747] usb usb6-port1: attempt power cycle [ 161.541149][ T45] usbhid 5-1:1.0: can't add hid device: -71 [ 161.547352][ T45] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 161.556285][ T45] usb 5-1: USB disconnect, device number 41 [ 161.653992][ T4747] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 161.675005][ T4747] usb 6-1: device descriptor read/8, error -71 [ 161.804210][ T5662] 9pnet_fd: Insufficient options for proto=fd [ 161.815576][ T4747] usb 6-1: device descriptor read/8, error -71 [ 162.054262][ T4747] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 162.078653][ T5682] cgroup: subsys name conflicts with all [ 162.085246][ T5682] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 162.085269][ T5682] rust_binder: Error while translating object. [ 162.086099][ T4747] usb 6-1: device descriptor read/8, error -71 [ 162.097995][ T5682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 162.110146][ T5682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 162.224969][ T4747] usb 6-1: device descriptor read/8, error -71 [ 162.303927][ T45] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 162.344384][ T4747] usb usb6-port1: unable to enumerate USB device [ 162.465011][ T45] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 162.483414][ T45] usb 5-1: config 0 has no interface number 0 [ 162.484388][ T36] audit: type=1400 audit(2000000339.207:47246): avc: denied { read } for pid=5704 comm="syz.6.1833" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 162.489582][ T45] usb 5-1: config 0 interface 41 has no altsetting 0 [ 162.525321][ T45] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 162.530910][ T36] audit: type=1400 audit(2000000339.207:47247): avc: denied { watch } for pid=5704 comm="syz.6.1833" path="/31/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 162.534490][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.577208][ T45] usb 5-1: Product: syz [ 162.601835][ T5706] syzkaller0: entered promiscuous mode [ 162.613949][ T45] usb 5-1: Manufacturer: syz [ 162.618623][ T45] usb 5-1: SerialNumber: syz [ 162.637197][ T45] usb 5-1: config 0 descriptor?? [ 162.644448][ T45] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 162.648455][ T5706] syzkaller0: entered allmulticast mode [ 162.689400][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.689431][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.696201][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.702774][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.713964][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.720455][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.727021][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.733481][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.744159][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.750654][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.757376][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.763852][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.773969][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.780471][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.787048][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.793511][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.803986][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.810562][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.817195][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.823683][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.833954][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.840429][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.846986][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.863257][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.870617][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.880439][ T45] usb 5-1: USB disconnect, device number 42 [ 162.894022][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.894052][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.900711][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.915189][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.932356][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.939089][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.939791][ T5717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:111 [ 162.953964][ T5713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.014129][ T5725] rust_binder: Write failure EFAULT in pid:111 [ 163.234245][ T36] audit: type=1400 audit(2000000339.957:47248): avc: denied { append } for pid=5734 comm="syz.0.1842" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0" [ 163.375030][ T36] audit: type=1400 audit(2000000340.097:47249): avc: denied { getattr } for pid=5741 comm="syz.6.1844" path="net:[4026532316]" dev="nsfs" ino=4026532316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 163.408791][ T10] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 163.422353][ T5744] binder: Bad value for 'stats' [ 163.526613][ T36] audit: type=1400 audit(2000000340.247:47250): avc: denied { setopt } for pid=5753 comm="syz.0.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.576493][ T10] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 163.585810][ T10] usb 6-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 163.594259][ T10] usb 6-1: Product: syz [ 163.598517][ T10] usb 6-1: Manufacturer: syz [ 163.603157][ T10] usb 6-1: SerialNumber: syz [ 163.623116][ T10] usb 6-1: config 0 descriptor?? [ 163.847688][ T5776] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.894523][ T5778] rust_binder: Error while translating object. [ 163.911153][ T5778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 163.923935][ T5778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:782 [ 163.945520][ T5779] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.039829][ T36] audit: type=1400 audit(2000000340.757:47251): avc: denied { create } for pid=5784 comm="syz.0.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 164.068118][ T36] audit: type=1400 audit(2000000340.757:47252): avc: denied { setcheckreqprot } for pid=5784 comm="syz.0.1860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 164.154830][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 164.171068][ T10] asix 6-1:0.0: probe with driver asix failed with error -71 [ 164.188367][ T10] usb 6-1: USB disconnect, device number 59 [ 164.230717][ T5800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1864'. [ 164.527831][ T36] audit: type=1400 audit(2000000341.247:47253): avc: denied { execute } for pid=5822 comm="syz.0.1871" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.774990][ T5831] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1874'. [ 165.083921][ T4747] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 165.174195][ T5839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1877'. [ 165.223957][ T4747] usb 6-1: device descriptor read/64, error -71 [ 165.419933][ T5847] fuse: Bad value for 'fd' [ 165.474018][ T4747] usb 6-1: device descriptor read/64, error -71 [ 165.607975][ T36] audit: type=1400 audit(2000000342.327:47254): avc: denied { append } for pid=5859 comm="syz.4.1884" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 165.723996][ T4747] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 165.873957][ T4747] usb 6-1: device descriptor read/64, error -71 [ 165.965325][ T5873] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 165.968821][ T36] audit: type=1400 audit(2000000342.687:47255): avc: denied { setattr } for pid=5870 comm="syz.0.1888" name="/" dev="configfs" ino=2528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.134263][ T4747] usb 6-1: device descriptor read/64, error -71 [ 166.244062][ T4747] usb usb6-port1: attempt power cycle [ 166.583995][ T4747] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 166.605077][ T4747] usb 6-1: device descriptor read/8, error -71 [ 166.622215][ T5898] overlayfs: failed to resolve './file0': -2 [ 166.688688][ T5900] 9pnet_fd: Insufficient options for proto=fd [ 166.696228][ T5900] overlay: ./file1 is not a directory [ 166.747001][ T4747] usb 6-1: device descriptor read/8, error -71 [ 166.801584][ T5909] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.812283][ T5909] rust_binder: Write failure EINVAL in pid:289 [ 166.984096][ T4747] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 167.034911][ T4747] usb 6-1: device descriptor read/8, error -71 [ 167.087417][ T5920] /dev/rnullb0: Can't open blockdev [ 167.177436][ T4747] usb 6-1: device descriptor read/8, error -71 [ 167.294083][ T4747] usb usb6-port1: unable to enumerate USB device [ 167.979377][ T5928] 9pnet_fd: Insufficient options for proto=fd [ 168.631549][ T5951] kvm: kvm [5950]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000040400 [ 168.647451][ T5953] rust_binder: Write failure EFAULT in pid:807 [ 168.705548][ T5954] fuse: Unknown parameter 'f0x000000000000000b' [ 168.876693][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 168.876714][ T36] audit: type=1400 audit(2000000345.597:47257): avc: denied { relabelfrom } for pid=5965 comm="syz.0.1921" name="UNIX" dev="sockfs" ino=36303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 168.912025][ T5974] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.912411][ T5974] rust_binder: Error while translating object. [ 168.920322][ T5974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 168.926828][ T5974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:310 [ 168.954568][ T36] audit: type=1401 audit(2000000345.597:47258): op=setxattr invalid_context="" [ 169.183052][ T5998] tipc: Started in network mode [ 169.193579][ T5998] tipc: Node identity 2a2f9c9feb4c, cluster identity 4711 [ 169.209388][ T5998] tipc: Enabled bearer , priority 0 [ 169.226158][ T5996] tipc: Disabling bearer [ 169.419008][ T6008] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.419320][ T6008] rust_binder: Error in use_page_slow: ESRCH [ 169.426009][ T6008] rust_binder: use_range failure ESRCH [ 169.432114][ T6008] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 169.437872][ T6008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 169.446085][ T6008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:332 [ 169.456217][ T6009] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.628996][ T36] audit: type=1400 audit(2000000346.347:47259): avc: denied { create } for pid=6016 comm="syz.0.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 169.753663][ T36] audit: type=1400 audit(2000000346.467:47260): avc: denied { ioctl } for pid=6021 comm="syz.5.1940" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 169.855722][ T6027] binder: Bad value for 'stats' [ 169.905543][ T36] audit: type=1400 audit(2000000346.627:47261): avc: denied { relabelfrom } for pid=6034 comm="syz.5.1943" name="" dev="pipefs" ino=39061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 169.973723][ T6040] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 170.005752][ T36] audit: type=1400 audit(2000000346.727:47262): avc: denied { setattr } for pid=6043 comm="syz.5.1946" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:unconfined_exec_t:s0" [ 170.264357][ T6059] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 170.273385][ T36] audit: type=1400 audit(2000000346.987:47263): avc: denied { mounton } for pid=6058 comm="syz.5.1951" path="/262/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 170.329164][ T6062] netlink: 1603 bytes leftover after parsing attributes in process `syz.5.1952'. [ 170.478448][ T6064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9695 sclass=netlink_route_socket pid=6064 comm=syz.0.1953 [ 170.512922][ T36] audit: type=1400 audit(2000000347.227:47264): avc: denied { accept } for pid=6067 comm="syz.0.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 170.754345][ T4747] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 170.893944][ T4747] usb 6-1: device descriptor read/64, error -71 [ 171.143945][ T4747] usb 6-1: device descriptor read/64, error -71 [ 171.385670][ T4747] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 171.533989][ T4747] usb 6-1: device descriptor read/64, error -71 [ 171.783945][ T4747] usb 6-1: device descriptor read/64, error -71 [ 171.894052][ T4747] usb usb6-port1: attempt power cycle [ 172.243940][ T4747] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 172.265164][ T4747] usb 6-1: device descriptor read/8, error -71 [ 172.395080][ T4747] usb 6-1: device descriptor read/8, error -71 [ 172.643989][ T4747] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 172.665087][ T4747] usb 6-1: device descriptor read/8, error -71 [ 172.795171][ T4747] usb 6-1: device descriptor read/8, error -71 [ 172.904103][ T4747] usb usb6-port1: unable to enumerate USB device [ 173.843956][ T10] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 173.995449][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 174.004182][ T10] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 174.015592][ T10] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 174.028426][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 174.037659][ T10] usb 6-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.40 [ 174.048770][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.057792][ T10] usb 6-1: Product: syz [ 174.062151][ T10] usb 6-1: Manufacturer: syz [ 174.067073][ T10] usb 6-1: SerialNumber: syz [ 174.073282][ T6104] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 174.080819][ T6104] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 174.303142][ T10] usbhid 6-1:1.0: can't add hid device: -71 [ 174.309207][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 174.334570][ T10] usb 6-1: USB disconnect, device number 68 [ 174.427971][ T6106] binder: Unknown parameter '' [ 174.607934][ T6113] kvm: pic: non byte write [ 174.613308][ T6113] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3826208611 (3826208611 ns) > initial count (1702111234 ns). Using initial count to start timer. [ 174.899069][ T36] audit: type=1404 audit(2000000351.617:47265): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 174.919252][ T36] audit: type=1400 audit(2000000351.617:47266): avc: denied { write } for pid=6129 comm="syz.5.1974" path="socket:[40032]" dev="sockfs" ino=40032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 174.946521][ T36] audit: type=1400 audit(2000000351.627:47267): avc: denied { create } for pid=6129 comm="syz.5.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 174.966538][ T36] audit: type=1400 audit(2000000351.627:47268): avc: denied { execmem } for pid=6129 comm="syz.5.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 174.991229][ T36] audit: type=1400 audit(2000000351.637:47269): avc: denied { ioctl } for pid=6129 comm="syz.5.1974" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 175.016634][ T36] audit: type=1400 audit(2000000351.687:47270): avc: denied { mounton } for pid=6131 comm="syz.0.1975" path="/125/file0" dev="tmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 175.040518][ T36] audit: type=1400 audit(2000000351.687:47271): avc: denied { read write } for pid=6131 comm="syz.0.1975" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:unconfined_exec_t:s0" [ 175.069116][ T36] audit: type=1400 audit(2000000351.707:47272): avc: denied { read write } for pid=4493 comm="syz-executor" name="loop0" dev="devtmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 175.094420][ T36] audit: type=1400 audit(2000000351.737:47273): avc: denied { mounton } for pid=6133 comm="syz.0.1976" path="/126" dev="tmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 175.122170][ T36] audit: type=1400 audit(2000000351.757:47274): avc: denied { create } for pid=6133 comm="syz.0.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 175.255149][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1984'. [ 176.688643][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2018'. [ 177.370917][ T6292] can0: slcan on ptm0. [ 177.454147][ T6292] can0 (unregistered): slcan off ptm0. [ 179.504946][ T6417] netlink: 'syz.5.2078': attribute type 4 has an invalid length. [ 179.905072][ T36] kauditd_printk_skb: 12476 callbacks suppressed [ 179.905093][ T36] audit: type=1400 audit(2000000356.626:58935): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.919832][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 179.942879][ T6458] audit: audit_backlog=65 > audit_backlog_limit=64 [ 179.950695][ T2227] audit: audit_backlog=65 > audit_backlog_limit=64 [ 179.958199][ T6458] audit: audit_lost=273 audit_rate_limit=0 audit_backlog_limit=64 [ 179.960482][ T148] audit: audit_lost=274 audit_rate_limit=0 audit_backlog_limit=64 [ 179.966471][ T2227] audit: audit_lost=275 audit_rate_limit=0 audit_backlog_limit=64 [ 179.982066][ T2227] audit: backlog limit exceeded [ 179.987227][ T6458] audit: backlog limit exceeded [ 179.987512][ T148] audit: backlog limit exceeded [ 180.078204][ T6463] x_tables: duplicate underflow at hook 1 [ 180.264948][ T6490] netlink: 'syz.5.2102': attribute type 15 has an invalid length. [ 180.276357][ T6490] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2102'. [ 180.707891][ T6527] tap0: tun_chr_ioctl cmd 1074025677 [ 180.713477][ T6527] tap0: linktype set to 776 [ 181.108861][ T6538] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.125165][ T6538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.132493][ T6538] IPv6: NLM_F_CREATE should be set when creating new route [ 182.116412][ T12] bridge_slave_1: left allmulticast mode [ 182.122109][ T12] bridge_slave_1: left promiscuous mode [ 182.133715][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.154414][ T12] bridge_slave_0: left allmulticast mode [ 182.160107][ T12] bridge_slave_0: left promiscuous mode [ 182.173951][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.287263][ T12] veth1_macvtap: left promiscuous mode [ 182.293189][ T12] veth0_vlan: left promiscuous mode [ 184.913944][ T36] kauditd_printk_skb: 32721 callbacks suppressed [ 184.913988][ T36] audit: type=1400 audit(2000000004.710:91537): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.924155][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.945555][ T4493] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.949110][ T148] audit: audit_lost=316 audit_rate_limit=0 audit_backlog_limit=64 [ 184.956511][ T4493] audit: audit_lost=317 audit_rate_limit=0 audit_backlog_limit=64 [ 184.964143][ T148] audit: backlog limit exceeded [ 184.972389][ T4493] audit: backlog limit exceeded [ 184.977387][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.982235][ T36] audit: type=1400 audit(2000000004.720:91538): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.989393][ T148] audit: audit_lost=318 audit_rate_limit=0 audit_backlog_limit=64 [ 186.086194][ T6637] sit0: entered promiscuous mode [ 186.105097][ T6637] netlink: 'syz.5.2155': attribute type 1 has an invalid length. [ 186.112943][ T6637] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2155'. [ 189.923875][ T36] kauditd_printk_skb: 45089 callbacks suppressed [ 189.923896][ T36] audit: type=1400 audit(2000000009.720:136627): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 189.932562][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 189.958103][ T148] audit: audit_lost=319 audit_rate_limit=0 audit_backlog_limit=64 [ 189.960309][ T2227] audit: audit_backlog=65 > audit_backlog_limit=64 [ 189.966053][ T148] audit: backlog limit exceeded [ 189.966249][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 189.972992][ T2227] audit: audit_lost=320 audit_rate_limit=0 audit_backlog_limit=64 [ 189.977778][ T148] audit: audit_lost=321 audit_rate_limit=0 audit_backlog_limit=64 [ 189.984344][ T36] audit: type=1400 audit(2000000009.730:136628): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 189.992064][ T148] audit: backlog limit exceeded [ 194.933958][ T36] kauditd_printk_skb: 46260 callbacks suppressed [ 194.933979][ T36] audit: type=1400 audit(2000000014.740:182819): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 194.942402][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 194.962528][ T36] audit: type=1400 audit(2000000014.740:182820): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 194.969221][ T148] audit: audit_lost=345 audit_rate_limit=0 audit_backlog_limit=64 [ 194.990654][ T36] audit: type=1400 audit(2000000014.740:182821): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 194.998397][ T148] audit: backlog limit exceeded [ 195.020287][ T36] audit: type=1400 audit(2000000014.740:182822): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 195.025316][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 195.047194][ T36] audit: type=1400 audit(2000000014.740:182823): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 195.052785][ T148] audit: audit_lost=346 audit_rate_limit=0 audit_backlog_limit=64 [ 199.943909][ T36] kauditd_printk_skb: 46459 callbacks suppressed [ 199.943928][ T36] audit: type=1400 audit(2000000019.740:229231): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 199.952113][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 199.971985][ T36] audit: type=1400 audit(2000000019.750:229232): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 199.979047][ T148] audit: audit_lost=364 audit_rate_limit=0 audit_backlog_limit=64 [ 200.000949][ T36] audit: type=1400 audit(2000000019.750:229233): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 200.007895][ T148] audit: backlog limit exceeded [ 200.029293][ T36] audit: type=1400 audit(2000000019.750:229234): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 200.034615][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 200.055413][ T36] audit: type=1400 audit(2000000019.750:229235): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 200.083010][ T148] audit: audit_lost=365 audit_rate_limit=0 audit_backlog_limit=64 [ 203.195816][ T46] bridge_slave_1: left allmulticast mode [ 203.196073][ T10] ================================================================== [ 203.201514][ T46] bridge_slave_1: left promiscuous mode [ 203.209631][ T10] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 203.209681][ T10] Write of size 8 at addr 0000000000000098 by task kworker/0:1/10 [ 203.209701][ T10] [ 203.215707][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.222028][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 203.222068][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.222088][ T10] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 203.222181][ T10] Call Trace: [ 203.222191][ T10] [ 203.222204][ T10] __dump_stack+0x21/0x30 [ 203.222237][ T10] dump_stack_lvl+0x10c/0x190 [ 203.222269][ T10] ? __cfi_dump_stack_lvl+0x10/0x10 [ 203.222306][ T10] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x3aa/0x810 [ 203.222344][ T10] print_report+0x3d/0x70 [ 203.222368][ T10] kasan_report+0x163/0x1a0 [ 203.222407][ T10] ? down_write+0x83/0x2a0 [ 203.222441][ T10] ? down_write+0x83/0x2a0 [ 203.222472][ T10] kasan_check_range+0x299/0x2a0 [ 203.222512][ T10] __kasan_check_write+0x18/0x20 [ 203.222542][ T10] down_write+0x83/0x2a0 [ 203.222572][ T10] ? __cfi_down_write+0x10/0x10 [ 203.222604][ T10] ? _raw_spin_lock+0x8c/0x120 [ 203.222641][ T10] ? __cfi__raw_spin_lock+0x10/0x10 [ 203.222679][ T10] ? mutex_unlock+0x8b/0x240 [ 203.222707][ T10] ? __cfi_mutex_unlock+0x10/0x10 [ 203.222737][ T10] rust_binderfs_remove_file+0x6c/0x110 [ 203.222769][ T10] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 203.222816][ T10] ? update_curr_dl_se+0x10c/0xb20 [ 203.222849][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 203.222878][ T10] ? update_curr+0x60d/0xc60 [ 203.222913][ T10] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 203.222960][ T10] ? update_load_avg+0x506/0x19a0 [ 203.222987][ T10] ? detach_entity_load_avg+0x7b0/0x7b0 [ 203.223025][ T10] ? dequeue_entity+0xa9c/0x1750 [ 203.223054][ T10] ? tg_unthrottle_up+0x980/0x980 [ 203.223081][ T10] ? kfree+0x156/0x400 [ 203.223110][ T10] ? vfree+0x471/0x580 [ 203.223135][ T10] ? delayed_vfree_work+0x59/0x80 [ 203.223164][ T10] ? process_scheduled_works+0x7d2/0x1020 [ 203.223200][ T10] ? worker_thread+0xc58/0x1250 [ 203.223233][ T10] ? ret_from_fork+0x64/0xa0 [ 203.223264][ T10] ? calibrate_delay_converge+0x2e0/0x2e0 [ 203.223307][ T10] ? kvm_sched_clock_read+0x15/0x30 [ 203.223339][ T10] ? sched_clock_noinstr+0xd/0x30 [ 203.223369][ T10] ? sched_clock+0x44/0x60 [ 203.223396][ T10] ? sched_clock_cpu+0x75/0x400 [ 203.223424][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 203.223453][ T10] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 203.223489][ T10] ? __cfi_sched_clock_cpu+0x10/0x10 [ 203.223524][ T10] ? __kasan_check_write+0x18/0x20 [ 203.223555][ T10] ? __switch_to+0xc7b/0x1310 [ 203.223588][ T10] ? psi_group_change+0xb44/0x1130 [ 203.223616][ T10] ? __cfi___switch_to+0x10/0x10 [ 203.223647][ T10] ? _raw_spin_unlock+0x45/0x60 [ 203.223671][ T10] ? __switch_to_asm+0x3d/0x70 [ 203.223704][ T10] ? __schedule+0x1463/0x1f10 [ 203.223731][ T10] ? kick_pool+0xad/0x550 [ 203.223755][ T10] process_scheduled_works+0x7d2/0x1020 [ 203.223794][ T10] worker_thread+0xc58/0x1250 [ 203.223833][ T10] kthread+0x2ca/0x370 [ 203.223870][ T10] ? __cfi_worker_thread+0x10/0x10 [ 203.223905][ T10] ? __cfi_kthread+0x10/0x10 [ 203.223942][ T10] ret_from_fork+0x64/0xa0 [ 203.223972][ T10] ? __cfi_kthread+0x10/0x10 [ 203.224010][ T10] ret_from_fork_asm+0x1a/0x30 [ 203.224046][ T10] [ 203.224055][ T10] ================================================================== [ 203.596928][ T10] Disabling lock debugging due to kernel taint [ 203.603190][ T10] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 203.611301][ T10] #PF: supervisor write access in kernel mode [ 203.617484][ T10] #PF: error_code(0x0002) - not-present page [ 203.623500][ T10] PGD 0 P4D 0 [ 203.626920][ T10] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 203.633032][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G B 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 203.648091][ T10] Tainted: [B]=BAD_PAGE [ 203.652366][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.662450][ T10] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 203.679288][ T10] RIP: 0010:down_write+0x9a/0x2a0 [ 203.684367][ T10] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 203.704271][ T10] RSP: 0000:ffffc900000a7500 EFLAGS: 00010256 [ 203.710489][ T10] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 203.718592][ T10] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900000a7520 [ 203.726843][ T10] RBP: ffffc900000a7598 R08: ffffc900000a7527 R09: 1ffff92000014ea4 [ 203.735222][ T10] R10: dffffc0000000000 R11: fffff52000014ea5 R12: dffffc0000000000 [ 203.743324][ T10] R13: 1ffff92000014ea0 R14: ffffc900000a7520 R15: 0000000000000000 [ 203.751337][ T10] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 203.760310][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.766933][ T10] CR2: 0000000000000098 CR3: 000000010bf9e000 CR4: 00000000003526b0 [ 203.775089][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 203.783104][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 203.791116][ T10] Call Trace: [ 203.794435][ T10] [ 203.797398][ T10] ? __cfi_down_write+0x10/0x10 [ 203.802303][ T10] ? _raw_spin_lock+0x8c/0x120 [ 203.807130][ T10] ? __cfi__raw_spin_lock+0x10/0x10 [ 203.812389][ T10] ? mutex_unlock+0x8b/0x240 [ 203.817133][ T10] ? __cfi_mutex_unlock+0x10/0x10 [ 203.822202][ T10] rust_binderfs_remove_file+0x6c/0x110 [ 203.827797][ T10] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 203.841053][ T10] ? update_curr_dl_se+0x10c/0xb20 [ 203.846222][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 203.852337][ T10] ? update_curr+0x60d/0xc60 [ 203.857092][ T10] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 203.870469][ T10] ? update_load_avg+0x506/0x19a0 [ 203.875551][ T10] ? detach_entity_load_avg+0x7b0/0x7b0 [ 203.881154][ T10] ? dequeue_entity+0xa9c/0x1750 [ 203.886136][ T10] ? tg_unthrottle_up+0x980/0x980 [ 203.891202][ T10] ? kfree+0x156/0x400 [ 203.895318][ T10] ? vfree+0x471/0x580 [ 203.899425][ T10] ? delayed_vfree_work+0x59/0x80 [ 203.904579][ T10] ? process_scheduled_works+0x7d2/0x1020 [ 203.910432][ T10] ? worker_thread+0xc58/0x1250 [ 203.915331][ T10] ? ret_from_fork+0x64/0xa0 [ 203.919963][ T10] ? calibrate_delay_converge+0x2e0/0x2e0 [ 203.925731][ T10] ? kvm_sched_clock_read+0x15/0x30 [ 203.930969][ T10] ? sched_clock_noinstr+0xd/0x30 [ 203.936120][ T10] ? sched_clock+0x44/0x60 [ 203.940572][ T10] ? sched_clock_cpu+0x75/0x400 [ 203.945461][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 203.951910][ T10] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 203.957859][ T10] ? __cfi_sched_clock_cpu+0x10/0x10 [ 203.963425][ T10] ? __kasan_check_write+0x18/0x20 [ 203.968552][ T10] ? __switch_to+0xc7b/0x1310 [ 203.973421][ T10] ? psi_group_change+0xb44/0x1130 [ 203.978546][ T10] ? __cfi___switch_to+0x10/0x10 [ 203.983514][ T10] ? _raw_spin_unlock+0x45/0x60 [ 203.988378][ T10] ? __switch_to_asm+0x3d/0x70 [ 203.993335][ T10] ? __schedule+0x1463/0x1f10 [ 203.998031][ T10] ? kick_pool+0xad/0x550 [ 204.002460][ T10] process_scheduled_works+0x7d2/0x1020 [ 204.008044][ T10] worker_thread+0xc58/0x1250 [ 204.012836][ T10] kthread+0x2ca/0x370 [ 204.016933][ T10] ? __cfi_worker_thread+0x10/0x10 [ 204.022089][ T10] ? __cfi_kthread+0x10/0x10 [ 204.026709][ T10] ret_from_fork+0x64/0xa0 [ 204.031204][ T10] ? __cfi_kthread+0x10/0x10 [ 204.035987][ T10] ret_from_fork_asm+0x1a/0x30 [ 204.040789][ T10] [ 204.043838][ T10] Modules linked in: [ 204.047752][ T10] CR2: 0000000000000098 [ 204.051916][ T10] ---[ end trace 0000000000000000 ]--- [ 204.057383][ T10] RIP: 0010:down_write+0x9a/0x2a0 [ 204.062427][ T10] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 204.082222][ T10] RSP: 0000:ffffc900000a7500 EFLAGS: 00010256 [ 204.088308][ T10] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 204.096294][ T10] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900000a7520 [ 204.104399][ T10] RBP: ffffc900000a7598 R08: ffffc900000a7527 R09: 1ffff92000014ea4 [ 204.112416][ T10] R10: dffffc0000000000 R11: fffff52000014ea5 R12: dffffc0000000000 [ 204.120507][ T10] R13: 1ffff92000014ea0 R14: ffffc900000a7520 R15: 0000000000000000 [ 204.128530][ T10] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 204.137585][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.144192][ T10] CR2: 0000000000000098 CR3: 000000010bf9e000 CR4: 00000000003526b0 [ 204.152391][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 204.160390][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 204.168476][ T10] Kernel panic - not syncing: Fatal exception [ 204.174834][ T10] Kernel Offset: disabled [ 204.179180][ T10] Rebooting in 86400 seconds..