last executing test programs: 5m32.122774171s ago: executing program 32 (id=381): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0xa4000) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000080)={0xfffffffffffffff9, 0x5, 0x1}) (async) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000080)={0xfffffffffffffff9, 0x5, 0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x8000000000000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000059c0)={0x0, 0x0, &(0x7f00000002c0)={0x18, 0x0, 0x4, {0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xc, 0x7, 0x3, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x1, 0x3], 0x8000000, 0x49340}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x4, 0x2, 0x12, '\x00', 0xb}) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x4, 0x2, 0x12, '\x00', 0xb}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) getpid() (async) r4 = getpid() syz_pidfd_open(r4, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) r5 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000004c0)={'syz_tun\x00', &(0x7f0000001d80)=@ethtool_link_settings={0x4d, 0x7, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x1, 0x2]}}) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r4, 0x3, 0x4002) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) pipe(&(0x7f0000000640)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r6, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r6, 0x0) mprotect(&(0x7f00004db000/0x1000)=nil, 0x1000, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='cgroup2\x00', 0x200000, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 5m1.519338605s ago: executing program 33 (id=532): open(0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) setreuid(0xee00, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0088a80180c200000eaaaaaaaaaabb86dd6d89cbdf001011fffc0000007682e9530000190000000001ff0200000046000000000000000000014e234e21"], 0x4a) 5m1.406307617s ago: executing program 34 (id=535): r0 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20004004) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000003c0)="400f01712d440f20c0350d000000440f22c0362e0febd066baf80cb8785e3d8def66bafc0c66b8f44766efc4e2a1b72ec441e96dbffe8313aa2626410f01c266baa100b852950000efc442e8f3d90fc7742138", 0xffffffffffffffbc}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x10400000000000) 5m1.25773933s ago: executing program 35 (id=536): mkdir(&(0x7f00000002c0)='./bus\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x820009408200a5fe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x150) mknodat$loop(r0, &(0x7f00000004c0)='./file1\x00', 0x1000, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000500)={@val={0xa, 0x88a8}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x1, 0x6, "00ffff", 0x172, 0x11, 0x1, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, {[@srh={0x67, 0x0, 0x4, 0x0, 0x3, 0x18, 0xe, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback]}, @hopopts={0x0, 0x13, '\x00', [@ra={0x5, 0x2, 0x1}, @generic={0x3, 0x7e, "03e21433409943e7181cc395bf25dea5b54e7369cad445ba489bc57da69745bec2179e5d07a739bef6a255bd00dc463a6a080a1d446195463fa1c5a3d3f5b008fae367296330f2f865916d43877059e8fae83d7463f636424306eff82b9da2b94d6b60177d99fe99a9937680f0337b3217fc6d10b76fdbe6a5e8b631819f"}, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x0, {0x2, 0x0, 0xe5, 0x6, [0xffffffffffffffff, 0x6, 0xea6, 0x6c, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x6, 0x6, [0x2]}}]}], {0xefe, 0x4e21, 0x108, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x100, @void}, "7bf123c30024bd9f7b3c27a9aefa02c64c6a03002f5135ca3bfb90d5041b40496f4d7e600a8eb95bb5310f210b3b4b228af3dd0124468e2c84c497c2165335d83bdd7601545b83c17ed4b7e9552708a1afbd6afb692e57f87a9b99310958d2de922ca9620b89d1e07543123def11ed71b0da96d5f369d86eb7a38563b55fb114794f512102cab705f7d82870c76dd056b7bb87c684e9b7d95c30343579b17789d7d66b2993819e90633431f8c8d06e02bb2169793945e8be70fe3bcac5b3bd5130754598a845539befd30a6d6d50d9a8cf9d3b85bba211facdf4d4238fe37daf21bb67074318c410e7e90925e1a27b6bf5730b1062c86557014369b4"}}}}}}}}, 0x1f2) 4m57.557371903s ago: executing program 7 (id=579): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) (async, rerun: 64) r1 = socket(0x28, 0x5, 0x0) (rerun: 64) r2 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1\xbf\x00nh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\xe5\x00\x00\x00', 0x0) r3 = dup(r2) finit_module(r3, 0x0, 0x3) (async, rerun: 64) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 64) getsockopt$sock_buf(r4, 0x1, 0x24, 0x0, &(0x7f0000000740)) (async) r5 = socket$inet(0x2, 0x1, 0x0) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r6) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000180)) (async) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x0, 0x1, 0x1}}, 0x26) (async) ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f0000000040)) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) (async, rerun: 32) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) (async, rerun: 32) sendmmsg$inet(r5, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="e0f58b98825ad05ecffa939c1c3f3abe962e289527340a9df3ca6a2d07954526dbc1734e9a6e1e26e4fa634d92009ed008cc3a7e5f36b40685bae810134441fdc3d3a30034038c5ae30a2ecc9ab1e87ca62dffe4e3863c445fa43350f4cb136cbfc130c556a37442fad8258458834fc01cbed5a504f157aff06b58b8d3c3050a9c487b0000000000", 0x88}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead0625c7a015174858a1171e2d8b21659736b5af7ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6e0d0d3fa89bad35b4", 0x43}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)="722abe089bad444a712571d5db482a97046f64a6e9f378fbfeeec001e410", 0x1e}, {&(0x7f0000000680)="3c79f26ea4eacc412e1982c663c230408536db37b8bc69eaf6013960b0fe0d8b18225e34008e6bbfec6aa93cba6c477c38e440c1dbcb4e80155f3f9388ec70f454827e8f00000000ffffffffe32b7f3da4bfd132b4ef59b4d4157c24b464dfbd6383b01950d6502411ec4161d7c33c21eae64d", 0x73}, {&(0x7f0000000d00)="f6ebd69cb61b04dbd8e4dc5f132da95cea069c4cf1c50489523f8e2bfaf472441fc9ebaebd435dc0be7c9fa1dae115b46dfffa947c43edc40e0b", 0x3a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000940)="8d7af298d3d8f30bb6e9ee04c4b3eb088e1b34a3b8bfc5a68bd82d2296b4dbddc1d01f014c1cef99ef01741b0734c28994648f30acc6f32aabc859689a8e9926d41e2deb77ae692119d11ea5dbaa2f02dd81794af4f4e301ae05c711b788d1f583d86ae3fa46792ade2797ccf87f6b8f04ec32e6db1f21858f0239701c37647d19022a9c74393e3c425b2ff62ed7095e6b9e3b292ca86c836bcf218aae352ab693a6a45358c19876c4a2066cc56110973714d7dfd55c22f9eee9be", 0xbb}, {&(0x7f0000000a00)="ca3f59f8", 0x4}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001600)="2fa30010b1eda5b319fcddbd1104884d91f71a7be8996fb6400037c94d24304ccf6dd4b67be8c57d1f7d215838ed883dfe55fa6ce1b51f2df1225289dd0c401aa0cf6080a565f5a8eaf43eb95c73a0787efc3baf40338871b18c9ba2398fa030c7d3a19cc674b7551a661bdde6249ec8a2ad3995e8aac23add730a7c1ebc85e3c00d8e9f19e6d34e18e7410521cbe84562b798a127f3ad5bfad8a85eda37d5314027058db2c4b9e79a21f291c6feccc51e0f17105966c2", 0xb7}], 0x1}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001ec0)="682cf7ade2c57eb56d0e8bbfab44d6ed5fcd66cf63e976d190cc7fbb694c70c093a7a761a6cc28a0982cb38344d36ebef0053c93504a9d3e", 0x38}, {&(0x7f0000001f40)="e01cc23fca8f5b1cb98eadc2df300b8edb5c54f6f26fa31041c87d0cd80519bafe59b54f43af10fbd2988f66aed0da406e76fc7669936f55515edc8a4ded41ef8b438549ad4cd82e4838e988e39b8ed45fcf043ab0b3b2da9971ce66c046ef02d395e5908fd7dd6ab4443f3e75a5ea68160c0eb73a4e4b", 0x77}], 0x2}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000022c0)="65d8a4", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000002540)="39a4544cfdeed3686742df72bf336dad62cb28a6dc0b267ce2ace61a855e5f4e0595", 0x22}], 0x1}}], 0x7, 0x140080d4) (async, rerun: 32) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async, rerun: 32) r9 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) (async) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000000c0)={0x30000009}) (async) r11 = open$dir(0x0, 0x7e, 0x0) writev(r11, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1298}}, 0x4090) 4m57.19865964s ago: executing program 1 (id=590): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f23d50f07f283f9c7410f06769cc9759971716266baf80cb89c1bdd82ef66bafc0cb0f1ee9a110f01380f20e035200000000f01c48f7178d1812e4b80001740ab46be46bec7f08a", 0x73}], 0x1, 0x6c, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) writev(r4, &(0x7f0000001500)=[{&(0x7f00000000c0)="de71082884ff9e7d8d92610545e7dbd0abe224d2b5e2b249a73fe52efbdced30b80f994110fedca92c", 0x29}], 0x1) read(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m57.140656591s ago: executing program 1 (id=591): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x101002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000003c0)=[{}, {}, {}, {r0, 0x9008}], 0x4, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100030000000806033fff40000102030109022d000101fb90010904009b020301010509210500060122730109058103ff03f9e8e1090ca5f880021bd256"], &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x35, 0x9, 0x5, 0x10, 0x1}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xc0a}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x101002, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f0000000080)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ppoll(&(0x7f00000003c0)=[{}, {}, {}, {r0, 0x9008}], 0x4, 0x0, 0x0, 0x0) (async) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100030000000806033fff40000102030109022d000101fb90010904009b020301010509210500060122730109058103ff03f9e8e1090ca5f880021bd256"], &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x35, 0x9, 0x5, 0x10, 0x1}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xc0a}}]}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 4m56.991654524s ago: executing program 1 (id=592): pipe2$9p(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r3 = eventfd2(0x6, 0x800) io_getevents(r2, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) io_pgetevents(r5, 0x535, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x82c]}, 0x8}) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) io_submit(r2, 0x1, &(0x7f0000000680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x4, r0, 0x0, 0x0, 0x3, 0x0, 0x1, r3}]) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='pim6reg0\x00', 0x10) 4m56.991458954s ago: executing program 7 (id=593): open(0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) setreuid(0xee00, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0088a80180c200000eaaaaaaaaaabb86dd6d89cbdf001011fffc0000007682e9530000190000000001ff0200380000000000000000000000014e234e21"], 0x4a) 4m52.790040667s ago: executing program 6 (id=597): syz_io_uring_setup(0x702, &(0x7f0000000500)={0x0, 0xfffffffc, 0x8, 0x7, 0x1e6}, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x1002, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x1002, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_binder, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x17}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r3 = accept4$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000100)=0x7, 0x8) 4m52.706812488s ago: executing program 6 (id=598): r0 = socket(0x11, 0xa, 0x5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x9e, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x0, 0x4, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x9833bf88d1b218f5, 0x1}, {{@in=@loopback, 0x4d6, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x40000}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x9) r4 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x101402, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x40106726, &(0x7f00000000c0)) ioctl$KVM_CREATE_VM(r4, 0xae01, 0xa) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000540)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{r6, 0x4, 0x8, 0xfff, 0x1c4, 0x1, 0xffffffffffffffff, 0x7, 0x7f, 0x3, 0xffff, 0xfffffff000000000, 0x81, 0x0, 0x10001}, 0x8, [0x0]}) sendto$inet(r0, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0xe, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xfffffffffffffccf, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 4m52.63120403s ago: executing program 6 (id=599): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x4, 0x201, 0x5, {}, {0x77359400}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x1d, 0x1, 0x0, 0x0, "cdcc011d747873bc0e9cf7dae0935d47c8c340e49efda43e1bafb3fa8feca03824ce7def8469689227b7b1e28e2f20f5d7679e6e747440a35c543e717a927788"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x8001) syz_clone3(&(0x7f0000000400)={0x142041200, &(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x4}, &(0x7f0000000240)=""/152, 0x98, &(0x7f0000000300)=""/146, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x8, {r0}}, 0x58) syz_open_procfs$pagemap(r1, &(0x7f0000000480)) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f00000004c0)=""/192) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa0, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x28000}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008090}, 0x4040) (async) unlinkat(r0, &(0x7f0000000780)='./file0\x00', 0x200) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) (async) socketpair(0x28, 0x4, 0x3, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netlink(r8, 0x10e, 0x2, &(0x7f0000000940)=""/39, &(0x7f0000000980)=0x27) getsockname$packet(r9, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r9) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r8, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r10, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x84) r11 = socket(0x9, 0x3, 0x0) sendmsg$AUDIT_GET(r9, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x10, 0x3e8, 0x8, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x2000c045}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r11, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x15}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$BLKOPENZONE(r0, 0x40101286, &(0x7f0000000d80)={0x3, 0x12fc9db3}) (async) ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000000dc0)=0x7) (async) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), r0) sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0xc4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0x94, r12, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffff2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x94}, 0x1, 0x0, 0x0, 0x60010}, 0x20000000) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001040)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x64, r13, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x4) 4m52.564161831s ago: executing program 6 (id=600): open(0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) setreuid(0xee00, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0088a80180c200000eaaaaaaaaaabb86dd6d89cbdf001011fffc0000007682e9530000190000000001ff0200600000000000000000000000014e234e21"], 0x4a) 4m51.446204894s ago: executing program 6 (id=602): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) (async) r2 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) (async) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f00000002c0)='./file1\x00') (async) socket$key(0xf, 0x3, 0x2) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r6, 0x1, 0x1) (async) getdents(r6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) 4m51.440795154s ago: executing program 6 (id=603): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) close(0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="1c0000001d005f0214ffffffffffffe8070000000d00000000005e2c", 0x1c) r3 = syz_usb_connect$hid(0x2a9874f7b09ddd93, 0x36, &(0x7f0000000240)=ANY=[@ANYRES64=r1], 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x6) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) timer_create(0x0, 0x0, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/38, 0x26}], 0x1, 0xfffffff5, 0x100000a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000008, 0x31, r0, 0x8871b000) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0x3, &(0x7f0000000840)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000140)=0x4082, 0x4) sendto$inet(r7, &(0x7f0000000040)='\f\x00', 0x18, 0x8840, &(0x7f0000000340), 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) unshare(0x40000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m51.411830094s ago: executing program 1 (id=604): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x66c, r0, 'id0\x00'}) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz1\x00', {0x4, 0x27, 0x7, 0x8}, 0x23, [0x9, 0x9, 0xa, 0xc, 0x36, 0x0, 0x9, 0xffffffff, 0x10, 0x6, 0xffff, 0xfffffffc, 0x2, 0x2, 0x0, 0x4, 0x4a0, 0x101, 0x3ff, 0x698, 0x84, 0x10001, 0x4, 0x909, 0x0, 0x6, 0x4, 0x8, 0x10, 0xfffffe00, 0x8, 0x2, 0x4, 0x1ff, 0x7, 0x8, 0xf, 0x7f, 0x2, 0x7fffffff, 0x401, 0xfffffeff, 0x2, 0xff, 0xffffffff, 0x6, 0x9b60, 0x5, 0x7f, 0x3, 0xffffffff, 0x8, 0x0, 0x9, 0x8a6, 0x2, 0x6, 0x6, 0x7fff, 0xa59, 0x9, 0x6, 0x33db7c07, 0x7], [0xe, 0xa, 0x16ef28e5, 0x0, 0x7f, 0x7fff, 0x4, 0x8, 0x4, 0x3, 0x9, 0x5, 0xcfb, 0x4, 0x6a5, 0x8, 0x7, 0x6, 0xd, 0x1, 0xc0c, 0xd, 0x8, 0x7, 0x9, 0xe4c4, 0x7ff, 0x70, 0x6, 0x5, 0x400, 0x8, 0x2, 0x1, 0x7fffffff, 0x3, 0x2, 0x8, 0x573, 0xb81d, 0x5, 0x6, 0x3, 0x6, 0x6, 0x9, 0x80, 0x8000, 0x4, 0x80000001, 0xaf3a, 0xfffffffa, 0x6, 0x6, 0x400, 0x7, 0x9, 0x5, 0x6e17, 0x1, 0x9, 0x2, 0x800, 0xc736], [0x1, 0x5, 0x1, 0x0, 0x8000, 0x7, 0xd, 0xfff, 0x1, 0x53eb, 0x55d, 0x3, 0x81, 0x9, 0x4, 0xfff, 0x4, 0xfffffffe, 0x4, 0x7, 0x9, 0xfffffff9, 0xa, 0x10001, 0x14000000, 0x2, 0x39d8, 0x1, 0x0, 0xa3ca, 0x8, 0xfff, 0x4, 0xfffffffa, 0x2, 0xfff, 0xbb3, 0x7, 0x1c7, 0x3, 0x3, 0x8, 0x8, 0x9, 0x6, 0x800, 0x7, 0x4ba7a152, 0x0, 0x7fff, 0x7000000, 0x800, 0x5, 0x3, 0x5, 0x6e66, 0x4, 0xc0, 0x7, 0x1, 0x2, 0x1, 0x3, 0x3], [0x9, 0x7, 0xfffffffd, 0x568, 0x3, 0xf, 0xffffffff, 0x2, 0x9, 0x40, 0x7, 0x7, 0x9, 0x4, 0x3, 0x4, 0x80, 0x7fff, 0x9, 0xffffff86, 0x7b0, 0x8, 0x6, 0xb, 0x3, 0x401, 0xce0, 0x9, 0x8, 0x7, 0x80, 0x8, 0xd8f5, 0x6dfa1e7f, 0x10000, 0x2, 0x100, 0x7fffffff, 0xfffffffb, 0x8000, 0x5, 0x6, 0x8, 0x0, 0x4, 0x1, 0x8, 0x0, 0x10001, 0x80, 0xdca9, 0x7ff, 0xfff, 0x5, 0x2, 0x6, 0xfffffffe, 0x3, 0xfffffffd, 0x0, 0x4b43, 0x80, 0x6, 0xffff]}, 0x45c) r2 = epoll_create1(0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000580)={0xff, 0x1c, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x100, [0x5]}}, @hao={0xc9, 0x10, @private2}, @generic={0xcd, 0xaf, "89cbe3f6467b87b974181fcb37102ed48ab37e14e026d9b548f7443824cf22187e56586a878cf929824cd36ce759a6a9b3e0150d27ac342d8abe063707d68018652943fc399dd6ec1eafeb315de997e64906872fc4d224fecce16e84f113b235064154d87f8b2e2105593e8712c36bb5ec73e451c3f1a4fd59fe05bf08f5dca3c6e0265c9b40a114f90dd6f652c18776825d1e6304c934f6675e3a956ef0ca597749d655c87728dfb94e6cb1d86bb1"}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0xfffffe00}, @enc_lim={0x4, 0x1, 0xb}]}, 0xf0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000680)="685c9becc0934dc84338a251ce16ec6a", 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x20000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000700)={0x3, 0x3}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = accept$inet(r3, 0x0, &(0x7f0000000740)) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000780)={0x2c3, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e20, @remote}}}, 0x108) bind$bt_sco(r1, &(0x7f00000008c0), 0x8) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000702, 0xee00, &(0x7f0000000900)) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) ioctl$BLKGETZONESZ(r1, 0x80041284, &(0x7f0000000980)=0x1) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000a40)={0x2, 0x9, 0x44, &(0x7f00000009c0)=""/68}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000a80), 0x121000, 0x0) r5 = fcntl$getown(r3, 0x9) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000ac0)=r5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/kernel/cpu_byteorder', 0x1, 0x101) syz_usb_connect(0x2, 0x95c, &(0x7f00000011c0)={{0x12, 0x1, 0x200, 0x63, 0xb4, 0xb3, 0x8, 0x413c, 0x81bb, 0x4bc5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94a, 0x3, 0x1, 0x2, 0x0, 0x1, [{{0x9, 0x4, 0x2e, 0xc, 0xe, 0x2, 0xd, 0x0, 0xe, [@generic={0x73, 0xa, "6694e25bc76dbdcdb3a896120f7cccf2596c1d0926e9665b84d0e78af2f5b4de3257b7f4dc7814c556a44b5220635e9af1d83bd869a93d0b3455d9b05bce64e65645271780ba4b4db457ab70ac4269ccb0c179c9e7b65b4b93bc3727df7abaaac93f594de85d4c1c51c9fe4085060adfdb"}], [{{0x9, 0x5, 0xf, 0x1, 0x20, 0x4, 0x4, 0x7, [@generic={0xe4, 0x6, "ff5376f69d40a6b6fa87f6c29a3bdb47bb8284aa092affbb30c4671873ec1dc74948af00fa7b09426a66977d346a1bb9c212bfe8530883cf60e65f147bd627d92b4639859810b85cb4b186ea533e116936a9437a62f063276e82797f21d8d5ad532648b68332f56931a0d9e06231fd21865c451c1dbfde0d624f332810b38c96c2591215f855ba1b06e533227924496b4a3c851d7d45e18ad3a3110613876e4f00d325720361b75a60928cc99c4aa8b3fb7b4fb49346e75ce7c0e0f5f72b0eaa4926805c945bdc845aae7ca6eea9581808707c0b41cd4a600451d3be152e7d9255df"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x0, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x40}]}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x17, 0x5, 0x8, [@generic={0x81, 0x3, "ce30f4c92134e851606869f2b6d628179a13683ec1df7d7a8af64cfab36420494f4390e14f77ce59fc275a1f8f1b603fd53a2e44565dc6f7f73de758fe92be7c9ab640bcbdbc0b2ee1230d426182b5fe7ec30d3b724d2b81406a119f225805a9ebd6e7de6abba631ef63da8d9d1da1dc7bcbe0ee191dc83d1df5c08d037c91"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0xc, 0x6, 0x6}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x7, 0x9, 0x4, [@generic={0xff, 0x9, "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"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x20, 0x6, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x7, 0x7, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x81}]}}, {{0x9, 0x5, 0x5, 0x2, 0x0, 0x7, 0x10, 0x9e}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x3, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x80, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe0, 0x5}, @generic={0x71, 0xb, "59bba4932791f585d17ae53e61ffff49db92b562aaa553c6759e84d7279798571def2b283efcc6f50ca29f136e4f2173d13f0860f0004ecc57d00acbfc869c55537e46119989a4ffd877f87fa9c69af3c25f9dea46d80a4c525a93f0a2d56ac353e94c5d44737c7810c304e84c24b7"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0xf7, 0x3, 0x6, [@generic={0xdf, 0x31, "49318dbbb9d75a354ad9382970b34a4c8056db7c4d9da06ba11507159227a1ccc94205b2cf366b2c5737f9e4e7f30f4699cb65188f538b3a107a08b4534ca31295569b30ceea33db5735f717ae48c91ee7c23cdd683d194b0731c036df40fa379d161648e2c6e2f18b6d3df0a4c1fbde3864292aa161efb5a5cf980dff734ae37c581784d87b67e5ebc4c064226b93db2967582cf85daed195398534f5294f97f837a6956e4afb3120dcb94d66d2e231fad682448c4368067cc670229b3ddc77f6e21018bd6262da7abbe566ba5bfa8803d3fbae867824d940b21215ef"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x9}]}}, {{0x9, 0x5, 0x2, 0x1, 0x48, 0xa, 0x2, 0x88}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0x40, 0x3, 0x2, [@generic={0x88, 0xd, "54c03ef0d1bc413b1323ecb1f053ae6800a25e922fa2c0fa7358a97e85e19b9ee84d9fcabdad64a0f076fdc3339722e4144e6a0afebe389c008bba9111523527e551fafb14d94f54cfc785ff0162d7dd9502fc77783ec97e4f8b100073d86f64255cb585726a724826678b5c8708066dc89d286352ad4f58074ef6df72b3a2745099c26e674e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x5}]}}, {{0x9, 0x5, 0x3, 0x0, 0x630, 0x2, 0x0, 0x1, [@generic={0x8e, 0x22, "9504499e970bb860061754373914f4202f0d550a659193b8568dfb415c58ee369ff1caf6b35848ee113587cf13d713457603f0fae208b563a27975fc60bdade90a14aa5bb9d21e865da9b5acf7ad2024fbafeea8fbb6b680f327524c51a23731e81adb5b83940899eacaae2633e7e16e646a2ae7589b5fa43d1692cf2338f302f12857adcb4a447bab07c16a"}]}}]}}, {{0x9, 0x4, 0x4e, 0x70, 0x8, 0x99, 0x39, 0x93, 0x6, [], [{{0x9, 0x5, 0xc, 0x3, 0x20, 0x7, 0x0, 0x5, [@generic={0x7d, 0x9, "2e309646b93c6783f48ce0c81e45102c5dd07ef20651957899c63a5dc8b60cb011521d3365fcdddd9bd5283ac58bd41f1fd2f59236860d409482765735dbebf49efa55b9727e75c626ba4f046c878e2bda73bedccc8876d377f06b17121e6ec8c8f36e32127361fcb752773972ed787c2b7d212ec4489cbe47ac0a"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x4, 0xf, 0x7}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x2, 0x7, 0xe, [@generic={0x51, 0x30, "28690d86589e98b8b1bd945c72c0d6f398b7c7c63c5c38491aa6ef5e64cf9a46b593b8fc8fc39d1f92392db3e573be95d9c5042cc72619c9207ff4da922b0c62c4e4a083005dccb83dc95bd222e3c5"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x1ff, 0x5, 0x2, 0xe}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x3, 0xf, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x401}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x7, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x5}, @generic={0x9f, 0xf, "17f2fba2456b7a395873e427b0dbec3fc91ff6d3edcb343990ccc7d1d21e2d09627178a3dcddb62a8e1af8056a7ebf70c990565c6c8bd2fb8893e4015444b05edeb95821af7eee4f6d48b963ae849abddd21467eaaf5ca499b52e75972c3527a1b9c18509ea5ed7424a869ddb9e9ed5973f6cbba83b92d0f291b2e071f369f323a794a834cd99b8818f96beb9fc85b84ea69f8688ef8a285156ff9d4e4"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x69, 0xd7, 0x81}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x1, 0x63, 0x1, [@generic={0x18, 0x23, "e01bdfb155daf52e934dd905d2104670f44d0a2351dd"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x7}]}}]}}, {{0x9, 0x4, 0xcb, 0x9, 0xd, 0xd1, 0x48, 0x58, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0xff}, [@feature_unit={0x11, 0x24, 0x6, 0x2, 0x1, 0x5, [0x9, 0x4, 0x6, 0x7, 0x5], 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x0, 0x6, 0x8, 0x5, 0x6, 0x3}]}], [{{0x9, 0x5, 0x2, 0x8, 0x10, 0x3, 0x9, 0xe9}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x10, 0x8a, 0xe}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x0, 0x81, 0xdf, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xcd}]}}, {{0x9, 0x5, 0xd, 0x10, 0x1f7, 0x3, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xc0}]}}, {{0x9, 0x5, 0x2, 0x3, 0x8, 0x5f, 0x8, 0x9}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x0, 0x7, 0x3, [@generic={0x55, 0xf, "4c6c29cde389788d27ae69fea65a46f1b7981eee1bc1aaee52a005ede9dac8cda9c051bb6bdfca9431b22473aca258009baac338d91dc3f560122a4a1de61511520d3d0e89c11b6e362d18f88766897d2799a3"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0xfa, 0x46, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x7ff}]}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x3, 0x4, 0x2e}}, {{0x9, 0x5, 0x0, 0x39, 0x400, 0xff, 0xd, 0x6}}, {{0x9, 0x5, 0x1e, 0x0, 0x200, 0x5, 0x40, 0xe3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x800}, @generic={0x45, 0x1, "c7218c5e4ba0724b6dc56d73211912dc414fb9033df02a55e05c7265794c8f1703052ab36ceb347d978c8e48e5e3afbdae2644b568ce7ed75560f3a046d1bccd4d76f1"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x9, 0xc, 0x9}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x2, 0x4, 0x7f}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xf8, 0x8c, 0x3}}]}}]}}]}}, &(0x7f0000001ec0)={0xa, &(0x7f0000001b40)={0xa, 0x6, 0x40, 0x80, 0x0, 0x8, 0x10, 0x2}, 0x22, &(0x7f0000001b80)={0x5, 0xf, 0x22, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x4, 0x2, 0xd}, @generic={0xc, 0x10, 0x4, "b6d27e2bd235578a8c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0x0, 0xf737}]}, 0x6, [{0xcc, &(0x7f0000001bc0)=@string={0xcc, 0x3, "af816e7e9fd335beaed3a4367bf7a5ac697a7517cf8314f1add24c6d6df74d4fa1cc1c6e2a5a355a74245bd9070933f0b91da2b33281a843502b247f4ceafe6fd82525fe4570c5ff74c3eb62b55d32a8ef95e260de6901c3fd3a9b62279909996495507e15d798a6aa7f71d57e0201c0739a6589a9a3e9bbab19a3168982426e2c11cd1399693ff982e40eba1388085be7656ce8a9acda227a7011d6b5f6083c8ace78b2dd79c18667dfdf3cedf0ef83a9c05e63792936031097618bd486dc01ac3b490558eb2c323a1a"}}, {0x4, &(0x7f0000001cc0)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000001d00)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x459}}, {0x47, &(0x7f0000001d80)=@string={0x47, 0x3, "f2e8b331291caa90e1ee8bff189210d91df30df37c5895af1704a7889927295ec6b70336a9245c68f62617ce331d447008681ad49028bb6e1b89fb49546a9905af11151c11"}}, {0x8e, &(0x7f0000001e00)=@string={0x8e, 0x3, "a81a08809fdcad7d613b9a2156e7d270fb4c5376f85d2c3ebbc60ec2f8fd536915a9a1ca5be23d9f728e5c73ca2a272fd79633f4bf37387ac60f9c182807b2a269e1ffee698d05dc213be2240f9785e020c27d04864439b12586fda174da3c7cb24c2bb1a7436feb5e0e04ac50c072edc894bbdcf37a0e6ab82777490293937ac4cb3d08904efb5b8e3015ed"}}]}) 4m51.357242475s ago: executing program 7 (id=605): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x10000a, 0xe4, 0x40000}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0xba, 0x78, 0x8, 0x84e, 0x1001, 0xedae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x43, 0x7b, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "94ef6333ef"}]}}]}}]}}]}}, 0x0) close_range(r0, r1, 0x0) 4m50.816356816s ago: executing program 1 (id=606): sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="4d01", 0x2, 0x4000085, 0x0, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r0, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)={{0x0, 0x10000, 0x7, 0x9, 0x4, 0x4, 0x70, 0x48df, 0x80000000, 0x9, 0x3, 0x2, 0x955b, 0x800, 0xa8}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000640)={r4, 0x3}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x201000, 0x1}) (async, rerun: 64) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="040000000000000002004e24ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600"], 0x390) (rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 4m50.815405226s ago: executing program 1 (id=607): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x12) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, 0x1e, 0x9, 0x2, 0x25dfdbff, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) 4m49.618786319s ago: executing program 7 (id=608): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x20, 0x9, 0x10, {0x10, 0x9, "8294d4fb1cf6423220914eb85103"}}, 0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x100000000000000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000900)=ANY=[@ANYBLOB="01000600ffffff7b02beceb0ffffff0180c2000000ffffffff3379a65034cbd36d44a2973f21d3ffff0180c20000020180c200000eff"]) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xffff) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x33) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130003000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0xeeee0000, 0x19000, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x40, 0x22, 0x35, {0x35, 0xf, "cf11f8c8430606eda088326dd30712acca4306aae66ea7019ee66c5f76deadeaaf4ce3f2b3ea27d3704115a9384e42761367e7"}}, &(0x7f00000001c0)={0x0, 0x3, 0x85, @string={0x85, 0x3, "c9ced6570866378ca283faba583f10a5feef89579f8e47ecd206e37d97e21d4c2bb2fbfaa5a058dfb617b7c4e0a57df05a46f306e03afc2e148e8464c2f00f1c05202ea3ad6d83f514db7b07768543b82ef0e69d00ee8ff9b3609bdc1f117774d6a65df86c8de163225127d136677ef2bf22fc85597f86a002b0860b4306c8dccacef0"}}, &(0x7f0000000280)={0x0, 0xf, 0x5a, {0x5, 0xf, 0x5a, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x0, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xf2, 0x4, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x50, 0x6, 0x2, 0x5}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x8, 0x8811, 0xc, [0x3f00, 0xc0cf, 0xc000, 0xff00c0, 0x0, 0xd7]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0x6, 0xffff}, @wireless={0xb, 0x10, 0x1, 0x2, 0x11, 0x75, 0x5, 0x800, 0x10}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x1, 0x9, "d463fdb1", "8a31b5e0"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0xed, 0x6, 0x8, 0x9, 0x8, 0x6}}}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x20, 0x8, 0xac, "b2b98a4c6ec4bc2e43193c0b5fa06f754a059d94fbfa6015604148a995b823aa5142153166f31576b47ba95e10a57fa4fadd2a0594473be2e0766336d6d1674185ad7681e36712682d39afad47a01566d7f41f7598b73d30f14fadea3b4b04fa4158bca9e17612052b01109a564c3b2ba3ae16b828bbd9dfead63e729430cd1f154e16d88d72a977533bae6fde32f0af8c9de1cd762b38e526fff3b8efa5779afca5142c0581a94dfcf7f81a"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x44}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, '14'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "103d"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0xe}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x1d}}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000080000000b0"], 0x20}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000940)=0x8d0, 0x4) 4m36.37853022s ago: executing program 36 (id=601): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r6}) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) (async) ptrace$peeksig(0x4209, r7, &(0x7f00000003c0)={0x1, 0x0, 0x1}, &(0x7f0000000dc0)=[{}]) (async, rerun: 64) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r10}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r10}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r4, 0xb08, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) (async) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x7e6e19ac3e9d40f4, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000054) (async) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmmsg$unix(r11, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}], 0x2, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='!(+.\x00') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 4m36.254715783s ago: executing program 37 (id=603): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) close(0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="1c0000001d005f0214ffffffffffffe8070000000d00000000005e2c", 0x1c) r3 = syz_usb_connect$hid(0x2a9874f7b09ddd93, 0x36, &(0x7f0000000240)=ANY=[@ANYRES64=r1], 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x6) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) timer_create(0x0, 0x0, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/38, 0x26}], 0x1, 0xfffffff5, 0x100000a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000008, 0x31, r0, 0x8871b000) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0x3, &(0x7f0000000840)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000140)=0x4082, 0x4) sendto$inet(r7, &(0x7f0000000040)='\f\x00', 0x18, 0x8840, &(0x7f0000000340), 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) unshare(0x40000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m35.123518415s ago: executing program 38 (id=607): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x12) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, 0x1e, 0x9, 0x2, 0x25dfdbff, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) 4m34.064361886s ago: executing program 39 (id=608): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x20, 0x9, 0x10, {0x10, 0x9, "8294d4fb1cf6423220914eb85103"}}, 0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x100000000000000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000900)=ANY=[@ANYBLOB="01000600ffffff7b02beceb0ffffff0180c2000000ffffffff3379a65034cbd36d44a2973f21d3ffff0180c20000020180c200000eff"]) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xffff) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x33) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130003000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0xeeee0000, 0x19000, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x40, 0x22, 0x35, {0x35, 0xf, "cf11f8c8430606eda088326dd30712acca4306aae66ea7019ee66c5f76deadeaaf4ce3f2b3ea27d3704115a9384e42761367e7"}}, &(0x7f00000001c0)={0x0, 0x3, 0x85, @string={0x85, 0x3, "c9ced6570866378ca283faba583f10a5feef89579f8e47ecd206e37d97e21d4c2bb2fbfaa5a058dfb617b7c4e0a57df05a46f306e03afc2e148e8464c2f00f1c05202ea3ad6d83f514db7b07768543b82ef0e69d00ee8ff9b3609bdc1f117774d6a65df86c8de163225127d136677ef2bf22fc85597f86a002b0860b4306c8dccacef0"}}, &(0x7f0000000280)={0x0, 0xf, 0x5a, {0x5, 0xf, 0x5a, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x0, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xf2, 0x4, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x50, 0x6, 0x2, 0x5}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x8, 0x8811, 0xc, [0x3f00, 0xc0cf, 0xc000, 0xff00c0, 0x0, 0xd7]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0x6, 0xffff}, @wireless={0xb, 0x10, 0x1, 0x2, 0x11, 0x75, 0x5, 0x800, 0x10}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x1, 0x9, "d463fdb1", "8a31b5e0"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0xed, 0x6, 0x8, 0x9, 0x8, 0x6}}}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x20, 0x8, 0xac, "b2b98a4c6ec4bc2e43193c0b5fa06f754a059d94fbfa6015604148a995b823aa5142153166f31576b47ba95e10a57fa4fadd2a0594473be2e0766336d6d1674185ad7681e36712682d39afad47a01566d7f41f7598b73d30f14fadea3b4b04fa4158bca9e17612052b01109a564c3b2ba3ae16b828bbd9dfead63e729430cd1f154e16d88d72a977533bae6fde32f0af8c9de1cd762b38e526fff3b8efa5779afca5142c0581a94dfcf7f81a"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x44}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, '14'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "103d"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0xe}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x1d}}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000080000000b0"], 0x20}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000940)=0x8d0, 0x4) 2m31.999546553s ago: executing program 8 (id=1974): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x91) inotify_init() pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r8, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x31, 0x32, 0x36, 0x65, 0x36, 0x31, 0x62, 0x30, 0x61, 0x0, 0x37, 0x39, 0x39, 0x63, 0x61, 0x31]}, &(0x7f0000000100)={0x0, "bd138b7a25d276ec4e8f0c26995fce1f356cef29657251133423a30d4ebcfbd0b8a5efcb6dc9762c31afca167768cb36001255374058ecd30aa6b52c7b78e8ad", 0x11}, 0x48, r8) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r8) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) brk(0x689d80000000) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r9) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r10, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c054}, 0x40) splice(r9, &(0x7f0000000380), r3, 0x0, 0x80000000101, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25680000002800c700a72f5f6fcb8a0204130501450f40973412630d00070603020703e328a1076e0407067f0503010600810407f5eb5546ad26baf07844a4af24106cb0f2c5c2e0a5010bdec359fd6b4c4241000000000000000068914037b1796da08e90d99f1c4f0157ad4ad4a9a347481eb78c4adcc00b523beffac915fc712e5529452071f7eb1d95972d7b"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x10830) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0xeeee0000, 0x5000}) close_range(r0, 0xffffffffffffffff, 0x0) 2m31.995520783s ago: executing program 8 (id=1975): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000080008400000000a0400164008001540000000030400170058000d8014"], 0xd4}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) fadvise64(r5, 0xa, 0x5, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2m31.934592814s ago: executing program 8 (id=1976): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) chroot(&(0x7f00000000c0)='./file0\x00') mount$bpf(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), 0x403, 0x0) sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r1, r0, 0x0, 0x80000000) 2m31.900319215s ago: executing program 8 (id=1978): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000000040)={[0x3ff]}, 0x7) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000000)={0x1ffff, 0x100, 0x300, 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0xffffffffffffff1b, &(0x7f0000000180)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}, {&(0x7f0000000200)="8bfc70befdb2ff4cc7ff255fa3a5e3cfb2d0f012fbf5dbf135c8297c5175117555dde6ee7304ba5879f1d5a7710ec04613273601aa795a2e1cb1432edc6e1ac8276e4dfa9979b824d08dc2eca0", 0x4d}, {&(0x7f0000000280)="db360c77ecba92d50929e0c5ccaa93cfb8122f6dbcfe7489fcc9cfb704910bb9cc374122b011cc2dd61a93e8e03c79cff16e09b2a06a926d8a5594af729532234aa34450401b31b7efa8cc16c8fd4538b606e9f68637afba7b48e013304d64b8f055ecaee15e21a1c1b16b7981710a484befd45b0d595cc308be79fefcc7637be80da44f18d7e39f0789c30bb6e23f36"}], 0x44}}, {{0x0, 0x0, &(0x7f0000000180)}}], 0x2, 0x4000000) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'ip6gre0\x00', {0x2, 0x4e22, @local}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x2c, r6, 0x917, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000050) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2m31.899639965s ago: executing program 8 (id=1980): open(0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) setreuid(0xee00, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0088a80180c200000eaaaaaaaaaabb86dd6d89cbdf001011fffc0000007682e9530000190000000001ff02000000f5ff0000000000000000014e234e21"], 0x4a) 2m31.716462448s ago: executing program 8 (id=1983): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x452840, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0xa03c0000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 2m31.687506829s ago: executing program 40 (id=1983): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x452840, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0xa03c0000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 56.970877977s ago: executing program 2 (id=3383): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)=0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r2 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000fc0)={0x14, &(0x7f0000000dc0)={0x20, 0x30, 0xf0, {0xf0, 0x8, "132da3ac22ad1c2e113a12c19a1a3114339fce01ba2ae5436405b7cff9ac4526dce523292e74a5c749230405f880813c7d372eee18c149b67ad914f1489fc021c1ed58c77347b5d379a8b548fa90811a5aa88269cfc093d153eb2b3386e0ca3b8fba104e2113c4b2c395f2c328274fe9db3926d2a7a59b0f7d4f4bbacfaac6e8189bb8640221a237d5bf0a78f0aaeb3d0dac11391ac3305b4db99f98cdc5cdf128b33625afaf0190e8b5bf1c47b47d48b4ba3e34311a8f138ebe5b6633e6496d003f8e7d7415f3387c532e8737af48134ef6481838c7d84ffdc61076b741d3c3b77b020bf570186b4ff9807760cb"}}, &(0x7f0000000ec0)={0x0, 0x3, 0xc4, @string={0xc4, 0x3, "bc0ffd94a25e96e0db2b767e1036277d4dcecf13c7f210cddf74b3f875c29482359bf2bb1fb34a3dce848ae22accbd6a3fa7afb6b49bc46cbace4200cb733e613872e33a981f370914ffb11fac52db0477476ffddf945d981d52edee7e8c39e5217fc78fb7b99e294eb5db9d5b665fcb7342c104bdbf4e61476c846e07f775433483986747d84fba338cf469ca73aee241155a2affcb2e554d48cd4cc42e1334bd39114e47ac0a4298984610c61041f8c0ed2bbcc07fac7444ea21e035312c9f85b3"}}}, &(0x7f0000001240)={0x34, &(0x7f0000001000)={0x20, 0x3, 0x2, "2486"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000010c0)={0x20, 0x0, 0x43, {0x41, "d7fa269ae53bdaa4e97111aa5797f5ecaee969a279fc049112955f0ac3d75fb04ce94d431c4e090b4fdfab76708bcf94694d592af850ac7dfd1d4cda902df10273"}}, &(0x7f0000001140)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000001200)={0x20, 0x0, 0x1, 0x3}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) fcntl$notify(r4, 0x402, 0x11) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xb8, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fda={0x66646185, 0x6, 0x2, 0xe}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @request_death, @free_buffer={0x40086303, r2}, @free_buffer={0x40086303, r2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x2, 0x36}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x80a}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}, 0x40}], 0x25, 0x0, &(0x7f0000000380)="aee8afd029539e1ce6637ad4da81d9abc85522604f3210e19a105a46246f7261d51c47925d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x110b, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000900)={0x2, 0x0, @loopback}, &(0x7f0000000a80)=0x10, 0x800) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000c80)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000cc0)={0x73622a85, 0x0, 0x2}) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000bc0)={'filter\x00', 0x0, 0x3, 0x49, [0xfffffffffffff001, 0x2, 0x83, 0x5, 0x7], 0x6, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000b40)=""/73}, &(0x7f0000000c40)=0x78) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000d80)={0x2, 0x101, 0x48, &(0x7f0000000d00)=""/72}) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x11c, 0x0, &(0x7f0000000780)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x8, 0x2, 0x28}, @fda={0x66646185, 0x1, 0x1, 0xb}, @fda={0x66646185, 0xa, 0x0, 0x2b}}, &(0x7f0000000500)={0x0, 0x20, 0x40}}}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000600)={@flat=@handle={0x73682a85, 0x9, 0x1}, @fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/113, 0x71, 0x1, 0x17}}, &(0x7f0000000680)={0x0, 0x18, 0x30}}}, @dead_binder_done, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000006c0)={@flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x101, 0x2}, @fda={0x66646185, 0x7, 0x2, 0xc}}, &(0x7f0000000740)={0x0, 0x18, 0x30}}, 0x1000}, @release={0x40046306, 0x2}, @exit_looper, @release, @release={0x40046306, 0x1}], 0xd3, 0x0, &(0x7f0000000980)="a0f9e1d5312804741c4a287b2ae30e85ab8fcd01f6315301ea2e5062afee494f8c3257c8292139088033cc95ade3ba50d95b988eb9e87f665d56c4ff59443119857b631475fe0cd4a7424d37f7bcab67b014686a4e3b8d3128eb909b60815592eecf0e02853903bcc2f0c8f9b789cb70a5f48bcf58606603fe4954854c617c1548b5c6f358eee50ff9b99f2b155dcc4858573b96dee3bf0960a44fbe6b78f8c8b7534801e62480986ce00dd94c0523f1d9f14329edfa761c38fd8e3dbce6882334765483268c2540c9cb417b8ad3a91b43b284"}) 55.005565405s ago: executing program 2 (id=3399): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r1, 0x14, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'syz_tun\x00', {}, 0x3}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3d29) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_settime(r5, 0x2, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) r6 = socket(0x1, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) readv(r6, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf8, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x5, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697d, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, r0, 0x545ac000) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 54.936357716s ago: executing program 2 (id=3400): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r2 = dup(r1) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0xf3a, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x1e, 0x1, 0x70bd25, 0x25dfdbfb, {0x1a}, [@generic="9b05a331b5"]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4) write$cgroup_pid(r9, &(0x7f0000000000), 0xffffff98) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000001480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r11, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c0c0}, 0x41) splice(r4, 0x0, r9, 0x0, 0x80, 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) splice(r8, 0x0, r12, 0x0, 0x100000004, 0x0) write(r6, 0x0, 0x0) r13 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r13, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 54.581074933s ago: executing program 2 (id=3405): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x2}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) unshare(0x22020600) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000007380)=ANY=[@ANYBLOB="48000000000000e11401000009000000ca23faa28b0b1481f72d490d819b54483cd858607db776b728c5414fe002fbef1ffcc3cae96ee6a6e800dfbb8873c6a3ff5a97000000000018000000003a00000002000000070a000000000000000000"], 0x60}}], 0x2, 0x800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="0f2140c4c2b5bc1b3ed9f5b95e020000b808000000ba000000000f300f07c4c2f9231066f30fae32c4e2a53e56b3650f09c4e3d96c2af4", 0x37}], 0x1, 0x0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000180)={0x6212f580, &(0x7f00000000c0), 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x40000, 0x0) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 54.486158585s ago: executing program 2 (id=3410): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x8a, 0xfffffffffffffff9, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xfffffffffffffffe, 0xa, 0x9, 0x5, 0x8000000b, 0x80000000000000, 0xcc3, 0x1, 0x85, 0x17, 0x3, 0x100000000, 0x5, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa}) setsockopt$inet6_int(r2, 0x29, 0x16, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 54.336449529s ago: executing program 2 (id=3417): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x3}, @decrefs, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 54.24948994s ago: executing program 41 (id=3417): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x3}, @decrefs, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 46.489334503s ago: executing program 4 (id=3561): setpgid(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000f80)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%o\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aOg\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\x01\x80\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3Wt`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\bx\xd2x\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb0\xbd\xd8,\xea\xeaT\xa6\x12\x1d\x1b6\xcf\xd3\x84-Z\xb4\xc1hh\x81*\x00\x00\x00\x00\x00\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) poll(0x0, 0x0, 0xffffffffffbffff8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0x6}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000fc0)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000000000)) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) 45.516543563s ago: executing program 4 (id=3569): open(0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) setreuid(0xee00, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0088a80180c200000eaaaaaaaaaabb86dd6d89cbdf001011fffc0000007682e9530000190000000001ff0200000000000000000000000000124e234e21"], 0x4a) 45.482695273s ago: executing program 4 (id=3571): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0xa002) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x101}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(r4, &(0x7f0000000040)={[0x7ff]}, 0x8, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x17) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x48d02, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r3}, @increfs={0x40046304, 0x5}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000200)={0x3}) 44.233814518s ago: executing program 4 (id=3620): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (rerun: 32) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$sock_int(r3, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0x0, 0x0, 0x5, 0x0, 0x1000, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0xf5, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x2, r5, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x27, 0x1, 0xc01001a, 0x66d, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40, 0x9}}, 0x50) (async) syz_fuse_handle_req(r2, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8, {0x3, 0x3, 0x100000003, 0x0, 0x0, 0x3881fffc, {0x5, 0x7, 0x1, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x8000, 0x0, 0x0, r6, 0x5, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x6000}}) (async) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x8, r8, r9, 0xc000, '\x00', 0x5, 0x8, 0x100000000, 0x6, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0x2}, {0x8, 0xa04}, 0x4, 0x80000b, 0x5, 0x3}}}}) (async) setresgid(r6, 0xee01, r9) 44.208616098s ago: executing program 4 (id=3622): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000080)={@my=0x0}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xfffffffc, &(0x7f0000000300)=""/210, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0xffa3, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 44.12044036s ago: executing program 4 (id=3624): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/4093, 0x100d}, {0x0, 0x40}, {&(0x7f0000000040)=""/58, 0x3d}, {&(0x7f0000000180)=""/159, 0x9f}, {&(0x7f0000000240)=""/136, 0x88}, {&(0x7f0000001780)=""/69, 0x45}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000001540)=""/60, 0x3c}, {&(0x7f0000000100)=""/5, 0x5}], 0x9) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x41, 0x12a) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x5) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) readv(r0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/4093, 0x100d}, {0x0, 0x40}, {&(0x7f0000000040)=""/58, 0x3d}, {&(0x7f0000000180)=""/159, 0x9f}, {&(0x7f0000000240)=""/136, 0x88}, {&(0x7f0000001780)=""/69, 0x45}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000001540)=""/60, 0x3c}, {&(0x7f0000000100)=""/5, 0x5}], 0x9) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x41, 0x12a) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x5) (async) 28.096525205s ago: executing program 42 (id=3624): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/4093, 0x100d}, {0x0, 0x40}, {&(0x7f0000000040)=""/58, 0x3d}, {&(0x7f0000000180)=""/159, 0x9f}, {&(0x7f0000000240)=""/136, 0x88}, {&(0x7f0000001780)=""/69, 0x45}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000001540)=""/60, 0x3c}, {&(0x7f0000000100)=""/5, 0x5}], 0x9) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x41, 0x12a) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x5) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) readv(r0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/4093, 0x100d}, {0x0, 0x40}, {&(0x7f0000000040)=""/58, 0x3d}, {&(0x7f0000000180)=""/159, 0x9f}, {&(0x7f0000000240)=""/136, 0x88}, {&(0x7f0000001780)=""/69, 0x45}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000001540)=""/60, 0x3c}, {&(0x7f0000000100)=""/5, 0x5}], 0x9) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x41, 0x12a) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x5) (async) 9.364410475s ago: executing program 3 (id=4044): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f00000005c0)={@val={0x0, 0x800}, @val={0x3, 0x5, 0x7, 0x3, 0x80, 0x6}, @ipv6=@generic={0x4, 0x6, "84e437", 0x1e1, 0x0, 0x1, @mcast1, @mcast2, {[@hopopts={0x2f, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x134, 0xa, 0x4, 0x5, 0x33, 0x18, 0x3, [@loopback, @loopback, @private0, @loopback, @loopback]}, @hopopts={0xb3, 0x13, '\x00', [@pad1, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @private1}, @generic={0xae, 0x7b, "9c94549e878f1216c17c4cf9039930af56727033a7c5698c611298542feaf1e266fbdfdb02fe22e8d858ab57c7c1e116759951be26ce63e180b91692bfdec7ab42dc08f9cc911e9d4aafca328b08b5f33f0549e40c8ad49638292f3c0eec311e671a90b8d300523ecfdda90d223cffba55349710e80f3076a36e7c"}]}], "f0db043c0bdd5fa862ab40e05a5dd2c234dc7773e3831178a890b2a83c13e6f5d1ec7ad9739f588cc88c83a9f836eb8045335fd06dd485c2446031e6847afe2d67d567703ef49b27e9e4936532e95fc00244b2e3f5d127b50a7c3001ae37c96c0439a96a7b7bb0faa0e55c71667c2db559cc4e3d9cf1faff99395ed6b589c8817d02dfc418f30a86847e7e66a207c98f445d1a31aee58cbb28d817dacd51e28a309a058f53135ee0bb9353b527460fca970e1ba5e0bbec8c4ac80fe5bbcfb8a3d84c993b85ed02e629"}}}, 0x217) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0xd1383000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x4, 0x10003}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 9.363503535s ago: executing program 3 (id=4045): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000000000000000000000000000000000000000000300000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050000000000000000000000000000000000000000003200000000000000ac14140c000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000000000000000000000000000000000000000000001030000000000000000000000000000ff010000000000000000000000000001000000003c00000002000000fe800000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000002b"], 0x23c}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000400)=[@clear_death], 0x0, 0x0, 0x0}) 9.362664955s ago: executing program 3 (id=4046): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x8000000003}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000200008961b04000000000000010902240001000000000904000501030000000921000000012205000905810300"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x30}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xc}, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x5, "21a23d9538"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x4}}) 8.803523606s ago: executing program 3 (id=4056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x20c2, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)=0x6}) connect$vsock_stream(r2, &(0x7f0000000140), 0x10) listen(r2, 0x5) accept4$unix(r2, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, 0x0, 0x6048090) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x85b83000) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001900010000000000fbdbdf250a010900100012800400f88008001e000800"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r6, 0xd6baf000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0401, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2000000000001, 0x0}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000300)={0x3, 0x5, 0xdddd0000, 0x1000, &(0x7f0000fff000/0x1000)=nil, 0x6}) 8.728500568s ago: executing program 3 (id=4057): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) 8.068442611s ago: executing program 3 (id=4063): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) close(r2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 5.828525015s ago: executing program 0 (id=4074): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x8000000003}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000200008961b04000000000000010902240001000000000904000501030000000921000000012205000905810300"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x30}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xc}, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x7, "21a23d9538b5d9"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x4}}) 3.783676215s ago: executing program 0 (id=4094): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) setrlimit(0x7, &(0x7f0000000080)={0x6, 0xfff}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100004000000000000014000000180001801400020073797a5f74756e00000000000000000008000900070000000500190001000000080011000900000008000600f7ffffff08001600"], 0x54}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000000000160000fff50000400000009800"], 0x14}, 0x1, 0x0, 0x0, 0x4cd05}, 0x0) gettid() mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x4, 0x0, &(0x7f0000000ac0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f"}) r4 = socket(0x1a, 0x8b084c7d0373b891, 0xf791) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000580)=[@request_death={0x400c630e, 0x2}, @increfs, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 3.392023003s ago: executing program 5 (id=4102): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000200)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0xffffffffffffffff, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/122, 0x0, 0x0, 0x20}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = socket(0x10, 0x3, 0x0) fremovexattr(r3, &(0x7f0000000180)=@known='security.apparmor\x00') ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) 3.362979023s ago: executing program 5 (id=4103): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x8000000003}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000200008961b04000000000000010902240001000000000904000501030000000921000000012205000905810300"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x30}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xc}, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x7, "21a23d9538b5d9"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x4}}) 2.877651963s ago: executing program 0 (id=4105): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/l2cap\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) read$FUSE(r1, &(0x7f0000000d00)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), 0x2540b, 0x0) sendmmsg$inet6(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x2, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x53, 0x0, 0x0, 0x80, 0x401c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0xf, 0xcbff, 0x0, {0x5, 0x5, 0x3, 0x6c, 0x7, 0x6, 0x1, 0x6, 0x101, 0x4000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) sendfile(r2, r1, 0x0, 0x80000000) 2.804392974s ago: executing program 0 (id=4106): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)={0x1140, 0x33, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0x102c, 0xfb, 0x0, 0x1, [@nested={0x101d, 0x13, 0x0, 0x1, [@generic="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", @typed={0x14, 0x122, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x7}]}, @typed={0x8, 0x123, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @generic="d90a58cde601d565cdddcc6aa3fcc8c25583297245b4d7973d0df9b022c59bb26343d8fac6abbe023d9e0640355e0034d2aca4a49132b88c8660af242102d45a28332c4b796cc5268b9a5ec5b61042577e3e5ea90f21384e8c5852110520bfd976705ca7e25e8a5ac6dd7bdadeb451f164c86cdb89561b05f0b9e143b1917e3dd99ee920f46511a803ab9cf9dd2d6aaf8aee259d1476cd960ce44acbc6a970c4fdd6f99aeee46de8efec7151b1e4cc13cd723e9cfa7ba2f69b60189d7aff553101c449174d1e18b6c5b148275100a3f8bd0c4c96296c43028a", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0xee}]}, 0x1140}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x141600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x511102, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 1.791792354s ago: executing program 0 (id=4111): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000580)={0xff, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}]}, 0x20) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_usb_connect(0x2, 0xce, &(0x7f00000011c0)={{0x12, 0x1, 0x200, 0x63, 0xb4, 0xb3, 0x8, 0x413c, 0x81bb, 0x4bc5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x2, 0x1, 0x2, 0x0, 0x1, [{{0x9, 0x4, 0x2e, 0xc, 0x6, 0x2, 0xd, 0x0, 0xe, [@generic={0x62, 0xa, "6694e25bc76dbdcdb3a896120f7cccf2596c1d0926e9665b84d0e78af2f5b4de3257b7f4dc7814c556a44b5220635e9af1d83bd869a93d0b3455d9b05bce64e65645271780ba4b4db457ab70ac4269ccb0c179c9e7b65b4b93bc3727df7abaaa"}], [{{0x9, 0x5, 0xf, 0x1, 0x20, 0x4, 0x4, 0x7}}, {{0x9, 0x5, 0x4, 0x2, 0x20, 0x6, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x7, 0x7, 0x80}}, {{0x9, 0x5, 0x5, 0x2, 0x0, 0x7, 0x10, 0x9e}}, {{0x9, 0x5, 0x2, 0x1, 0x48, 0xa, 0x2, 0x88}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0x40, 0x3, 0x2, [@generic={0x2, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x5}]}}]}}, {{0x9, 0x4, 0x4e, 0x70, 0x0, 0x99, 0x39, 0x93, 0x6}}]}}]}}, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1.429860761s ago: executing program 5 (id=4116): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x2, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f0000000400)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e7094"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 631.766257ms ago: executing program 9 (id=4122): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x13, 0x8401) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x40087708, 0x0) 580.590848ms ago: executing program 9 (id=4123): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x802, 0x0) lseek(r1, 0x5, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xfffffffc, &(0x7f0000000300)=""/210, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0xffa3, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 575.516688ms ago: executing program 9 (id=4124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) accept$inet6(r1, 0x0, &(0x7f0000000080)) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r1, &(0x7f0000001380)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dace61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b2d3630c7d6fc35dda6002da571a2e59821751efa9f393b1a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cc43c320544317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a81f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b7884db26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac3909750f46a9a8e76a13264ed2b654b9a6eb1809", 0x587, 0x0, &(0x7f0000000180)={0xa, 0x5e64, 0x100000, @mcast2, 0x4}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) close(r0) 575.139618ms ago: executing program 9 (id=4125): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x8000000003}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000200008961b04000000000000010902240001000000000904000501030000000921000000012205000905810300"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x30}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xc}, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x8, "21a23d9538b5d958"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x4}}) 526.708219ms ago: executing program 5 (id=4126): setpgid(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000f80)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%o\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aOg\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\x01\x80\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3Wt`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\bx\xd2x\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb0\xbd\xd8,\xea\xeaT\xa6\x12\x1d\x1b6\xcf\xd3\x84-Z\xb4\xc1hh\x81*\x00\x00\x00\x00\x00\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 465.7958ms ago: executing program 0 (id=4127): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x6, 0x0, &(0x7f0000000240)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000180)={0x242926c80, &(0x7f00000000c0), 0x0, 0x0, {0x27}, 0x0, 0x2e, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f00000004c0), 0x4) close(r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/76, 0x4c}], 0x1, 0xdb, 0x6) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) fcntl$dupfd(r4, 0x0, r4) vmsplice(r4, &(0x7f00000005c0)=[{&(0x7f0000000500)="82b0ad3dfa62965a5a45eee1a4eaa4c8d34bbe628266d76deec7039a22c7e66333a7f4c3e58e33f8a1494669d42b9fdd43329d2453712619c4c77b9b7576022b3c760eaa81131943b4bb34c2ae5b4d6d26a6d6723db6746820e8080eb294542efae9dc29b6957201922cf152ae92763297f5199bbaf840a0d59fe331aa394815ef3b3aebd949da5bf0d91ec8bf7f3744f67035a0e3bfeb8aadb13f4bfa57b8483d43eb2e7ec5b2f9f9fadb7d423c2c5a27de3f51", 0xb4}, {&(0x7f0000000440)="216937b7771eb28380af3a46160a39d4b8b686291f83d4d7d33b3acaac1a94a7a86f9beccc04e0211dde17e1c4fd965d9b566953cdffe843528386b254fca53e1042ff63ef25e147f86359aed67a08141d6d125b29643e020c92a1189ba12c22b11c86135f346741334f6e20c84f", 0x6e}, {&(0x7f0000000680)="e86283fe63a94bd4afd5b82fe60071f9ba10bcb58d2d0de3a1ed5800efea06102c4b97811e703902f6f963b90d10c5bbacc58ec2a8171557798f197b84c9039b56aa9539fb893d9337916a05b90a7cf627cb8ec0b2dfe9e697dea9b2c5daa2794352b7a1da18d741d01251b729c46acc747b129cc8f5d01ebc33a42b13585240e88237fdc54575e1276fa2258fb4c2eb933f8c47610081f89a1057b51cd1a58a877dc67c72c0c7b2d6b96fda9f2816460dddbd171bd3ef4dcbdc5f657459bbf3037d77c46876be", 0xc7}], 0x3, 0xf) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 408.540162ms ago: executing program 5 (id=4128): open(0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) setreuid(0xee00, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0088a80180c200000eaaaaaaaaaabb86dd6d89cbdf001011fffc0000007682e9530000190000000001ff020000000000000000400e000000014e234e21"], 0x4a) 408.356872ms ago: executing program 5 (id=4129): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)={0x1140, 0x33, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0x102c, 0xfb, 0x0, 0x1, [@nested={0x101d, 0x13, 0x0, 0x1, [@generic="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", @typed={0x14, 0x122, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x7}]}, @typed={0x8, 0x123, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @generic="d90a58cde601d565cdddcc6aa3fcc8c25583297245b4d7973d0df9b022c59bb26343d8fac6abbe023d9e0640355e0034d2aca4a49132b88c8660af242102d45a28332c4b796cc5268b9a5ec5b61042577e3e5ea90f21384e8c5852110520bfd976705ca7e25e8a5ac6dd7bdadeb451f164c86cdb89561b05f0b9e143b1917e3dd99ee920f46511a803ab9cf9dd2d6aaf8aee259d1476cd960ce44acbc6a970c4fdd6f99aeee46de8efec7151b1e4cc13cd723e9cfa7ba2f69b60189d7aff553101c449174d1e18b6c5b148275100a3f8bd0c4c96296c43028a", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0xee}]}, 0x1140}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x141600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x511102, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 42.600209ms ago: executing program 9 (id=4130): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) dup(r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x52}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x57}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44041}, 0x4000800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x55, 0x0, &(0x7f0000000500)="bcbc648bc9c07baf3789df6d877eac314ecc82d9c71ab1ecebefe99af20b4ab3cb820245a3692f3ac6a588df8de17d26b23105f63a0eeca6f09a8fe84b267ea7bd0e06c1f342a81542e35e27b0431c30a12ff4db2b"}) 0s ago: executing program 9 (id=4131): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x7, 0x82700) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x0, 0x1, {0x10, 0x12, 0x3, 0x15, 0x6, 0xccb, 0x3, 0xc8, 0xffffffffffffffff}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r1) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r2, 0x64f2f669afa1080b, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) faccessat(0xffffffffffffffff, 0x0, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) fcntl$notify(r4, 0x402, 0x80000014) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3e) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000001c0)="0f787f1967660f3a629200800000000fa31c660f6ac10f5d9d43103e64660f1c81f9ff0f01c90f019ad2bdba200066ed0f3803c6", 0x34}], 0x1, 0x6d, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00', {0x2, 0x0, @local}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00', {0x2, 0x0, @local}}) close(r3) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$inet(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) ppoll(&(0x7f0000000100)=[{r6, 0x1090}, {r6, 0xc6}, {r6, 0x40}, {r5, 0x10}, {r3, 0x500}, {r5, 0x8100}, {0xffffffffffffffff, 0x2000}, {r8, 0x40}, {r3, 0x800}], 0x9, &(0x7f0000000240)={r9, r10+60000000}, &(0x7f0000000280)={[0x7ff]}, 0x8) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f00000002c0)=r12) kernel console output (not intermixed with test programs): ket 1088, setting to 64 [ 266.407610][ T867] usb 10-1: config 4 interface 158 has no altsetting 0 [ 266.417586][ T867] usb 10-1: New USB device found, idVendor=a40d, idProduct=548e, bcdDevice=5b.b9 [ 266.426948][ T867] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.435173][ T867] usb 10-1: Product: syz [ 266.439766][ T867] usb 10-1: Manufacturer: syz [ 266.444496][ T867] usb 10-1: SerialNumber: syz [ 266.690146][ T394] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 266.709930][ T394] usb 1-1: device descriptor read/8, error -71 [ 266.832629][ T394] usb 1-1: device descriptor read/8, error -71 [ 266.906791][ T7486] sock: sock_timestamping_bind_phc: sock not bind to device [ 267.013457][ T7473] overlayfs: statfs failed on './file0' [ 267.070710][ T394] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 267.075998][ T36] audit: type=1400 audit(2000004446.104:508): avc: denied { accept } for pid=7492 comm="syz.3.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 267.092173][ T394] usb 1-1: device descriptor read/8, error -71 [ 267.227124][ T394] usb 1-1: device descriptor read/8, error -71 [ 267.333200][ T394] usb usb1-port1: unable to enumerate USB device [ 267.362200][ T394] tipc: Node number set to 1167031614 [ 267.627379][ T7505] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 268.653207][ T7527] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 268.928749][ T867] usb-storage 10-1:4.158: USB Mass Storage device detected [ 268.978651][ T7552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.049098][ T867] usb 10-1: USB disconnect, device number 44 [ 269.071149][ T36] audit: type=1400 audit(2000004448.133:509): avc: denied { create } for pid=7556 comm="syz.9.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 269.123346][ T7561] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 269.130452][ T7561] rust_binder: 786: no such ref 4294967293 [ 269.213599][ T394] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 269.283783][ T7573] netlink: 57 bytes leftover after parsing attributes in process `syz.0.2248'. [ 269.294965][ T7574] netlink: 57 bytes leftover after parsing attributes in process `syz.0.2248'. [ 269.365362][ T394] usb 4-1: Using ep0 maxpacket: 8 [ 269.372050][ T394] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.384226][ T394] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.394278][ T394] usb 4-1: config 0 interface 0 has no altsetting 0 [ 269.401057][ T394] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 269.410342][ T394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.420599][ T394] usb 4-1: config 0 descriptor?? [ 269.835179][ T394] ntrig 0003:1B96:0004.0020: unknown main item tag 0x0 [ 269.843199][ T394] ntrig 0003:1B96:0004.0020: unknown main item tag 0x0 [ 269.850129][ T394] ntrig 0003:1B96:0004.0020: unknown main item tag 0x0 [ 269.857200][ T394] ntrig 0003:1B96:0004.0020: unknown main item tag 0x0 [ 269.864393][ T394] ntrig 0003:1B96:0004.0020: unknown main item tag 0x0 [ 269.872484][ T394] ntrig 0003:1B96:0004.0020: hidraw1: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.3-1/input0 [ 269.933509][ T7605] rust_binder: Write failure EFAULT in pid:975 [ 270.038418][ T394] ntrig 0003:1B96:0004.0020: Firmware version: 2.15.13.41.0 (3d95 38b5) [ 270.047295][ T7611] netlink: 'syz.9.2259': attribute type 4 has an invalid length. [ 270.061170][ T7611] netlink: 'syz.9.2259': attribute type 2 has an invalid length. [ 270.245841][ T394] usb 4-1: USB disconnect, device number 25 [ 270.383629][ T10] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 270.537550][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 270.544148][ T10] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 270.552552][ T10] usb 10-1: config 0 has no interface number 0 [ 270.558855][ T10] usb 10-1: config 0 interface 196 altsetting 1 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 270.570676][ T10] usb 10-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 270.580782][ T10] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 270.590976][ T10] usb 10-1: config 0 interface 196 has no altsetting 0 [ 270.599493][ T10] usb 10-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 270.608716][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.616900][ T10] usb 10-1: Product: syz [ 270.621333][ T10] usb 10-1: Manufacturer: syz [ 270.626061][ T10] usb 10-1: SerialNumber: syz [ 270.631778][ T10] usb 10-1: config 0 descriptor?? [ 270.795368][ T7618] overlayfs: failed to resolve './bus/file0': -2 [ 270.843900][ T36] audit: type=1400 audit(2000004449.870:510): avc: denied { ioctl } for pid=7610 comm="syz.9.2259" path="socket:[46466]" dev="sockfs" ino=46466 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 270.929167][ T10] ipheth 10-1:0.196: Unable to find endpoints [ 270.937319][ T10] usb 10-1: USB disconnect, device number 45 [ 271.535900][ T36] audit: type=1326 audit(2000004450.537:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.9.2266" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb38c98eba9 code=0x0 [ 271.727964][ T36] audit: type=1400 audit(2000004450.730:512): avc: denied { map } for pid=7644 comm="syz.2.2271" path="socket:[47905]" dev="sockfs" ino=47905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 271.766153][ T36] audit: type=1400 audit(2000004450.730:513): avc: denied { read accept } for pid=7644 comm="syz.2.2271" path="socket:[47905]" dev="sockfs" ino=47905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 271.852300][ T36] audit: type=1400 audit(2000004450.846:514): avc: denied { create } for pid=7659 comm="syz.2.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 272.034358][ T7686] tipc: Can't bind to reserved service type 2 [ 272.139921][ T7702] netlink: 'syz.3.2291': attribute type 4 has an invalid length. [ 272.147917][ T7702] netlink: 'syz.3.2291': attribute type 5 has an invalid length. [ 272.155892][ T7702] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2291'. [ 272.165934][ T7702] fuseblk: Unknown parameter 'fd.q' [ 272.172837][ T7702] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2291'. [ 272.319459][ T7719] netlink: 'syz.3.2298': attribute type 46 has an invalid length. [ 272.472658][ T7724] netlink: 324 bytes leftover after parsing attributes in process `syz.9.2300'. [ 272.482854][ T36] audit: type=1326 audit(2000004451.450:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.9.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38c98eba9 code=0x7ffc0000 [ 272.496368][ T7724] SELinux: security_context_str_to_sid () failed with errno=-22 [ 272.507057][ T36] audit: type=1326 audit(2000004451.450:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.9.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38c98eba9 code=0x7ffc0000 [ 272.538481][ T36] audit: type=1326 audit(2000004451.459:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.9.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb38c98d510 code=0x7ffc0000 [ 272.562016][ T36] audit: type=1326 audit(2000004451.459:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7723 comm="syz.9.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb38c98d510 code=0x7ffc0000 [ 272.889623][ T7739] overlayfs: failed to clone upperpath [ 272.896133][ T7739] overlayfs: failed to clone upperpath [ 272.919336][ T7741] raw_sendmsg: syz.2.2306 forgot to set AF_INET. Fix it! [ 272.960229][ T7741] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2306'. [ 273.033646][ T7751] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 273.218663][ T7780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:840 [ 273.245164][ T7782] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 273.309358][ T7790] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:842 [ 274.594604][ T7833] rtc_cmos 00:00: Alarms can be up to one day in the future [ 274.644580][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 274.652617][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 274.662734][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 274.670846][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 274.678230][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 274.709429][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2345'. [ 274.718754][ T7858] bridge_slave_1: left allmulticast mode [ 274.725721][ T7858] bridge_slave_1: left promiscuous mode [ 274.731702][ T7858] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.742110][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 274.742129][ T36] audit: type=1400 audit(2000004709.582:569): avc: denied { listen } for pid=7860 comm="syz.0.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 274.776142][ T7858] bridge_slave_0: left allmulticast mode [ 274.783557][ T7858] bridge_slave_0: left promiscuous mode [ 274.792498][ T7858] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.218661][ T7878] /dev/rnullb0: Can't lookup blockdev [ 275.548750][ T7894] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 275.647731][ T7906] veth0_virt_wifi: entered allmulticast mode [ 275.661177][ T7906] veth0_virt_wifi: left allmulticast mode [ 275.996492][ T63] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 276.178302][ T63] usb 1-1: device descriptor read/64, error -71 [ 276.310323][ T7974] fuseblk: Bad value for 'user_id' [ 276.315844][ T7974] fuseblk: Bad value for 'user_id' [ 276.435019][ T63] usb 1-1: device descriptor read/64, error -71 [ 276.702373][ T63] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 276.862806][ T63] usb 1-1: device descriptor read/64, error -71 [ 277.119497][ T63] usb 1-1: device descriptor read/64, error -71 [ 277.207862][ T8002] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8002 comm=syz.2.2396 [ 277.237276][ T63] usb usb1-port1: attempt power cycle [ 277.290251][ T36] audit: type=1400 audit(2000004711.957:570): avc: denied { mounton } for pid=8009 comm="syz.3.2400" path="/file0" dev="ramfs" ino=48715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 277.321351][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2398'. [ 277.611482][ T63] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 277.633960][ T63] usb 1-1: device descriptor read/8, error -71 [ 277.772964][ T63] usb 1-1: device descriptor read/8, error -71 [ 277.930857][ T36] audit: type=1400 audit(2000004712.555:571): avc: denied { module_load } for pid=8037 comm="syz.9.2409" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=49159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 277.974611][ T8045] tipc: Enabling of bearer rejected, failed to enable media [ 278.016650][ T8051] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2414'. [ 278.028593][ T63] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 278.051134][ T63] usb 1-1: device descriptor read/8, error -71 [ 278.073952][ T36] audit: type=1326 audit(2000004712.695:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.9.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38c98eba9 code=0x7ffc0000 [ 278.097563][ T36] audit: type=1326 audit(2000004712.695:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.9.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38c98eba9 code=0x7ffc0000 [ 278.121487][ T36] audit: type=1326 audit(2000004712.695:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.9.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb38c98d510 code=0x7ffc0000 [ 278.145486][ T8057] netlink: 'syz.3.2417': attribute type 4 has an invalid length. [ 278.145494][ T36] audit: type=1326 audit(2000004712.695:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.9.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38c98eba9 code=0x7ffc0000 [ 278.154074][ T8057] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2417'. [ 278.178735][ T36] audit: type=1326 audit(2000004712.695:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.9.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb38c98eba9 code=0x7ffc0000 [ 278.211199][ T36] audit: type=1326 audit(2000004712.695:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.9.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38c98eba9 code=0x7ffc0000 [ 278.235104][ T36] audit: type=1326 audit(2000004712.695:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.9.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb38c98eba9 code=0x7ffc0000 [ 278.236088][ T63] usb 1-1: device descriptor read/8, error -71 [ 278.281774][ T8062] overlayfs: failed to clone upperpath [ 278.383474][ T63] usb usb1-port1: unable to enumerate USB device [ 278.751281][ T8113] fuse: Bad value for 'fd' [ 278.932735][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'. [ 278.943202][ T8168] can0: slcan on ttyS3. [ 279.159298][ T8168] can0 (unregistered): slcan off ttyS3. [ 279.337042][ T8207] binder: Bad value for 'max' [ 279.654303][ T8245] 9pnet_fd: Insufficient options for proto=fd [ 279.874271][ T8266] ext4: Unknown parameter 'discardt/tun' [ 279.886666][ T8266] ext4: Unknown parameter 'discardt/tun' [ 279.959317][ T8271] fuse: Bad value for 'fd' [ 280.133119][ T8283] veth0_virt_wifi: entered allmulticast mode [ 280.139652][ T8283] veth0_virt_wifi: left allmulticast mode [ 280.238648][ T8292] /dev/md0: Can't lookup blockdev [ 280.261227][ T8294] IPv6: Can't replace route, no match found [ 280.268663][ T8294] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25370 sclass=netlink_xfrm_socket pid=8294 comm=syz.0.2466 [ 280.296354][ T8296] fuse: Bad value for 'fd' [ 280.424927][ T8300] binder: Unknown parameter '18446744073709551615' [ 280.485006][ T8312] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.485634][ T8312] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 280.604219][ T8321] fuse: Bad value for 'fd' [ 280.926773][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2488'. [ 280.935893][ T8351] bridge_slave_1: left allmulticast mode [ 280.941713][ T8351] bridge_slave_1: left promiscuous mode [ 280.947444][ T8351] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.955292][ T8351] bridge_slave_0: left allmulticast mode [ 280.961151][ T8351] bridge_slave_0: left promiscuous mode [ 280.967064][ T8351] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.984335][ T8352] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2488'. [ 280.995231][ T8354] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.061936][ T8354] rust_binder: Error while translating object. [ 281.068496][ T8354] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 281.074706][ T8354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:945 [ 281.084578][ T8354] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 281.094449][ T8354] rust_binder: Read failure Err(EFAULT) in pid:945 [ 281.114480][ T8354] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.135460][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2493'. [ 281.185345][ T8372] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.185459][ T8372] rust_binder: Write failure EINVAL in pid:950 [ 281.192403][ T8372] random: crng reseeded on system resumption [ 281.265494][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 281.265516][ T36] audit: type=1400 audit(2000004715.678:646): avc: denied { getopt } for pid=8376 comm="syz.3.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 281.298720][ T8383] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2498'. [ 281.310192][ T8382] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2498'. [ 281.439179][ T36] audit: type=1400 audit(2000004715.837:647): avc: denied { watch } for pid=8391 comm="syz.0.2501" path="/325/file0" dev="tmpfs" ino=1811 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 281.718834][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2504'. [ 281.963226][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2510'. [ 282.656425][ T8428] /dev/rnullb0: Can't open blockdev [ 282.662129][ T8427] /dev/rnullb0: Can't open blockdev [ 282.877813][ T36] audit: type=1400 audit(2000004717.194:648): avc: denied { relabelfrom } for pid=8467 comm="syz.9.2529" name="" dev="pipefs" ino=49744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 282.935554][ T63] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 283.096329][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.108121][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.117998][ T63] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 283.127158][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.135997][ T63] usb 1-1: config 0 descriptor?? [ 283.973057][ T8537] netlink: 'syz.3.2549': attribute type 64 has an invalid length. [ 283.983863][ T8537] incfs: Options parsing error. -22 [ 283.989282][ T8537] incfs: mount failed -22 [ 284.322807][ T63] usbhid 1-1:0.0: can't add hid device: -71 [ 284.329627][ T63] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 284.338927][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2552'. [ 284.342609][ T63] usb 1-1: USB disconnect, device number 62 [ 284.369101][ T36] audit: type=1326 audit(2000004718.599:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f224e94615d code=0x7ffc0000 [ 284.392615][ T36] audit: type=1326 audit(2000004718.599:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224e98eba9 code=0x7ffc0000 [ 284.416275][ T36] audit: type=1326 audit(2000004718.599:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224e98eba9 code=0x7ffc0000 [ 284.439887][ T36] audit: type=1326 audit(2000004718.599:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f224e98eba9 code=0x7ffc0000 [ 284.463743][ T36] audit: type=1326 audit(2000004718.599:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224e98eba9 code=0x7ffc0000 [ 284.487343][ T36] audit: type=1326 audit(2000004718.599:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224e98eba9 code=0x7ffc0000 [ 284.510778][ T36] audit: type=1326 audit(2000004718.599:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.0.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f224e9c3409 code=0x7ffc0000 [ 284.538420][ T8549] rust_binder: Read failure Err(EAGAIN) in pid:974 [ 285.004027][ T63] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 285.174839][ T63] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 285.186089][ T63] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.196184][ T63] usb 1-1: config 0 interface 0 has no altsetting 0 [ 285.202878][ T63] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 285.213000][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.222089][ T63] usb 1-1: config 0 descriptor?? [ 285.445375][ T63] hid-steam 0003:28DE:1102.0021: unknown main item tag 0x0 [ 285.452829][ T63] hid-steam 0003:28DE:1102.0021: unknown main item tag 0x0 [ 285.462790][ T63] hid-steam 0003:28DE:1102.0021: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 285.534474][ T63] hid-steam 0003:28DE:1102.0021: Steam Controller 'XXXXXXXXXX' connected [ 285.545371][ T63] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0021/input/input19 [ 285.560598][ T63] hid-steam 0003:28DE:1102.0022: unknown main item tag 0x0 [ 285.568570][ T63] hid-steam 0003:28DE:1102.0022: unknown main item tag 0x0 [ 285.581573][ T63] hid-steam 0003:28DE:1102.0022: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 285.607237][ T63] usb 1-1: USB disconnect, device number 63 [ 285.620183][ T8597] fido_id[8597]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 285.635942][ T63] hid-steam 0003:28DE:1102.0021: Steam Controller 'XXXXXXXXXX' disconnected [ 286.027500][ T8606] GUP no longer grows the stack in syz.2.2569 (8606): 200000005000-200000008000 (200000004000) [ 286.038120][ T8606] CPU: 1 UID: 0 PID: 8606 Comm: syz.2.2569 Not tainted syzkaller #0 f1fd036d8541680e36a649bca009aa7e7bf746ea [ 286.038158][ T8606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.038171][ T8606] Call Trace: [ 286.038182][ T8606] [ 286.038193][ T8606] __dump_stack+0x21/0x30 [ 286.038231][ T8606] dump_stack_lvl+0x10c/0x190 [ 286.038259][ T8606] ? __cfi_dump_stack_lvl+0x10/0x10 [ 286.038287][ T8606] ? futex_lock_pi_atomic+0xdd/0xc70 [ 286.038312][ T8606] dump_stack+0x19/0x20 [ 286.038333][ T8606] fixup_user_fault+0x63d/0x6d0 [ 286.038358][ T8606] fault_in_user_writeable+0x76/0xe0 [ 286.038381][ T8606] futex_lock_pi+0x258/0xa10 [ 286.038406][ T8606] ? futex_unqueue+0x136/0x160 [ 286.038429][ T8606] ? __cfi_futex_lock_pi+0x10/0x10 [ 286.038460][ T8606] ? __cfi_futex_wake_mark+0x10/0x10 [ 286.038482][ T8606] ? futex_setup_timer+0xb4/0xd0 [ 286.038498][ T8606] ? __cfi_futex_wake_mark+0x10/0x10 [ 286.038520][ T8606] ? mas_find+0x358/0x5f0 [ 286.038551][ T8606] ? __kasan_check_write+0x18/0x20 [ 286.038584][ T8606] do_futex+0x25c/0x500 [ 286.038606][ T8606] ? __cfi_do_futex+0x10/0x10 [ 286.038628][ T8606] ? __vm_munmap+0x2c7/0x370 [ 286.038644][ T8606] __se_sys_futex+0x28f/0x300 [ 286.038662][ T8606] ? __x64_sys_futex+0x110/0x110 [ 286.038678][ T8606] ? __kasan_check_write+0x18/0x20 [ 286.038710][ T8606] __x64_sys_futex+0xe9/0x110 [ 286.038734][ T8606] x64_sys_call+0x227f/0x2ee0 [ 286.038766][ T8606] do_syscall_64+0x58/0xf0 [ 286.038799][ T8606] ? clear_bhb_loop+0x50/0xa0 [ 286.038828][ T8606] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 286.038849][ T8606] RIP: 0033:0x7f23c518eba9 [ 286.038875][ T8606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.038897][ T8606] RSP: 002b:00007f23c3bf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 286.038928][ T8606] RAX: ffffffffffffffda RBX: 00007f23c53d5fa0 RCX: 00007f23c518eba9 [ 286.038946][ T8606] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 286.038962][ T8606] RBP: 00007f23c5211e19 R08: 0000000000000000 R09: 0000000000000000 [ 286.038977][ T8606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.038988][ T8606] R13: 00007f23c53d6038 R14: 00007f23c53d5fa0 R15: 00007ffcbaf84a38 [ 286.039003][ T8606] [ 286.299662][ T8610] overlayfs: failed to resolve './file0': -2 [ 286.592901][ T8657] fuse: Bad value for 'fd' [ 286.598731][ T8657] overlayfs: failed to clone upperpath [ 286.716366][ T73] usb 3-1: USB disconnect, device number 32 [ 286.744391][ T73] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 286.872287][ T36] kauditd_printk_skb: 172 callbacks suppressed [ 286.872307][ T36] audit: type=1400 audit(2000004720.955:828): avc: denied { read write } for pid=8676 comm="syz.0.2594" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 286.908527][ T36] audit: type=1400 audit(2000004720.955:829): avc: denied { open } for pid=8676 comm="syz.0.2594" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 286.913976][ T8663] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.945337][ T8663] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.952552][ T8663] bridge_slave_0: entered allmulticast mode [ 286.959132][ T8663] bridge_slave_0: entered promiscuous mode [ 286.993429][ T8663] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.000862][ T8663] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.007981][ T8663] bridge_slave_1: entered allmulticast mode [ 287.019574][ T8663] bridge_slave_1: entered promiscuous mode [ 287.060632][ T8690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2595'. [ 287.076384][ T330] veth1_macvtap: left promiscuous mode [ 287.082107][ T330] veth0_vlan: left promiscuous mode [ 287.207008][ T8689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2595'. [ 287.330443][ T8663] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.337644][ T8663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.345013][ T8663] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.352098][ T8663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.414119][ T8709] overlayfs: failed to clone upperpath [ 287.442147][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.464886][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.476563][ T8733] overlayfs: failed to clone upperpath [ 287.485349][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.492461][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.522711][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.529848][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.582747][ T8663] veth0_vlan: entered promiscuous mode [ 287.601713][ T8663] veth1_macvtap: entered promiscuous mode [ 287.739641][ T36] audit: type=1400 audit(2000004721.766:830): avc: denied { ioctl } for pid=8756 comm="syz.2.2602" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 288.014365][ T8780] fuse: Bad value for 'fd' [ 288.028141][ T73] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 288.053378][ T36] audit: type=1400 audit(2000004722.067:831): avc: denied { map } for pid=8783 comm="syz.2.2610" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 288.077027][ T36] audit: type=1400 audit(2000004722.067:832): avc: denied { execute } for pid=8783 comm="syz.2.2610" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 288.104125][ T36] audit: type=1400 audit(2000004722.067:833): avc: denied { setopt } for pid=8783 comm="syz.2.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 288.176663][ T73] usb 1-1: device descriptor read/64, error -71 [ 288.244161][ T8794] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 288.244181][ T8794] rust_binder: Read failure Err(EFAULT) in pid:20 [ 288.252971][ T8794] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 288.264863][ T8794] rust_binder: got new transaction with bad transaction stack [ 288.266384][ T8794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20 [ 288.274374][ T8794] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 288.283945][ T8794] rust_binder: Read failure Err(EFAULT) in pid:20 [ 288.292531][ T8800] /dev/loop0: Can't lookup blockdev [ 288.320059][ T36] audit: type=1400 audit(2000004722.322:834): avc: denied { getattr } for pid=8803 comm="syz.3.2617" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=52307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 288.342582][ T8802] overlayfs: failed to clone upperpath [ 288.353420][ T8802] netlink: 'syz.2.2616': attribute type 10 has an invalid length. [ 288.361581][ T8802] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2616'. [ 288.375479][ T8802] rust_binder: Error while translating object. [ 288.375518][ T8802] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 288.382076][ T8802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:23 [ 288.392502][ T8802] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 288.402048][ T8802] rust_binder: Read failure Err(EFAULT) in pid:23 [ 288.441988][ T73] usb 1-1: device descriptor read/64, error -71 [ 288.707455][ T73] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 288.845308][ T73] usb 1-1: device descriptor read/64, error -71 [ 289.027761][ T36] audit: type=1326 audit(2000004722.991:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8788 comm="syz.9.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38c98eba9 code=0x7fc00000 [ 289.044375][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2631'. [ 289.106083][ T8856] /dev/rnullb0: Can't lookup blockdev [ 289.115583][ T8859] syz.9.2636: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz9,mems_allowed=0 [ 289.130528][ T73] usb 1-1: device descriptor read/64, error -71 [ 289.138236][ T8859] CPU: 0 UID: 0 PID: 8859 Comm: syz.9.2636 Not tainted syzkaller #0 f1fd036d8541680e36a649bca009aa7e7bf746ea [ 289.138274][ T8859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.138290][ T8859] Call Trace: [ 289.138298][ T8859] [ 289.138308][ T8859] __dump_stack+0x21/0x30 [ 289.138345][ T8859] dump_stack_lvl+0x10c/0x190 [ 289.138374][ T8859] ? __cfi_dump_stack_lvl+0x10/0x10 [ 289.138408][ T8859] dump_stack+0x19/0x20 [ 289.138436][ T8859] warn_alloc+0x1bc/0x2a0 [ 289.138465][ T8859] ? stack_depot_save_flags+0x38/0x800 [ 289.138500][ T8859] ? __cfi_warn_alloc+0x10/0x10 [ 289.138529][ T8859] ? kasan_save_track+0x4f/0x80 [ 289.138551][ T8859] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 289.138585][ T8859] ? xskq_create+0x68/0x2a0 [ 289.138608][ T8859] ? xsk_init_queue+0xb6/0x120 [ 289.138631][ T8859] ? xsk_setsockopt+0x43f/0x6f0 [ 289.138652][ T8859] ? do_sock_setsockopt+0x26d/0x400 [ 289.138676][ T8859] ? __x64_sys_setsockopt+0x1b8/0x250 [ 289.138699][ T8859] ? x64_sys_call+0x2adc/0x2ee0 [ 289.138732][ T8859] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 289.138760][ T8859] __vmalloc_node_range_noprof+0x135/0x1420 [ 289.138795][ T8859] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 289.138826][ T8859] ? avc_has_perm+0x144/0x220 [ 289.138857][ T8859] ? kasan_save_alloc_info+0x40/0x50 [ 289.138887][ T8859] ? __kasan_kmalloc+0x96/0xb0 [ 289.138911][ T8859] vmalloc_user_noprof+0x77/0x90 [ 289.138939][ T8859] ? xskq_create+0xdb/0x2a0 [ 289.138962][ T8859] xskq_create+0xdb/0x2a0 [ 289.138985][ T8859] xsk_init_queue+0xb6/0x120 [ 289.139008][ T8859] xsk_setsockopt+0x43f/0x6f0 [ 289.139030][ T8859] ? __cfi_xsk_setsockopt+0x10/0x10 [ 289.139052][ T8859] ? do_futex+0x356/0x500 [ 289.139075][ T8859] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 289.139105][ T8859] ? security_socket_setsockopt+0x33/0xd0 [ 289.139128][ T8859] ? __cfi_xsk_setsockopt+0x10/0x10 [ 289.139150][ T8859] do_sock_setsockopt+0x26d/0x400 [ 289.139172][ T8859] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 289.139198][ T8859] __x64_sys_setsockopt+0x1b8/0x250 [ 289.139223][ T8859] x64_sys_call+0x2adc/0x2ee0 [ 289.139255][ T8859] do_syscall_64+0x58/0xf0 [ 289.139288][ T8859] ? clear_bhb_loop+0x50/0xa0 [ 289.139316][ T8859] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 289.139343][ T8859] RIP: 0033:0x7fb38c98eba9 [ 289.139362][ T8859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.139382][ T8859] RSP: 002b:00007fb38d87a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 289.139408][ T8859] RAX: ffffffffffffffda RBX: 00007fb38cbd5fa0 RCX: 00007fb38c98eba9 [ 289.139425][ T8859] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 289.139440][ T8859] RBP: 00007fb38ca11e19 R08: 0000000000000004 R09: 0000000000000000 [ 289.139454][ T8859] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.139478][ T8859] R13: 00007fb38cbd6038 R14: 00007fb38cbd5fa0 R15: 00007fffb2bbf598 [ 289.139500][ T8859] [ 289.139521][ T8859] Mem-Info: [ 289.436355][ T8876] binder: Unknown parameter '00000000000000000000003' [ 289.439264][ T73] usb usb1-port1: attempt power cycle [ 289.451468][ T8859] active_anon:14850 inactive_anon:48 isolated_anon:0 [ 289.451468][ T8859] active_file:23150 inactive_file:2711 isolated_file:0 [ 289.451468][ T8859] unevictable:15400 dirty:125 writeback:0 [ 289.451468][ T8859] slab_reclaimable:6261 slab_unreclaimable:73360 [ 289.451468][ T8859] mapped:24706 shmem:4264 pagetables:988 [ 289.451468][ T8859] sec_pagetables:0 bounce:0 [ 289.451468][ T8859] kernel_misc_reclaimable:0 [ 289.451468][ T8859] free:1494018 free_pcp:2253 free_cma:0 [ 289.488997][ T8880] SELinux: failed to load policy [ 289.496995][ T8859] Node 0 active_anon:59400kB inactive_anon:192kB active_file:92600kB inactive_file:10844kB unevictable:61600kB isolated(anon):0kB isolated(file):0kB mapped:98824kB dirty:500kB writeback:0kB shmem:17056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5860kB pagetables:3952kB sec_pagetables:0kB all_unreclaimable? no [ 289.526044][ T8883] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 289.534715][ T8884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40 [ 289.534947][ T8859] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965952kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:5740kB free_cma:0kB [ 289.542916][ T8883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40 [ 289.550579][ T8859] lowmem_reserve[]: 0 3921 3921 [ 289.594758][ T8859] Normal free:3016760kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:59396kB inactive_anon:192kB active_file:92600kB inactive_file:10844kB unevictable:61600kB writepending:500kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:2884kB local_pcp:1380kB free_cma:0kB [ 289.630189][ T8859] lowmem_reserve[]: 0 0 0 [ 289.634931][ T8859] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 289.650804][ T8859] Normal: 92*4kB (ME) 74*8kB (E) 108*16kB (ME) 634*32kB (UME) 442*64kB (UME) 297*128kB (UME) 148*256kB (UME) 39*512kB (UME) 44*1024kB (UME) 19*2048kB (UM) 677*4096kB (ME) = 3004096kB [ 289.669667][ T8859] 47119 total pagecache pages [ 289.674720][ T8859] 48 pages in swap cache [ 289.678994][ T8859] Free swap = 124500kB [ 289.683356][ T8859] Total swap = 124996kB [ 289.687869][ T8859] 2097051 pages RAM [ 289.691705][ T8859] 0 pages HighMem/MovableOnly [ 289.696790][ T8859] 351533 pages reserved [ 289.700987][ T8859] 0 pages cma reserved [ 289.708501][ T8859] Memory allocations: [ 289.712538][ T8859] 0 B 0 init/main.c:1370 func:do_initcalls [ 289.720297][ T8859] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 289.728608][ T8859] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 289.743526][ T8859] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 289.757063][ T8859] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 289.765311][ T8859] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 289.774190][ T8859] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 289.782374][ T8859] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 289.790697][ T8859] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 289.798888][ T8859] 0 B 0 init/initramfs.c:101 func:find_link [ 289.811167][ T73] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 289.834464][ T8895] kvm: user requested TSC rate below hardware speed [ 289.835225][ T73] usb 1-1: device descriptor read/8, error -71 [ 289.842733][ T8899] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 289.992619][ T73] usb 1-1: device descriptor read/8, error -71 [ 290.257015][ T73] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 290.279364][ T73] usb 1-1: device descriptor read/8, error -71 [ 290.417420][ T73] usb 1-1: device descriptor read/8, error -71 [ 290.428185][ T8917] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2656'. [ 290.452280][ T8925] fuse: Bad value for 'fd' [ 290.511613][ T8937] tipc: Enabling of bearer rejected, failed to enable media [ 290.533024][ T8941] /dev/rnullb0: Can't lookup blockdev [ 290.538636][ T73] usb usb1-port1: unable to enumerate USB device [ 290.557985][ T8943] 9pnet_fd: Insufficient options for proto=fd [ 290.914460][ T8949] binder: Unknown parameter '0x000000000000000e' [ 291.101046][ T8967] overlayfs: failed to clone upperpath [ 291.392908][ T63] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 291.530969][ T63] usb 1-1: device descriptor read/64, error -71 [ 291.793587][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2687'. [ 291.796391][ T63] usb 1-1: device descriptor read/64, error -71 [ 292.051200][ T73] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 292.061843][ T63] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 292.210422][ T73] usb 3-1: Using ep0 maxpacket: 16 [ 292.216726][ T73] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.221032][ T63] usb 1-1: device descriptor read/64, error -71 [ 292.227321][ T73] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.275633][ T73] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.291066][ T73] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.303454][ T73] usb 3-1: Product: syz [ 292.309871][ T73] usb 3-1: Manufacturer: syz [ 292.314720][ T73] usb 3-1: SerialNumber: syz [ 292.366145][ T36] audit: type=1326 audit(2000004726.127:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9009 comm="syz.9.2691" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb38c98eba9 code=0x0 [ 292.486520][ T63] usb 1-1: device descriptor read/64, error -71 [ 292.541499][ T73] usb 3-1: 0:2 : does not exist [ 292.548668][ T73] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 292.561504][ T73] usb 3-1: USB disconnect, device number 33 [ 292.603412][ T63] usb usb1-port1: attempt power cycle [ 292.964329][ T63] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 292.986709][ T63] usb 1-1: device descriptor read/8, error -71 [ 293.095031][ T9026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.104271][ T9026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.135290][ T63] usb 1-1: device descriptor read/8, error -71 [ 293.389170][ T63] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 293.411338][ T63] usb 1-1: device descriptor read/8, error -71 [ 293.549519][ T63] usb 1-1: device descriptor read/8, error -71 [ 293.665316][ T63] usb usb1-port1: unable to enumerate USB device [ 294.270509][ T36] audit: type=1400 audit(2000004727.917:837): avc: denied { map } for pid=9116 comm="syz.0.2731" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 294.663403][ T31] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 294.780273][ T73] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 294.822724][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 294.833920][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.844399][ T31] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 294.853619][ T31] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 294.864121][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.873515][ T31] usb 1-1: config 0 descriptor?? [ 294.950166][ T73] usb 3-1: Using ep0 maxpacket: 8 [ 294.956952][ T73] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 294.967271][ T73] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.977569][ T73] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.986863][ T73] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.994895][ T73] usb 3-1: Product: ♪鼡츜ѯⲿᦄ毉꺔￰퇇슋巫ꭹ⬱緵୅싞蒖鼯䆭馉뛑㘳崫꿡䵪 [ 295.006349][ T73] usb 3-1: Manufacturer: щ [ 295.010902][ T73] usb 3-1: SerialNumber: 勚 [ 295.285838][ T73] usb 3-1: 0:2 : does not exist [ 295.293794][ T73] usb 3-1: USB disconnect, device number 34 [ 295.302019][ T2506] udevd[2506]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 295.500809][ T9173] overlayfs: failed to clone upperpath [ 295.885717][ T9201] overlayfs: failed to clone upperpath [ 295.931048][ T9210] SELinux: policydb version 2134819135 does not match my version range 15-33 [ 295.940079][ T9210] SELinux: failed to load policy [ 295.996246][ T9213] tmpfs: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 296.106500][ T9221] pim6reg1: entered promiscuous mode [ 296.111874][ T9221] pim6reg1: entered allmulticast mode [ 296.575284][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 296.703251][ T9260] overlayfs: failed to clone upperpath [ 296.732423][ T9265] overlayfs: failed to clone upperpath [ 296.738494][ T9265] overlayfs: failed to clone upperpath [ 296.744681][ T9265] overlayfs: failed to clone upperpath [ 296.748331][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.760504][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.760769][ T9265] overlayfs: failed to clone upperpath [ 296.770381][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 296.784122][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 296.784642][ T9265] overlayfs: failed to clone upperpath [ 296.793879][ T10] usb 3-1: SerialNumber: syz [ 296.802740][ T9265] overlayfs: failed to clone upperpath [ 296.809577][ T9265] overlayfs: failed to clone upperpath [ 296.815638][ T9265] overlayfs: failed to clone upperpath [ 296.821925][ T9265] overlayfs: failed to clone upperpath [ 296.828160][ T9265] overlayfs: failed to clone upperpath [ 296.834413][ T9265] overlayfs: failed to clone upperpath [ 296.841885][ T9265] overlayfs: failed to clone upperpath [ 296.848206][ T9265] overlayfs: failed to clone upperpath [ 296.854569][ T9265] overlayfs: failed to clone upperpath [ 296.860542][ T9265] overlayfs: failed to clone upperpath [ 296.866630][ T9265] overlayfs: failed to clone upperpath [ 296.872458][ T9272] overlayfs: failed to clone upperpath [ 296.878549][ T9265] overlayfs: failed to clone upperpath [ 296.884978][ T9265] overlayfs: failed to clone upperpath [ 296.891775][ T9265] overlayfs: failed to clone upperpath [ 296.898438][ T9265] overlayfs: failed to clone upperpath [ 296.904433][ T9265] overlayfs: failed to clone upperpath [ 296.910769][ T9265] overlayfs: failed to clone upperpath [ 296.916982][ T9265] overlayfs: failed to clone upperpath [ 296.923175][ T9265] overlayfs: failed to clone upperpath [ 296.930685][ T9265] overlayfs: failed to clone upperpath [ 296.936993][ T9265] overlayfs: failed to clone upperpath [ 296.943068][ T9265] overlayfs: failed to clone upperpath [ 296.949534][ T9265] overlayfs: failed to clone upperpath [ 296.955641][ T9265] overlayfs: failed to clone upperpath [ 296.962004][ T9265] overlayfs: failed to clone upperpath [ 296.968126][ T9265] overlayfs: failed to clone upperpath [ 296.974469][ T9265] overlayfs: failed to clone upperpath [ 296.980840][ T9265] overlayfs: failed to clone upperpath [ 296.986868][ T9265] overlayfs: failed to clone upperpath [ 296.993192][ T9265] overlayfs: failed to clone upperpath [ 296.999247][ T9265] overlayfs: failed to clone upperpath [ 297.005548][ T9265] overlayfs: failed to clone upperpath [ 297.011840][ T9265] overlayfs: failed to clone upperpath [ 297.017884][ T9265] overlayfs: failed to clone upperpath [ 297.028952][ T10] usb 3-1: 0:2 : does not exist [ 297.034105][ T36] audit: type=1400 audit(2000004730.515:838): avc: denied { setattr } for pid=9252 comm="syz.2.2783" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 297.058431][ T9265] overlayfs: failed to clone upperpath [ 297.066081][ T9265] overlayfs: failed to clone upperpath [ 297.073819][ T9265] overlayfs: failed to clone upperpath [ 297.079742][ T10] usb 3-1: USB disconnect, device number 35 [ 297.086465][ T9265] overlayfs: failed to clone upperpath [ 297.092608][ T9265] overlayfs: failed to clone upperpath [ 297.100705][ T9265] overlayfs: failed to clone upperpath [ 297.106824][ T9265] overlayfs: failed to clone upperpath [ 297.113135][ T9265] overlayfs: failed to clone upperpath [ 297.119202][ T9265] overlayfs: failed to clone upperpath [ 297.125281][ T9265] overlayfs: failed to clone upperpath [ 297.131463][ T9265] overlayfs: failed to clone upperpath [ 297.139918][ T9265] overlayfs: failed to clone upperpath [ 297.145893][ T9265] overlayfs: failed to clone upperpath [ 297.152223][ T9265] overlayfs: failed to clone upperpath [ 297.158202][ T9265] overlayfs: failed to clone upperpath [ 297.164430][ T9265] overlayfs: failed to clone upperpath [ 297.170580][ T9265] overlayfs: failed to clone upperpath [ 297.176549][ T9265] overlayfs: failed to clone upperpath [ 297.182730][ T9265] overlayfs: failed to clone upperpath [ 297.188751][ T9265] overlayfs: failed to clone upperpath [ 297.195153][ T9265] overlayfs: failed to clone upperpath [ 297.201266][ T9265] overlayfs: failed to clone upperpath [ 297.207471][ T9265] overlayfs: failed to clone upperpath [ 297.233496][ T9274] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2792'. [ 297.289183][ T9278] netlink: 'syz.9.2794': attribute type 4 has an invalid length. [ 297.310423][ T36] audit: type=1400 audit(2000004730.788:839): avc: denied { nlmsg_read } for pid=9277 comm="syz.9.2794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 297.605155][ T10] usb 1-1: USB disconnect, device number 72 [ 297.668504][ T9287] 9pnet_fd: Insufficient options for proto=fd [ 298.558556][ T9311] netlink: 'syz.9.2805': attribute type 4 has an invalid length. [ 298.869962][ T63] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 299.030401][ T63] usb 3-1: config 16 has an invalid interface number: 19 but max is 0 [ 299.038591][ T63] usb 3-1: config 16 has no interface number 0 [ 299.046261][ T63] usb 3-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 299.055358][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.063370][ T63] usb 3-1: Product: syz [ 299.067541][ T63] usb 3-1: Manufacturer: syz [ 299.072160][ T63] usb 3-1: SerialNumber: syz [ 299.297276][ T63] usb 3-1: USB disconnect, device number 36 [ 299.304961][ T2506] udevd[2506]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 315.612457][ T9335] netlink: 37 bytes leftover after parsing attributes in process `syz.9.2815'. [ 315.840034][ T63] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 316.011124][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 316.022311][ T63] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 316.042399][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.051306][ T63] usb 1-1: config 0 descriptor?? [ 316.057081][ T9326] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 316.114296][ T9395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2836'. [ 316.126541][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2836'. [ 316.137973][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 316.247764][ T9405] overlayfs: failed to clone upperpath [ 316.309317][ T10] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 316.317459][ T10] usb 3-1: config 0 has no interface number 0 [ 316.323821][ T10] usb 3-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 316.334021][ T10] usb 3-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 316.351882][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 316.360995][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.369195][ T10] usb 3-1: Product: syz [ 316.373589][ T10] usb 3-1: Manufacturer: syz [ 316.378213][ T10] usb 3-1: SerialNumber: syz [ 316.387523][ T10] usb 3-1: config 0 descriptor?? [ 316.392894][ T9373] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 316.400348][ T9373] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 316.410487][ T10] ums-usbat 3-1:0.23: USB Mass Storage device detected [ 316.496398][ T63] hid-generic 0003:04F3:0755.0023: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 316.622823][ T9373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.631504][ T9373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.654496][ T9417] can0: slcan on ttyS3. [ 316.686676][ T10] ums-usbat 3-1:0.23: probe with driver ums-usbat failed with error -5 [ 316.695732][ T9417] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=41 (1312 ns) > initial count (128 ns). Using initial count to start timer. [ 316.714122][ T10] usb 3-1: USB disconnect, device number 37 [ 316.822745][ T9416] can0 (unregistered): slcan off ttyS3. [ 317.135154][ T9488] overlayfs: failed to clone upperpath [ 317.149091][ T9487] overlayfs: failed to clone upperpath [ 317.238145][ T9502] No source specified [ 317.247429][ T9502] 9pnet_fd: Insufficient options for proto=fd [ 317.815590][ T36] audit: type=1400 audit(2000004750.068:840): avc: denied { shutdown } for pid=9529 comm="syz.2.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 317.881492][ T36] audit: type=1400 audit(2000004750.134:841): avc: denied { setopt } for pid=9533 comm="syz.9.2866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 317.950039][ T9542] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2869'. [ 317.959106][ T9542] netlink: 43 bytes leftover after parsing attributes in process `syz.9.2869'. [ 317.968088][ T9542] netlink: 'syz.9.2869': attribute type 5 has an invalid length. [ 317.975883][ T9542] netlink: 43 bytes leftover after parsing attributes in process `syz.9.2869'. [ 318.212399][ T9551] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 318.484899][ T10] usb 1-1: USB disconnect, device number 73 [ 318.972357][ T9565] rust_binder: Read failure Err(EAGAIN) in pid:1069 [ 318.972948][ T9567] rust_binder: Write failure EFAULT in pid:1069 [ 319.267921][ T9580] can0: slcan on ttyS3. [ 319.383767][ T10] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 319.532756][ T31] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 319.543417][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 319.549594][ T10] usb 1-1: config 3 has an invalid interface number: 69 but max is 2 [ 319.557822][ T10] usb 1-1: config 3 has an invalid interface number: 128 but max is 2 [ 319.566046][ T10] usb 1-1: config 3 has an invalid descriptor of length 255, skipping remainder of the config [ 319.576358][ T10] usb 1-1: config 3 has 2 interfaces, different from the descriptor's value: 3 [ 319.585335][ T10] usb 1-1: config 3 has no interface number 0 [ 319.591453][ T10] usb 1-1: config 3 has no interface number 1 [ 319.597584][ T10] usb 1-1: config 3 interface 69 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 319.608422][ T10] usb 1-1: config 3 interface 128 altsetting 2 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 319.619577][ T10] usb 1-1: config 3 interface 128 altsetting 2 endpoint 0x1 has invalid maxpacket 1289, setting to 1024 [ 319.630754][ T10] usb 1-1: config 3 interface 128 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 319.643871][ T10] usb 1-1: config 3 interface 69 has no altsetting 0 [ 319.650587][ T10] usb 1-1: config 3 interface 128 has no altsetting 0 [ 319.658882][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=dd20, bcdDevice=e7.15 [ 319.668028][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.676107][ T10] usb 1-1: Product: 꾑韪藒ᛇ⊇９뫶釈郁芠↺ſt眦誨袋₊ퟎ햍䂜ࢸ౴緤ĩ摫層뫚ꩡ柇夘㫈ੰޮ孟얇Ყ蝋횴୥燑䊞쟠蹼⧛䧺펥뼳埳࿖龻⻱曋㪚焪졎݉䃭槴㉡煈멠䖇趜瞫⼎⺯쳌⚺넕⺭鶱ムᖼ㜴它暢灶飘囮拏ჺ썯䨧勱媂㖘깭㼵 [ 319.705691][ T10] usb 1-1: Manufacturer: ␉ [ 319.708632][ T9599] /dev/loop0: Can't lookup blockdev [ 319.710320][ T10] usb 1-1: SerialNumber: 쒬쭹垦혇㷷騪勱昏虖컂曣⃅붯鮸㩴쑘␙壸㯺ㅳ眷ꡥ辏೤㤼ꐌ㻶ꢡ헦襛⩌ղ氹烟ᐃᐕ藞㮌ꣽ⋏힝壟Ⱄ䡒妇禾ἡ魅ﭓ⍍吿䯊䴫물슄㽵푻։⩌忄쬣臂쿚╹櫋巹㣤Ტ讧볊鵪髊䄸鏑ꓕꃻ㺣ദ⃆塼鱬嘼넊ꗈ풴ƙ噴寘⮔盰槢㝬 [ 319.715699][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 319.763940][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.774231][ T31] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 319.788948][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.798093][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.806188][ T31] usb 3-1: Product: syz [ 319.810456][ T31] usb 3-1: Manufacturer: syz [ 319.815081][ T31] usb 3-1: SerialNumber: syz [ 319.829551][ T31] usb 3-1: config 0 descriptor?? [ 319.976691][ T10] ftdi_sio 1-1:3.69: FTDI USB Serial Device converter detected [ 319.984788][ T10] ftdi_sio ttyUSB0: unknown device type: 0xe715 [ 319.992118][ T10] ftdi_sio 1-1:3.128: FTDI USB Serial Device converter detected [ 320.000134][ T10] ftdi_sio ttyUSB1: unknown device type: 0xe715 [ 320.007971][ T10] usb 1-1: USB disconnect, device number 74 [ 320.014608][ T10] ftdi_sio 1-1:3.69: device disconnected [ 320.020939][ T10] ftdi_sio 1-1:3.128: device disconnected [ 320.052269][ T73] usb 3-1: USB disconnect, device number 38 [ 320.108588][ T9579] can0 (unregistered): slcan off ttyS3. [ 320.538199][ T9653] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2896'. [ 320.715392][ T9670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 320.716953][ T9670] input: syz1 as /devices/virtual/input/input20 [ 320.734678][ T9670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 320.748286][ T9672] binder: Bad value for 'max' [ 320.916441][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 321.076116][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 321.082364][ T10] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.093666][ T10] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.103498][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 321.110152][ T10] usb 3-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 321.119213][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.128151][ T10] usb 3-1: config 0 descriptor?? [ 321.460586][ T9681] overlayfs: failed to clone upperpath [ 321.564900][ T10] ntrig 0003:1B96:0004.0024: unknown main item tag 0x0 [ 321.578517][ T10] ntrig 0003:1B96:0004.0024: unknown main item tag 0x0 [ 321.585551][ T10] ntrig 0003:1B96:0004.0024: unknown main item tag 0x0 [ 321.592942][ T10] ntrig 0003:1B96:0004.0024: unknown main item tag 0x0 [ 321.600185][ T10] ntrig 0003:1B96:0004.0024: unknown main item tag 0x0 [ 321.608810][ T10] ntrig 0003:1B96:0004.0024: hidraw1: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.2-1/input0 [ 321.709628][ T9704] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 321.775277][ T10] ntrig 0003:1B96:0004.0024: Firmware version: 2.15.13.41.0 (3d95 38b5) [ 321.857867][ T9729] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 321.859113][ T36] audit: type=1400 audit(2000004753.873:842): avc: denied { watch } for pid=9727 comm="syz.0.2923" path="/375/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 321.887863][ T9729] rust_binder: Write failure EFAULT in pid:1107 [ 321.903674][ T9737] rust_binder: Error while translating object. [ 321.910022][ T9737] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 321.916251][ T9737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1109 [ 321.936303][ T9739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 321.948874][ T9741] rust_binder: 1111: no such ref 4294967293 [ 321.974593][ T9744] rust_binder: Write failure EINVAL in pid:1116 [ 321.990487][ T63] usb 3-1: USB disconnect, device number 39 [ 322.050160][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2931'. [ 322.059551][ T9752] /dev/rnullb0: Can't open blockdev [ 322.078352][ T9754] binder: Unknown parameter '' [ 322.224274][ T36] audit: type=1400 audit(2000004754.211:843): avc: denied { accept } for pid=9771 comm="syz.9.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 322.259154][ T9776] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2940'. [ 322.365109][ T9795] rust_binder: 1132: no such ref 3 [ 322.370302][ T9795] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1132 [ 322.380294][ T9795] rust_binder: 1132: no such ref 3 [ 322.691493][ T9824] x_tables: unsorted underflow at hook 2 [ 322.709705][ T9826] netlink: 57 bytes leftover after parsing attributes in process `syz.3.2955'. [ 322.834195][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2959'. [ 322.843598][ T9838] fuse: Unknown parameter 'd' [ 322.849530][ T9838] tipc: New replicast peer: 255.255.255.255 [ 322.856049][ T9838] tipc: Enabled bearer , priority 10 [ 322.957462][ T36] audit: type=1400 audit(2000004754.897:844): avc: denied { map } for pid=9848 comm="syz.0.2964" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 322.980520][ T36] audit: type=1400 audit(2000004754.897:845): avc: denied { execute } for pid=9848 comm="syz.0.2964" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 323.082498][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2966'. [ 323.091533][ T9855] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2966'. [ 323.100802][ T9855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2966'. [ 323.114361][ T9857] can0: slcan on ttyS3. [ 323.153839][ T9858] can0 (unregistered): slcan off ttyS3. [ 323.475434][ T9897] overlayfs: failed to set uuid (58/file1, err=-1); falling back to uuid=null. [ 323.610891][ T36] audit: type=1400 audit(2000004755.517:846): avc: denied { accept } for pid=9918 comm="syz.2.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 323.694886][ T63] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 323.855806][ T63] usb 1-1: config 7 descriptor has 1 excess byte, ignoring [ 323.863056][ T63] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 323.873403][ T63] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 323.882549][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.890601][ T63] usb 1-1: Product: syz [ 323.894794][ T63] usb 1-1: Manufacturer: syz [ 323.899641][ T31] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 323.907243][ T63] usb 1-1: SerialNumber: syz [ 323.914397][ T63] rndis_host 1-1:7.0: skipping garbage [ 323.919976][ T63] usb 1-1: bad CDC descriptors [ 324.067534][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 324.073797][ T31] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.084733][ T31] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.094506][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 324.101249][ T31] usb 3-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 324.110324][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.119042][ T31] usb 3-1: config 0 descriptor?? [ 324.132547][ T10] usb 1-1: USB disconnect, device number 75 [ 324.552682][ T31] ntrig 0003:1B96:0004.0025: unknown main item tag 0x0 [ 324.559819][ T31] ntrig 0003:1B96:0004.0025: unknown main item tag 0x0 [ 324.566708][ T31] ntrig 0003:1B96:0004.0025: unknown main item tag 0x0 [ 324.574087][ T31] ntrig 0003:1B96:0004.0025: unknown main item tag 0x0 [ 324.581024][ T31] ntrig 0003:1B96:0004.0025: unknown main item tag 0x0 [ 324.588554][ T31] ntrig 0003:1B96:0004.0025: hidraw1: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.2-1/input0 [ 324.764460][ T31] ntrig 0003:1B96:0004.0025: Firmware version: 2.15.13.41.0 (3d95 38b5) [ 324.791600][ T36] audit: type=1400 audit(2000004756.625:847): avc: denied { setattr } for pid=9939 comm="syz.0.2982" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 324.813615][ T36] audit: type=1400 audit(2000004756.625:848): avc: denied { remount } for pid=9939 comm="syz.0.2982" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 324.870954][ T9945] IPv6: NLM_F_CREATE should be specified when creating new route [ 324.979666][ T31] usb 3-1: USB disconnect, device number 40 [ 325.097728][ T9952] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 325.097757][ T9952] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 325.105830][ T9952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1168 [ 325.128622][ T9954] can0: slcan on ttyS3. [ 325.143620][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2988'. [ 325.188451][ T9953] can0 (unregistered): slcan off ttyS3. [ 325.229375][ T9966] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 325.237730][ T9966] rust_binder: Write failure EINVAL in pid:1172 [ 325.714593][T10013] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2999'. [ 326.144811][T10026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.148691][T10026] rust_binder: Write failure EFAULT in pid:1181 [ 326.527073][ T63] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 326.668096][T10038] syz.3.3009 uses obsolete (PF_INET,SOCK_PACKET) [ 326.708145][ T63] usb 1-1: Using ep0 maxpacket: 8 [ 326.714414][ T63] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.729670][T10041] /dev/rnullb0: Can't lookup blockdev [ 326.734885][ T63] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.745149][ T63] usb 1-1: config 0 interface 0 has no altsetting 0 [ 326.752061][ T63] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 326.761139][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.770177][ T63] usb 1-1: config 0 descriptor?? [ 327.091980][T10065] tipc: MTU too low for tipc bearer [ 327.213691][ T63] ntrig 0003:1B96:0004.0026: hidraw1: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.0-1/input0 [ 327.227442][T10079] overlayfs: failed to clone upperpath [ 327.409181][T10095] overlayfs: failed to resolve './file0': -2 [ 327.431845][ T63] usb 1-1: USB disconnect, device number 76 [ 328.156361][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 328.305450][ T10] usb 3-1: device descriptor read/64, error -71 [ 328.571719][ T10] usb 3-1: device descriptor read/64, error -71 [ 328.594756][ T36] audit: type=1400 audit(2000004760.203:849): avc: denied { getopt } for pid=10164 comm="syz.0.3050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 328.827318][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 328.869887][ T2467] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 328.900458][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3055'. [ 328.920863][T10177] netlink: 'syz.9.3056': attribute type 28 has an invalid length. [ 328.965775][ T10] usb 3-1: device descriptor read/64, error -71 [ 329.040287][ T2467] usb 1-1: Using ep0 maxpacket: 32 [ 329.047147][ T2467] usb 1-1: config 1 interface 0 has no altsetting 0 [ 329.055416][ T2467] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 329.064572][ T2467] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.072663][ T2467] usb 1-1: Product: syz [ 329.076879][ T2467] usb 1-1: Manufacturer: й [ 329.081380][ T2467] usb 1-1: SerialNumber: syz [ 329.178852][T10186] overlayfs: failed to clone upperpath [ 329.178896][T10185] overlayfs: failed to clone upperpath [ 329.221349][ T10] usb 3-1: device descriptor read/64, error -71 [ 329.302369][T10165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.310984][T10165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.319532][T10165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.328172][T10165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.338731][ T10] usb usb3-port1: attempt power cycle [ 329.346337][ T2467] usbhid 1-1:1.0: can't add hid device: -71 [ 329.352327][ T2467] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 329.360965][ T2467] usb 1-1: USB disconnect, device number 77 [ 329.700612][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 329.722971][ T10] usb 3-1: device descriptor read/8, error -71 [ 329.861491][ T10] usb 3-1: device descriptor read/8, error -71 [ 329.862909][T10195] overlayfs: failed to clone upperpath [ 329.888816][T10199] netlink: 'syz.0.3064': attribute type 4 has an invalid length. [ 329.896724][T10199] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3064'. [ 329.983285][T10209] fuse: Unknown parameter '0177777777777777777777718446744073709551615' [ 329.998328][T10213] netlink: 'syz.3.3069': attribute type 27 has an invalid length. [ 330.018493][T10215] netlink: 'syz.3.3070': attribute type 58 has an invalid length. [ 330.027378][T10215] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 330.116012][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 330.138483][ T10] usb 3-1: device descriptor read/8, error -71 [ 330.158583][ T31] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 330.276869][ T10] usb 3-1: device descriptor read/8, error -71 [ 330.318344][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 330.324581][ T31] usb 1-1: config 0 has an invalid interface number: 145 but max is 0 [ 330.332983][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.343243][ T31] usb 1-1: config 0 has no interface number 0 [ 330.349336][ T31] usb 1-1: config 0 interface 145 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 330.364067][ T31] usb 1-1: New USB device found, idVendor=7d72, idProduct=445f, bcdDevice=98.21 [ 330.373164][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.381161][ T31] usb 1-1: Product: syz [ 330.385358][ T31] usb 1-1: Manufacturer: syz [ 330.389970][ T31] usb 1-1: SerialNumber: syz [ 330.395293][ T31] usb 1-1: config 0 descriptor?? [ 330.401079][ T31] usb 1-1: bad CDC descriptors [ 330.403655][ T10] usb usb3-port1: unable to enumerate USB device [ 330.615576][ T63] usb 1-1: USB disconnect, device number 78 [ 330.735053][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3076'. [ 331.014772][T10260] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.021974][T10260] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.029079][T10260] bridge_slave_0: entered allmulticast mode [ 331.035597][T10260] bridge_slave_0: entered promiscuous mode [ 331.042052][T10260] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.049135][T10260] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.056332][T10260] bridge_slave_1: entered allmulticast mode [ 331.063101][T10260] bridge_slave_1: entered promiscuous mode [ 331.133305][ T13] veth1_macvtap: left promiscuous mode [ 331.139029][ T13] veth0_vlan: left promiscuous mode [ 331.210205][T10260] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.217325][T10260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.224671][T10260] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.231734][T10260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.252085][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.260517][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.271028][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.278131][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.287219][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.294341][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.323652][T10260] veth0_vlan: entered promiscuous mode [ 331.336327][T10260] veth1_macvtap: entered promiscuous mode [ 331.446851][T10301] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10301 comm=syz.3.3096 [ 331.475622][T10301] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=10301 comm=syz.3.3096 [ 331.607188][ T63] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 331.723642][T10318] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3101'. [ 331.768096][ T63] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 331.776247][ T63] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 331.789466][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 331.805163][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 331.818863][ T63] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 331.832605][ T63] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.842286][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.851913][ T63] usb 1-1: config 0 descriptor?? [ 331.858297][T10283] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 331.953997][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3107'. [ 331.979427][T10343] overlayfs: failed to clone upperpath [ 331.989048][T10345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 331.989105][T10345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 332.006004][T10347] incfs: Error accessing: ./file0. [ 332.020328][T10347] incfs: mount failed -20 [ 332.027183][T10347] netlink: 'syz.3.3110': attribute type 4 has an invalid length. [ 332.242994][T10355] fuse: Bad value for 'fd' [ 332.248443][T10355] overlayfs: failed to resolve './bus': -2 [ 332.272669][ T36] audit: type=1400 audit(2000004763.649:850): avc: denied { setopt } for pid=10356 comm="syz.3.3114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 332.293825][ T63] plantronics 0003:047F:FFFF.0027: unknown main item tag 0xd [ 332.304013][ T63] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 332.313748][ T63] plantronics 0003:047F:FFFF.0027: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 332.570568][T10283] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.620061][ T63] usb 1-1: USB disconnect, device number 79 [ 332.910638][T10374] binder: Unknown parameter 'fscontext?}' [ 333.163905][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3122'. [ 333.173240][T10378] /dev/rnullb0: Can't open blockdev [ 333.203622][T10382] rust_binder: 1214: no such ref 0 [ 333.208846][T10382] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 333.217480][T10382] rust_binder: 1214: no such ref 64 [ 333.222705][T10382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1214 [ 333.520639][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3129'. [ 333.547579][T10402] binder: Bad value for 'defcontext' [ 333.565089][T10408] __vm_enough_memory: pid: 10408, comm: syz.9.3132, bytes: 18014402804453376 not enough memory for the allocation [ 333.748623][T10432] overlayfs: failed to clone upperpath [ 333.810745][T10449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 333.810781][T10449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:52 [ 333.834567][T10452] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.110513][ T10] usb 10-1: new full-speed USB device number 46 using dummy_hcd [ 334.183291][T10468] rust_binder: Write failure EINVAL in pid:1217 [ 334.282343][ T10] usb 10-1: not running at top speed; connect to a high speed hub [ 334.296626][ T10] usb 10-1: too many configurations: 20, using maximum allowed: 8 [ 334.310370][ T10] usb 10-1: config 1 has an invalid interface number: 185 but max is 0 [ 334.318784][ T10] usb 10-1: config 1 has no interface number 0 [ 334.325178][ T10] usb 10-1: config 1 interface 185 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 334.336273][ T10] usb 10-1: config 1 interface 185 has no altsetting 0 [ 334.343940][ T10] usb 10-1: config 1 has an invalid interface number: 185 but max is 0 [ 334.352528][ T10] usb 10-1: config 1 has no interface number 0 [ 334.353078][T10476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=10476 comm=syz.3.3156 [ 334.359026][ T10] usb 10-1: config 1 interface 185 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 334.371861][T10476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=10476 comm=syz.3.3156 [ 334.382776][ T10] usb 10-1: config 1 interface 185 has no altsetting 0 [ 334.395411][T10476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=10476 comm=syz.3.3156 [ 334.403094][ T10] usb 10-1: config 1 has an invalid interface number: 185 but max is 0 [ 334.423031][ T10] usb 10-1: config 1 has no interface number 0 [ 334.429295][ T10] usb 10-1: config 1 interface 185 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 334.440663][ T10] usb 10-1: config 1 interface 185 has no altsetting 0 [ 334.448489][ T10] usb 10-1: config 1 has an invalid interface number: 185 but max is 0 [ 334.457007][ T10] usb 10-1: config 1 has no interface number 0 [ 334.464323][ T10] usb 10-1: config 1 interface 185 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 334.475607][ T10] usb 10-1: config 1 interface 185 has no altsetting 0 [ 334.483475][ T10] usb 10-1: config 1 has an invalid interface number: 185 but max is 0 [ 334.491842][ T10] usb 10-1: config 1 has no interface number 0 [ 334.498323][ T10] usb 10-1: config 1 interface 185 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 334.509639][ T10] usb 10-1: config 1 interface 185 has no altsetting 0 [ 334.525217][ T10] usb 10-1: config 1 has an invalid interface number: 185 but max is 0 [ 334.533598][ T10] usb 10-1: config 1 has no interface number 0 [ 334.539888][ T10] usb 10-1: config 1 interface 185 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 334.551013][ T10] usb 10-1: config 1 interface 185 has no altsetting 0 [ 334.558687][ T10] usb 10-1: config 1 has an invalid interface number: 185 but max is 0 [ 334.567002][ T10] usb 10-1: config 1 has no interface number 0 [ 334.573256][ T10] usb 10-1: config 1 interface 185 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 334.584368][ T10] usb 10-1: config 1 interface 185 has no altsetting 0 [ 334.592087][ T10] usb 10-1: config 1 has an invalid interface number: 185 but max is 0 [ 334.600425][ T10] usb 10-1: config 1 has no interface number 0 [ 334.606683][ T10] usb 10-1: config 1 interface 185 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 334.617782][ T10] usb 10-1: config 1 interface 185 has no altsetting 0 [ 334.626279][ T10] usb 10-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=9f.80 [ 334.635722][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.643860][ T10] usb 10-1: Product: syz [ 334.648119][ T10] usb 10-1: Manufacturer: syz [ 334.652793][ T10] usb 10-1: SerialNumber: syz [ 334.845658][T10489] kvm: MWAIT instruction emulated as NOP! [ 334.958084][ T10] usb 10-1: unknown interface protocol 0x6c, assuming v1 [ 334.965242][ T10] usb 10-1: cannot find UAC_HEADER [ 334.972032][ T10] snd-usb-audio 10-1:1.185: probe with driver snd-usb-audio failed with error -22 [ 334.984500][ T10] usb 10-1: USB disconnect, device number 46 [ 334.993574][ T9330] udevd[9330]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.185/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 335.016637][ T36] audit: type=1400 audit(2000004766.230:851): avc: denied { mounton } for pid=10500 comm="syz.2.3164" path="/proc/255/cgroup" dev="proc" ino=58935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 335.096827][T10510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 335.097038][T10510] rust_binder: 1223: no such ref 3 [ 335.222052][T10532] rust_binder: Write failure EFAULT in pid:1229 [ 335.222572][T10532] rust_binder: Write failure EFAULT in pid:1229 [ 335.675122][ T36] audit: type=1400 audit(2000004766.840:852): avc: denied { relabelfrom } for pid=10570 comm="syz.9.3191" name="RAWv6" dev="sockfs" ino=59561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 335.675311][T10571] SELinux: Context system_u:object_r:autofs_device_t:s0 is not valid (left unmapped). [ 335.715091][ T36] audit: type=1400 audit(2000004766.887:853): avc: denied { relabelto } for pid=10570 comm="syz.9.3191" name="RAWv6" dev="sockfs" ino=59561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rawip_socket permissive=1 trawcon="system_u:object_r:autofs_device_t:s0" [ 335.750090][ T36] audit: type=1400 audit(2000004766.906:854): avc: denied { setattr } for pid=10572 comm="syz.9.3192" name="secretmem" dev="secretmem" ino=59566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 335.750495][T10574] rust_binder: Error while translating object. [ 335.773520][T10574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 335.779735][T10574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:67 [ 335.835760][ T36] audit: type=1400 audit(2000004766.990:855): avc: denied { map } for pid=10576 comm="syz.9.3193" path="pipe:[56143]" dev="pipefs" ino=56143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 335.914354][T10582] overlayfs: failed to clone upperpath [ 336.035550][T10594] overlayfs: failed to clone upperpath [ 336.277033][T10623] TCP: TCP_TX_DELAY enabled [ 336.629946][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3216'. [ 336.763434][ T73] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 336.935475][ T73] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 336.943620][ T73] usb 3-1: config 0 has no interface number 0 [ 336.949906][ T73] usb 3-1: config 0 interface 99 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023 [ 336.960095][ T73] usb 3-1: config 0 interface 99 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 336.970004][ T73] usb 3-1: config 0 interface 99 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 336.982525][ T73] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 336.983203][T10687] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=58147 sclass=netlink_xfrm_socket pid=10687 comm=syz.0.3229 [ 336.991663][ T73] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.012453][ T73] usb 3-1: Product: syz [ 337.016680][ T73] usb 3-1: Manufacturer: syz [ 337.021335][ T73] usb 3-1: SerialNumber: syz [ 337.028412][ T73] usb 3-1: config 0 descriptor?? [ 337.033808][T10639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 337.043205][ T73] ftdi_sio 3-1:0.99: FTDI USB Serial Device converter detected [ 337.052957][ T73] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 337.258220][ T36] audit: type=1400 audit(2000004768.333:856): avc: denied { append } for pid=10638 comm="syz.2.3214" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 337.282309][ T36] audit: type=1400 audit(2000004768.333:857): avc: denied { getattr } for pid=10638 comm="syz.2.3214" name="/" dev="incremental-fs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 337.439018][T10702] overlayfs: failed to clone upperpath [ 337.488513][T10716] overlay: Unknown parameter 'smackfsroot' [ 337.551321][T10728] 9pnet_fd: Insufficient options for proto=fd [ 337.559013][T10728] 9pnet_fd: Insufficient options for proto=fd [ 337.576991][T10732] netlink: 'syz.9.3243': attribute type 21 has an invalid length. [ 337.584957][T10732] netlink: 388 bytes leftover after parsing attributes in process `syz.9.3243'. [ 337.608890][T10736] overlayfs: failed to clone upperpath [ 337.630282][T10740] tc_dump_action: action bad kind [ 337.727951][ T36] audit: type=1400 audit(2000004768.774:858): avc: denied { create } for pid=10764 comm="syz.0.3254" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 337.735297][T10766] ./file0: Can't lookup blockdev [ 337.749890][ T36] audit: type=1400 audit(2000004768.774:859): avc: denied { mounton } for pid=10764 comm="syz.0.3254" path="/file0" dev="ramfs" ino=59325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 338.725979][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3268'. [ 339.152102][T10817] fuse: Bad value for 'fd' [ 339.193368][T10826] overlayfs: failed to clone upperpath [ 339.199535][T10826] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3275'. [ 339.551674][T10835] overlayfs: failed to clone upperpath [ 339.617856][ T36] audit: type=1326 audit(2000004770.538:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10834 comm="syz.0.3278" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f224e98eba9 code=0x0 [ 339.724210][ T73] usb 3-1: USB disconnect, device number 45 [ 339.731062][ T73] ftdi_sio 3-1:0.99: device disconnected [ 339.779099][T10848] overlayfs: missing 'lowerdir' [ 339.867921][T10865] fuse: Unknown parameter 'g_up_id' [ 339.874706][ T36] audit: type=1326 audit(2000004770.782:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10864 comm="syz.2.3289" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe03f58eba9 code=0x0 [ 340.411823][T10874] overlayfs: unescaped trailing colons in lowerdir mount option. [ 340.487706][T10887] netlink: 'syz.9.3299': attribute type 4 has an invalid length. [ 340.932978][T10895] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 341.016283][T10899] netlink: 2885 bytes leftover after parsing attributes in process `syz.0.3303'. [ 342.141599][T10956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10956 comm=syz.2.3321 [ 342.154919][T10956] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 342.216017][T10961] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1169731583 (18715705328 ns) > initial count (14827118032 ns). Using initial count to start timer. [ 342.581865][ T683] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 342.741762][ T683] usb 3-1: Using ep0 maxpacket: 8 [ 342.748265][ T683] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.759435][ T683] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.769464][ T683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 342.776394][ T683] usb 3-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 342.785969][ T683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.793782][T10991] incfs: Options parsing error. -22 [ 342.794836][ T683] usb 3-1: config 0 descriptor?? [ 342.803230][T10991] incfs: mount failed -22 [ 343.093944][T11001] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3339'. [ 343.456178][ T683] ntrig 0003:1B96:0004.0028: hidraw1: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.2-1/input0 [ 343.662464][ T683] usb 3-1: USB disconnect, device number 46 [ 343.868991][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3354'. [ 344.259155][T11071] bridge0: port 3(macsec0) entered blocking state [ 344.265651][T11071] bridge0: port 3(macsec0) entered disabled state [ 344.272229][T11071] macsec0: entered allmulticast mode [ 344.277659][T11071] veth1_macvtap: entered allmulticast mode [ 344.283981][T11071] macsec0: entered promiscuous mode [ 344.289327][T11071] bridge0: port 3(macsec0) entered blocking state [ 344.295775][T11071] bridge0: port 3(macsec0) entered forwarding state [ 344.376352][T11076] tipc: Started in network mode [ 344.381368][T11076] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 344.390610][T11076] tipc: Enabled bearer , priority 10 [ 344.793300][ T49] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 344.955240][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 344.966517][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.976344][ T49] usb 3-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 344.985418][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.995252][ T49] usb 3-1: config 0 descriptor?? [ 345.300611][T11110] fuse: Unknown parameter 'rootmodqBoK\]n00000000000040000' [ 345.429548][ T49] hid (null): invalid report_count -993694073 [ 345.437461][ T49] wacom 0003:056A:00DD.0029: invalid report_count -993694073 [ 345.444889][ T49] wacom 0003:056A:00DD.0029: item 0 4 1 9 parsing failed [ 345.452160][ T49] wacom 0003:056A:00DD.0029: parse failed [ 345.457993][ T49] wacom 0003:056A:00DD.0029: probe with driver wacom failed with error -22 [ 345.584756][ T683] tipc: Node number set to 4269801494 [ 345.645681][T11101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.654571][T11101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.667692][ T49] usb 3-1: USB disconnect, device number 47 [ 345.984598][T11140] overlayfs: failed to clone upperpath [ 346.033938][ T49] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 346.195441][ T49] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.207063][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 346.218059][ T49] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 346.227142][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.235905][ T49] usb 3-1: config 0 descriptor?? [ 346.241257][T11136] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 346.249442][ T49] hub 3-1:0.0: USB hub found [ 346.463213][ T49] hub 3-1:0.0: 2 ports detected [ 346.782344][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3392'. [ 347.110956][ T49] usb 3-1: USB disconnect, device number 48 [ 347.175571][T11169] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 347.395640][T11180] tipc: Bearer : already 2 bearers with priority 10 [ 347.403654][T11180] tipc: Bearer : trying with adjusted priority [ 347.410733][T11180] tipc: Enabling of bearer rejected, failed to enable media [ 347.761033][T11191] netlink: 'syz.0.3402': attribute type 7 has an invalid length. [ 348.154035][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3411'. [ 348.163082][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3411'. [ 348.172508][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3411'. [ 348.181840][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3411'. [ 348.216538][T11223] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3413'. [ 348.304664][ T13] macsec0: left allmulticast mode [ 348.310167][ T13] veth1_macvtap: left allmulticast mode [ 348.316331][ T13] macsec0: left promiscuous mode [ 348.321863][ T13] bridge0: port 3(macsec0) entered disabled state [ 348.343967][ T13] bridge_slave_1: left allmulticast mode [ 348.349832][ T13] bridge_slave_1: left promiscuous mode [ 348.355753][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.366183][ T13] bridge_slave_0: left allmulticast mode [ 348.371863][ T13] bridge_slave_0: left promiscuous mode [ 348.377893][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.507178][ T13] tipc: Disabling bearer [ 348.512629][ T13] tipc: Left network mode [ 348.523012][ T13] veth1_macvtap: left promiscuous mode [ 348.528739][ T13] veth0_vlan: left promiscuous mode [ 348.582454][T11233] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.589519][T11233] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.596659][T11233] bridge_slave_0: entered allmulticast mode [ 348.603078][T11233] bridge_slave_0: entered promiscuous mode [ 348.609930][T11233] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.617014][T11233] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.624211][T11233] bridge_slave_1: entered allmulticast mode [ 348.631095][T11233] bridge_slave_1: entered promiscuous mode [ 348.695527][T11233] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.702650][T11233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.710039][T11233] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.717098][T11233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.749668][ T2404] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.757358][ T2404] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.773145][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.780274][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.783515][T11259] Invalid ELF header magic: != ELF [ 348.788225][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.792800][ T36] audit: type=1400 audit(2000004779.128:862): avc: denied { module_load } for pid=11258 comm="syz.9.3425" path="/bus" dev="ramfs" ino=61203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 348.799888][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.851274][T11233] veth0_vlan: entered promiscuous mode [ 348.862336][T11233] veth1_macvtap: entered promiscuous mode [ 349.009010][ T49] rust_binder: 11264: removing orphan mapping 0:24 [ 349.025630][ T36] audit: type=1400 audit(2000004779.352:863): avc: denied { validate_trans } for pid=11267 comm="syz.4.3428" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 349.120740][T11283] 9pnet_fd: Insufficient options for proto=fd [ 349.480964][T11310] overlayfs: failed to clone upperpath [ 349.520573][ T49] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 349.640776][T11321] overlayfs: failed to clone upperpath [ 349.657914][T11323] overlayfs: failed to clone upperpath [ 349.676002][T11325] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 349.687370][ T36] audit: type=1400 audit(2000004779.969:864): avc: denied { relabelto } for pid=11324 comm="syz.9.3446" name="108" dev="tmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 349.687420][ T49] usb 5-1: Using ep0 maxpacket: 8 [ 349.719436][ T36] audit: type=1400 audit(2000004779.969:865): avc: denied { associate } for pid=11324 comm="syz.9.3446" name="108" dev="tmpfs" ino=614 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0" [ 349.754264][ T36] audit: type=1400 audit(2000004780.035:866): avc: denied { write } for pid=10260 comm="syz-executor" name="108" dev="tmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 349.766778][ T49] usb 5-1: config 0 has an invalid interface number: 145 but max is 0 [ 349.790429][ T36] audit: type=1400 audit(2000004780.035:867): avc: denied { remove_name } for pid=10260 comm="syz-executor" name="binderfs" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 349.797545][ T49] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.820679][ T36] audit: type=1400 audit(2000004780.035:868): avc: denied { rmdir } for pid=10260 comm="syz-executor" name="108" dev="tmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 349.828840][ T49] usb 5-1: config 0 has no interface number 0 [ 349.860281][ T49] usb 5-1: config 0 interface 145 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 349.875056][ T49] usb 5-1: New USB device found, idVendor=7d72, idProduct=445f, bcdDevice=98.21 [ 349.884396][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.894017][ T49] usb 5-1: Product: syz [ 349.898228][ T49] usb 5-1: Manufacturer: syz [ 349.902838][ T49] usb 5-1: SerialNumber: syz [ 349.910923][ T49] usb 5-1: config 0 descriptor?? [ 349.916892][ T49] usb 5-1: bad CDC descriptors [ 349.995168][T11340] fuse: Bad value for 'fd' [ 350.135432][T11293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.144057][T11293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.152020][T11293] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 350.216568][ T73] usb 5-1: USB disconnect, device number 5 [ 350.758970][ T36] audit: type=1326 audit(2000004780.970:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.9.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 350.874767][T11351] tipc: MTU too low for tipc bearer [ 350.880843][T11352] rust_binder: Write failure EFAULT in pid:26 [ 351.024124][ T36] audit: type=1326 audit(2000004781.222:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11363 comm="syz.9.3457" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f4238eba9 code=0x0 [ 351.071738][T11371] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 351.079179][T11371] rust_binder: Write failure EINVAL in pid:35 [ 351.107991][ T36] audit: type=1400 audit(2000004781.297:871): avc: denied { create } for pid=11383 comm="syz.0.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 351.142977][T11388] tipc: Enabling of bearer rejected, failed to enable media [ 351.222920][T11405] rust_binder: 11398 RLIMIT_NICE not set [ 351.223199][T11398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 351.240641][ T73] rust_binder: 11397: removing orphan mapping 0:24 [ 351.292773][T11413] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 351.300341][T11413] rust_binder: Write failure EINVAL in pid:56 [ 351.437336][T11420] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 351.443543][T11420] rust_binder: Error while translating object. [ 351.455786][T11420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 351.462161][T11420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 351.734476][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 351.886133][T11432] netlink: 'syz.0.3477': attribute type 4 has an invalid length. [ 351.917740][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 351.938889][ T31] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.950030][ T31] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.961402][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 351.968056][ T31] usb 5-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 351.977896][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.994555][ T31] usb 5-1: config 0 descriptor?? [ 352.443047][ T31] ntrig 0003:1B96:0004.002A: unknown main item tag 0x0 [ 352.449999][ T31] ntrig 0003:1B96:0004.002A: unknown main item tag 0x0 [ 352.456941][ T31] ntrig 0003:1B96:0004.002A: unknown main item tag 0x0 [ 352.463871][ T31] ntrig 0003:1B96:0004.002A: unknown main item tag 0x0 [ 352.470843][ T31] ntrig 0003:1B96:0004.002A: unknown main item tag 0x0 [ 352.478448][ T31] ntrig 0003:1B96:0004.002A: hidraw1: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.4-1/input0 [ 352.624086][T11484] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2050 sclass=netlink_tcpdiag_socket pid=11484 comm=syz.0.3496 [ 352.655255][T11484] cgroup2: Unknown parameter 'ncK ' [ 352.664318][ T31] usb 5-1: USB disconnect, device number 6 [ 353.170741][T11502] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 353.222051][T11509] overlayfs: failed to clone upperpath [ 353.670311][ T683] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 353.831852][ T683] usb 5-1: No LPM exit latency info found, disabling LPM. [ 353.852354][ T683] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 8 [ 353.868503][ T683] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.885687][ T683] usb 5-1: string descriptor 0 read error: -22 [ 353.891948][ T683] usb 5-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 353.901106][ T683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.913878][T11516] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 353.934868][T11547] overlayfs: failed to resolve './file0': -2 [ 353.941412][T11547] overlayfs: failed to resolve './file0': -2 [ 353.947690][T11547] overlayfs: failed to resolve './file0': -2 [ 353.954095][T11547] overlayfs: failed to resolve './file0': -2 [ 353.960395][T11547] overlayfs: failed to resolve './file0': -2 [ 353.966729][T11547] overlayfs: failed to resolve './file0': -2 [ 353.973005][T11547] overlayfs: failed to resolve './file0': -2 [ 353.979269][T11547] overlayfs: failed to resolve './file0': -2 [ 353.985579][T11547] overlayfs: failed to resolve './file0': -2 [ 354.138336][T11516] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 354.138367][T11516] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 354.146370][T11516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:75 [ 354.158198][ T683] usbhid 5-1:1.0: can't add hid device: -71 [ 354.173355][ T683] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 354.182322][ T683] usb 5-1: USB disconnect, device number 7 [ 354.755143][T11582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 354.755170][T11582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 354.820257][T11583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3533'. [ 355.771192][T11623] rust_binder: Got transaction with invalid offset. [ 355.771239][T11623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 355.778110][T11623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 355.882628][T11632] 9pnet_fd: Insufficient options for proto=fd [ 355.940619][T11639] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11639 comm=syz.4.3554 [ 355.957912][T11639] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 355.958534][T11639] rust_binder: Write failure EFAULT in pid:103 [ 355.981200][T11641] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 355.987413][T11641] rust_binder: Error while translating object. [ 355.999579][T11641] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 356.005803][T11641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:105 [ 356.096969][T11648] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 356.295841][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 356.295862][ T36] audit: type=1326 audit(2000004786.150:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752558eba9 code=0x7fc00000 [ 356.360039][ T36] audit: type=1326 audit(2000004786.206:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752558eba9 code=0x7fc00000 [ 356.383581][ T36] audit: type=1326 audit(2000004786.206:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752558eba9 code=0x7fc00000 [ 356.424193][ T36] audit: type=1326 audit(2000004786.271:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752558eba9 code=0x7fc00000 [ 356.447808][ T36] audit: type=1326 audit(2000004786.271:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752558eba9 code=0x7fc00000 [ 356.488280][ T36] audit: type=1326 audit(2000004786.327:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752558eba9 code=0x7fc00000 [ 356.512056][ T36] audit: type=1326 audit(2000004786.327:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752558eba9 code=0x7fc00000 [ 356.552464][ T36] audit: type=1326 audit(2000004786.393:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752558eba9 code=0x7fc00000 [ 356.575945][ T36] audit: type=1326 audit(2000004786.393:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752558eba9 code=0x7fc00000 [ 356.616651][ T36] audit: type=1326 audit(2000004786.449:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752558eba9 code=0x7fc00000 [ 357.068321][T11684] netlink: 'syz.9.3568': attribute type 4 has an invalid length. [ 357.076363][T11684] netlink: 'syz.9.3568': attribute type 6 has an invalid length. [ 357.084185][T11684] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.3568'. [ 357.244900][T11695] tipc: Enabling of bearer rejected, failed to enable media [ 357.375603][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3580'. [ 357.385144][T11715] SELinux: Context system_u:object_r:urandom_device_t:s0 is not valid (left unmapped). [ 357.435061][ T63] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 357.607363][ T63] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.617623][ T63] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.627652][ T63] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 357.636919][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 357.645379][ T63] usb 5-1: SerialNumber: syz [ 357.712796][T11753] fuse: Bad value for 'fd' [ 357.871696][ T63] usb 5-1: 0:2 : does not exist [ 357.876975][ T63] usb 5-1: unit 5: unexpected type 0x0b [ 357.884252][ T63] usb 5-1: USB disconnect, device number 8 [ 357.892422][ T9330] udevd[9330]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 358.265021][T11788] netlink: 'syz.9.3606': attribute type 4 has an invalid length. [ 358.272819][T11788] netlink: 'syz.9.3606': attribute type 2 has an invalid length. [ 358.312803][T11797] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3609'. [ 358.358999][T11811] overlayfs: failed to clone upperpath [ 358.473926][T11837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 358.473964][T11837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 358.723191][T11877] tipc: Enabling of bearer rejected, failed to enable media [ 359.545567][T11914] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 359.650266][T11931] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3652'. [ 359.737138][T11942] netlink: 'syz.0.3657': attribute type 28 has an invalid length. [ 359.802262][T11950] /dev/loop0: Can't lookup blockdev [ 359.810482][T11950] overlay: ./file0 is not a directory [ 359.990192][T11989] /dev/rnullb0: Can't lookup blockdev [ 360.077139][T11993] sock: sock_set_timeout: `syz.9.3677' (pid 11993) tries to set negative timeout [ 360.525346][T11997] overlayfs: failed to resolve './file1': -2 [ 361.264109][T12016] overlayfs: failed to clone lowerpath [ 361.665809][ T2404] veth1_macvtap: left promiscuous mode [ 361.671430][ T2404] veth0_vlan: left promiscuous mode [ 361.904961][T12043] tipc: Enabling of bearer rejected, failed to enable media [ 361.919379][T12044] SELinux: Context /dev/fuse is not valid (left unmapped). [ 361.927654][ T36] kauditd_printk_skb: 89 callbacks suppressed [ 361.927672][ T36] audit: type=1400 audit(2000004791.423:973): avc: denied { relabelto } for pid=12042 comm="syz.0.3695" name="file0" dev="tmpfs" ino=3248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="/dev/fuse" [ 361.960022][ T36] audit: type=1400 audit(2000004791.423:974): avc: denied { associate } for pid=12042 comm="syz.0.3695" name="file0" dev="tmpfs" ino=3248 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="/dev/fuse" [ 362.327101][T12047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3696'. [ 362.336174][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3696'. [ 362.925613][T12058] overlayfs: failed to clone upperpath [ 362.933043][T12058] fuse: Unknown parameter 'grѕ&' [ 363.074827][T12063] fuse: Bad value for 'user_id' [ 363.079745][T12063] fuse: Bad value for 'user_id' [ 363.354304][T12074] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.377301][T12074] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.392231][T12074] bridge_slave_0: entered allmulticast mode [ 363.404626][T12074] bridge_slave_0: entered promiscuous mode [ 363.418358][T12074] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.435023][T12074] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.448062][T12074] bridge_slave_1: entered allmulticast mode [ 363.461472][T12074] bridge_slave_1: entered promiscuous mode [ 363.589022][T12074] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.596123][T12074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.603455][T12074] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.610528][T12074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.638505][ T2404] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.645958][ T2404] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.660902][ T2404] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.668012][ T2404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.688490][ T2404] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.695605][ T2404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.728199][T12074] veth0_vlan: entered promiscuous mode [ 363.741488][T12074] veth1_macvtap: entered promiscuous mode [ 363.798394][T12087] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 363.859616][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3709'. [ 363.952513][ T36] audit: type=1400 audit(2000004793.312:975): avc: denied { listen } for pid=12107 comm="syz.3.3713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 364.163361][ T31] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 364.230221][T12128] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 364.265839][ T36] audit: type=1326 audit(2000004793.602:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012458eba9 code=0x7ffc0000 [ 364.290032][ T36] audit: type=1326 audit(2000004793.602:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f012458d510 code=0x7ffc0000 [ 364.341050][ T36] audit: type=1326 audit(2000004793.602:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f012458d510 code=0x7ffc0000 [ 364.365982][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 364.371529][ T36] audit: type=1326 audit(2000004793.602:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012458eba9 code=0x7ffc0000 [ 364.379342][ T31] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.397975][ T36] audit: type=1326 audit(2000004793.602:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f012458eba9 code=0x7ffc0000 [ 364.406789][ T31] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.429794][ T36] audit: type=1326 audit(2000004793.602:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012458eba9 code=0x7ffc0000 [ 364.444392][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 364.463001][ T36] audit: type=1326 audit(2000004793.602:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f012458eba9 code=0x7ffc0000 [ 364.473551][ T31] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 364.501975][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.511519][ T31] usb 1-1: config 0 descriptor?? [ 364.579094][T12151] netlink: 'syz.9.3725': attribute type 7 has an invalid length. [ 364.607687][T12153] overlayfs: failed to clone upperpath [ 364.946803][ T31] ntrig 0003:1B96:0004.002B: unknown main item tag 0x0 [ 364.953793][ T31] ntrig 0003:1B96:0004.002B: unknown main item tag 0x0 [ 364.960692][ T31] ntrig 0003:1B96:0004.002B: unknown main item tag 0x0 [ 364.985800][ T31] ntrig 0003:1B96:0004.002B: unknown main item tag 0x0 [ 364.996535][ T31] ntrig 0003:1B96:0004.002B: unknown main item tag 0x0 [ 365.015582][ T31] ntrig 0003:1B96:0004.002B: hidraw1: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.0-1/input0 [ 365.113872][T12179] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3734'. [ 365.156795][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3735'. [ 365.181898][ T31] ntrig 0003:1B96:0004.002B: Firmware version: 2.15.13.41.0 (3d95 38b5) [ 365.407478][ T31] usb 1-1: USB disconnect, device number 80 [ 365.914760][T12190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12190 comm=syz.3.3738 [ 366.051001][T12196] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 366.059952][T12196] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 366.099129][T12202] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 366.116426][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3742'. [ 366.131212][T12204] bridge_slave_1: left allmulticast mode [ 366.136975][T12204] bridge_slave_1: left promiscuous mode [ 366.145063][T12204] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.153172][T12204] bridge_slave_0: left allmulticast mode [ 366.163031][T12204] bridge_slave_0: left promiscuous mode [ 366.170510][T12204] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.185685][T12209] loop4: detected capacity change from 0 to 8388608 [ 367.352558][T12303] netlink: 'syz.9.3780': attribute type 12 has an invalid length. [ 367.560240][T12327] overlayfs: failed to resolve './cgroup': -2 [ 367.567203][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3787'. [ 367.653825][T12337] netlink: 'syz.0.3790': attribute type 12 has an invalid length. [ 368.113836][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 368.113857][ T36] audit: type=1400 audit(2000004797.201:987): avc: denied { audit_read } for pid=12354 comm="syz.3.3797" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 368.743332][T12375] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3805'. [ 368.921637][ T31] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 369.082421][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 369.088705][ T31] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.099974][ T31] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.110010][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 369.117129][ T31] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 369.126598][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.135733][ T31] usb 1-1: config 0 descriptor?? [ 369.571211][ T31] ntrig 0003:1B96:0004.002C: unknown main item tag 0x0 [ 369.580211][ T31] ntrig 0003:1B96:0004.002C: unknown main item tag 0x0 [ 369.587338][ T31] ntrig 0003:1B96:0004.002C: unknown main item tag 0x0 [ 369.594243][ T31] ntrig 0003:1B96:0004.002C: unknown main item tag 0x0 [ 369.601912][ T31] ntrig 0003:1B96:0004.002C: unknown main item tag 0x0 [ 369.614220][ T31] ntrig 0003:1B96:0004.002C: hidraw1: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.0-1/input0 [ 369.894002][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3812'. [ 369.904448][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3812'. [ 370.009067][ T31] usb 1-1: USB disconnect, device number 81 [ 370.550023][T12419] overlayfs: failed to clone upperpath [ 370.579108][T12426] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2048 [ 370.597038][T12426] rust_binder: Write failure EINVAL in pid:54 [ 370.868153][ T49] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 371.017914][ T49] usb 1-1: device descriptor read/64, error -71 [ 371.245411][T12446] netlink: 'syz.9.3833': attribute type 4 has an invalid length. [ 371.274570][ T49] usb 1-1: device descriptor read/64, error -71 [ 371.531276][ T49] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 371.680980][ T49] usb 1-1: device descriptor read/64, error -71 [ 371.948374][ T49] usb 1-1: device descriptor read/64, error -71 [ 372.066097][ T49] usb usb1-port1: attempt power cycle [ 372.429638][ T49] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 372.452074][ T49] usb 1-1: device descriptor read/8, error -71 [ 372.612360][ T49] usb 1-1: device descriptor read/8, error -71 [ 372.868158][ T49] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 372.901262][ T49] usb 1-1: device descriptor read/8, error -71 [ 373.040294][ T49] usb 1-1: device descriptor read/8, error -71 [ 373.157033][ T49] usb usb1-port1: unable to enumerate USB device [ 374.715117][T12503] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.729110][T12503] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.737199][T12503] bridge_slave_0: entered allmulticast mode [ 374.743737][T12503] bridge_slave_0: entered promiscuous mode [ 374.750402][T12503] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.758060][T12503] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.765414][T12503] bridge_slave_1: entered allmulticast mode [ 374.772255][T12503] bridge_slave_1: entered promiscuous mode [ 374.869794][T12503] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.876871][T12503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.884208][T12503] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.891291][T12503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.900884][ T2404] bridge_slave_1: left allmulticast mode [ 374.906920][ T2404] bridge_slave_1: left promiscuous mode [ 374.912638][ T2404] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.920201][ T2404] bridge_slave_0: left allmulticast mode [ 374.926055][ T2404] bridge_slave_0: left promiscuous mode [ 374.931795][ T2404] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.044907][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.052352][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.062663][T10284] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.069764][T10284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.079148][T10284] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.086226][T10284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.096602][ T2404] veth1_macvtap: left promiscuous mode [ 375.102197][ T2404] veth0_vlan: left promiscuous mode [ 375.168866][T12503] veth0_vlan: entered promiscuous mode [ 375.180890][T12503] veth1_macvtap: entered promiscuous mode [ 375.206129][T12520] netlink: 172 bytes leftover after parsing attributes in process `syz.9.3858'. [ 375.478282][T12544] netlink: 316 bytes leftover after parsing attributes in process `syz.9.3864'. [ 375.508834][T12549] netlink: 'syz.9.3865': attribute type 12 has an invalid length. [ 375.654773][T12556] overlayfs: failed to clone upperpath [ 375.762415][ T36] audit: type=1400 audit(2000004804.354:988): avc: denied { create } for pid=12557 comm="syz.0.3869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 375.856956][T12558] rust_binder: Write failure EFAULT in pid:65 [ 376.135502][ T36] audit: type=1326 audit(2000004804.700:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12565 comm="syz.0.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992b78eba9 code=0x7fc00000 [ 376.190185][T12570] fuse: Bad value for 'user_id' [ 376.195339][T12570] fuse: Bad value for 'user_id' [ 376.205176][ T36] audit: type=1326 audit(2000004804.756:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12565 comm="syz.0.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992b78eba9 code=0x7fc00000 [ 376.231121][ T36] audit: type=1326 audit(2000004804.756:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12565 comm="syz.0.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992b78eba9 code=0x7fc00000 [ 376.245090][T12574] rust_binder: 6: no such ref 0 [ 376.259558][T12574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 376.264532][ T36] audit: type=1326 audit(2000004804.822:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12565 comm="syz.0.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992b78eba9 code=0x7fc00000 [ 376.299023][ T36] audit: type=1326 audit(2000004804.822:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12565 comm="syz.0.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992b78eba9 code=0x7fc00000 [ 376.323926][T12579] rust_binder: Error while translating object. [ 376.323971][T12579] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 376.330203][T12579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 376.330597][ T36] audit: type=1326 audit(2000004804.878:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12565 comm="syz.0.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992b78eba9 code=0x7fc00000 [ 376.373618][ T36] audit: type=1326 audit(2000004804.878:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12565 comm="syz.0.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992b78eba9 code=0x7fc00000 [ 376.397585][ T36] audit: type=1326 audit(2000004804.943:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12565 comm="syz.0.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992b78eba9 code=0x7fc00000 [ 376.421141][ T36] audit: type=1326 audit(2000004804.943:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12565 comm="syz.0.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992b78eba9 code=0x7fc00000 [ 376.718417][ T49] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 376.889524][ T49] usb 6-1: Using ep0 maxpacket: 8 [ 376.895691][ T49] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.906827][ T49] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.916909][ T49] usb 6-1: config 0 interface 0 has no altsetting 0 [ 376.920546][T12585] netlink: 'syz.0.3878': attribute type 12 has an invalid length. [ 376.924061][ T49] usb 6-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 376.940636][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.949660][ T49] usb 6-1: config 0 descriptor?? [ 377.389255][ T49] ntrig 0003:1B96:0004.002D: unknown main item tag 0x0 [ 377.396281][ T49] ntrig 0003:1B96:0004.002D: unknown main item tag 0x0 [ 377.403258][ T49] ntrig 0003:1B96:0004.002D: unknown main item tag 0x0 [ 377.410187][ T49] ntrig 0003:1B96:0004.002D: unknown main item tag 0x0 [ 377.417092][ T49] ntrig 0003:1B96:0004.002D: unknown main item tag 0x0 [ 377.424683][ T49] ntrig 0003:1B96:0004.002D: hidraw1: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.5-1/input0 [ 377.818917][ T49] usb 6-1: USB disconnect, device number 2 [ 378.076700][ T73] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 378.238019][ T73] usb 1-1: not running at top speed; connect to a high speed hub [ 378.246561][ T73] usb 1-1: config 1 has an invalid interface number: 46 but max is 1 [ 378.254709][ T73] usb 1-1: config 1 has an invalid interface number: 78 but max is 1 [ 378.262866][ T73] usb 1-1: config 1 has no interface number 0 [ 378.269032][ T73] usb 1-1: config 1 has no interface number 1 [ 378.275178][ T73] usb 1-1: config 1 interface 46 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 378.286458][ T73] usb 1-1: config 1 interface 46 altsetting 12 endpoint 0x5 has invalid wMaxPacketSize 0 [ 378.296337][ T73] usb 1-1: config 1 interface 46 has no altsetting 0 [ 378.303071][ T73] usb 1-1: config 1 interface 78 has no altsetting 0 [ 378.311261][ T73] usb 1-1: New USB device found, idVendor=413c, idProduct=81bb, bcdDevice=4b.c5 [ 378.320354][ T73] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.328413][ T73] usb 1-1: Product: Џ [ 378.332508][ T73] usb 1-1: Manufacturer: ᐄ [ 378.337149][ T73] usb 1-1: SerialNumber: љ [ 378.564901][ T73] usb 1-1: USB disconnect, device number 86 [ 380.130168][ T683] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 380.302399][ T683] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 380.313272][ T683] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 380.324267][ T683] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.333397][ T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 380.338727][ T683] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 380.353801][ T683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.361856][ T683] usb 1-1: Product: syz [ 380.366052][ T683] usb 1-1: Manufacturer: syz [ 380.370670][ T683] usb 1-1: SerialNumber: syz [ 380.375926][ T683] usb 1-1: config 0 descriptor?? [ 380.504509][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 380.510739][ T31] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.521683][ T31] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.531456][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 380.538086][ T31] usb 6-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 380.547124][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.556946][ T31] usb 6-1: config 0 descriptor?? [ 380.598915][T12668] can0: slcan on ttyS3. [ 380.604214][T12668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3906'. [ 380.613254][T12668] bridge_slave_1: left allmulticast mode [ 380.619052][T12668] bridge_slave_1: left promiscuous mode [ 380.624752][T12668] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.632481][T12668] bridge_slave_0: left allmulticast mode [ 380.638302][T12668] bridge_slave_0: left promiscuous mode [ 380.643978][T12668] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.659549][ T683] usb 1-1: USB disconnect, device number 87 [ 380.794000][T12706] can0 (unregistered): slcan off ttyS3. [ 380.992218][ T31] ntrig 0003:1B96:0004.002E: unknown main item tag 0x0 [ 380.999239][ T31] ntrig 0003:1B96:0004.002E: unknown main item tag 0x0 [ 381.006196][ T31] ntrig 0003:1B96:0004.002E: unknown main item tag 0x0 [ 381.013291][ T31] ntrig 0003:1B96:0004.002E: unknown main item tag 0x0 [ 381.020243][ T31] ntrig 0003:1B96:0004.002E: unknown main item tag 0x0 [ 381.028617][ T31] ntrig 0003:1B96:0004.002E: hidraw1: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.5-1/input0 [ 381.127290][ T36] kauditd_printk_skb: 91 callbacks suppressed [ 381.127309][ T36] audit: type=1326 audit(2000004809.366:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12699 comm="syz.3.3917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012458eba9 code=0x7fc00000 [ 381.157405][ T36] audit: type=1326 audit(2000004809.366:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12699 comm="syz.3.3917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012458eba9 code=0x7fc00000 [ 381.181202][ T36] audit: type=1326 audit(2000004809.403:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12699 comm="syz.3.3917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012458eba9 code=0x7fc00000 [ 381.205013][ T36] audit: type=1326 audit(2000004809.403:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12699 comm="syz.3.3917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012458eba9 code=0x7fc00000 [ 381.223199][T12740] /dev/rnullb0: Can't lookup blockdev [ 381.234039][ T31] ntrig 0003:1B96:0004.002E: Firmware version: 2.15.13.41.0 (3d95 38b5) [ 381.319674][T12750] netlink: 'syz.9.3924': attribute type 12 has an invalid length. [ 381.450078][ T683] usb 6-1: USB disconnect, device number 3 [ 381.475457][ T36] audit: type=1326 audit(2000004809.693:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.9.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 381.539677][ T36] audit: type=1326 audit(2000004809.749:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.9.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 381.563466][ T36] audit: type=1326 audit(2000004809.749:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.9.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 381.603783][ T36] audit: type=1326 audit(2000004809.805:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.9.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 381.627367][ T36] audit: type=1326 audit(2000004809.805:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.9.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 381.651070][ T31] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 381.667968][ T36] audit: type=1326 audit(2000004809.871:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.9.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 381.810071][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 381.818623][ T31] usb 1-1: config 1 has an invalid interface number: 46 but max is 1 [ 381.826790][ T31] usb 1-1: config 1 has an invalid interface number: 78 but max is 1 [ 381.834927][ T31] usb 1-1: config 1 has no interface number 0 [ 381.841037][ T31] usb 1-1: config 1 has no interface number 1 [ 381.847341][ T31] usb 1-1: config 1 interface 46 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 381.858245][ T31] usb 1-1: config 1 interface 46 altsetting 12 endpoint 0x5 has invalid wMaxPacketSize 0 [ 381.868122][ T31] usb 1-1: config 1 interface 46 has no altsetting 0 [ 381.874884][ T31] usb 1-1: config 1 interface 78 has no altsetting 0 [ 381.883140][ T31] usb 1-1: New USB device found, idVendor=413c, idProduct=81bb, bcdDevice=4b.c5 [ 381.892250][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.900264][ T31] usb 1-1: Product: Џ [ 381.904338][ T31] usb 1-1: Manufacturer: ᐄ [ 381.908968][ T31] usb 1-1: SerialNumber: љ [ 382.142178][ T31] usb 1-1: USB disconnect, device number 88 [ 382.161637][T12771] netlink: 'syz.5.3933': attribute type 12 has an invalid length. [ 384.022962][T12839] rust_binder: Write failure EFAULT in pid:51 [ 384.035913][T12841] rust_binder: 12841 RLIMIT_NICE not set [ 384.600768][ T683] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 384.771866][ T683] usb 1-1: Using ep0 maxpacket: 8 [ 384.777993][ T683] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.788979][ T683] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.798867][ T683] usb 1-1: config 0 interface 0 has no altsetting 0 [ 384.805529][ T683] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 384.814593][ T683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.823267][ T683] usb 1-1: config 0 descriptor?? [ 384.869399][T12861] netlink: 'syz.9.3967': attribute type 12 has an invalid length. [ 384.935309][ T73] rust_binder: 0: removing orphan mapping 0:1048 [ 385.199689][ T73] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 385.259787][ T683] ntrig 0003:1B96:0004.002F: unknown main item tag 0x0 [ 385.266780][ T683] ntrig 0003:1B96:0004.002F: unknown main item tag 0x0 [ 385.273672][ T683] ntrig 0003:1B96:0004.002F: unknown main item tag 0x0 [ 385.280669][ T683] ntrig 0003:1B96:0004.002F: unknown main item tag 0x0 [ 385.287717][ T683] ntrig 0003:1B96:0004.002F: unknown main item tag 0x0 [ 385.295194][ T683] ntrig 0003:1B96:0004.002F: hidraw1: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.0-1/input0 [ 385.371890][ T73] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.382868][ T73] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.392655][ T73] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 385.401737][ T73] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.410538][ T73] usb 6-1: config 0 descriptor?? [ 385.476171][ T683] ntrig 0003:1B96:0004.002F: Firmware version: 2.15.13.41.0 (3d95 38b5) [ 385.541026][T12884] netlink: 'syz.3.3977': attribute type 12 has an invalid length. [ 385.575160][T12890] /dev/loop0: Can't lookup blockdev [ 385.591504][T12891] mmap: syz.3.3981 (12891): VmData 20819968 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 385.691894][ T683] usb 1-1: USB disconnect, device number 89 [ 386.245364][T12907] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 386.245398][T12907] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 386.252136][T12907] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 386.258337][T12907] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 386.265455][T12907] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 386.271339][T12907] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 386.277877][T12907] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 386.285875][ T73] hid-led 0003:27B8:01ED.0030: hidraw1: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0 [ 386.317345][ T73] hid-led 0003:27B8:01ED.0030: ThingM blink(1) initialized [ 386.519847][ T31] usb 6-1: USB disconnect, device number 4 [ 386.528665][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 386.528681][ T36] audit: type=1326 audit(2000004814.424:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012458eba9 code=0x7fc00000 [ 386.592963][ T36] audit: type=1326 audit(2000004814.480:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012458eba9 code=0x7fc00000 [ 386.657095][ T36] audit: type=1326 audit(2000004814.536:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012458eba9 code=0x7fc00000 [ 386.721399][ T36] audit: type=1326 audit(2000004814.602:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012458eba9 code=0x7fc00000 [ 386.785422][ T36] audit: type=1326 audit(2000004814.658:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012458eba9 code=0x7fc00000 [ 386.849634][ T36] audit: type=1326 audit(2000004814.723:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012458eba9 code=0x7fc00000 [ 386.913762][ T36] audit: type=1326 audit(2000004814.779:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012458eba9 code=0x7fc00000 [ 386.977963][ T36] audit: type=1326 audit(2000004814.835:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012458eba9 code=0x7fc00000 [ 387.042100][ T36] audit: type=1326 audit(2000004814.901:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12902 comm="syz.3.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012458eba9 code=0x7fc00000 [ 387.116951][T12917] netlink: 'syz.3.3988': attribute type 12 has an invalid length. [ 387.157263][T12922] overlayfs: failed to clone upperpath [ 387.163097][T12921] overlayfs: failed to clone upperpath [ 387.217448][T12924] rust_binder: Write failure EFAULT in pid:60 [ 387.509843][ T73] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 387.541659][ T36] audit: type=1326 audit(2000004815.359:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12937 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012458eba9 code=0x7fc00000 [ 387.595413][ T63] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 387.681711][ T73] usb 6-1: not running at top speed; connect to a high speed hub [ 387.690316][ T73] usb 6-1: config 1 has an invalid interface number: 46 but max is 1 [ 387.698610][ T73] usb 6-1: config 1 has an invalid interface number: 78 but max is 1 [ 387.706764][ T73] usb 6-1: config 1 has no interface number 0 [ 387.712904][ T73] usb 6-1: config 1 has no interface number 1 [ 387.719039][ T73] usb 6-1: config 1 interface 46 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 387.729936][ T73] usb 6-1: config 1 interface 46 altsetting 12 endpoint 0x5 has invalid wMaxPacketSize 0 [ 387.739810][ T73] usb 6-1: config 1 interface 46 has no altsetting 0 [ 387.746614][ T73] usb 6-1: config 1 interface 78 has no altsetting 0 [ 387.756502][ T73] usb 6-1: New USB device found, idVendor=413c, idProduct=81bb, bcdDevice=4b.c5 [ 387.765556][ T73] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.766545][ T63] usb 1-1: Using ep0 maxpacket: 8 [ 387.773581][ T73] usb 6-1: Product: Џ [ 387.780276][ T63] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.782698][ T73] usb 6-1: Manufacturer: ᐄ [ 387.798272][ T63] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.808356][ T63] usb 1-1: config 0 interface 0 has no altsetting 0 [ 387.815013][ T63] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 387.824106][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.832936][ T63] usb 1-1: config 0 descriptor?? [ 388.005693][ T73] usb 6-1: USB disconnect, device number 5 [ 388.268686][ T63] ntrig 0003:1B96:0004.0031: unknown main item tag 0x0 [ 388.275734][ T63] ntrig 0003:1B96:0004.0031: unknown main item tag 0x0 [ 388.282649][ T63] ntrig 0003:1B96:0004.0031: unknown main item tag 0x0 [ 388.289556][ T63] ntrig 0003:1B96:0004.0031: unknown main item tag 0x0 [ 388.296536][ T63] ntrig 0003:1B96:0004.0031: unknown main item tag 0x0 [ 388.304843][ T63] ntrig 0003:1B96:0004.0031: hidraw1: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.0-1/input0 [ 388.345591][T12944] netlink: 'syz.3.3998': attribute type 12 has an invalid length. [ 388.481983][ T63] ntrig 0003:1B96:0004.0031: Firmware version: 2.15.13.41.0 (3d95 38b5) [ 388.570105][T12955] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 388.699715][ T73] usb 1-1: USB disconnect, device number 90 [ 389.361504][T12968] netlink: 'syz.3.4008': attribute type 12 has an invalid length. [ 389.525753][T12977] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 389.525881][T12977] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 389.532607][T12977] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 389.560897][T12979] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 389.560924][T12979] rust_binder: Error in use_page_slow: EFAULT [ 389.571575][T12979] rust_binder: use_range failure EFAULT [ 389.577706][T12979] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 389.583293][T12979] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 389.591525][T12979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:73 [ 389.862812][ T73] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 390.018330][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4018'. [ 390.033912][ T73] usb 6-1: Using ep0 maxpacket: 8 [ 390.040104][ T73] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.051074][ T73] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.060852][ T73] usb 6-1: config 0 interface 0 has no altsetting 0 [ 390.067508][ T73] usb 6-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 390.076582][ T73] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.086942][ T73] usb 6-1: config 0 descriptor?? [ 390.522605][ T73] ntrig 0003:1B96:0004.0032: unknown main item tag 0x0 [ 390.530653][ T73] ntrig 0003:1B96:0004.0032: unknown main item tag 0x0 [ 390.537882][ T73] ntrig 0003:1B96:0004.0032: unknown main item tag 0x0 [ 390.545010][ T73] ntrig 0003:1B96:0004.0032: unknown main item tag 0x0 [ 390.552159][ T73] ntrig 0003:1B96:0004.0032: unknown main item tag 0x0 [ 390.561298][ T73] ntrig 0003:1B96:0004.0032: hidraw1: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.5-1/input0 [ 390.833222][T13003] netlink: 'syz.9.4021': attribute type 12 has an invalid length. [ 390.963498][ T63] usb 6-1: USB disconnect, device number 6 [ 392.282105][T13026] rust_binder: 129: no such ref 3 [ 392.287233][T13026] rust_binder: 129: no such ref 2 [ 392.292381][T13026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 392.308305][T13031] netlink: 'syz.0.4031': attribute type 12 has an invalid length. [ 392.329319][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 392.329337][ T36] audit: type=1326 audit(2000004819.838:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13016 comm="syz.9.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 392.359731][ T36] audit: type=1326 audit(2000004819.838:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13016 comm="syz.9.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 392.428855][T13039] netlink: 168 bytes leftover after parsing attributes in process `syz.9.4035'. [ 392.457727][T13043] overlayfs: failed to clone upperpath [ 392.675643][ T49] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 392.858335][ T49] usb 6-1: not running at top speed; connect to a high speed hub [ 392.867100][ T49] usb 6-1: config 1 has an invalid interface number: 46 but max is 1 [ 392.875464][ T49] usb 6-1: config 1 has an invalid interface number: 78 but max is 1 [ 392.883955][ T49] usb 6-1: config 1 has no interface number 0 [ 392.890257][ T49] usb 6-1: config 1 has no interface number 1 [ 392.896557][ T49] usb 6-1: config 1 interface 46 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 392.907754][ T49] usb 6-1: config 1 interface 46 altsetting 12 endpoint 0x5 has invalid wMaxPacketSize 0 [ 392.917915][ T49] usb 6-1: config 1 interface 46 has no altsetting 0 [ 392.925064][ T49] usb 6-1: config 1 interface 78 has no altsetting 0 [ 392.935881][ T49] usb 6-1: New USB device found, idVendor=413c, idProduct=81bb, bcdDevice=4b.c5 [ 392.945117][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.953341][ T49] usb 6-1: Manufacturer: ᐄ [ 392.958265][ T49] usb 6-1: SerialNumber: syz [ 393.094103][T13050] overlayfs: cannot append lower layer [ 393.191728][ T49] usb 6-1: USB disconnect, device number 7 [ 393.206785][T13059] netlink: 'syz.3.4042': attribute type 12 has an invalid length. [ 393.534754][T13083] netlink: 'syz.0.4051': attribute type 12 has an invalid length. [ 393.748080][T13090] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 393.755202][T13090] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 393.808538][T13092] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4054'. [ 393.842822][T13094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 393.861011][T13097] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4056'. [ 393.873511][ T683] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 394.033919][ T683] usb 1-1: device descriptor read/64, error -71 [ 394.042105][ T36] audit: type=1326 audit(2000004821.437:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13056 comm="syz.9.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 394.087536][ T36] audit: type=1326 audit(2000004821.437:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13056 comm="syz.9.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 394.198248][T13109] netlink: 'syz.9.4060': attribute type 12 has an invalid length. [ 394.298131][ T683] usb 1-1: device descriptor read/64, error -71 [ 394.555295][ T36] audit: type=1400 audit(2000004821.923:1222): avc: denied { mounton } for pid=13115 comm="syz.3.4063" path="/590/file0" dev="tmpfs" ino=3225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 394.579399][ T683] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 394.718424][ T683] usb 1-1: device descriptor read/64, error -71 [ 394.872271][T13121] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.931842][T13122] can: request_module (can-proto-0) failed. [ 394.975088][ T683] usb 1-1: device descriptor read/64, error -71 [ 395.093157][ T683] usb usb1-port1: attempt power cycle [ 395.456362][ T683] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 395.478797][ T683] usb 1-1: device descriptor read/8, error -71 [ 395.617890][ T683] usb 1-1: device descriptor read/8, error -71 [ 395.819293][T13133] pim6reg1: entered promiscuous mode [ 395.824721][T13133] pim6reg1: entered allmulticast mode [ 395.831962][T13133] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 395.831988][T13133] rust_binder: Error in use_page_slow: EFAULT [ 395.842573][T13133] rust_binder: use_range failure EFAULT [ 395.848747][T13133] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 395.854437][T13133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 395.862476][T13133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:102 [ 395.873482][ T683] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 395.907578][ T683] usb 1-1: device descriptor read/8, error -71 [ 395.922515][T13135] netlink: 'syz.5.4069': attribute type 12 has an invalid length. [ 396.046078][ T683] usb 1-1: device descriptor read/8, error -71 [ 396.162325][ T683] usb usb1-port1: unable to enumerate USB device [ 396.262243][ T36] audit: type=1326 audit(2000004823.522:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13124 comm="syz.9.4066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 396.286112][ T36] audit: type=1326 audit(2000004823.522:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13124 comm="syz.9.4066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 396.295961][T13140] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 396.318863][T13140] overlayfs: missing 'lowerdir' [ 396.826793][T13144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 397.199801][ T683] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 397.392199][ T683] usb 1-1: Using ep0 maxpacket: 8 [ 397.398874][ T683] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.410189][ T683] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.420315][ T683] usb 1-1: config 0 interface 0 has no altsetting 0 [ 397.427301][ T683] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 397.436563][ T683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.447288][ T683] usb 1-1: config 0 descriptor?? [ 397.763813][T13161] rust_binder: Fixups oob 165 172 361 173 [ 397.763834][T13161] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 397.769759][T13161] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 397.778389][T13161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 397.879502][T13165] netlink: 'syz.5.4081': attribute type 12 has an invalid length. [ 397.891248][ T683] ntrig 0003:1B96:0004.0033: unknown main item tag 0x0 [ 397.903826][ T683] ntrig 0003:1B96:0004.0033: unknown main item tag 0x0 [ 397.910957][ T683] ntrig 0003:1B96:0004.0033: unknown main item tag 0x0 [ 397.917941][ T683] ntrig 0003:1B96:0004.0033: unknown main item tag 0x0 [ 397.925242][ T683] ntrig 0003:1B96:0004.0033: unknown main item tag 0x0 [ 397.933312][ T683] ntrig 0003:1B96:0004.0033: hidraw1: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.0-1/input0 [ 397.937292][ T36] audit: type=1326 audit(2000004825.074:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.9.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 397.976400][ T36] audit: type=1326 audit(2000004825.083:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.9.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 398.159323][T13185] netlink: 'syz.9.4090': attribute type 12 has an invalid length. [ 398.190481][ T36] audit: type=1400 audit(2000004825.317:1227): avc: denied { mount } for pid=13188 comm="syz.9.4092" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 398.226433][ T49] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 398.319737][ T683] usb 1-1: USB disconnect, device number 95 [ 398.387997][ T49] usb 6-1: not running at top speed; connect to a high speed hub [ 398.396574][ T49] usb 6-1: config 1 has an invalid interface number: 46 but max is 1 [ 398.404738][ T49] usb 6-1: config 1 has an invalid interface number: 78 but max is 1 [ 398.412894][ T49] usb 6-1: config 1 has no interface number 0 [ 398.419025][ T49] usb 6-1: config 1 has no interface number 1 [ 398.425156][ T49] usb 6-1: config 1 interface 46 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 398.436044][ T49] usb 6-1: config 1 interface 46 altsetting 12 endpoint 0x5 has invalid wMaxPacketSize 0 [ 398.445916][ T49] usb 6-1: config 1 interface 46 has no altsetting 0 [ 398.452642][ T49] usb 6-1: config 1 interface 78 has no altsetting 0 [ 398.462627][ T49] usb 6-1: New USB device found, idVendor=413c, idProduct=81bb, bcdDevice=4b.c5 [ 398.471717][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.479752][ T49] usb 6-1: Product: syz [ 398.483957][ T49] usb 6-1: SerialNumber: syz [ 398.708688][ T49] usb 6-1: USB disconnect, device number 8 [ 398.877150][T13195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13195 comm=syz.0.4094 [ 398.944603][T13196] rust_binder: Error while translating object. [ 398.944631][T13196] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 398.950888][T13196] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:161 [ 399.114317][ T36] audit: type=1326 audit(2000004826.186:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13191 comm="syz.9.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 399.147117][ T36] audit: type=1326 audit(2000004826.186:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13191 comm="syz.9.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 399.191611][T13207] netlink: 'syz.9.4099': attribute type 12 has an invalid length. [ 399.273496][T13213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 399.273565][T13213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122 [ 399.552644][ T63] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 399.723739][ T63] usb 6-1: Using ep0 maxpacket: 8 [ 399.730119][ T63] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.741067][ T63] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.750940][ T63] usb 6-1: config 0 interface 0 has no altsetting 0 [ 399.757587][ T63] usb 6-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 399.766726][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.777325][ T63] usb 6-1: config 0 descriptor?? [ 400.217255][ T63] ntrig 0003:1B96:0004.0034: unknown main item tag 0x0 [ 400.235710][ T36] audit: type=1326 audit(2000004827.224:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.9.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 400.261747][ T63] ntrig 0003:1B96:0004.0034: unknown main item tag 0x0 [ 400.268692][ T63] ntrig 0003:1B96:0004.0034: unknown main item tag 0x0 [ 400.290090][ T63] ntrig 0003:1B96:0004.0034: unknown main item tag 0x0 [ 400.297218][ T36] audit: type=1326 audit(2000004827.224:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.9.4104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4238eba9 code=0x7fc00000 [ 400.320822][ T63] ntrig 0003:1B96:0004.0034: unknown main item tag 0x0 [ 400.325605][T13235] netlink: 'syz.9.4109': attribute type 12 has an invalid length. [ 400.329492][ T63] ntrig 0003:1B96:0004.0034: hidraw1: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.5-1/input0 [ 400.367687][T13238] 9pnet_fd: Insufficient options for proto=fd [ 400.621057][ T36] audit: type=1400 audit(2000004827.589:1232): avc: denied { read } for pid=13239 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 400.647385][ T63] usb 6-1: USB disconnect, device number 9 Stopping sshd: stopped /usr/sbin/sshd (pid 202) OK Stopping crond: stopped /usr/sbin/crond (pid 195) OK [ 400.864666][ T36] audit: type=1400 audit(2000004827.823:1233): avc: denied { read write } for pid=12074 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 400.894968][ T36] audit: type=1400 audit(2000004827.823:1234): avc: denied { open } for pid=12074 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 149) [ 400.943925][T13256] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4112'. Stopping network: OK Stopping iptables: OK Stopping system message bus: [ 401.146246][ T10] usb 1-1: new full-speed USB device number 96 using dummy_hcd done [ 401.318069][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 401.332515][ T10] usb 1-1: config 1 has an invalid interface number: 46 but max is 1 Stopping klogd: [ 401.341121][ T10] usb 1-1: config 1 has an invalid interface number: 78 but max is 1 [ 401.350423][ T10] usb 1-1: config 1 has no interface number 0 [ 401.359642][ T10] usb 1-1: config 1 has no interface number 1 [ 401.366142][ T10] usb 1-1: config 1 interface 46 altsetting 12 has an invalid descriptor for endpoint zero, skipping OK [ 401.377352][ T10] usb 1-1: config 1 interface 46 altsetting 12 endpoint 0x5 has invalid wMaxPacketSize 0 [ 401.387397][ T10] usb 1-1: config 1 interface 46 has no altsetting 0 Stopping acpid: [ 401.394441][ T10] usb 1-1: config 1 interface 78 has no altsetting 0 [ 401.404741][ T10] usb 1-1: string descriptor 0 read error: -22 [ 401.411165][ T10] usb 1-1: New USB device found, idVendor=413c, idProduct=81bb, bcdDevice=4b.c5 [ 401.420350][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.645677][ T10] usb 1-1: USB disconnect, device number 96 [ 401.960490][T13297] netlink: 'syz.9.4118': attribute type 12 has an invalid length. [ 402.001032][T13302] fuse: Bad value for 'fd' [ 402.195835][T13316] netlink: 'syz.0.4127': attribute type 12 has an invalid length. [ 402.249965][T13320] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 402.345633][T13323] fuse: Bad value for 'fd' OK Stopping syslogd: stopped /sbin/syslogd (pid 93) OK umount: can't remount debugfs read-only [ 402.664013][T13333] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 402.672907][T13333] overlayfs: missing 'lowerdir' Connection to 10.128.1.255 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 403.298957][T10284] veth1_macvtap: left promiscuous mode [ 403.304482][T10284] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 405.097191][T13335] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 405.104289][T13335] ACPI: PM: Preparing to enter system sleep state S5 [ 405.111235][T13335] kvm: exiting hardware virtualization [ 405.116787][T13335] reboot: Power down serialport: VM disconnected.