last executing test programs: 1m48.648340733s ago: executing program 32 (id=2593): prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200840, 0x40) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x10040610, 0x0, 0x0, 0x2}}, 0x50) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000100)=0x800, 0x4) write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0x0, r3, {0x0, 0xc}}, 0x20) alarm(0x80000001) alarm(0x80000001) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x40000, 0x2d) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000380)={r4, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3ff03e37d581270bad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3209cc26f7061a74df34400700080000234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa58dc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x400000000007]}}) alarm(0xc) read(r0, &(0x7f0000001180)=""/4096, 0x1000) 1m41.552821772s ago: executing program 33 (id=2651): r0 = socket(0x10, 0x803, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001e00010026bc0000000000000000000000000000000004"], 0x40}}, 0x90) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000380)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3ff03e37d581270bad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3209cc26f7061a74df34400700080000234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa58dc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x400000000007]}}) read(r2, &(0x7f0000001180)=""/4096, 0x1000) 1m22.546398833s ago: executing program 34 (id=2805): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000380)={r1, 0x100000, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3ff03e37d581270bad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3209cc26f7061a74df34400700080000234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa58dc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x400000000007]}}) read(r0, &(0x7f0000001180)=""/4096, 0x1000) 1m13.256956219s ago: executing program 6 (id=3202): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000580)=ANY=[]) socket$inet6(0xa, 0xa, 0x8) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0xdebb, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x6}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000025000100000000000000000008000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000018105e04da06e7000000000109022400810000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f00000004c0)=@ethtool_stats}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4, &(0x7f0000000200)={[{}]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r5, 0x10e, 0xb, &(0x7f0000000000)=""/22, &(0x7f0000000040)=0x16) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070900be0083"], 0x0}, 0x0) r6 = syz_usb_connect$uac1(0x6, 0xb8, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x3, 0x1, 0x7, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x1}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0xf193, 0x1, 'h34'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x58, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x10, 0xf, 0x2, {0x7, 0x25, 0x1, 0x2, 0x80, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x20, 0x2, 0xff, 0x4d, "b8b1", "5d9c"}, @as_header={0x7, 0x24, 0x1, 0xef, 0x4, 0x1}, @as_header={0x7, 0x24, 0x1, 0xa0, 0x10, 0x3}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x3, 0x7, 0x1, "a97f"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xe, 0x1, 0x7, 0x3c}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0xf9, 0x1, "55b1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x7f, 0x32, {0x7, 0x25, 0x1, 0x83, 0xc0}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x4, 0x4, 0xfe, 0xff}, 0x5d, &(0x7f0000000140)={0x5, 0xf, 0x5d, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x3, 0x80c7}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "c65e1594e07175d7ecef2092edbd4f92"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0xb2, 0x7}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "d497a87e14216b0f1f1a2babbd403408"}, @ssp_cap={0x1c, 0x10, 0xa, 0xc7, 0x4, 0x0, 0xf00, 0x7f, [0x3f30, 0xffc030, 0xf0, 0xff00]}]}, 0x2, [{0x68, &(0x7f0000000340)=@string={0x68, 0x3, "a315f5876723123906682b8acede47003c3b7d7f453c11557e47c7af493f6095df1bbd14e43647041dcca5639395f02806c7885425531daf21ed0a9104ef61a086bf69b23da419e7d1ce7293f12e33e0e8a51b29cef56a0526a91c2aaab836b13ea36a6a097e"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1c09}}]}) syz_usb_control_io$uac1(r6, &(0x7f0000000440)={0x14, &(0x7f00000003c0)={0x0, 0x22, 0x9, {0x9, 0x0, "e032de283e87ae"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}}, &(0x7f0000000780)={0x44, &(0x7f0000000480)={0x0, 0x5, 0xbe, "f0758a9ee25f31f64cc8a447e37a4d4c37fc9f62862304df911267f6b751c0ea0431025523da578fd94849b4be544aa98a96e875a962e6932de5a20b10d6c3e54c654f1d9cec7ac940073f92303ab7d5f48729296a7fdbd8c73eac51503864a6c8e125373bf01faa2c17e76ce7fccfc9f185d85a88d94d9a7e3b11172c2b142a3e24dd0bdf85f7e824d296413a0e1237a38ca22901c6c8a2f2bea61638f116e46810a68405ff64944e3705a87348eb09d82a99c1cdcd1c598f7e5a644de4"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000600)={0x20, 0x81, 0x1, "a5"}, &(0x7f0000000640)={0x20, 0x82, 0x3, "5ad8c4"}, &(0x7f0000000680)={0x20, 0x83, 0x3, "b1d7dd"}, &(0x7f00000006c0)={0x20, 0x84, 0x1, "e2"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "af5473"}}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) 1m11.815368204s ago: executing program 6 (id=3215): shutdown(0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200), 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='rw\x00\x00']) 1m11.800854324s ago: executing program 6 (id=3216): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) cachestat(r0, &(0x7f0000000040)={0x8, 0xf188}, &(0x7f0000000080), 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000100)=0x9084) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000140)=0x5) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f00000001c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$getflags(r1, 0x408) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000200)=0x4, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x20, 0x0, &(0x7f0000000240)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}], 0x7c, 0x0, &(0x7f0000000280)="af2a9bc9009859b1a47116bc5aca3a8613de9025d22a11bd523eb845770536439b6866b086e9ba241ab35743a15e98f90c261691a53bfbd4004e92134d9b4eb3d538997231791dc3b2b69cc8c7c12103039d8231f6c27a2fc8bad7259bfaa8666fe57bd5aad4a5c62578c5d2885ae4f18fd1995eb0e9d1b39ec44815"}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000340)) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f00000003c0)=""/239) fsetxattr$security_ima(r0, &(0x7f00000004c0), &(0x7f0000000500)=@sha1={0x1, "0f55d79c547f592070a739052018f3c927c13c5d"}, 0x15, 0x2) r4 = dup(r3) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x4) write$binfmt_register(r3, &(0x7f0000000580)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x5, 0x3a, ']}b/', 0x3a, 'tls\x00', 0x3a, './file0', 0x3a, [0x46]}, 0x30) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f00000005c0)) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x10000, 0x0) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000640)=""/232) setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000740)=0x2, 0x4) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1f) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000840)={'syztnl2\x00', &(0x7f0000000800)={'gre0\x00', 0x0, 0x700, 0x7, 0x1, 0x7fffffff, {{0x8, 0x4, 0x1, 0x0, 0x20, 0x64, 0x0, 0x4, 0x2f, 0x0, @broadcast, @local, {[@rr={0x7, 0xb, 0x6b, [@remote, @broadcast]}]}}}}}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000880)={0x0, @dev, @empty}, &(0x7f00000008c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000a00)={'ip_vti0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x7800, 0x8000, 0x80000000, 0x0, {{0x29, 0x4, 0x2, 0x6, 0xa4, 0x67, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @remote, {[@lsrr={0x83, 0x1f, 0x1f, [@local, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @loopback]}, @cipso={0x86, 0xa, 0xffffffffffffffff, [{0x5, 0x4, "2aeb"}]}, @noop, @timestamp={0x44, 0x2c, 0xb9, 0x0, 0x9, [0x6, 0x0, 0x5, 0x8b, 0x7fffffff, 0xd, 0x8000, 0xd5, 0x6, 0x9]}, @timestamp={0x44, 0xc, 0x2c, 0x0, 0x6, [0xd25, 0x2]}, @timestamp_addr={0x44, 0x1c, 0xc, 0x1, 0x9, [{@broadcast, 0x8}, {@remote, 0x6}, {@local, 0x2}]}, @lsrr={0x83, 0xb, 0x52, [@empty, @private=0xa010101]}, @rr={0x7, 0x7, 0xdb, [@multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000b80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0x100, r6, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8004}, 0x80) 1m10.948355148s ago: executing program 6 (id=3228): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x13) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffe, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) close_range(r0, 0xffffffffffffffff, 0x0) 1m10.875990739s ago: executing program 6 (id=3230): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000240)={0x0, 0x1, 0x32, 0xffffffffffff8000}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180)) pwritev(r2, &(0x7f0000002740)=[{&(0x7f0000000440)="9eac4a13d6c4865d930dc413cfc564a657a98bcccff16b3536dc70f1d5cc63720069d1e740707632e34a71a4ce1af2171aa5dc49800563bf02a2b92ecec850813b935eb27c7b4f3039b0df0e6b89b76c5bcb880dfc35e33a473dcf741b79966e70286a7a58e6bf05308e47db1c99807b2d3ddaa964aa94955fa34c7c02ec637b45f7816a3df1d22f071b8d15e914a2381f3f1e66e974e9e682e2b9c59ceda9557c1d50804c7de818f8e89d237e9509d55f74ef13c5d4631f4e1c4cb3f320c737a4c9c42207b4689203", 0xc9}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="f5817e67e6344188b5a3a6cfbcd0210fa6a341294f5d1013e3e48f821c0c3aaed7ddad4c7a5886878c8f0c5365b10baae7989152a83406997fde3856bca94965149d823c6a3a698e29c319be07a080c7c13bc53ac13d08e8648f51d5ff2225a0853a4d1348bf392be5f59eac5ce9101dc845af935d5c81a2eab1635b27ec3f221017903bad3b2ab03e9eb085aa88f00f9e4aa86d8dcb96b1505bd7d9d4ce30a21668dc4ed6e82f24da74547b1ba2d9334a2ff94e6c4e896e67032e616f90a6587e5d5aad4b0308ca214066b0b878", 0xce}, {&(0x7f0000001640)="16e9c8b9798f1d5858ff8d735736d74171d21abe2e4dcc61873727e463e7009ff45399ad2db5b6d5104d98d8f76a1856d1ec7e0d03fd91fbc9a0de2377518b48a4d7a972c57155012e79c9bc8c9075ede5c5be69964d67a51f920471f7daca1d112f0f6dbc76d4fd1f61ca798c657a41ba038203434c1a54e9f44bcb3db95475c5f2f440c1612b36d272ec345d525f1b9f2f93cae117dc283b597a3419bfb62c6aa8a41fc024afeaec657c442bea1791bb7798fa61986e4b1c2b32857e058abe0c67e36738c86e5957afd8a0742275040158ab549a6c6d9cfaed0f8d7c8ceb2405e16e50e8ca4fb33af98a01", 0xec}, {&(0x7f0000000140)="a34d349c", 0x4}, {&(0x7f0000001740)="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", 0x1000}], 0x6, 0x5, 0x0) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2329cf33d6bb9b58}], 0x0, 0x0, 0x0}) 1m10.85323144s ago: executing program 6 (id=3232): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b0800034000000008"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r4 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r4, 0xa) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r5) prctl$PR_GET_SPECULATION_CTRL(0x53564d41, 0x0, 0x4) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000c0e000000005abb210170e500159f45da82f71255653a2f0b557506badcc450130c4e52dc8cf0c5cb97787eb57a440c93e4be1eada994d258be97cbd0ffb6e5f33898d50549e083b82a7e0f8d0993cc6bd2411575e278ef305159a0c2c47c82abde01d87fa3826c363a026aa7620749c91b375948feb976340832b7dff4f21954208e0344c054944eed", @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) setresgid(0xee00, 0xee01, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r0, 0xe1021000) listen(r4, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@binder={0x73622a85, 0x110b, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x3e, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c99"}) 1m10.80925306s ago: executing program 35 (id=3232): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b0800034000000008"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r4 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r4, 0xa) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r5) prctl$PR_GET_SPECULATION_CTRL(0x53564d41, 0x0, 0x4) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000c0e000000005abb210170e500159f45da82f71255653a2f0b557506badcc450130c4e52dc8cf0c5cb97787eb57a440c93e4be1eada994d258be97cbd0ffb6e5f33898d50549e083b82a7e0f8d0993cc6bd2411575e278ef305159a0c2c47c82abde01d87fa3826c363a026aa7620749c91b375948feb976340832b7dff4f21954208e0344c054944eed", @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) setresgid(0xee00, 0xee01, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r0, 0xe1021000) listen(r4, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@binder={0x73622a85, 0x110b, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x3e, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c99"}) 1m10.326879209s ago: executing program 7 (id=3233): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x86) fchdir(r3) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x9}, {0xa, 0x4e20, 0x2, @private1}, 0xffffffffffffffff, {[0x8ee, 0x89, 0x10, 0x4, 0x3, 0x4, 0x2, 0x2]}}, 0x5c) bind$can_raw(r0, &(0x7f0000000040), 0x10) bind$can_raw(r0, &(0x7f0000000380)={0x1d, r1}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, &(0x7f0000000000)=ANY=[@ANYBLOB='rlog_pages=0']) pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 59.027892389s ago: executing program 4 (id=3363): socket$packet(0x11, 0x3, 0x300) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, 0xffffffffffffffff, 0x0, 0x0, 0x36}]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x10, 0x0, 0x205, 0x0, 0xbb60, 0x0, 0x80, 0x6}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x40, 0x8, 0x2, {0x2, 0x20}}, 0x0, 0x0, 0x0}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="4d01000000000000000100e504", 0xd, 0x81, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4006, 0x2, 0x1, 0xe7ffffffffffffff, 0xfffffffffffffffe, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x45901}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 58.535938057s ago: executing program 4 (id=3365): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) dup(r2) (async) r3 = dup(r2) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_IRQCHIP(r6, 0xc208ae62, &(0x7f0000000480)={0x0, 0x0, @pic={0x40, 0x4, 0x22, 0xc, 0x5, 0x0, 0xe8, 0x0, 0x4, 0x0, 0x7, 0xb5, 0x7f, 0x4, 0xd7, 0xe}}) setsockopt$sock_linger(r4, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0xffffffffffffffda, 0x0, {0x93}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}]}}) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) (async) r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r7, r0, 0x0, 0x80000000) 58.433236289s ago: executing program 4 (id=3366): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r0 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r0, &(0x7f00000000c0)=@cmd={{0x4, 0x6, 0x48, 0xd}, {@get_log_page={0x2, 0x3, 0x5, 0x7bf7, '\x00', @anon_struct={0x9, 0xefb8}, 0x7, 0x5, 0x8faf, 0x1, 0x0, @anon_struct={0x9, 0x6}, '\x00', 0x9}}}, 0x80, 0x0, 0x0, 0x0) 58.431876639s ago: executing program 4 (id=3367): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648e000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x100, 0x2}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mmap(&(0x7f00000fa000/0x2000)=nil, 0x2000, 0x7, 0x10010, r2, 0xcacf5000) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x2}, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 58.425307239s ago: executing program 4 (id=3368): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0xfffffffe, 0xb, 0xdeb9, 0x8, 0x5, 0x6, 0x3, 0x5, 0x6732, 0x2, 0xd, 0x7, 0x0, 0xa7, 0xa9], 0xdddd0000, 0x82200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x24000840) timer_create(0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0xb, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 58.423921869s ago: executing program 4 (id=3369): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) fcntl$setsig(r0, 0xa, 0x17) (async) fcntl$setlease(r0, 0x400, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x2, 0x6, 0x81, 0x400}, {0x0, 0xa, 0x16, 0x2}]}) sync() (async) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) timer_create(0x7, &(0x7f0000000140)={0x0, 0x2a, 0x0, @tid=r2}, &(0x7f0000000180)=0x0) (async) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000001c0)={'veth1_to_batadv\x00'}) (async, rerun: 32) r4 = dup2(r1, r0) (rerun: 32) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000200)="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") (async) read$FUSE(r4, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r4, &(0x7f0000002340)={0x88, 0x0, r5, [{0x1, 0x909, 0x0, 0x54d9}, {0x2, 0x8, 0x3, 0x4, '\\:\xfc'}, {0x5, 0x1, 0xd, 0x4, '/dev/net/tun\x00'}, {0x6, 0x7, 0x0, 0x4}]}, 0x88) r8 = openat(r4, &(0x7f0000002400)='./file0\x00', 0x2000, 0xa0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000002440)=0x11) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r9, 0x402c542b, &(0x7f0000002480)={0x5, 0x5, 0x9, 0x3362, 0xd, "9004e7f68ccae91c1c9807fe74d81c3de2c35b", 0xfffffff8, 0x800}) truncate(&(0x7f00000024c0)='./file0\x00', 0x9) (async) r10 = open(&(0x7f0000002500)='./file0\x00', 0xa40, 0x80) (async) rmdir(&(0x7f0000002540)='./file0\x00') (async) rt_sigprocmask(0x2, &(0x7f0000002580)={[0x730]}, &(0x7f00000025c0), 0x8) (async) openat$cgroup_ro(r4, &(0x7f0000002600)='freezer.self_freezing\x00', 0x0, 0x0) (async, rerun: 32) timer_settime(r3, 0x1, &(0x7f0000002640)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000002680)) (async, rerun: 32) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002740), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700), 0x2a000, &(0x7f0000002780)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x2}}], [{@flag='rw'}, {@uid_eq={'uid', 0x3d, r6}}, {@fowner_lt={'fowner<', 0xee00}}, {@context={'context', 0x3d, 'sysadm_u'}}]}}) (async, rerun: 64) chdir(&(0x7f00000028c0)='./file0\x00') (async, rerun: 64) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) (async, rerun: 32) sendmsg$nl_xfrm(r4, &(0x7f0000002cc0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002c80)={&(0x7f0000002a40)=@allocspi={0x230, 0x16, 0x800, 0x4, 0x25dfdbfd, {{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@empty, 0x4e21, 0x0, 0x4e23, 0xff, 0xa, 0x20, 0x0, 0x6, 0x0, r6}, {@in6=@remote, 0x4d5}, @in=@rand_addr=0x64010100, {0x4, 0x8, 0x2, 0x2, 0x9, 0x700, 0x4, 0xfffffffffffffff8}, {0x7, 0x80, 0x2, 0x2}, {0x8, 0x3, 0x7}, 0x70bd2d, 0x3500, 0x2, 0x4, 0x88, 0x20}, 0xa, 0x4}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @etimer_thresh={0x8, 0xc, 0x8}, @sec_ctx={0x10a, 0x8, {0x106, 0x8, 0x1, 0x9, 0xfe, "57cc3fd0fda613c791a4ef43a8b440427323062ee235c937875772caeb1dbe8295805b5b3663ad5d946500f35637103695a68fac1f670f6b2ed953a6a2e48a3edac353d504956130279bad83c7f56ccee2bc421fd218fa6cb6de3a626e314906f313143bfb63b0bd9e604eb35d4041d96c8a313734ad592c0eacbcab17e9eebb5f4a1959939be248429ec7c6e7e3e6aa09fb44d3a1f9f67cbaeb60049fe9f3ad7bbb4f43cc8a38c6c5d4bedc9da0a449edc98772b7250abeae9dbbc3a4e9f2bd7c48af30f71a1c0ce5b37cd77459b9fd4bf65e6ecbb52dc96dd57ab76f6738071eee190951fdff30f4d48f7014a9373cc225df599095f355516bafac677e"}}, @coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @etimer_thresh={0x8, 0xc, 0x16}]}, 0x230}, 0x1, 0x0, 0x0, 0x4048080}, 0x4800) (rerun: 32) 54.720148912s ago: executing program 36 (id=3233): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x86) fchdir(r3) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x9}, {0xa, 0x4e20, 0x2, @private1}, 0xffffffffffffffff, {[0x8ee, 0x89, 0x10, 0x4, 0x3, 0x4, 0x2, 0x2]}}, 0x5c) bind$can_raw(r0, &(0x7f0000000040), 0x10) bind$can_raw(r0, &(0x7f0000000380)={0x1d, r1}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, &(0x7f0000000000)=ANY=[@ANYBLOB='rlog_pages=0']) pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 43.639970448s ago: executing program 5 (id=3521): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) close_range(r0, 0xffffffffffffffff, 0x0) 43.631296989s ago: executing program 5 (id=3522): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') (async) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) getcwd(0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x80000002}) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) close_range(r0, r0, 0x0) 43.616907069s ago: executing program 5 (id=3523): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) (async) ioctl$KVM_CAP_HYPERV_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x54, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x14}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/246, 0xf6, 0x2, 0xe}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}, @decrefs={0x40046307, 0x3}], 0x50, 0x0, &(0x7f0000000540)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff"}) 43.56105982s ago: executing program 5 (id=3524): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000000c0)='\x00') ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x6) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000100)="baa000ec0fe01326d9d0660f388020baf80c66b8b8b35c8166efbafc0cb02deebaf80c66b84e73288c66efbafc0cb8a3caef0fc772f5670fc7190f20e06635040000000f22e0f3a5", 0x48}], 0x1, 0x6c, 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 43.5399404s ago: executing program 5 (id=3525): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 43.52737085s ago: executing program 5 (id=3526): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x72c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) dup3(r0, r1, 0x80000) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x184862) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sync() ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$SIOCGSTAMP(r6, 0x8906, 0x0) 43.255729745s ago: executing program 37 (id=3369): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) fcntl$setsig(r0, 0xa, 0x17) (async) fcntl$setlease(r0, 0x400, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x2, 0x6, 0x81, 0x400}, {0x0, 0xa, 0x16, 0x2}]}) sync() (async) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) timer_create(0x7, &(0x7f0000000140)={0x0, 0x2a, 0x0, @tid=r2}, &(0x7f0000000180)=0x0) (async) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000001c0)={'veth1_to_batadv\x00'}) (async, rerun: 32) r4 = dup2(r1, r0) (rerun: 32) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000200)="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") (async) read$FUSE(r4, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r4, &(0x7f0000002340)={0x88, 0x0, r5, [{0x1, 0x909, 0x0, 0x54d9}, {0x2, 0x8, 0x3, 0x4, '\\:\xfc'}, {0x5, 0x1, 0xd, 0x4, '/dev/net/tun\x00'}, {0x6, 0x7, 0x0, 0x4}]}, 0x88) r8 = openat(r4, &(0x7f0000002400)='./file0\x00', 0x2000, 0xa0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000002440)=0x11) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r9, 0x402c542b, &(0x7f0000002480)={0x5, 0x5, 0x9, 0x3362, 0xd, "9004e7f68ccae91c1c9807fe74d81c3de2c35b", 0xfffffff8, 0x800}) truncate(&(0x7f00000024c0)='./file0\x00', 0x9) (async) r10 = open(&(0x7f0000002500)='./file0\x00', 0xa40, 0x80) (async) rmdir(&(0x7f0000002540)='./file0\x00') (async) rt_sigprocmask(0x2, &(0x7f0000002580)={[0x730]}, &(0x7f00000025c0), 0x8) (async) openat$cgroup_ro(r4, &(0x7f0000002600)='freezer.self_freezing\x00', 0x0, 0x0) (async, rerun: 32) timer_settime(r3, 0x1, &(0x7f0000002640)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000002680)) (async, rerun: 32) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002740), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700), 0x2a000, &(0x7f0000002780)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x2}}], [{@flag='rw'}, {@uid_eq={'uid', 0x3d, r6}}, {@fowner_lt={'fowner<', 0xee00}}, {@context={'context', 0x3d, 'sysadm_u'}}]}}) (async, rerun: 64) chdir(&(0x7f00000028c0)='./file0\x00') (async, rerun: 64) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) (async, rerun: 32) sendmsg$nl_xfrm(r4, &(0x7f0000002cc0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002c80)={&(0x7f0000002a40)=@allocspi={0x230, 0x16, 0x800, 0x4, 0x25dfdbfd, {{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@empty, 0x4e21, 0x0, 0x4e23, 0xff, 0xa, 0x20, 0x0, 0x6, 0x0, r6}, {@in6=@remote, 0x4d5}, @in=@rand_addr=0x64010100, {0x4, 0x8, 0x2, 0x2, 0x9, 0x700, 0x4, 0xfffffffffffffff8}, {0x7, 0x80, 0x2, 0x2}, {0x8, 0x3, 0x7}, 0x70bd2d, 0x3500, 0x2, 0x4, 0x88, 0x20}, 0xa, 0x4}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @etimer_thresh={0x8, 0xc, 0x8}, @sec_ctx={0x10a, 0x8, {0x106, 0x8, 0x1, 0x9, 0xfe, "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"}}, @coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @etimer_thresh={0x8, 0xc, 0x16}]}, 0x230}, 0x1, 0x0, 0x0, 0x4048080}, 0x4800) (rerun: 32) 28.338891018s ago: executing program 38 (id=3526): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x72c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) dup3(r0, r1, 0x80000) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x184862) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sync() ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$SIOCGSTAMP(r6, 0x8906, 0x0) 18.034998303s ago: executing program 8 (id=3897): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) getsockopt$nfc_llcp(r0, 0x118, 0x4, &(0x7f0000000040)=""/224, 0xe0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/157, 0x9d}, {&(0x7f0000000300)}], 0x4) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000380)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000400)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x141004, 0x0) mkdirat(r2, &(0x7f0000000480)='./file0\x00', 0x100) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x9, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) r3 = openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.current\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) ppoll(&(0x7f0000000600)=[{r3, 0xb101}, {r2, 0x4000}, {r0, 0x110}, {r0, 0x45}, {r1, 0x120}, {r0, 0x1101}], 0x6, &(0x7f0000000680)={r4, r5+60000000}, &(0x7f00000006c0)={[0x1]}, 0x8) write$input_event(r3, &(0x7f0000000700)={{0x0, 0x2710}, 0x12, 0x4, 0x26}, 0x18) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f0000000740)={0x1, 0x3}) r6 = accept$packet(r2, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) recvfrom$packet(r6, &(0x7f0000000800)=""/243, 0xf3, 0x41, &(0x7f0000000900)={0x11, 0x1c, 0x0, 0x1, 0x1, 0x6, @link_local}, 0x14) mkdir(&(0x7f0000000940)='./file0\x00', 0x282) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) clock_nanosleep(0x4, 0x1, &(0x7f00000009c0)={r7, r8+60000000}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r9, r6, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000ac0)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@loopback}}, &(0x7f0000000bc0)=0xe8) mount$fuseblk(&(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x0, &(0x7f0000000c00)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@blksize}, {@blksize}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other}, {@allow_other}], [{@measure}, {@subj_role}, {@obj_user={'obj_user', 0x3d, '!'}}, {@smackfsdef={'smackfsdef', 0x3d, '\xe3%'}}]}}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000d80), 0x1, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000e00)) r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xa) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_open_dev$loop(&(0x7f0000000e40), 0xfffffffffffffff9, 0x10400) 18.034237834s ago: executing program 8 (id=3898): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1, 0xfa, 0x7a, 0x5}]}) read(r0, &(0x7f0000000080)=""/214, 0xd6) (async) fchdir(r0) (async) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) fchdir(r1) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x880, 0xcb) r3 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x801, 0x81) (async) r4 = socket$inet(0x2, 0xa, 0x3) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000240)="41c5fde6b92cb31ef7c398335268b97a72d62eca4c6942e758022a3b252c341acc7754dbb6a0216275bd74a126e6efe1b6646190e54a053f262e965a6e", 0x3d) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x100) (async) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f00000002c0)=""/78, &(0x7f0000000340)=0x4e) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0x7, 0x1}, {0x5, 0x3}], 0xee00}, 0x18, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1, 0x4, 0x80a0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) syz_usb_disconnect(0xffffffffffffffff) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={r5, 0x6, 0x8, 0xffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r6) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) getdents(r6, &(0x7f0000000500)=""/32, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) r8 = socket$netlink(0x10, 0x3, 0xb) read$FUSE(r3, &(0x7f0000000580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r6, &(0x7f00000025c0)={0xc8, 0x0, r9, [{0x3, 0xd, 0x1, 0x6, '-'}, {0x5, 0x800, 0x8, 0x3, 'nl80211\x00'}, {0x5, 0x9, 0x0, 0x5}, {0x0, 0x100000000, 0x0, 0xdc}, {0x5, 0x1, 0x9, 0x4, '/dev/kvm\x00'}, {0x1, 0x0, 0x2, 0x7, '%['}]}, 0xc8) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000002700), r8) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000002800)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x5c, r10, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc004810}, 0x4) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002880), r3) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000002ac0)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002a80)={&(0x7f00000028c0)={0x1bc, r11, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40}, 0x48054) (async) r12 = openat$cgroup_ro(r3, &(0x7f0000002b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r12, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x7fea706f493e932d}, 0x4048091) 17.301384395s ago: executing program 8 (id=3909): getresuid(&(0x7f0000000100), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 17.300915066s ago: executing program 8 (id=3910): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fff0000) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x5, {{0xa, 0x4e21, 0x10, @mcast2, 0xff}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, &(0x7f0000000340)={0x2000001, {{0xa, 0x4e24, 0xfffffffc, @mcast2, 0xfffffffb}}, {{0xa, 0x0, 0x82, @local, 0x5}}}, 0x158) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x4007}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d3bf449e34a47907f303030303030303030303030303134303030302c757365725f69643d", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x000000000000003d,default_permissions,allow_other,max_read=0x00000000000005fa,blksize=0x0000000000000600,max_read=0x0000000000000005,allow_other,allow_other,allow_other,context=system_u,hash,dont_hash,\x00']) close_range(r0, 0xffffffffffffffff, 0x0) 17.300179495s ago: executing program 8 (id=3911): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r1, 0x401) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x601, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) utime(&(0x7f0000000200)='.\x00', 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000005c80)='devices.deny\x00', 0x2, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000064c0), 0x1, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 17.265798536s ago: executing program 8 (id=3912): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = geteuid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="880000002600010000000000fbdbdf251f010900500012804c00f88014003300", @ANYRES32=r1, @ANYBLOB="3100fb8000008980244f103775fdbce21cba072e482c0e0000460039ffffff0000f5", @ANYRES32=r3, @ANYBLOB="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", @ANYBLOB="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", @ANYBLOB, @ANYRES32=r2, @ANYRES32=r2], 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @sint={0x8, 0x10000}}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) geteuid() (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="880000002600010000000000fbdbdf251f010900500012804c00f88014003300", @ANYRES32=r1, @ANYBLOB="3100fb8000008980244f103775fdbce21cba072e482c0e0000460039ffffff0000f5", @ANYRES32=r3, @ANYBLOB="000005803ec7b8db5d0c2feebb7694bf292acaa711f9889fc626b40d510bbc1f1d57124c394c4a5a4efb75e08df4d1274c7d8cbf669ed3b8703c4ec60d86bc2bbefb2ee74a79b439bf31225febb0819cf7fd60f6e9375db044ac756a31955a6f404d169e40296dcd80a0025f36f3d71f4d7b2bac6666e0b0bf3e91a389c07b63c084bfcfaf6787042b8765db2b7fc922c04977df376c18e42a754c43473f2db481c01d3b642dbf10a2f1d813ee7e694eaedcf19453c3a5a10e5196055efc7a1ca8a54f3dfb9b283018bf500804e7451007749758e5b13aef432fe16995005012a3372f6036b3b33e1e1384b8611149f3bdb433747fec20addee21ae1ac55c3ae9440df6c48482cd5028c95", @ANYBLOB="74c6f11788db1e05a1822916e682d919a79362fca50e30ac3b954092fda42cc261b4221fa925bc9ac4729cd7d43817f73d828c1fd045a92f5428f7d5a9ee8ea12f9f4c846d707fd00cd2b1b4646e0a1f4af6084ae6a2f05cdad6a7167c70de59bab1b39e3ddb60bfa2068e0000009600ac1e00010000da80000067800000a10020010000000000000000000000000001df57021f4acc979858d7b18d241bb1474c34c47c78ade9a01e07b477cb4998f6d135bc373e0673ff0b3879f473fd58c0547d6dd8857b0546b6c05304706ff185537f74470d1886bf78e0134b65aa55b5ecd937cb81a67ffa9d1019815a250e93fc1b8fc41b8124e5033fdd9562db31607e58fe30fc", @ANYBLOB, @ANYRES32=r2, @ANYRES32=r2], 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @sint={0x8, 0x10000}}]}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) 17.231263827s ago: executing program 39 (id=3912): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = geteuid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="880000002600010000000000fbdbdf251f010900500012804c00f88014003300", @ANYRES32=r1, @ANYBLOB="3100fb8000008980244f103775fdbce21cba072e482c0e0000460039ffffff0000f5", @ANYRES32=r3, @ANYBLOB="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", @ANYBLOB="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", @ANYBLOB, @ANYRES32=r2, @ANYRES32=r2], 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @sint={0x8, 0x10000}}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) geteuid() (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="880000002600010000000000fbdbdf251f010900500012804c00f88014003300", @ANYRES32=r1, @ANYBLOB="3100fb8000008980244f103775fdbce21cba072e482c0e0000460039ffffff0000f5", @ANYRES32=r3, @ANYBLOB="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", @ANYBLOB="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", @ANYBLOB, @ANYRES32=r2, @ANYRES32=r2], 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @sint={0x8, 0x10000}}]}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) 15.725162383s ago: executing program 9 (id=3949): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e, 0x0) (rerun: 32) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000000340)=""/47, &(0x7f0000000380)=0x2f) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, 0x0, &(0x7f00000046c0)) (async) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x700, 0x4, 0xc2, {{0x5, 0x4, 0x2, 0x10, 0x14, 0x66, 0x0, 0xb, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x44, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) fsetxattr$security_ima(r4, &(0x7f0000000200), &(0x7f0000000240)=@ng={0x4, 0xd, "3c08df6296c179fe366a9cb658e11a25"}, 0x12, 0x0) close(r5) (async) ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f00000001c0)=0x3) (async, rerun: 32) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000180)=0x4) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) 15.724160123s ago: executing program 9 (id=3950): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = eventfd(0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r4, 0x0, 0x0, 0x36}]) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00082cbd7000fbdbdf25210000000c0099000400000000000000cc00848004000080b800008014000680080001000300000008000200080000001c000680080000000600000008000000e905000008000200040000000a00050008021100000100000a00010002020202020200002400068008000300060000000800000002000000080003000600000008000500020000001d000100da9064aef7b5835c"], 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x20048020) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x20}}, 0x40816) getsockopt(0xffffffffffffffff, 0x28, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x80000040, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) readv(0xffffffffffffffff, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220b0000009309a7273400acea330485"], 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xa8, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x4d7b1c558c00da45, 0x1}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0x9, 0x3}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @register_looper, @enter_looper, @request_death={0x400c630e, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x1, 0x0, 0x2b}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/201, 0xc9, 0x1000000000000002, 0x7}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 12.709950004s ago: executing program 9 (id=3977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x4f}], 0x1, 0x4d, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x4f}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000d0000000100000007000000330c0000010000000700"/48]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x10001, 0x1, 0x3000, 0x1000, &(0x7f0000fe8000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r4]) (async) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r4]) syz_fuse_handle_req(r4, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@hci={0x1f, 0x4, 0x3}, 0x80, 0x0}}], 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) 12.599734966s ago: executing program 9 (id=3978): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async, rerun: 32) chroot(&(0x7f0000000480)='./file0/file0\x00') (rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) (async) fcntl$lock(r4, 0x24, &(0x7f0000000180)={0x2, 0x0, 0x4000000089}) (async) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') (async) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r5, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x0, 0x4, 0x9, 0x4, 0xffffffffffffffff, 0x3, 0x8, 0x9, 0x9, 0xffffffff, 0x3, 0x3, 0x8000, 0x58cc, 0x4, 0x1, 0x4, 0x0, 0xa, 0x2, 0x8, 0x268, 0x1, 0x4, 0x280, 0x2}) fsetxattr$security_selinux(r3, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:var_auth_t:s0\x00', 0x20, 0x0) (async) syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x501, 0x2, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x64, 0x0, 0x5, 0x4, 0x0, @multicast1, @loopback}}}}) sendmsg$inet(r6, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000002c0)="1a698751cda7e24426e3bc9453c152cc3d5639fa0f20f2065d4b5943846bfd30c014fcb398272fbd6019fbb85d01085731c3fdcc68cf6b701bac2d461b9880f81309d6aa13a52abe33f4876c6160f955c24833f88797f4208033e01a56824d887cbe34124b98d4ad50d18a69a7a5a2b0bd4d5b6dab69b3d9cbffb03bc253656c023b5dbb36d13496699f4ce2d1a0c096ae5ef1d4c8e0", 0x96}, {&(0x7f0000000380)="4467dc06fc2249af34b965ae2d68d29cee0ba5a53b7c915b6fa95217ca061a842a35b7290e2777c8a17c84e6154b65a7825ac3fb783f5f649724ed95848ede70e76a9dfb30590e2106475ee2917040cc109c83880fca82a1e8525e9e688482da7594832b74fe48d5430b8d03d02b9d0ae3505630d648967298acd191682eca0723b737cd7ea10ff4780c5769a6bce9525d91e56b64c6a3111e945d20ebc126d00fd996b9", 0xa4}, {&(0x7f00000004c0)="8d7e953e485b8d7c46a9cbf92be5078377b07eb88b7f902613771d4f152fc5bba921c01c2b20c9120ef5b4306ee000917cc11851b3045a676e10eeba0ea119aa580dc093da3d769e", 0x48}, {&(0x7f0000000540)="c70df9f030e76bec32c1c07ea7c473ff697a6373cdc0251b63bddbaeea09a7dbca05dd281e38d7f3772d012cb4202fb1255fc00c52c3f1fac508f8b189e5262f28b5c9ad931683cfa0dbb1b7723a24028963948edf", 0x55}, {&(0x7f00000005c0)="82619a0f9881313d08fb9fdfcb6ae987bf62f30be58ac8974f41752e4fba1f6101204282938644a6b7a37048d848697cf589035d8054ed355471869f75ffa3c9cd76cc5cc4c817c0018b04d64d57173019cf43a356e165", 0x57}], 0x5, &(0x7f0000000740)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}], 0xb0}, 0x40) (async, rerun: 32) r8 = gettid() (rerun: 32) timer_create(0x2, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r8}, &(0x7f0000000000)=0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (rerun: 32) preadv(r10, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x3fe, 0x0) (async, rerun: 64) ioctl$TIOCNXCL(r10, 0x540d) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) (async) timer_settime(r9, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) sendfile(r2, r1, 0x0, 0x1) (async, rerun: 32) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x80010, r11, 0x3a176000) 12.529283757s ago: executing program 9 (id=3979): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x191) rmdir(&(0x7f0000000100)='./control\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 12.442067899s ago: executing program 9 (id=3982): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@loopback, 0x40, r1}) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000087e05172000000000000109022d00010000900009040000fd03000003092103000001220500090581031000070000090502030004040504437bfe6e3a90f173db5c93f90d96e7cc44f676158c97f43fe9f18b8e37afc385b1065ccbb4033ff1e0c61041f9523b896fde74eb2651f08659e69cc58d1734615f82cec5dbee17fa0f87f0f048ee4bb2e7c0a4a7cf8958e3adb443d68ff13074261a9b21836309c58b9c65509d9253ef8a05ee15e38a3af292b356e890fa35840815f99a392756"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0}, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r4) accept4(r2, 0x0, 0x0, 0x80800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000080)={0x75, 0x0, 0xfffffffffffffffa, 0xfffffffffffff5e8, 0x5, 0x3, 0xfffffffffffffffa, 0x331}, 0x0, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc020000000000000000000000000000000000000000000000000000000000000000000300000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000009000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4"], 0x17c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0103000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x4008844) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="000127bd7000fcdbdf256300000008000300", @ANYRES32=r11, @ANYBLOB="4eb569d50247afa78b656646dd33d3bc5d5e6a8686684a1389b3702c639c976a649289158835aef662e150c15014a5e95bb9ba28a7e51383c45a4aad48728114369f00cce9c77d574b6a15e1708872a41b0e3f03d88146b4861e2eff69892ed79d0a4c10062ff099a818135f7b5f52e74a0ba0caa22a07d230f31b1755f0750cc7022f518c0443ce3c361503c2fd5d165d974cedd74f9b90f3aa26f1ee960af43a4ad320e05ecf8486d787f968477d88692b34aaae04422ca1b09484b25f07e68f8496b27a8169a0cf9a8fe2dfd61639e321"], 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000000) ioctl(r6, 0x8916, &(0x7f0000000000)) 12.389574889s ago: executing program 40 (id=3982): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@loopback, 0x40, r1}) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000087e05172000000000000109022d00010000900009040000fd03000003092103000001220500090581031000070000090502030004040504437bfe6e3a90f173db5c93f90d96e7cc44f676158c97f43fe9f18b8e37afc385b1065ccbb4033ff1e0c61041f9523b896fde74eb2651f08659e69cc58d1734615f82cec5dbee17fa0f87f0f048ee4bb2e7c0a4a7cf8958e3adb443d68ff13074261a9b21836309c58b9c65509d9253ef8a05ee15e38a3af292b356e890fa35840815f99a392756"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0}, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r4) accept4(r2, 0x0, 0x0, 0x80800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000080)={0x75, 0x0, 0xfffffffffffffffa, 0xfffffffffffff5e8, 0x5, 0x3, 0xfffffffffffffffa, 0x331}, 0x0, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc020000000000000000000000000000000000000000000000000000000000000000000300000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000009000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4"], 0x17c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0103000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x4008844) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="000127bd7000fcdbdf256300000008000300", @ANYRES32=r11, @ANYBLOB="4eb569d50247afa78b656646dd33d3bc5d5e6a8686684a1389b3702c639c976a649289158835aef662e150c15014a5e95bb9ba28a7e51383c45a4aad48728114369f00cce9c77d574b6a15e1708872a41b0e3f03d88146b4861e2eff69892ed79d0a4c10062ff099a818135f7b5f52e74a0ba0caa22a07d230f31b1755f0750cc7022f518c0443ce3c361503c2fd5d165d974cedd74f9b90f3aa26f1ee960af43a4ad320e05ecf8486d787f968477d88692b34aaae04422ca1b09484b25f07e68f8496b27a8169a0cf9a8fe2dfd61639e321"], 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000000) ioctl(r6, 0x8916, &(0x7f0000000000)) 1.619994283s ago: executing program 3 (id=4146): prctl$PR_SET_MM(0x23, 0x6, &(0x7f00005a0000/0x1000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) select(0x40, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x7, 0x8, 0x9, 0x5, 0x7}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2710}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) r4 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000003e000100fcff07000400000001000000040000008c0001808800108009000880a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb137e"], 0xb0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) setregid(0xffffffffffffffff, 0x0) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000003c0)=0x61a3, 0x4) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\a'], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x17, &(0x7f0000000180)=0xfffffffc, 0x4) setsockopt$inet_int(r8, 0x0, 0x17, &(0x7f0000000240)=0x3, 0x4) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) 1.619229063s ago: executing program 1 (id=4147): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async, rerun: 64) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086602, 0x0) (async) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x4, 0x8, 0x80000000}}, 0x30) (async, rerun: 64) ptrace(0x10, r1) (async, rerun: 64) ptrace$poke(0x4, r1, &(0x7f0000001040), 0x282d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async, rerun: 32) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x4e22, @empty}}) (async) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x8001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x32906000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x0, {0x2, 0x2000, @rand_addr=0x64010100}, 'vcan0\x00'}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) getsockopt$sock_int(r6, 0x1, 0x1e, 0x0, &(0x7f0000000540)) (async) userfaultfd(0x800) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) unshare(0x28020480) (async, rerun: 64) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) read(r0, &(0x7f0000000000)=""/140, 0x8c) 1.595994263s ago: executing program 2 (id=4149): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xffffffff, 0x640184, 0x1, 0x8001, 0x2, 0x0, 0x0, 0x0, 0x100, 0x7}}, 0x50) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000052000100000000000000000002000000090001"], 0x20}}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x410200, 0x0) fcntl$dupfd(r5, 0x406, r3) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) (async) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 1.560133284s ago: executing program 3 (id=4151): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000340)=[@uexit={0x0, 0x18, 0xe57}, @cpuid={0x2, 0x18, {0x0, 0x1}}, @cpuid={0x2, 0x18, {0xa78, 0xa1}}, @uexit={0x0, 0x18, 0x4}, @code={0x1, 0x75, {"c744240030000000c744240200800000ff1c24660fc7b520cea833f2360f1cbb000000006436400fc798b100000066b832010f00d03e67660f382bf436f08054520034410f209866baf80cb8f6c2ec88ef66bafc0c66b8240066efc4e255bf820000c0fe"}}, @code={0x1, 0x4b, {"b950090000b800000080ba000000000f30c462399c0645cf460f01c266460fc7b7f9ffffff64450f01c3440fde1a430f09400f01df410f0ff2a7"}}, @cpuid={0x2, 0x18, {0x93bd, 0x9}}, @uexit={0x0, 0x18, 0x1ff}, @uexit={0x0, 0x18, 0x9}, @code={0x1, 0x4c, {"c4e1bdf27c2fbbf30f090f01f30f01dc65262e2e450fc774e30d67430f01cb3e460f01d166410f3881acb600a0ffff470fc73c860f1c0d3aee0000"}}, @cpuid={0x2, 0x18, {0x2, 0x40}}, @cpuid={0x2, 0x18, {0x2, 0x8}}, @uexit={0x0, 0x18, 0x101}, @cpuid={0x2, 0x18, {0x80000001, 0x2}}, @cpuid={0x2, 0x18, {0x3, 0x6}}, @uexit={0x0, 0x18, 0x800}, @cpuid={0x2, 0x18, {0x2, 0x3}}], 0x25c}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8917, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @multicast2}}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000029c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r4, &(0x7f0000000000)={0x18, 0x0, r5, {0x8}}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/pm_trace', 0x80082, 0x20) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff881ff00001d00000000000000080009000d000000", 0x24) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f00000002c0)={0xa3, 0x0, &(0x7f0000000280)}) r6 = dup(r1) sendfile(r0, r0, 0x0, 0x7ffff000) r7 = fsopen(&(0x7f00000000c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) r8 = signalfd(r6, &(0x7f0000000100)={[0x8]}, 0x8) ioctl$USBDEVFS_BULK(r8, 0xc0185502, &(0x7f00000005c0)={{{0xb}}, 0x14, 0xae, &(0x7f0000000140)="d2c592f736293da8a631669828ac6f398a7dbfc7"}) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000600)='\xf4Ih\x00\x00\x00\x00\x03\x00\xb9\xfa', &(0x7f0000000640)='\x00\xf0R8\xc7]\xbfY\xcb\x12\xc1\xf2+\xb1\xda\x1c\xab\x1fp\xc2\x7f\\\fx\xb4\xbcbf\x92\x02}\xc6\xa3\xb3\xdf<\x8f&\xc8\b\xf3\xf83T\xfd\xfcz\x19HQ+\xf1\x97\xa8\xb0%\x10\xb5\xae\x8c\x8f\x0fG\xd9\x04\x17\x1dG\xebR\xb30\xaf\x8d\xce\xe5\x82\v\xab\x00'/89, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 1.558197573s ago: executing program 3 (id=4152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000080)={0xbfc, r1, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "47c375894b16d05bbd8be1d794cbd1950fd7df716a2913783bb0c9512c1de7a4"}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "514dba50fd71d5771a49a271127287fe15beed380ed364313a745c75afcaec22"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xbc0}, @WGDEVICE_A_PEERS={0xb58, 0x8, 0x0, 0x1, [{0xa70, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3b8, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}}, @WGPEER_A_ALLOWEDIPS={0x668, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "82f948b887fa929f3ec3097008f0e5195d8cb834daf4a2b87d6335ad1bbc3f98"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3d}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf4e2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f5d53935a9fb16cc2fc6296381fa2ac7bd0fce45b98c6e5726ea797813b46cf8"}]}]}]}, 0xbfc}, 0x1, 0x0, 0x0, 0x4040801}, 0x40080c0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d00), 0x400, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x13) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), r0) (rerun: 32) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000e40)={&(0x7f0000000d40), 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c8d0}, 0x4000000) (async, rerun: 32) r4 = syz_open_dev$mouse(&(0x7f0000000e80), 0x83, 0x200900) (rerun: 32) r5 = dup2(r4, r2) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x74, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x2000c000) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001000)={0x0, 0x0}) prlimit64(r6, 0x8, &(0x7f0000001080)={0x80000000, 0x3}, &(0x7f00000010c0)) r7 = fsmount(r5, 0x0, 0x7a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000001100)={0xb6, 0x4, '\x00', [@ra={0x5, 0x2, 0xa6c}, @calipso={0x7, 0x10, {0x2, 0x2, 0x5, 0x0, [0x0]}}, @ra={0x5, 0x2, 0x400}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x30) fcntl$setlease(r4, 0x400, 0x2) (async, rerun: 32) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001180), r4) (rerun: 32) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x50, r8, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000459}, 0x810) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001300), r5) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x4c, r9, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x801) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002cc0)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet6(r4, &(0x7f00000030c0)=[{{&(0x7f0000001440)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1ff}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000001480)="2fd8b4855cdcafef546efbcdd6807a45dd6d074b86e912a8b09d18b5f7bd6e3a7d879a7a2259b96024b5ffd1d8aefc2a1aa33ac70f669d8bd14b950b374f5109c7edfcbe74d3d938ed4a1acc3dffdad6d1f5495abc9dceba95736b94a3fb1641746f8bdc28c156d9090add8d5d92c15d0389d107083b6a914ec3e15e960e198a26d92dfa7d4c59b0dfecbaaac20ee834d185cc8ca597b277b833683804f0cebca0f83a467e5e33dfc4747ccd0eff695f", 0xb0}, {&(0x7f0000001540)="7e2fd11a59ed662d4cd65afbfa5301fb81a993cb3e3e029ff0a3e334ba53a56c6378956460c7740af40ca97628935ec4e31439b40d6b0579e5c386f981a6906b9d6597bb66253dd92e50e9c0b3c440099e7257b2f85f38cef4b33fdf9101c1b3b63837067511314b9f42290d7adb76c470d542263632", 0x76}, {&(0x7f00000015c0)="7f0d81f38f3b30f6b7badfb503f759c56b082064d445209d87890f332d3fbe092486eb02b42623e732dc49f7249f9d08c354159abc0a49c95090fb662f1226868084121d92b778d91e7b236c0e1739d8f676db372e01f4c7439b9b59807072bf637571fa642ef55afb8314c033dbfe1d3ec75bf6f60610bc41ba38460e0a724cabd0880a11fd33b6e3144c2bd2b18fa65f59436d13b26c719332d005b3b9fe1834e01786e04ea34e49918ce32f414ca31fd6310e2ff008c95f2fae18901eb53d5a9e073567e452a85f52fabbee87b6818ebec70ff0b77d55122f049e42999a81277d68e850511cb2d45ad683bbd989d9ad95320cc1c93405f51a2c00f57b7c78bc7b7c8fadaa0b90db44124abc9aae39abed6634797c1f0b256f2c464f904aed6d3b751b7d2cdbd8e59b0ba579550ecfcb47361ada69ac80c4e2cb9e65206c73893e99f307c456d0b36338ac0448c81d44eebe90a42d329b33d8dc48220ee81186f3a0f6da68c8042ee0276da4167baa0fb47e39e860ed692ed4bb010b4da73c1d199e2deb3f60cd5a1075cdb9799f1647c211fc7a9cd95b773aed5536b03eec3821b747f6e5b975adfec31ec8951894274e6b3e5f0e48219aa3426bd0e9eb0fb1080b0393fb7cad6111a7664cf956ba2d285ba82ea22bd1069232bf306a55c481f81d34626636ad272c88f20570e570db2277bbe94bd2c545a09914855ac92cbde24f86b22d2cad9b597bf375ff6f892133a310ee728d20c990527d4f358072bfa56f0dc5e41a84a2e0d5528428bf9ad72eef3a5b86ca4d3098936ade4849c20eaad937dc8e1fe4b7cb57ddcfb0c0af9d96b9746acc342b12d9996b84c8c8472ac6e24eccd523e956128de0407bd3531aa758743bfb05508d3d1455ac631fa030fab6335f0c48204678cce0a1a8566b9133b45b373509b15d5676a5e0df00209a5adfa4b4f276f8d79ba6fc6d6f8935631458e548ebadfd114857438f3b547b099848cf6d556944a4ae647646cf062ad70dfe0109a4b8be689957b571be45028ab6326ca561580ee552be0470bf10b51ec46631e6cfd7c9dff7313cab03881a51f3a858098c9a1c57d283c956d1fde903eef17f76baf68cdc49710c112a3dca2829680bf5411aed72c44b400506b70f3086b55fc4423a2cb4a77f18eb1ea9e6183f163f8b78399fa8061b4e436722f75840b79a00119315fee3cb4c594c287c2a1a26661f765d0f70252456053201733591fa5bcbebe049598359dc708a69418f8fc3d5a016d3ebeb98e38eaabb32eae86615909c0b8c0c02121732010e1cdfaa2a26bb1f8d05bc1496027aeda8fd440e59ea84d1e68ea9d0b4e4c90b55800f28040a334d10efdbdd38b6fc5a0be5632f88d131305bbf981960b06fc4ee0b2344763aea416a7113cede66112f11d48dc59cb2ad097ebdd048d3a8f5b5afac49d6d50b5d16a04585c7a216fad1c397af68bc32086752ae34bf9a3d54b242e1aff10ef1847af368579d83afbe0568e56bf283d196ad2012207fa4837bab5aca38074dba17c5fbef61593c998488d18f85098ffaff8b5d3e7f3f421aa1a90d94e0daa8c76ac72dbe2e6e7ad7414cc9d64aafcd2a14d8ac96279fc2a3738c85a4c119a49ebf40e570832a2ed6dd053025406f7ec91f5c6b6403837f03c1d6f47d4195c19ef11fbcf044d759f0e6e2c1bdba76639f918854b91896ae018643b5ef280af0a8b75af5d0e4bc5e942444dfa99bb78179462f53617d19f28e625f7aab155ee6bc313d787b0510e54151181a5a9c57f8d1721f4a1bce69448346f12f316fe8a54166a07f76956befd015643ee40f5d2fba5348c49d56cd1fe6a535253fa148b18ca05ed09752e323108423b96cb8bdf010fb2933b1d1f1f539217c4b6a702125f076f8052ff8723ea9f43bbc0fe8fd6e7ea1e79dc4cf588b78458811ebe078b2e8048c257a9651c30b7173a6f697cecb273d25beb99b77e086e86c8993ff7318d82055f29909ebeb03a8794394d548ce0363017a12242aa947c2fbae163d7f85be5597950a0d0a9fcd4728f9ebd6814d5b9f03b2d1ef27a3a649330b3ee7d59ccabe08e564293eba0407b9452925b9044c73a23a3e2967153a04afae20392a7a561a5c033f4c16fc80391d9265947c7477593dc9857d182718426035fa04c77db4f100250730656bbf71eeee7440c8d329124d2e29474950b8dc6be54e0d1467630864389f7b8f841b41b01a896e2a1ae2bcfb1d68b0b39393d4722fddb02ef8db51659a477faf5706693251d9300cd3d2f9f5b6d678cc1a335ea3e705e5be09cb95412c228c716e85490920c1549caabb4f563a5a39308e17bdb35456e8a5c050a2318d16571e279e8b5151f4858244ae8640681219ae6f66af02447c9c2203e6c85ef1dc6c61c42ecf938a3320cd7a8549b2d514494f24407654bcd9c67e49b723ccc1e14069ffe4f2120a56eeb500b1a26b9f0c04ece12e908d5e0642c958c38c5913bd68583df33f34d5ee90b7f49ab385c107c2cc19bd572d9bd3fb551b6696162e0e5dd7080efb041eef7068670f3c46b93e9dde67f20327de177e30718a83081d12e5a5dd75fdbb1580058e8dad925cc5b5b86d1de67bbb5c30e755e74c1f3576237996f4e5abefcccb34a9006afa9c8169b0c4339ef89964c0c1d54e3a72796c4b42689d30989c88f76315785c1459de82f0ab5814ba6f48c20905284b1920ed8c3d5d40123b77200c13d9b5bc79d6e35f074c58491bd7bcc115aa73bba78c706185585863a26b112d7a0ba1a4cd6522c034f7d909b7e07f6bacd2b67e116f2d6b650d5a95b31d4b53a891a687dce1865c5920efe8507ba509ca068e20069504a8f8efef89a7d421334e11ccbbc5076c37e8129fffeeee4b136d16764931488fce11629a60e65019715548b0ba6949e71d35007d5142064206c50d32251722aae27c58e36eac485003d1837ce42cbe47477afbe0e224abdc4eab80e5a70a959b12cbb5ed56040e21f0ac5ccc4089e9baf43ba1ae3746e1ead193b25df16a20a3b1ce1c84a48de70da48994ff6188a0a3b3949221799b7dea950bcb7881c14cf9591274c799c4d5f8b7ec24e7e54637899e40d1f115856a54d13a0bb40721131d620e5f53c17b6cb0eccee97d6cb15d62e82d9f8bb6078971f7eb83d637e6fa88af32a37d2312d7a1d308568d06d54bca669cf4251849087433f969e148b86af8dd7b81be7b39a2702b8c0eb514616fa71e5767569e8bec51be5652f79519b7e3d898ac416e9379226ce1e89bc0fc075dd91e35a211b5a22adff09effd3872a2a278735e56f644c5d31bbc5bed590b72eaece5d8674fb0a4f93cd2947093e407caf9fb8ee1f17fa996c06a01a982ccc9c5edee5724483a0e11c45c8c26256b7f718cb44b0a93b64d15b39fac19938245e4090360f87cb6cfe8cd5fb1e8369a5b3895872071e35b0fef02498780add8602b2c72f5a43552105e00cd470071abd5a023434b79c055136897a3a76afa3a37dcd2741fe4b5ae02d71c21c24f0e61da8a450cbd024538f80d50c63dfeb91c47d785a8bb837935b99abd931a2a726c3d807c4dd06608f6914870daf255a1e9bc9ff29d4cad953f56386d6ffca5ca0d1d02d76afcbf80a9d19cbcaf8f6c5fb3c7818cf72b5f84f13e5ce3e9766ac2f2973c2e678cb562e00f6d2709626dcb50d878448771d36eb0a5627374ae5c56a955f269ebee62e491d3e9ea59ae40c10aa7764c23eb8dd0e630d07827cea4ce1bc9badc0784658959c123764f6822bab3ed52d184895f2b07e6a96686c20d9bbe207da9874a4bbd01c70cf0f52e04b42b0ed2d8439542cca11ffaa700a3f839f7899ce67b4855f517612b23cd814faf0d5b195a4e36bfd7def23c93bd72ce1cf46544ceaabe68b326885b706c27dac9089d13d3671446ba13e258ba085e5a0388b1e8fec22257d0d8c1286d0c016e8deaf6119d9b5f28ccbe43a4f93c1b6476e3bfed85e7d95464603e23270536c7bba03b9fecd0266d2817c95044ea02fdcc083ebabbc4c96c8d0f1e7ed25cc9d3bf8f9900fb70c90155ea334f03b52dfdf47adeb020506f256d85c35e336ed5f463412b3b78ef45d721a9adc94f09c2ffec4f482101004ad4b5730cfeef01d3ce6533e95b9e36389fbfbbf7b02d664c90956d6665c62feb8fa3f0daf255b2741b191ea91d5371fe9a0c61fb03df8565b1e8bbe608ce573596c27647d054a8ba26c503cd678b4daf909ff3393577aff3b6bb1e7ed7cda548ca7624f4a5cc4fd7164052e87e582f933b2f730f45ab22446e65244122aaf3e907a1ca02f4a24198fc2273a3ee5be47657b9e126c1f5a40c731a538b2964d9152f8dd016db58a097059eaec09261a5cc8f0267375a54e9444539963a70ac99d26ba620251a2682e8cc1a13dfc463674842923699dc01ec773c4ffd10155ecbe6d1f7e732a419f61adfd7b10ac15d7d0e0464c3ce20be201490018043f2a6759ec68103365a68ce7622b3a3c0c5283c6fdfd5f3cff0e8656ca6c10c7007c32afb9b8fcf291ec99fc417f17dd5baed37f35a3049635e77040ecab46f0112f941e4d32be04be55d7dd626cc8032323cb9d5067cf346c008234d78328ebe997f1fa338ea6116af84efc2ae6aa861506c570473d26cce5b2c8e4d72d470c081f5a27b503ce67ff03ac927088973f729763046b5a8b1c4aa054649c2f3bc109a69a44a6b7f1b0c4a9f86f3ab80657ce5679b98ed0e701caa88db6ea409f3f38f3d100e8fa58ab2b7b67cc41d5dc6aa0de7c0e09c7f9878ef2274dcfc44cc0cde8695cf191b536f06d8134af527360eadb0bdf4a3803b9c3be0355a81c3979e80b926c1627492f6f525f4f7c0403d2030c2cce2c6de4a538b447bcc422af26e7c89f198ecdef472924da2392c366a1d6b889c2c4185b31e2cd3e78db882c03e060b5c6d60eff3a796bd4cf8720bdfaa89f23f19067cc9a99aef207db27604b14342778e9a7989f235c1dbe1b2bc1bea4cdfa7bf62f4e2213415d170681bd10e377057d6a864bd5f240d909956818d8e2403e43c77c237fa5f85908b0fc47f7cc570abc7192bf0921942bf6d0ec6b1239bd80944ea5ea85083ea833daeca0f4d3a8ab0661f01f315d8fa6ff1bef6e2625bbed05b2e02b4d06dda0adb39419ef94501c0d88256828d1b20bb710f6ff8aa68c30ced790a422554aae4965558b26f7386c5dd72839716e4dc773ae930842a002685a5d3d9abfd4bde7a3a31667abdccca952888e6f3648a1e2d37e655fab6c1e3c2343b2378c0847eb4ee7919568f6c376f6e2438c8673812eeb755799d918b730960c224be2465c6d1ecf9f25fc240ff90f59a09b32412696553216636d9e97fa257549e497ada9b2e82b2bf2c23ad67cb433f321e00eac3e9e971e5f18bfb6f73a216f1c80bd6281c6b5dc592908765e8c758680e1d57cd6bc7579ff6a1a97f55b2340c72b09a3c8027af9d855a92bb8b423f5b6557d563bd31a8472b5fb9818f24487bd04e426737d2d62fc77467fe2a30881482a50b36f11364ad48b87f85488681442b2c82616a8e64bb8083041d0d685c94168cb4db9e9016cac597d71f1fb2ebe290419fc04b2b34ed2403572035055b6e9c53b3c8a29787f80078959dbb21a8216fe286feeb198ca262d94d57b2eb5f9e827fa897c9ba15bf27f4301a2c02ee6fd4f4476d6d707aed181e4ab2447bd5652ba35a5abe922d371280850dd257d3e46d3e689e25a77e23d4b353db189f265900dbb88cd45ac92ccc97ac49940cc8f2404ad4d25", 0x1000}, {&(0x7f00000025c0)="213f79747dcd4821a995ec913209e672d601c92c68eff442211a90c884b2e3d6c5139e4210df03bbe0ea872762e42e3cb77c22a4a6aee37117ca96da6e4255d795562d001683788f5daf45be3009e6453bdeb785c2aa1f2b01ed23aabc200d7d41a0e391b4c51a271d6346f41ce794525ef1c6b1d51f7c6f4e4aa7748094d5a2618002287852ec4ef08793bffb1fa22274f7fc2377b5308003efa3dce93dbd926f1558a66664d882abe8b03327ffa89755cdb9c4a452bf591b3d72a8d3e2f12c82eab8", 0xc3}, {&(0x7f00000026c0)="e868576c9c0cea856a10f071844d068184581626781c494e008a7e4ef5b2a366b4ed758e74c95c61c0d78ea96a7261f53c2af19855a7d7b4d741fac38cf1ba7c8459169885dc399a71bf9d3af7aa0a89f09303eff159b002a80c6efa11c33bc2908f756240261db6c8474363ab99678628e7538d943a108e0f", 0x79}, {&(0x7f0000002740)="539e58daa105512677d4790561b4f0540c243b37f295101a12c784e5e53f6f445516113730a00dd669f96732990ce85c38d9edd806e15227070ff797e06da7071d7e65f81433c5cca0e3489a1948575c191b1bbcdaa953d5ad073d28829e99bb76dec67f3778ab53a313ed2087921ef60dac2ece781a35740ec7db0d4b60a0860e8a9b2a1b00c2e78b2c91d54f9d86ff5baaab8d38116d7168a1be9dd33c5026e3879d5b386d1e51620245c2ce809107a7d065bee9caeb9dfe637af52ce704227fe5a116ee2452ec22d242780fc9c13dc42fb1e96281a95a0e5cb44049424182e51cf1c8e0424e38959d43d3d51a34774bef", 0xf2}, {&(0x7f0000002840)}], 0x7, &(0x7f0000002900)}}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002940)="9279a05d23", 0x5}, {&(0x7f0000002980)="f40e16617fbc20dcea79b6eddf256ac609ff739ceea0c982f36ac989f184589b2bfdac44d06b57bb413970bd06057a52ba9d9eeeac4b085e20879e48b8f093e7ccda4e6af325d398eacaacc32c49692bfe5ba70f269d72ae9e845d2f9e934c37589893de10236dbe7c51403989e5ab3866cffe5f33fa9ec9330188c17249f5967e7b682bae7060a9526738e4a9189a6a4a6a5c0bc06777b01e8828d4fd97dc2998013163c060bf48344c4a5b3dcedb3b5dc12d4c3f03543e", 0xb8}], 0x2, &(0x7f0000002a80)=[@rthdr={{0x98, 0x29, 0x39, {0x16, 0x10, 0x1, 0x2, 0x0, [@mcast2, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private0]}}}], 0x98}}, {{&(0x7f0000002b40)={0xa, 0x4e22, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x400}, 0x1c, &(0x7f0000002c80)=[{&(0x7f0000002b80)="514ab6ed1556fd1a9f766a7169647e805e8fdcac37606067bdeb14d413e2185b8b1d575d467977c6b652fcac7f9695efb5fac4bca474924cc2cb2105cee0d7e77460145ff90346d18b3d69049dce4fbb527630201587516303aaa8986691295d526b5f18c3f663dd02d1685271ba86b80fd0c86592cd0786256bda7599792a48be868b5fc28fdd08b16fe59edcbd4b5f36eb4ea4a6d9afcf0c37a44390d7402ffe46086f8c43fe5903ab2b10da7547878f00d41a6cc7967235a396dcdcad587608c163ad32ae832d08c347834e536033f2edf026cb03d12b910f2398", 0xdc}], 0x1, &(0x7f0000002d00)=[@flowinfo={{0x14, 0x29, 0xb, 0xffff}}, @rthdrdstopts={{0xc8, 0x29, 0x37, {0x2e, 0x15, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0x8e}, @generic={0x9, 0x84, "d6c8731cf9652520bf5863a61c5acce527da6cec90ed81a2a1e9a307059cf424669420ba9b301c94ac3e0242e565806df84ba11d45503e7a25c66228445fb999cbf68bc1941b1adf304b422b4829079458bac5131ec0df0a45cdcc349a1cbf2d555afeaf30841bb1a416728f6e58eb0c4056aebe74b19b2c270dc4b493652d60f6220df1"}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x0, 0x3, 0x0, [@mcast2, @rand_addr=' \x01\x00']}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0xf, 0x4, 0x2, 0x6, 0x0, [@local, @remote]}}}, @hopopts={{0xb8, 0x29, 0x36, {0x1, 0x13, '\x00', [@generic={0xd, 0x4e, "f9b18d42b4f0b3bae3202f8d0b45c05db9a78556fe90eeabf28b3c221140007517089ff6f95bd90a1e30ceeed41a2ee4879fc3cb31dd2e315419ed894be79b5d69d02d0ab7d43845874fb7ac86d3"}, @calipso={0x7, 0x40, {0x2, 0xe, 0x5, 0x5, [0x1, 0x97f, 0x0, 0x78, 0x100, 0x3, 0x7]}}, @enc_lim={0x4, 0x1, 0xe}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r10}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x88, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x22}}]}}}], 0x260}}, {{&(0x7f0000002f80)={0xa, 0x4e23, 0x2b, @mcast1, 0x7}, 0x1c, &(0x7f0000002fc0), 0x0, &(0x7f0000003000)=[@dstopts={{0x98, 0x29, 0x37, {0x3c, 0xf, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x50, {0x0, 0x12, 0xb, 0xda0, [0x8, 0x8, 0x93, 0x200, 0x8000000000000001, 0x0, 0x6, 0x5, 0x7]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0xb, 0x200, [0x6, 0x7f, 0xfffffffffffff801]}}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x84, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x10}, @pad1, @ra={0x5, 0x2, 0x200}, @jumbo={0xc2, 0x4, 0x3}]}}}], 0xc0}}], 0x4, 0x844) (async) r11 = syz_usb_connect$cdc_ecm(0x0, 0x94, &(0x7f00000031c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x1, 0x1, 0x1, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0xe0, {{0x8, 0x24, 0x6, 0x0, 0x0, "3ea821"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0x1, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x7, 0x2, 0x9}, @country_functional={0x10, 0x24, 0x7, 0x7, 0x7, [0xfff8, 0x10, 0x4, 0x5, 0x8]}, @acm={0x4, 0x24, 0x2, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x1, 0x4, 0xa}, @mdlm={0x15, 0x24, 0x12, 0x3}, @acm={0x4, 0x24, 0x2, 0xf}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x8, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf5, 0xfd, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x0, 0xd}}}}}]}}]}}, &(0x7f0000003480)={0xa, &(0x7f0000003280)={0xa, 0x6, 0x250, 0x7, 0xa, 0x10, 0x40, 0x1}, 0xf, &(0x7f00000032c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x5, 0xc6}]}, 0x3, [{0xeb, &(0x7f0000003300)=@string={0xeb, 0x3, "823b7e8a5cd27a918644b7984dfbe877068f8d61b596190cd2f81eb7d9f0b6a03ae1a36aa8c5313360687854741d88df37cd0a2cf9761455a8b9c847bbaa022ae629910195ec86dc1c3df8afd59e7de875ef36ce446b56d642b99e757b3b7f21ad7cc8aac9496dfeccd4f0edd0a35dca36a083632d5d6fd68d670fac4798f25517ef4e6cde763e2f926bae1e2193b1c12117332d2164fc5ce9255dd41e7845abeaaf63075acc1535d31e90497f6ec94f89491741013d757f834634f5dd28e7700186d6e984ad43e5a22de0cf38f5cd5aff8afec5bc28e0eef38ae1608178fa1cecbe2ed094518c7cc4"}}, {0x4, &(0x7f0000003400)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000003440)=@lang_id={0x4, 0x3, 0x411}}]}) syz_usb_control_io(r11, &(0x7f0000003900)={0x2c, &(0x7f00000034c0)={0x0, 0x6, 0xf2, {0xf2, 0xa, "d05ac2f45a87be1f7736d0964e495084fcaa65309079c4aa764d98a5b5e992a1325243c63157505cb8edc278c7c4f13cb726c404c3c74d7bd4eaa9a16638431435b3b5f05792f69448bc40d20894caf9197cf8c243a05210903fe252234052426ca764df4d1ab8400340e21d6171f92f5422e28e89d6c2f78e9363a381f8b1fb4deb712c22c7c304769db4ef05652bedcdb7b9ec27d6eab2c521b205c0921c0fba91e0a42735add174be0e6e5916dc942196ae66d6f022abb527dddaf074a7ddd78f7b8907e2e5d83d68d2715bcdf6b93701f116a25b81acdd852e59dd78633fc9f602ed49d8aa0430c6a03979397637"}}, &(0x7f00000035c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}, &(0x7f0000003600)={0x0, 0xf, 0x26d, {0x5, 0xf, 0x26d, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xe, 0x5, 0x7, 0x9, 0x7}, @ptm_cap={0x3}, @generic={0x103, 0x10, 0x2, "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"}, @generic={0x87, 0x10, 0xb, "00ae6b9b569055d129e93d4cfd9f3bfd2e1c2901c1a167f64cd25cb497a8b9d4744b1831f21886ad5e027b3923366b7711e10190f88cc4a217ed48d9db93b73e86649b90adfa5b7226283b9e3fabb44e61ad96ba1c4188b308d1e5258c461253591fca290f3169f1c127dbc493ebbdebfecb2947738b724b0014956d6c189737e73cc812"}, @generic={0xc6, 0x10, 0xb, "fbddb32832b4ccfd30333448e5aded5919bb505a6d23df750f4eeff0beda3faa5cb99f1b7f828528ebb57824b153ba33af74423610a467d9aa1a54591dca075df7ef6ce0594a0a657816b5d9fb7f87c62a15054ac57dee1c8027db5adbc8f532b020c50348da6dff46f12af4586d0f70c26b1874b8f9ec9530f1a9953627c7baf56331750bd5d0c9cb080dc6f4c31e6fef1c829088c2c9a4f5e10c3c664aea532b626c5dc4ac4186ccd0cfcb639a1339643357f0945fe5b03af56378a043da13eeaf05"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xc5, 0x0, 0xc1}]}}, &(0x7f0000003880)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0x6, 0x7f, "c2c51f63", "98aae6f4"}}, &(0x7f00000038c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x60, 0x9, 0x0, 0x3, 0x6, 0x5}}}, &(0x7f0000003d80)={0x84, &(0x7f0000003940)={0x0, 0x38, 0x44, "b70da30edf3f024ce4810e459e18d53d7ed54b87f01f85a943dc41be85748976bf61a95b2eeb58830b9a35aab3e99187b533d0ecd8c8b71bff87f62ff72ecf755e71e5b1"}, &(0x7f00000039c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000003a00)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000003a40)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000003a80)={0x20, 0x0, 0x8, {0xa0, 0x2, [0x0]}}, &(0x7f0000003ac0)={0x40, 0x7, 0x2, 0x282}, &(0x7f0000003b00)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000003b40)={0x40, 0xb, 0x2, "58c7"}, &(0x7f0000003b80)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000003bc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000003c00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000003c40)={0x40, 0x19, 0x2, "dc85"}, &(0x7f0000003c80)={0x40, 0x1a, 0x2, 0xf86}, &(0x7f0000003cc0)={0x40, 0x1c, 0x1, 0xc}, &(0x7f0000003d00)={0x40, 0x1e, 0x1, 0x53}, &(0x7f0000003d40)={0x40, 0x21, 0x1, 0x8}}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003e80), r7) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000003f40)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003f00)={&(0x7f0000003ec0)={0x28, r12, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xee5, 0x3a}}}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xff38}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x48084) (async, rerun: 32) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r13, &(0x7f0000004080)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x1c, r14, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x1c}}, 0x4000) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f00000040c0), 0x8000, 0x0) (rerun: 32) 1.489016745s ago: executing program 1 (id=4153): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3#\x82\xf7\x92\x10\x02k!i\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,{\xd3:`G\x81oN\xbd\x0f\xb8\xb7\xc0\xb8\"T0Z\xb1\x18\xe2\xd4&\xdb\x19\xb1\xbe\xcc}\x9d\x84\x10\x0e8^.d\xe1wSJ\xcf\xec\t\x12\x8b\xe1\x92\xf9hq\xbbs\x80x\xd5\xee~\xef\xea\x018\xec\xc3t\x992\xea\x93\x92\xdb\xb0|sdK\n\x8eN\x9a\x02\xe2\xdd\xf7Ho\x0f\"\f\xaf\xd7hb\a\x00\x00$\x1a\xc9\x06\x12Bg\x1a\xc8$v\xa2\xa1\xad\xed{\x8a\x0fn\xa8U0B\b\xc3Y=\xa6\xe9=m\xdc\xd9\x03\xa8\x93\x9c\xb6\xf8\xfc\xbb\n\xd9\xc8{\x1cs\xf5\xbd^\xb1\xda\x0f\xcb\xc5R\xe7b\xdf\xae\x7fo\x98\xc9\xf2\xa6\xa8\xaa)~\xa7\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\x83\xd8\rX@\xa2JA\x84\xcc6\xc8\x05r\xb0\xbe\xf5\\\xfc\xb0\xa1\xb1\xa1`%\x18\x8d$\x89\x1cVD\xc9\x04\x1d\xc4#\xe9m\xa1\x82\x9a\x1e\x9c\xd1\"?4c7\x00Jf\x8a:X\xe1u\xb14.tf\xbd\x9b\xac\xa7\xb0o\x0e\xac!\x1f\x91+\xe2w\"\xf8\x9b\xe4\x8e\xcf#>\xbfi!\xc0\xc5\xd6\xab\xe2\xb8\x8e\x99}\x00j\x8d\xa7Z') r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000080)=0x7ff, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000380)='\x00', 0x1, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x248, r2, 0x4, 0x70bd2a, 0x6c97, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x7f}}}}, [@NL80211_ATTR_VENDOR_DATA={0xa, 0xc5, "d27f9604875c"}, @NL80211_ATTR_VENDOR_DATA={0xf7, 0xc5, "e2867a41d93dc4c8f083a8a47f147722b1d3373d1ebc2cb5385bc57545fd415f51b98f84af423c7a5c6f4ee2dff73d915a3209b757b1fc1df3e9dd464ce9d6f646a50e09d2d4d6c453ab9353d22842c4785bd72b4db0f7220bbce382255e0e98015a0fd0c2c3e3e1cbdaddd03304dcf63153a70316d1abcc1009ec54aa58fc36d00e149a793aed525c01c5750c6dfd1ab9d813cd339bf70faf5a54eacbaaccf76573eafa2dae4b289f65c006d1ac087a9d2dcc035c111a687f29668cb1d0040ee1b5cb7fcd151be600491c224ae03bb553758fdf520cf5c04dccb51ea2f7eacd6df884eb8584150a79c1975f2f782b8a6d78c4"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4a72}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_DATA={0x103, 0xc5, "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"}]}, 0x248}, 0x1, 0x0, 0x0, 0x20}, 0xc978f91b8aa21d9f) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) 1.488493395s ago: executing program 1 (id=4154): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.472574125s ago: executing program 1 (id=4155): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x16) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/crypto\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x2000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x88, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r0}}, 0x0}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x2, 0x1, 0x2c}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/240, 0xf0, 0x0, 0x3e}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 1.444219325s ago: executing program 2 (id=4156): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x10000) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000280)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="060300000a000000ff0e00000000000003000600000000000200000000210000000000f6ff00000002000100000004d310000502000000e0030005003c00000002000000ac1414000000000000000000e5426d374515ad51bf9b036da7ed7cdda9912786a2e35d013ca8effba159ebcee79a2de0bd78175e4f95188416396374c6fa6c700276247373a9fe4b6a2223997a8fe9637a7d10100170f23f950c58c26093d736e6d340c544308799cccc4c25dac0e2ee3904c4fe2c7a64f74a988ba4cb40fae7b61df20f37025795ca3f2e9f98d24d55224efab707"], 0x50}, 0x1, 0x7}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) eventfd(0x0) (async) r3 = eventfd(0x0) io_submit(r2, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r3, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, 0x0]) (async) io_submit(r2, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r3, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, 0x0]) io_destroy(r2) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000) 1.443179295s ago: executing program 1 (id=4157): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) r3 = socket(0x1, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x40, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0xa6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x200006, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x1, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x4009, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x10a, 0x4, 0x9, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800f38, 0x5, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x7ffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x1, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x4, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x6, 0x2, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7ff, 0x2, 0x6c1b, 0x0, 0x4, 0x100005, 0xa, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x81) (async) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="20000000110001000000000000000000100000000a0000002f443030230000007712023feee525e10d50e46441cf1e6ecb9334a2175fb816a32cc6c301359c54aff50627af80a01fe7e218085ebb98e690f2b89557685b10e2a9c7658ec2048ea70d91fe18f7475b941eac1b413e2e3eed45e2b2c96f3eaac59f9c03615da6ae278184a4cc7fca589de8838e64f6f82a13a313adef83e32d364fa36c71012d5538b8af1f8a56d734079c448d2bf47ca7532bcad7e8c883e3b2ffff00008547645f4791d70909f6698ca8e02ccd6752ab413dd6c2a9782b927e1aa7f315de6db1deb1f08350df8671865cbda739b003067580a2d5403c8b73"], 0x20}], 0x1}, 0x20004080) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3e, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x1c, @loopback, 0xfffffe00}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000000c0)={0x7, {{0xa, 0x4e21, 0x7, @mcast2, 0x9}}}, 0x88) (async) getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') 1.385009447s ago: executing program 1 (id=4158): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002b80)=""/4095, 0xfff}, {&(0x7f0000000140)=""/89, 0x59}, {&(0x7f00000008c0)=""/240, 0xf0}], 0x3}, 0x8}], 0x1, 0x12002, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x1, 0x2, 0x4, 0x1, 0x8}, 0x20) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x204402, 0x0) r6 = openat$incfs(r5, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x40046721, &(0x7f00000000c0)) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="20000000100001070000000000000000030000000c0002"], 0x20}}, 0x4000084) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000080)='\x00\x05\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbcQ=v-<\r\xd1?$\x8b\x17Bn\x17h\xee\x96\x99I\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hX1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x18\x8f\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\xde\xff\xff\x06\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8C\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7z\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz\x03\x00\x00\x00\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7V\xfe\x0e\x94\xb1\x15w\xc4\x9c\xb6s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd\b\x02\xd5\xe9YE]\x8a\xb6n\x8f\x8dQ9\x13#\xed\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) 1.301753538s ago: executing program 2 (id=4159): r0 = syz_usb_connect(0x0, 0x90, &(0x7f0000000480)=ANY=[@ANYBLOB="1201500242b3c74099045b10216f0102030109027e00010008200709049c07"], &(0x7f00000009c0)={0x0, 0x0, 0x19, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x800, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup2(r2, r2) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000200)=ANY=[@ANYRES32=r0], 0xa0}], 0x1, 0x0, 0x0, 0x4c850}, 0x40) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x28) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x13) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xf}, @fd, @fda={0x66646185, 0x9, 0x0, 0x3e}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}], 0x459, 0x0, &(0x7f0000000540)="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"}) 627.826549ms ago: executing program 0 (id=4163): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_int(r3, &(0x7f0000001500)=0xffffffffffffffff, 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000940)={0x24, r5, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000940)={0x24, r5, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) getpgrp(r6) ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 553.742771ms ago: executing program 0 (id=4164): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 417.366113ms ago: executing program 0 (id=4165): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, 0x0, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, 0x0, &(0x7f0000000100)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) (async) 416.397373ms ago: executing program 0 (id=4166): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x6}, 0xe) close_range(r0, 0xffffffffffffffff, 0x0) 416.150763ms ago: executing program 0 (id=4167): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) ioctl$TUNGETVNETLE(r0, 0x40047440, &(0x7f0000000180)) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01090050000f804c00248045002c802cd00b29a0cf37847597780a5a323c11703c85210bfb54a5f579eeab7aa5c2a99f7fde2a0900000000000000220ffd5cd1d1a8c126e6aae344fb97b080dcfd0e96"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$PPPIOCSPASS(r1, 0x1263, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x4b, 0x2, {{'ecb(cipher_null)\x00'}, 0x18, "ba4de5"}}]}, 0x13c}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @mcast2, 0x7fff}, 0x1c) 340.650544ms ago: executing program 0 (id=4168): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async, rerun: 64) ptrace(0x10, r0) (async) ptrace$peeksig(0x4209, r0, &(0x7f0000000700)={0x0, 0x0, 0x1}, &(0x7f0000000fc0)=[{}]) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) 94.032199ms ago: executing program 3 (id=4169): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) sendfile(r0, r0, 0x0, 0x7ffff000) 28.949449ms ago: executing program 2 (id=4170): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp0\x00', {0xc4}, 0x8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000080)={0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0), 0x4) r2 = syz_open_dev$rtc(&(0x7f0000000100), 0x6, 0x80000) ioctl$RTC_AIE_OFF(r2, 0x7002) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000180)={0x1, 0x0, 0xa40c, 0x4, 0x80000001}) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) (async) epoll_pwait(r3, &(0x7f00000001c0)=[{}, {}], 0x2, 0x1, &(0x7f0000000200)={[0x101]}, 0x8) close(r2) (async) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000280)) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x4, 0xade, 0xea2]}, &(0x7f0000000380)=0x44) (async) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000003c0), &(0x7f0000000400)={'L-', 0x7}, 0x16, 0x3) (async) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000440)=@req3={0x1, 0xcd9, 0xc5, 0x7, 0x3, 0x2, 0xfffffff9}, 0x1c) (async) mkdir(&(0x7f0000000480)='./file0\x00', 0x4) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000004c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000500)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r5, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x55}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x5}, {0x0, 0x2}, {0x2, 0x7}], "2014d6986203403f"}}]}, 0x34}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000680)=""/4096) (async) pselect6(0x40, &(0x7f0000001680)={0x780, 0x1, 0x7fffffff, 0x5, 0x5e, 0xaf9, 0x10000000, 0x7fffffffffffffff}, &(0x7f00000016c0)={0x6, 0x6b7c4a54, 0x4, 0xff, 0x0, 0x2, 0x4, 0x4}, &(0x7f0000001700)={0x9f1, 0x1, 0x8, 0x6, 0x4, 0x7fbd, 0xffffffffffffffb8, 0x3}, &(0x7f0000001740)={0x0, 0x989680}, &(0x7f00000017c0)={&(0x7f0000001780), 0x8}) (async) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000001800)="d5bddb932861fe0cdfe9e34df848bb3851c501ce81d937baee24c87dbc5805d0767d6394b4d66a4245aa3fd437666f146d5d5c331b8e5828ca2a251aa05ae336e0064784f21b402fd33ede737a01ac6727cdf7", 0x53) (async) write$cgroup_subtree(r3, &(0x7f0000001880)={[{0x2d, 'rlimit'}, {0x0, 'net_prio'}, {0x2b, 'perf_event'}]}, 0x1e) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f00000018c0)={0x3, 0x2, 0xffff}) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000001900)=0x5) 28.075669ms ago: executing program 3 (id=4171): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002300)=ANY=[@ANYBLOB="021002050500000026bd7000fbdbdf25010018000b0607"], 0x28}}, 0x44) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x74, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1c, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x15}, @flat=@handle={0x73682a85, 0x200, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}, @decrefs={0x40046307, 0x3}, @increfs_done={0x40106308, 0x1}, @free_buffer={0x40086303, r1}], 0x51, 0x0, &(0x7f0000000540)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff7a"}) 27.63906ms ago: executing program 2 (id=4172): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write(r4, &(0x7f0000000100)="97", 0x1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}]}}) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r8, 0x4068aea3, &(0x7f0000000040)={0x7b}) sendfile(r5, r0, 0x0, 0x80000000) 27.291989ms ago: executing program 3 (id=4173): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x9, 0x8, 0x3, 0x2}, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xfffffffffffffbff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x3, 0x1, 0x5000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0x800, 0x0, 0x22}, 0x18) preadv(r3, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000180)=""/184, 0xb8}], 0x2, 0x400, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) ioctl$PTP_PIN_GETFUNC2(r7, 0xc0603d0f, 0x0) r8 = socket(0x10, 0x6, 0x0) r9 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r9, 0x400, 0x1) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x800}]}) fsopen(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0xfa66}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRESOCT=r0, @ANYRES16=r10], 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x804) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) 0s ago: executing program 2 (id=4174): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000180)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ppoll(&(0x7f0000000040)=[{r1, 0x2100}, {r0, 0x74a02816d74a82b4}], 0x2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): t(1753346675.465:697): avc: denied { read } for pid=9703 comm="syz.0.2996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 227.396589][ T36] audit: type=1326 audit(1753346675.615:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.0.2999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fa0b8e9a9 code=0x0 [ 227.449827][ T36] audit: type=1326 audit(1753346675.675:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.0.2999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fa0b8e9a9 code=0x0 [ 227.574909][ T9730] __nla_validate_parse: 60 callbacks suppressed [ 227.574931][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3003'. [ 227.575165][ T9731] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3003'. [ 227.599843][ T9731] /dev/rnullb0: Can't open blockdev [ 227.699328][ T9748] fuse: Bad value for 'group_id' [ 227.704372][ T9748] fuse: Bad value for 'group_id' [ 227.733160][ T9755] fuse: Unknown parameter 'ÿÿÿÿ0x00000000000000070x000000000000000300000000000000000000' [ 228.179663][ T64] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 228.329599][ T64] usb 1-1: Using ep0 maxpacket: 16 [ 228.335841][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 228.347045][ T64] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 228.356420][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.365106][ T64] usb 1-1: config 0 descriptor?? [ 228.669604][ T8987] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 228.669616][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 228.772069][ T64] kye 0003:0458:5011.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 228.784992][ T64] kye 0003:0458:5011.0009: hidraw0: USB HID v1f.ff Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 228.798669][ T64] kye 0003:0458:5011.0009: tablet-enabling feature report not found [ 228.807029][ T64] kye 0003:0458:5011.0009: tablet enabling failed [ 229.122892][ T9775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.131457][ T9775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.587085][ T9799] rust_binder: 192: no such ref 0 [ 229.638408][ T9803] binder: Bad value for 'stats' [ 229.644181][ T9805] binder: Bad value for 'stats' [ 229.899407][ T452] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 230.050569][ T452] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 230.059394][ T452] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.069826][ T452] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 230.078876][ T452] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 230.089873][ T452] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.100826][ T452] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 230.109983][ T452] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 230.118112][ T452] usb 6-1: Product: syz [ 230.122319][ T452] usb 6-1: Manufacturer: syz [ 230.128692][ T452] cdc_wdm 6-1:1.0: skipping garbage [ 230.133965][ T452] cdc_wdm 6-1:1.0: skipping garbage [ 230.139763][ T452] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 230.145691][ T452] cdc_wdm 6-1:1.0: Unknown control protocol [ 230.331248][ T64] usb 6-1: USB disconnect, device number 12 [ 230.772760][ T9809] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.779955][ T9809] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.787013][ T9809] bridge_slave_0: entered allmulticast mode [ 230.793399][ T9809] bridge_slave_0: entered promiscuous mode [ 230.799954][ T9809] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.806995][ T9809] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.814097][ T9809] bridge_slave_1: entered allmulticast mode [ 230.820799][ T9809] bridge_slave_1: entered promiscuous mode [ 230.877195][ T9809] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.884306][ T9809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.891677][ T9809] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.898729][ T9809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.921415][ T2644] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.928924][ T2644] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.937073][ T64] usb 1-1: USB disconnect, device number 31 [ 230.952884][ T2641] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.960077][ T2641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.969835][ T2644] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.976923][ T2644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.004210][ T9809] veth0_vlan: entered promiscuous mode [ 231.017080][ T9809] veth1_macvtap: entered promiscuous mode [ 231.091893][ T9829] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3030'. [ 231.119434][ T452] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 231.182879][ T36] audit: type=1326 audit(1753346679.396:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9836 comm="syz.6.3033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e0718e9a9 code=0x0 [ 231.280339][ T452] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 231.284558][ T9838] fuse: Bad value for 'fd' [ 231.288662][ T452] usb 6-1: config 0 has no interface number 0 [ 231.299337][ T452] usb 6-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 231.312535][ T452] usb 6-1: New USB device found, idVendor=05ac, idProduct=8506, bcdDevice=9e.4e [ 231.321661][ T452] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.329796][ T452] usb 6-1: Product: syz [ 231.333972][ T452] usb 6-1: Manufacturer: syz [ 231.338565][ T452] usb 6-1: SerialNumber: syz [ 231.344057][ T452] usb 6-1: config 0 descriptor?? [ 231.552118][ T452] usb 6-1: Found UVC 0.00 device syz (05ac:8506) [ 231.558546][ T452] usb 6-1: No valid video chain found. [ 231.565317][ T452] usb 6-1: USB disconnect, device number 13 [ 232.036174][ T36] audit: type=1400 audit(1753346680.246:701): avc: denied { unmount } for pid=9809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 232.077233][ T9868] rust_binder: Write failure EFAULT in pid:572 [ 232.207627][ T9879] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 232.226729][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3049'. [ 232.261218][ T9884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:580 [ 232.342282][ T9895] /dev/loop0: Can't lookup blockdev [ 232.446627][ T9906] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 232.446658][ T9906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:592 [ 232.471910][ T9909] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3056'. [ 232.502282][ T9909] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3056'. [ 232.511780][ T9909] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 232.534493][ T9909] input: syz1 as /devices/virtual/input/input22 [ 232.543170][ T9909] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 61) [ 232.543198][ T9909] rust_binder: Error while translating object. [ 232.554454][ T9909] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 232.561284][ T9909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:596 [ 232.914757][ T36] audit: type=1400 audit(1753346681.126:702): avc: denied { write } for pid=9942 comm="syz.6.3067" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 232.915676][ T9943] rust_binder: 16: no such ref 0 [ 232.957757][ T9943] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 232.965142][ T9943] rust_binder: Write failure EINVAL in pid:16 [ 232.965596][ T9943] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 232.979130][ T9943] rust_binder: Write failure EINVAL in pid:16 [ 233.760727][ T9965] overlayfs: failed to clone upperpath [ 234.028922][ T452] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 234.178885][ T452] usb 7-1: Invalid ep0 maxpacket: 64 [ 234.308879][ T452] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 234.360412][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'. [ 234.369641][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'. [ 234.379066][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'. [ 234.388068][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'. [ 234.397073][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'. [ 234.406027][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'. [ 234.414977][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'. [ 234.416349][ T9986] 9pnet_fd: Insufficient options for proto=fd [ 234.424100][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'. [ 234.439136][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'. [ 234.448278][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'. [ 234.468838][ T452] usb 7-1: Invalid ep0 maxpacket: 64 [ 234.474885][ T452] usb usb7-port1: attempt power cycle [ 234.826208][ T452] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 234.859175][ T452] usb 7-1: Invalid ep0 maxpacket: 64 [ 234.988993][ T452] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 235.019118][ T452] usb 7-1: Invalid ep0 maxpacket: 64 [ 235.025770][ T452] usb usb7-port1: unable to enumerate USB device [ 235.083667][ T36] audit: type=1400 audit(1753346683.296:703): avc: denied { mounton } for pid=10006 comm="syz.0.3088" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 235.556915][T10062] x_tables: duplicate underflow at hook 1 [ 235.640179][T10079] fuse: Bad value for 'fd' [ 236.569023][ T36] audit: type=1400 audit(1753346684.786:704): avc: denied { create } for pid=10117 comm="syz.5.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 236.714149][T10133] rust_binder: Failed copying into alloc: EFAULT [ 236.714177][T10133] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 236.720795][T10133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 236.729154][T10133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:264 [ 236.932833][T10155] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=10155 comm=syz.4.3137 [ 237.090450][T10161] rust_binder: 10160 RLIMIT_NICE not set [ 237.091563][T10160] netlink: 'syz.6.3139': attribute type 11 has an invalid length. [ 237.126941][T10172] rust_binder: Error in use_page_slow: ESRCH [ 237.126967][T10172] rust_binder: use_range failure ESRCH [ 237.133141][T10172] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 237.138829][T10172] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 237.146674][T10172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:33 [ 237.409752][T10186] /dev/rnullb0: Can't open blockdev [ 237.491056][T10196] rust_binder: Read failure Err(EAGAIN) in pid:56 [ 237.510909][ T36] audit: type=1400 audit(1753346685.727:705): avc: denied { module_load } for pid=10197 comm="syz.6.3152" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 237.510939][T10198] Invalid ELF header len 16 [ 237.656589][T10201] veth0_vlan: entered allmulticast mode [ 237.680790][T10205] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10205 comm=syz.4.3155 [ 237.697146][ T36] audit: type=1400 audit(1753346685.917:706): avc: denied { listen } for pid=10206 comm="syz.6.3156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.763651][T10214] rust_binder: 642: no such ref 0 [ 237.769327][T10214] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 237.777088][T10214] rust_binder: Write failure EINVAL in pid:642 [ 237.777505][T10214] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 237.792816][T10214] rust_binder: Write failure EINVAL in pid:642 [ 237.811368][T10218] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 238.696963][ T36] audit: type=1326 audit(1753346686.907:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.6.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0718e9a9 code=0x7ffc0000 [ 238.726241][ T36] audit: type=1326 audit(1753346686.907:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.6.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0718e9a9 code=0x7ffc0000 [ 238.750570][ T36] audit: type=1326 audit(1753346686.907:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.6.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0718e9a9 code=0x7ffc0000 [ 238.774892][T10249] /dev/rnullb0: Can't open blockdev [ 238.779563][ T36] audit: type=1326 audit(1753346686.907:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.6.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e0718e9a9 code=0x7ffc0000 [ 238.818117][T10259] SELinux: security_context_str_to_sid () failed with errno=-22 [ 238.821514][ T36] audit: type=1326 audit(1753346686.907:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.6.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0718e9a9 code=0x7ffc0000 [ 238.853766][ T36] audit: type=1326 audit(1753346686.907:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.6.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0718e9a9 code=0x7ffc0000 [ 238.886217][ T36] audit: type=1326 audit(1753346686.907:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.6.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0718e9a9 code=0x7ffc0000 [ 238.986927][T10290] devpts: called with bogus options [ 239.534804][T10296] __nla_validate_parse: 47 callbacks suppressed [ 239.534821][T10296] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3184'. [ 239.637601][T10305] ./cgroup: Can't lookup blockdev [ 239.668927][T10310] rust_binder: Error while translating object. [ 239.668958][T10310] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 239.675153][T10310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:704 [ 239.698016][T10312] rust_binder: 707: no such ref 0 [ 239.712316][T10312] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 239.755708][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3195'. [ 239.858793][T10333] incfs: Options parsing error. -22 [ 239.864412][T10333] incfs: mount failed -22 [ 240.118171][ T64] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 240.218146][ T466] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 240.248155][ T64] usb 6-1: device descriptor read/64, error -71 [ 240.368133][ T466] usb 7-1: Using ep0 maxpacket: 16 [ 240.374438][ T466] usb 7-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 240.383770][ T466] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 240.393122][ T466] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.400326][T10352] overlayfs: failed to clone lowerpath [ 240.404334][ T466] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.419350][ T466] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 240.432526][ T466] usb 7-1: New USB device found, idVendor=045e, idProduct=06da, bcdDevice= 0.e7 [ 240.442314][ T466] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.454627][ T466] usb 7-1: config 0 descriptor?? [ 240.498109][ T64] usb 6-1: device descriptor read/64, error -71 [ 240.738092][ T64] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 240.870142][ T466] usbhid 7-1:0.0: can't add hid device: -71 [ 240.878237][ T64] usb 6-1: device descriptor read/64, error -71 [ 240.895404][ T466] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 240.907374][ T466] usb 7-1: USB disconnect, device number 6 [ 241.138022][ T64] usb 6-1: device descriptor read/64, error -71 [ 241.239019][T10385] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 241.239049][T10385] rust_binder: Error in use_page_slow: EBUSY [ 241.249649][ T64] usb usb6-port1: attempt power cycle [ 241.249706][T10385] rust_binder: use_range failure EBUSY [ 241.261216][T10385] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 241.266849][T10385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 241.274767][T10385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:720 [ 241.587995][ T64] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 241.623963][ T64] usb 6-1: device descriptor read/8, error -71 [ 241.758946][ T64] usb 6-1: device descriptor read/8, error -71 [ 241.997927][ T64] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 242.018977][ T64] usb 6-1: device descriptor read/8, error -71 [ 242.120117][T10408] binder: Bad value for 'defcontext' [ 242.149020][ T64] usb 6-1: device descriptor read/8, error -71 [ 242.212140][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 242.212163][ T36] audit: type=1400 audit(1753346690.427:751): avc: denied { write } for pid=10414 comm="syz.0.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 242.212845][T10416] devpts: called with bogus options [ 242.267993][ T64] usb usb6-port1: unable to enumerate USB device [ 242.289922][T10422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:733 [ 242.340771][ T2641] bridge_slave_1: left allmulticast mode [ 242.355855][ T2641] bridge_slave_1: left promiscuous mode [ 242.361867][ T2641] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.369581][ T2641] bridge_slave_0: left allmulticast mode [ 242.375322][ T2641] bridge_slave_0: left promiscuous mode [ 242.381055][ T2641] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.500638][ T2641] veth1_macvtap: left promiscuous mode [ 242.506162][ T2641] veth0_vlan: left promiscuous mode [ 242.567888][ T64] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 242.578767][T10429] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.585806][T10429] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.593109][T10429] bridge_slave_0: entered allmulticast mode [ 242.599923][T10429] bridge_slave_0: entered promiscuous mode [ 242.607005][T10429] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.614366][T10429] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.621525][T10429] bridge_slave_1: entered allmulticast mode [ 242.627880][T10429] bridge_slave_1: entered promiscuous mode [ 242.677007][T10429] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.684088][T10429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.691399][T10429] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.698464][T10429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.717816][ T64] usb 1-1: Using ep0 maxpacket: 8 [ 242.723191][ T2644] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.725812][ T64] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 242.737973][ T2644] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.738096][ T64] usb 1-1: can't read configurations, error -61 [ 242.754727][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.761821][ T3320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.771122][ T2644] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.778189][ T2644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.809218][T10429] veth0_vlan: entered promiscuous mode [ 242.824137][T10429] veth1_macvtap: entered promiscuous mode [ 242.874073][T10441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3237'. [ 242.888121][ T64] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 242.922837][T10445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:277 [ 243.115050][T10456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=10456 comm=syz.5.3242 [ 243.137272][T10456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=10456 comm=syz.5.3242 [ 243.150432][T10456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=10456 comm=syz.5.3242 [ 243.197929][ T64] usb 1-1: Using ep0 maxpacket: 8 [ 243.205328][ T64] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 243.213197][ T64] usb 1-1: can't read configurations, error -61 [ 243.219835][ T64] usb usb1-port1: attempt power cycle [ 243.351955][T10460] rust_binder: Error while translating object. [ 243.351988][T10460] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 243.358269][T10460] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:288 [ 243.557749][ T64] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 243.588117][ T64] usb 1-1: Using ep0 maxpacket: 8 [ 243.595398][ T64] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 243.603032][ T64] usb 1-1: can't read configurations, error -61 [ 243.737713][ T64] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 243.758181][ T64] usb 1-1: Using ep0 maxpacket: 8 [ 243.768024][ T64] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 243.775624][ T64] usb 1-1: can't read configurations, error -61 [ 243.778766][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3245'. [ 243.782202][ T64] usb usb1-port1: unable to enumerate USB device [ 243.811597][T10467] incfs: Can't find or create .index dir in ./bus [ 243.818472][T10467] incfs: mount failed -17 [ 244.139350][T10479] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3249'. [ 244.666383][T10481] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 244.707866][T10485] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=7166 sclass=netlink_xfrm_socket pid=10485 comm=syz.4.3251 [ 244.775521][T10494] incfs: Options parsing error. -22 [ 244.781032][T10494] incfs: mount failed -22 [ 244.797299][T10496] netlink: 'syz.4.3256': attribute type 4 has an invalid length. [ 244.859518][T10497] netlink: 'syz.4.3256': attribute type 4 has an invalid length. [ 244.869623][T10497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10497 comm=syz.4.3256 [ 244.997567][ T64] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 245.127542][ T64] usb 6-1: device descriptor read/64, error -71 [ 245.247169][T10524] netlink: 'syz.4.3266': attribute type 27 has an invalid length. [ 245.256880][ T36] audit: type=1326 audit(1753346693.467:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.4.3266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda2ad8e9a9 code=0x0 [ 245.356987][T10526] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3267'. [ 245.367519][ T64] usb 6-1: device descriptor read/64, error -71 [ 245.607493][ T64] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 245.747450][ T64] usb 6-1: device descriptor read/64, error -71 [ 245.987425][ T64] usb 6-1: device descriptor read/64, error -71 [ 246.097568][ T64] usb usb6-port1: attempt power cycle [ 246.437411][ T64] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 246.458489][ T64] usb 6-1: device descriptor read/8, error -71 [ 246.486671][ T36] audit: type=1400 audit(1753346694.698:753): avc: denied { map } for pid=10548 comm="syz.0.3275" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 246.510840][ T36] audit: type=1400 audit(1753346694.698:754): avc: denied { execute } for pid=10548 comm="syz.0.3275" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 246.521400][T10553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.543301][T10553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.588509][ T64] usb 6-1: device descriptor read/8, error -71 [ 246.621269][ T2641] Bluetooth: hci0: Frame reassembly failed (-84) [ 246.827341][ T64] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 246.848347][ T64] usb 6-1: device descriptor read/8, error -71 [ 246.978385][ T64] usb 6-1: device descriptor read/8, error -71 [ 247.087429][ T64] usb usb6-port1: unable to enumerate USB device [ 247.774876][T10559] rust_binder: inc_ref_done called when no active inc_refs [ 248.667129][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 248.667148][ T8987] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 248.857102][ T452] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 248.967131][ T9] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 248.987308][ T452] usb 6-1: device descriptor read/64, error -71 [ 249.117075][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 249.227182][ T452] usb 6-1: device descriptor read/64, error -71 [ 249.247158][ T9] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 249.360313][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3289'. [ 249.383089][T10586] overlay: Unknown parameter 'dont_appraise' [ 249.397024][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 249.402677][ T9] usb usb1-port1: attempt power cycle [ 249.467168][ T452] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 249.596971][ T452] usb 6-1: device descriptor read/64, error -71 [ 249.747005][ T9] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 249.767338][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 249.836946][ T452] usb 6-1: device descriptor read/64, error -71 [ 249.907009][ T9] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 249.927351][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 249.932802][ T9] usb usb1-port1: unable to enumerate USB device [ 249.947065][ T452] usb usb6-port1: attempt power cycle [ 250.286911][ T452] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 250.307980][ T452] usb 6-1: device descriptor read/8, error -71 [ 250.437896][ T452] usb 6-1: device descriptor read/8, error -71 [ 250.686895][ T452] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 250.707890][ T452] usb 6-1: device descriptor read/8, error -71 [ 250.838369][ T452] usb 6-1: device descriptor read/8, error -71 [ 250.947068][ T452] usb usb6-port1: unable to enumerate USB device [ 251.269508][T10638] 9pnet_fd: Insufficient options for proto=fd [ 251.381714][ T36] audit: type=1400 audit(1753346699.598:755): avc: denied { accept } for pid=10656 comm="syz.4.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 251.718269][T10669] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 251.797281][T10678] 9pnet_fd: Insufficient options for proto=fd [ 251.977276][T10697] /dev/loop0: Can't lookup blockdev [ 252.066700][ T8332] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 252.167292][T10726] random: crng reseeded on system resumption [ 252.167290][ T36] audit: type=1400 audit(1753346700.388:756): avc: denied { write } for pid=10725 comm="syz.0.3340" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 252.216684][ T8332] usb 6-1: Using ep0 maxpacket: 32 [ 252.223313][ T36] audit: type=1400 audit(1753346700.438:757): avc: denied { ioctl } for pid=10725 comm="syz.0.3340" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 252.250769][ T8332] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.258291][T10726] 9pnet: Could not find request transport: fD [ 252.262936][ T8332] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 252.277563][ T8332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.285567][ T8332] usb 6-1: Product: syz [ 252.289832][ T8332] usb 6-1: Manufacturer: syz [ 252.294442][ T8332] usb 6-1: SerialNumber: syz [ 252.303448][ T8332] usb 6-1: config 0 descriptor?? [ 252.309180][ T8332] usb 6-1: bad CDC descriptors [ 252.314179][ T8332] usb 6-1: unsupported MDLM descriptors [ 252.559169][T10746] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=10746 comm=syz.4.3346 [ 252.572979][T10746] incfs: Options parsing error. -22 [ 252.578474][T10746] incfs: mount failed -22 [ 252.604136][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3344'. [ 252.760492][ T8332] rust_binder: 10738: removing orphan mapping 0:1048 [ 253.357349][T10770] netlink: 'syz.4.3352': attribute type 4 has an invalid length. [ 253.368424][T10770] netlink: 'syz.4.3352': attribute type 4 has an invalid length. [ 253.380021][T10770] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 254.019262][T10785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10785 comm=syz.4.3358 [ 254.033597][T10785] batadv_slave_1: entered promiscuous mode [ 254.040756][T10784] batadv_slave_1: left promiscuous mode [ 254.086437][ T452] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 254.236424][ T452] usb 1-1: Using ep0 maxpacket: 32 [ 254.242970][ T452] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 58, changing to 9 [ 254.254485][ T452] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50453, setting to 1024 [ 254.266673][ T452] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 254.276746][ T452] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.290819][ T452] usb 1-1: config 0 descriptor?? [ 254.296292][T10777] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 254.309527][ T452] hub 1-1:0.0: USB hub found [ 254.516773][ T452] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 254.530826][ T452] usbhid 1-1:0.0: can't add hid device: -71 [ 254.537905][ T452] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 254.566866][ T452] usb 1-1: USB disconnect, device number 40 [ 254.907807][ T369] usb 6-1: USB disconnect, device number 26 [ 255.296112][T10828] SELinux: security_context_str_to_sid () failed with errno=-22 [ 255.507239][T10840] rust_binder: Error while translating object. [ 255.507280][T10840] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 255.523951][T10840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:842 [ 255.541466][ T2641] Bluetooth: hci0: Frame reassembly failed (-84) [ 256.345019][T10843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 256.345045][T10843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:845 [ 256.389807][T10847] rust_binder: 849: no such ref 1 [ 256.390312][T10848] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 256.394879][T10847] rust_binder: 849: no such ref 2 [ 256.394889][T10848] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 256.394906][T10848] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 256.401743][T10847] rust_binder: inc_ref_done called when no active inc_refs [ 257.408052][T10868] incfs: Can't find or create .index dir in ./cgroup [ 257.422102][T10868] incfs: mount failed -22 [ 257.546233][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 257.546311][ T8987] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 257.632787][T10879] rust_binder: 342: no such ref 1 [ 257.637909][T10879] rust_binder: 342: no such ref 2 [ 257.735942][T10881] rust_binder: 10880 RLIMIT_NICE not set [ 258.471622][ T452] rust_binder: 10878: removing orphan mapping 0:1048 [ 258.532776][T10891] /dev/rnullb0: Can't open blockdev [ 258.551397][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3395'. [ 258.561821][T10893] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 258.561852][T10893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:355 [ 258.591693][T10895] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3396'. [ 258.693410][T10906] input: syz1 as /devices/virtual/input/input26 [ 258.708870][T10899] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.719707][T10899] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.726857][T10899] bridge_slave_0: entered allmulticast mode [ 258.733108][T10899] bridge_slave_0: entered promiscuous mode [ 258.739540][T10899] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.746609][T10899] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.753725][T10899] bridge_slave_1: entered allmulticast mode [ 258.761099][T10899] bridge_slave_1: entered promiscuous mode [ 258.815770][T10899] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.822866][T10899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.830168][T10899] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.837241][T10899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.860701][ T2641] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.868225][ T2641] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.879234][ T2641] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.886294][ T2641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.896745][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.903844][ T3321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.932027][T10899] veth0_vlan: entered promiscuous mode [ 258.943335][T10899] veth1_macvtap: entered promiscuous mode [ 259.216073][ T452] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 259.338235][T10915] input: syz0 as /devices/virtual/input/input27 [ 259.345709][T10915] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 259.353092][T10915] rust_binder: 371: no such ref 3 [ 259.372415][T10917] batadv_slave_0: entered promiscuous mode [ 259.376579][ T452] usb 9-1: too many configurations: 50, using maximum allowed: 8 [ 259.387380][T10916] batadv_slave_0: left promiscuous mode [ 259.388427][ T452] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 259.400710][ T452] usb 9-1: can't read configurations, error -61 [ 259.484594][T10920] netlink: 'syz.5.3403': attribute type 30 has an invalid length. [ 259.536127][ T452] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 259.686509][ T452] usb 9-1: too many configurations: 50, using maximum allowed: 8 [ 259.695341][ T452] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 259.703062][ T452] usb 9-1: can't read configurations, error -61 [ 259.709790][ T452] usb usb9-port1: attempt power cycle [ 260.046061][ T452] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 260.066754][ T452] usb 9-1: too many configurations: 50, using maximum allowed: 8 [ 260.075599][ T452] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 260.083209][ T452] usb 9-1: can't read configurations, error -61 [ 260.216044][ T452] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 260.236758][ T452] usb 9-1: too many configurations: 50, using maximum allowed: 8 [ 260.245596][ T452] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 260.253265][ T452] usb 9-1: can't read configurations, error -61 [ 260.261315][ T452] usb usb9-port1: unable to enumerate USB device [ 260.341697][ T36] audit: type=1400 audit(1753346708.564:758): avc: denied { mounton } for pid=10927 comm="syz.5.3405" path="/126/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 260.589457][T10941] netlink: 'syz.5.3408': attribute type 16 has an invalid length. [ 260.874622][T10948] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 260.874649][T10948] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:402 [ 261.019622][T10956] /dev/loop0: Can't lookup blockdev [ 261.058166][ T36] audit: type=1400 audit(1753346709.284:759): avc: denied { listen } for pid=10959 comm="syz.5.3416" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 261.630343][T10978] binder: Bad value for 'stats' [ 261.936059][ T8332] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 261.986784][T10996] netlink: 'syz.8.3430': attribute type 46 has an invalid length. [ 262.008983][T10998] syz.8.3431(10998): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 262.052620][ T36] audit: type=1400 audit(1753346710.274:760): avc: denied { execstack } for pid=11001 comm="syz.8.3433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 262.060124][T11004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.081870][T11004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.096009][ T8332] usb 6-1: Using ep0 maxpacket: 32 [ 262.106403][ T8332] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.126034][ T8332] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.135900][ T8332] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 262.148829][ T8332] usb 6-1: config 0 interface 0 has no altsetting 0 [ 262.155456][ T8332] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 262.164597][ T8332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.176280][ T8332] usb 6-1: config 0 descriptor?? [ 262.396044][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 262.526040][ T9] usb 9-1: device descriptor read/64, error -71 [ 262.766056][ T9] usb 9-1: device descriptor read/64, error -71 [ 262.790549][ T8332] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0xd [ 262.799278][ T8332] hid-thrustmaster 0003:044F:B65D.000A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 262.811501][ T8332] hid-thrustmaster 0003:044F:B65D.000A: Wrong number of endpoints? [ 262.933961][T11024] overlayfs: failed to resolve './file1': -2 [ 262.992489][ C1] hid-thrustmaster 0003:044F:B65D.000A: URB to get model id failed with error -71 [ 263.003477][ T8332] usb 6-1: USB disconnect, device number 27 [ 263.006026][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 263.156061][ T9] usb 9-1: device descriptor read/64, error -71 [ 263.396025][ T9] usb 9-1: device descriptor read/64, error -71 [ 263.506167][ T9] usb usb9-port1: attempt power cycle [ 263.592410][T11051] incfs: Backing dir is not set, filesystem can't be mounted. [ 263.600045][T11051] incfs: mount failed -2 [ 263.846037][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 263.867150][ T9] usb 9-1: device descriptor read/8, error -71 [ 263.997242][ T9] usb 9-1: device descriptor read/8, error -71 [ 264.236020][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 264.257067][ T9] usb 9-1: device descriptor read/8, error -71 [ 264.286045][ T8332] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 264.397115][ T9] usb 9-1: device descriptor read/8, error -71 [ 264.416060][ T8332] usb 6-1: device descriptor read/64, error -71 [ 264.506332][ T9] usb usb9-port1: unable to enumerate USB device [ 264.656064][ T8332] usb 6-1: device descriptor read/64, error -71 [ 264.896055][ T8332] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 264.999274][T11070] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3455'. [ 265.026051][ T8332] usb 6-1: device descriptor read/64, error -71 [ 265.237773][T11080] overlayfs: overlapping lowerdir path [ 265.276039][ T8332] usb 6-1: device descriptor read/64, error -71 [ 265.351396][ T36] audit: type=1400 audit(1753346713.574:761): avc: denied { create } for pid=11087 comm="syz.8.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 265.388296][ T8332] usb usb6-port1: attempt power cycle [ 265.563630][T11103] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3468'. [ 265.565012][T11105] fuse: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿË*Æ' [ 265.573289][T11103] binder: Unknown parameter '18446744073709551615' [ 265.726073][ T8332] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 265.747150][ T8332] usb 6-1: device descriptor read/8, error -71 [ 265.887243][ T8332] usb 6-1: device descriptor read/8, error -71 [ 265.996040][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 266.126025][ T8332] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 266.147131][ T8332] usb 6-1: device descriptor read/8, error -71 [ 266.147225][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.163523][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 266.172565][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 266.187195][ T10] usb 9-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 266.196388][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.204445][ T10] usb 9-1: Product: syz [ 266.208956][ T10] usb 9-1: Manufacturer: syz [ 266.213617][ T10] usb 9-1: SerialNumber: syz [ 266.219377][ T10] usb 9-1: config 0 descriptor?? [ 266.227536][ T10] usb 9-1: Found UVC 34.00 device syz (8086:0b5b) [ 266.234112][ T10] usb 9-1: No valid video chain found. [ 266.277063][ T8332] usb 6-1: device descriptor read/8, error -71 [ 266.386196][ T8332] usb usb6-port1: unable to enumerate USB device [ 266.427575][ T8332] usb 9-1: USB disconnect, device number 10 [ 266.819117][T11156] overlayfs: failed to clone upperpath [ 266.954809][T11168] /dev/sg0: Can't lookup blockdev [ 266.962080][T11168] input: syz0 as /devices/virtual/input/input28 [ 267.446019][ T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 267.597095][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.607272][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.616950][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 267.626035][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 267.634026][ T10] usb 6-1: SerialNumber: syz [ 267.941953][ T36] audit: type=1400 audit(1753346716.164:762): avc: denied { relabelfrom } for pid=11191 comm="syz.8.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 267.962181][ T36] audit: type=1400 audit(1753346716.164:763): avc: denied { relabelto } for pid=11191 comm="syz.8.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 268.072316][ T36] audit: type=1400 audit(1753346716.294:764): avc: denied { setattr } for pid=11199 comm="syz.8.3502" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 268.108209][T11204] binder: Unknown parameter 'f¨' [ 268.423084][ T10] usb 6-1: 0:2 : does not exist [ 268.434726][ T10] usb 6-1: unit 5 not found! [ 268.456927][ T10] usb 6-1: USB disconnect, device number 32 [ 268.523669][ T8553] udevd[8553]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 268.926606][T11224] fuse: Bad value for 'fd' [ 269.016223][T11229] fuseblk: Unknown parameter 'fÃ' [ 269.356026][ T36] audit: type=1400 audit(1753346717.574:765): avc: denied { name_bind } for pid=11234 comm="syz.0.3514" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 269.407071][T11237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3515'. [ 269.668761][T11266] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 269.677962][T11266] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 269.686893][T11266] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 270.030645][T11276] overlayfs: conflicting options: metacopy=off,verity=on [ 270.096843][T11280] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.103904][T11280] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.111313][T11280] bridge_slave_0: entered allmulticast mode [ 270.117673][T11280] bridge_slave_0: entered promiscuous mode [ 270.124140][T11280] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.131267][T11280] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.138399][T11280] bridge_slave_1: entered allmulticast mode [ 270.144733][T11280] bridge_slave_1: entered promiscuous mode [ 270.197428][T11280] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.204747][T11280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.212060][T11280] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.219117][T11280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.240807][ T2641] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.248499][ T2641] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.259445][ T2641] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.266513][ T2641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.275588][ T2644] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.282677][ T2644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.311539][T11280] veth0_vlan: entered promiscuous mode [ 270.322832][T11280] veth1_macvtap: entered promiscuous mode [ 270.846016][ T8332] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 270.996027][ T8332] usb 9-1: Using ep0 maxpacket: 16 [ 271.002223][ T8332] usb 9-1: config 0 has no interfaces? [ 271.009255][ T8332] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 271.018330][ T8332] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.026524][ T8332] usb 9-1: Product: syz [ 271.030901][ T8332] usb 9-1: Manufacturer: syz [ 271.035501][ T8332] usb 9-1: SerialNumber: syz [ 271.041021][ T8332] usb 9-1: config 0 descriptor?? [ 271.248643][ T10] usb 9-1: USB disconnect, device number 11 [ 271.251471][T11314] binder: Unknown parameter 'dont_hash' [ 272.312554][T11347] kvm: kvm [11346]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x2000000000ee [ 272.323237][T11347] binder: Unknown parameter 'defcontextù' [ 272.431600][T11350] rust_binder: 11349 RLIMIT_NICE not set [ 272.464265][T11354] rust_binder: Error while translating object. [ 272.469989][T11354] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 272.476409][T11354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:27 [ 272.736008][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 272.896003][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 272.902749][ T10] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 272.912463][ T10] usb 10-1: config 1 has no interface number 0 [ 272.918689][ T10] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 272.928775][ T10] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 272.938917][ T10] usb 10-1: config 1 interface 105 has no altsetting 0 [ 272.947661][ T10] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 272.956932][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.965019][ T10] usb 10-1: Product: syz [ 272.969320][ T10] usb 10-1: Manufacturer: syz [ 272.974009][ T10] usb 10-1: SerialNumber: syz [ 272.979887][T11356] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 272.987235][T11356] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 273.395019][T11356] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 273.402472][T11356] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 273.800617][T11370] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3564'. [ 273.811979][ T10] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 273.824548][ T10] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 273.837387][ T10] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 273.850782][ T10] aqc111 10-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ee:ed:0c:d3:52:40 [ 273.871451][ T10] usb 10-1: USB disconnect, device number 2 [ 273.879499][ T10] aqc111 10-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 273.920814][ T10] aqc111 10-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 273.936025][ T10] aqc111 10-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 273.955749][ T10] aqc111 10-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 274.409295][T11409] sock: sock_set_timeout: `syz.9.3568' (pid 11409) tries to set negative timeout [ 274.656025][ T466] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 274.806017][ T466] usb 10-1: Using ep0 maxpacket: 16 [ 274.810961][T11423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11423 comm=syz.8.3573 [ 274.812532][ T466] usb 10-1: config index 0 descriptor too short (expected 61845, got 153) [ 274.833156][ T466] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 274.842467][ T466] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 274.846817][T11425] binder: Unknown parameter '' [ 274.853624][ T466] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.871208][ T466] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 274.883101][ T466] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.892571][ T466] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.904031][ T466] usb 10-1: Product: syz [ 274.909875][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 274.913084][ T466] usb 10-1: Manufacturer: syz [ 274.922237][ T466] usb 10-1: SerialNumber: syz [ 274.926116][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 274.935708][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 274.943289][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 274.950737][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 274.958172][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 274.965598][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 274.973041][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 274.980469][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 274.988322][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 274.995821][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.003355][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.010794][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.018328][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.025726][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.033148][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.040571][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.048080][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.056022][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.063427][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.071050][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.078494][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.085890][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.093331][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.100742][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.108388][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.115793][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.123847][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.131278][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.132072][T11435] 9pnet_fd: p9_fd_create_unix (11435): problem connecting socket: ./file0: -111 [ 275.138884][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.149941][T11408] rust_binder: Write failure EINVAL in pid:32 [ 275.161900][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.176850][ T466] usb 10-1: USB disconnect, device number 3 [ 275.177025][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.196079][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.208979][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.216520][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.224060][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.231581][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.240911][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.243537][ T36] audit: type=1400 audit(1753346723.464:766): avc: denied { module_load } for pid=11444 comm="syz.0.3581" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=46816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 275.250099][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.281919][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.289529][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.297129][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.304898][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.312817][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.320366][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.327937][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.335368][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.342845][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.350288][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.357799][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.365213][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.372794][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.380241][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.387731][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.395139][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.402647][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.410090][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.417612][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.425040][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.432521][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.439964][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.450494][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.457964][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.465659][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.479386][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.487640][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.495119][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.502611][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.510205][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.517681][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.525163][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.532615][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.540076][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.547899][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.555304][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.562810][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.570246][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.577655][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.585044][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.592466][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.599893][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.607313][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.614801][ T9] hid-generic 0000:0002:0000.000B: unknown main item tag 0x0 [ 275.622864][ T9] hid-generic 0000:0002:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 275.644466][T11465] fido_id[11465]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 275.680504][ T36] audit: type=1400 audit(1753346723.904:767): avc: denied { read write } for pid=11468 comm="syz.8.3590" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 275.704156][ T36] audit: type=1400 audit(1753346723.904:768): avc: denied { open } for pid=11468 comm="syz.8.3590" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 275.833268][ T36] audit: type=1400 audit(1753346724.054:769): avc: denied { ioctl } for pid=11481 comm="syz.8.3595" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 275.884415][T11483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:125 [ 276.284224][T11493] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 276.691804][ T36] audit: type=1400 audit(1753346724.914:770): avc: denied { map } for pid=11500 comm="syz.8.3602" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 276.722942][ T36] audit: type=1400 audit(1753346724.914:771): avc: denied { execute } for pid=11500 comm="syz.8.3602" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 276.754106][ T36] audit: type=1400 audit(1753346724.974:772): avc: denied { append } for pid=11503 comm="syz.8.3603" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 276.937984][T11526] rust_binder: Error while translating object. [ 276.938021][T11526] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 276.944501][T11526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:57 [ 276.972161][T11533] netlink: 'syz.9.3613': attribute type 12 has an invalid length. [ 277.012090][ T36] audit: type=1400 audit(1753346725.234:773): avc: denied { append } for pid=11540 comm="syz.9.3616" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 277.015847][T11541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.035643][T11541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.042466][T11541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.053070][T11541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.059854][ T45] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 277.077485][T11541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.077515][T11541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.084002][T11541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.247056][ T45] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.265119][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 277.276116][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8240, setting to 1024 [ 277.287191][ T45] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.300388][ T45] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.309694][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.323289][ T45] usb 9-1: config 0 descriptor?? [ 277.394079][ T36] audit: type=1400 audit(1753346725.614:774): avc: denied { sys_module } for pid=11565 comm="syz.9.3623" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 277.530494][ T45] usbhid 9-1:0.0: can't add hid device: -32 [ 277.537403][ T45] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 277.730054][ T10] usb 9-1: USB disconnect, device number 12 [ 277.813774][T11587] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 278.001779][T11591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11591 comm=syz.0.3630 [ 278.038423][T11599] overlayfs: failed to clone upperpath [ 278.280286][T11620] /dev/rnullb0: Can't open blockdev [ 278.297466][ T36] audit: type=1400 audit(1753346726.524:775): avc: denied { ioctl } for pid=11621 comm="syz.8.3639" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 278.424847][T11633] fuse: Bad value for 'fd' [ 278.441157][T11638] /dev/rnullb0: Can't open blockdev [ 278.659141][T11669] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3654'. [ 278.764247][T11680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 278.765236][T11680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 278.772333][T11680] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 278.787805][T11681] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 278.797942][T11681] syz.9.3658 (11681): /proc/11679/oom_adj is deprecated, please use /proc/11679/oom_score_adj instead. [ 278.842994][T11691] netlink: 300 bytes leftover after parsing attributes in process `syz.9.3660'. [ 278.852282][T11692] netlink: 300 bytes leftover after parsing attributes in process `syz.9.3660'. [ 278.906064][ T306] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 279.036010][ T306] usb 9-1: device descriptor read/64, error -71 [ 279.276026][ T306] usb 9-1: device descriptor read/64, error -71 [ 279.326060][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 279.476001][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 279.482259][ T9] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 279.490390][ T9] usb 10-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 279.501023][ T9] usb 10-1: config 0 has no interface number 0 [ 279.508763][ T9] usb 10-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice=4d.ad [ 279.518496][ T306] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 279.526005][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.534186][ T9] usb 10-1: Product: syz [ 279.538555][ T9] usb 10-1: Manufacturer: syz [ 279.543285][ T9] usb 10-1: SerialNumber: syz [ 279.549049][ T9] usb 10-1: config 0 descriptor?? [ 279.676021][ T306] usb 9-1: device descriptor read/64, error -71 [ 279.763120][ T9] snd-usb-audio 10-1:0.8: probe with driver snd-usb-audio failed with error -2 [ 279.772903][ T9] usb 10-1: USB disconnect, device number 4 [ 279.780947][ T8553] udevd[8553]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 279.916009][ T306] usb 9-1: device descriptor read/64, error -71 [ 280.026188][ T306] usb usb9-port1: attempt power cycle [ 280.376001][ T306] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 280.397130][ T306] usb 9-1: device descriptor read/8, error -71 [ 280.527085][ T306] usb 9-1: device descriptor read/8, error -71 [ 280.545995][ T10] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 280.696714][ T10] usb 10-1: not running at top speed; connect to a high speed hub [ 280.705298][ T10] usb 10-1: config 92 has an invalid interface number: 146 but max is 0 [ 280.714098][ T10] usb 10-1: config 92 contains an unexpected descriptor of type 0x1, skipping [ 280.723179][ T10] usb 10-1: config 92 has no interface number 0 [ 280.729598][ T10] usb 10-1: config 92 interface 146 has no altsetting 0 [ 280.740157][ T10] usb 10-1: New USB device found, idVendor=0421, idProduct=0178, bcdDevice=a4.0a [ 280.750535][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.758802][ T10] usb 10-1: Product: syz [ 280.763147][ T10] usb 10-1: Manufacturer: syz [ 280.768046][ T306] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 280.779418][ T10] usb 10-1: SerialNumber: syz [ 280.797123][ T306] usb 9-1: device descriptor read/8, error -71 [ 280.829624][T11735] sit0: entered promiscuous mode [ 280.836213][T11735] netlink: 'syz.0.3675': attribute type 1 has an invalid length. [ 280.844416][T11735] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3675'. [ 280.926918][ T306] usb 9-1: device descriptor read/8, error -71 [ 280.988168][ T10] rndis_host 10-1:92.146: invalid descriptor buffer length [ 280.995481][ T10] usb 10-1: bad CDC descriptors [ 281.000623][ T10] cdc_acm 10-1:92.146: invalid descriptor buffer length [ 281.010367][ T10] usb 10-1: USB disconnect, device number 5 [ 281.036169][ T306] usb usb9-port1: unable to enumerate USB device [ 281.518908][T11746] sock: sock_timestamping_bind_phc: sock not bind to device [ 281.607726][T11748] binder: Bad value for 'max' [ 281.710225][T11760] binder: Unknown parameter 'defcontext01777777777777777777777' [ 281.905478][T11774] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 281.912807][T11774] rust_binder: 180: no such ref 0 [ 281.918127][T11774] rust_binder: 180: no such ref 3 [ 282.012470][T11783] cgroup: none used incorrectly [ 282.017959][T11783] cgroup: none used incorrectly [ 282.022984][T11783] cgroup: none used incorrectly [ 282.028660][T11783] cgroup: none used incorrectly [ 282.033644][T11783] cgroup: none used incorrectly [ 282.038864][T11783] cgroup: none used incorrectly [ 282.044307][T11783] cgroup: none used incorrectly [ 282.050600][T11783] cgroup: none used incorrectly [ 282.817341][T11804] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 282.933384][T11817] netlink: 'syz.9.3700': attribute type 4 has an invalid length. [ 282.942122][T11817] netlink: 3581 bytes leftover after parsing attributes in process `syz.9.3700'. [ 282.958009][T11817] input: syz1 as /devices/virtual/input/input30 [ 283.206013][ T466] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 283.355990][ T466] usb 10-1: Using ep0 maxpacket: 16 [ 283.362347][ T466] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.373386][ T466] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 283.386387][ T466] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 283.395704][ T466] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.404633][ T466] usb 10-1: config 0 descriptor?? [ 283.813328][ T466] HID 045e:07da: Invalid code 65791 type 1 [ 283.826854][ T466] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.000C/input/input31 [ 283.831307][T11824] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3703'. [ 283.862382][ T466] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 283.899358][T11831] /dev/loop0: Can't lookup blockdev [ 284.114388][T11833] fuseblk: Unknown parameter '€' [ 284.132561][T11835] netlink: 'syz.0.3707': attribute type 13 has an invalid length. [ 284.140557][ T306] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 284.148223][T11835] erspan0: refused to change device tx_queue_len [ 284.278640][T11844] 9pnet_fd: Insufficient options for proto=fd [ 284.279178][T11843] 9pnet_fd: Insufficient options for proto=fd [ 284.297158][ T306] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.309460][ T306] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.310699][T11847] netlink: 'syz.0.3711': attribute type 11 has an invalid length. [ 284.319282][ T306] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 284.340674][ T306] usb 9-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 284.349863][ T306] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.358777][ T306] usb 9-1: config 0 descriptor?? [ 284.615118][ T9] usb 10-1: USB disconnect, device number 6 [ 284.766760][ T306] elecom 0003:056E:00FD.000D: unknown main item tag 0x0 [ 284.774241][ T306] elecom 0003:056E:00FD.000D: unknown main item tag 0x0 [ 284.782079][ T306] elecom 0003:056E:00FD.000D: hidraw0: USB HID v0.00 Device [HID 056e:00fd] on usb-dummy_hcd.8-1/input0 [ 284.978360][ T45] usb 9-1: USB disconnect, device number 17 [ 285.008860][T11862] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.016082][T11862] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.023157][T11862] bridge_slave_0: entered allmulticast mode [ 285.029555][T11862] bridge_slave_0: entered promiscuous mode [ 285.036068][T11862] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.043122][T11862] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.050283][T11862] bridge_slave_1: entered allmulticast mode [ 285.056734][T11862] bridge_slave_1: entered promiscuous mode [ 285.108372][T11862] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.115509][T11862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.123018][T11862] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.130277][T11862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.159534][ T2641] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.167433][ T2641] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.180374][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.187459][ T3321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.198182][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.205375][ T3321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.232642][T11862] veth0_vlan: entered promiscuous mode [ 285.243661][T11862] veth1_macvtap: entered promiscuous mode [ 285.279598][T11872] binder: Unknown parameter 'euid<00000000000000000000' [ 285.287461][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 285.287476][ T36] audit: type=1326 audit(1753346733.566:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.3.3714" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef6c78e9a9 code=0x0 [ 285.338469][ T36] audit: type=1400 audit(1753346733.616:778): avc: denied { setattr } for pid=11871 comm="syz.3.3714" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.446059][ T45] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 285.488864][T11876] overlayfs: failed to clone lowerpath [ 285.593673][T11901] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3726'. [ 285.603657][ T36] audit: type=1400 audit(1753346733.876:779): avc: denied { shutdown } for pid=11900 comm="syz.8.3726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 285.626305][ T45] usb 10-1: Using ep0 maxpacket: 8 [ 285.632899][ T45] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 285.645464][ T45] usb 10-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 285.654897][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.666083][ T45] usb 10-1: config 0 descriptor?? [ 285.716336][ T36] audit: type=1400 audit(1753346733.996:780): avc: denied { setattr } for pid=11906 comm="syz.8.3729" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 285.751056][ T36] audit: type=1400 audit(1753346734.026:781): avc: denied { create } for pid=11908 comm="syz.8.3730" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 285.751461][T11909] incfs: Options parsing error. -22 [ 285.772068][ T36] audit: type=1400 audit(1753346734.026:782): avc: denied { mounton } for pid=11908 comm="syz.8.3730" path="/file0" dev="tmpfs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 285.778884][T11909] incfs: mount failed -22 [ 285.837156][T11913] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3732'. [ 285.875055][ T45] smartjoyplus 0003:6666:8802.000E: hidraw0: USB HID v0.03 Device [HID 6666:8802] on usb-dummy_hcd.9-1/input0 [ 285.888004][ T45] smartjoyplus 0003:6666:8802.000E: no output reports found [ 285.999662][T11924] /dev/rnullb0: Can't open blockdev [ 286.050433][T11928] fuseblk: Unknown parameter 'þÿ' [ 286.067507][T11930] netlink: 'syz.0.3737': attribute type 4 has an invalid length. [ 286.075297][T11930] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3737'. [ 286.076151][T11870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.093059][T11870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.225738][T11943] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 286.236182][T11943] rust_binder: 6: no such ref 2 [ 286.241174][T11943] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 286.256036][ T45] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 286.307480][T11951] rust_binder: 11949 RLIMIT_NICE not set [ 286.416028][ T45] usb 9-1: Using ep0 maxpacket: 32 [ 286.427944][ T45] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 286.436488][ T45] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 286.445230][ T45] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 286.454416][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 286.464264][ T45] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 286.474246][ T45] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 286.487753][ T45] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 286.496826][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.505434][ T45] usb 9-1: config 0 descriptor?? [ 286.712674][ T45] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 286.725152][ T45] usb 9-1: USB disconnect, device number 18 [ 286.731895][ T45] usblp0: removed [ 286.850000][T11960] overlayfs: failed to resolve '/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -2 [ 286.927929][T11970] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 287.138436][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3753'. [ 287.148319][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3753'. [ 287.157739][ T45] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 287.316013][ T45] usb 9-1: Using ep0 maxpacket: 32 [ 287.322628][ T45] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 287.331011][ T45] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 287.339679][ T45] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 287.349037][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 287.359114][ T45] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 287.368952][ T45] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 287.382985][ T45] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 287.392217][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.401071][ T45] usb 9-1: config 0 descriptor?? [ 287.607661][ T45] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 287.620755][ T45] usb 9-1: USB disconnect, device number 19 [ 287.627748][ T45] usblp0: removed [ 287.774258][T12012] binder: Unknown parameter 'defcontext01777777777777777777777' [ 287.810428][T12019] rust_binder: 36: no such ref 2 [ 287.815458][T12019] rust_binder: Write failure EFAULT in pid:36 [ 287.885747][T12027] rust_binder: 44: no such ref 1 [ 287.897007][T12027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:44 [ 287.948702][T12028] rust_binder: 12027 RLIMIT_NICE not set [ 287.963139][ T45] rust_binder: 12026: removing orphan mapping 0:1048 [ 288.082930][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3775'. [ 288.143985][T12046] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 288.144014][T12046] rust_binder: Error in use_page_slow: EBUSY [ 288.154453][T12046] rust_binder: use_range failure EBUSY [ 288.161190][T12046] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 288.166692][T12046] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 288.174523][T12046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:61 [ 288.193971][ T9] usb 10-1: USB disconnect, device number 7 [ 288.291887][T12048] /dev/rnullb0: Can't open blockdev [ 288.306546][T12058] overlay: Bad value for 'redirect_dir' [ 288.345650][T12066] can: request_module (can-proto-7) failed. [ 288.353894][T12066] incfs: Options parsing error. -22 [ 288.359477][T12066] incfs: mount failed -22 [ 288.379485][T12070] netlink: 'syz.0.3784': attribute type 4 has an invalid length. [ 288.389272][T12070] netlink: 'syz.0.3784': attribute type 4 has an invalid length. [ 288.427458][T12074] overlayfs: failed to clone upperpath [ 288.529690][T12091] overlayfs: failed to clone upperpath [ 288.547818][T12093] veth0_to_hsr: entered allmulticast mode [ 288.554980][T12092] veth0_to_hsr: left allmulticast mode [ 288.572004][T12095] overlayfs: failed to clone upperpath [ 288.797406][T12112] 9pnet_fd: Insufficient options for proto=fd [ 288.907199][T12112] /dev/loop0: Can't lookup blockdev [ 288.967245][ T36] audit: type=1400 audit(1753346737.236:783): avc: denied { write } for pid=12125 comm="syz.9.3805" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 289.009512][ T36] audit: type=1400 audit(1753346737.286:784): avc: denied { append } for pid=12125 comm="syz.9.3805" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 289.009982][T12133] netlink: 'syz.0.3808': attribute type 4 has an invalid length. [ 289.061348][T12133] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3808'. [ 289.072918][T12135] binder: Bad value for 'stats' [ 289.126221][T12142] overlay: Unknown parameter 'dont_appraise' [ 289.175634][T12156] /dev/rnullb0: Can't open blockdev [ 289.206019][ T342] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 289.367088][ T342] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 289.376357][ T342] usb 4-1: config 1 has no interface number 1 [ 289.382605][ T342] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 289.407151][ T342] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.416516][ T342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.424554][ T342] usb 4-1: Product: syz [ 289.429042][ T342] usb 4-1: Manufacturer: syz [ 289.433661][ T342] usb 4-1: SerialNumber: syz [ 289.551336][T12163] veth0_to_team: entered promiscuous mode [ 289.645077][ T342] usb 4-1: found format II with max.bitrate = 26774, frame size=1 [ 289.656388][ T342] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 289.678302][ T342] usb 4-1: USB disconnect, device number 20 [ 289.698904][ T8553] udevd[8553]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 289.786117][ T306] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 289.937448][ T306] usb 10-1: unable to get BOS descriptor or descriptor too short [ 289.946491][ T306] usb 10-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.956393][ T306] usb 10-1: config 1 interface 0 has no altsetting 0 [ 289.964597][ T306] usb 10-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 289.973782][ T306] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.981904][ T306] usb 10-1: Product: syz [ 289.986183][ T306] usb 10-1: Manufacturer: syz [ 289.991220][ T306] usb 10-1: SerialNumber: syz [ 290.202326][ T306] usbhid 10-1:1.0: can't add hid device: -71 [ 290.208471][ T306] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 290.217418][ T306] usb 10-1: USB disconnect, device number 8 [ 290.259351][T12191] binder: Bad value for 'stats' [ 290.823675][ T36] audit: type=1400 audit(1753346739.096:785): avc: denied { map } for pid=12211 comm="syz.9.3836" path="socket:[50499]" dev="sockfs" ino=50499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 291.256020][ T369] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 291.399323][T12226] rust_binder: Write failure EFAULT in pid:239 [ 291.417007][ T369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.448860][ T369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.469537][ T369] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 291.485010][ T369] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.494568][ T369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.524992][ T369] usb 4-1: config 0 descriptor?? [ 291.946002][ T452] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 292.095973][ T452] usb 9-1: Using ep0 maxpacket: 8 [ 292.103852][ T452] usb 9-1: config 0 has an invalid interface number: 151 but max is 1 [ 292.113540][ T452] usb 9-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config [ 292.124709][ T452] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 292.133841][ T452] usb 9-1: config 0 has no interface number 0 [ 292.140106][ T452] usb 9-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.154957][ T452] usb 9-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 292.164731][ T452] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.173332][ T452] usb 9-1: Product: syz [ 292.177630][ T452] usb 9-1: Manufacturer: syz [ 292.182260][ T452] usb 9-1: SerialNumber: syz [ 292.187968][ T452] usb 9-1: config 0 descriptor?? [ 292.195736][ T452] snd-usb-audio 9-1:0.151: probe with driver snd-usb-audio failed with error -2 [ 292.210510][ T8553] udevd[8553]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 292.399600][T12234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.408310][T12234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.444988][ T452] usb 9-1: USB disconnect, device number 20 [ 292.695767][ T36] audit: type=1400 audit(1753346740.966:786): avc: denied { rename } for pid=12283 comm="syz.0.3861" name="file0" dev="tmpfs" ino=2745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 292.728567][T12286] netlink: 'syz.0.3862': attribute type 28 has an invalid length. [ 292.968336][T12301] usb usb1: usbfs: process 12301 (syz.8.3866) did not claim interface 0 before use [ 293.027216][ T36] audit: type=1326 audit(1753346741.306:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12320 comm="syz.8.3872" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ff198e9a9 code=0x0 [ 293.326002][ T306] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 293.356009][ T45] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 293.477035][ T306] usb 9-1: config 0 has an invalid interface number: 5 but max is 0 [ 293.487338][ T306] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.497493][ T306] usb 9-1: config 0 has no interface number 0 [ 293.503711][ T306] usb 9-1: New USB device found, idVendor=152e, idProduct=30ca, bcdDevice=ae.11 [ 293.512839][ T306] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.517185][ T45] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.522145][ T306] usb 9-1: config 0 descriptor?? [ 293.531712][ T45] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.542516][ T306] usb 9-1: MIDIStreaming interface descriptor not found [ 293.547282][ T45] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 293.566059][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 293.574284][ T45] usb 10-1: SerialNumber: syz [ 294.018804][ T369] usbhid 4-1:0.0: can't add hid device: -71 [ 294.024980][ T369] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 294.045016][ T369] usb 4-1: USB disconnect, device number 21 [ 294.280034][ T8332] usb 9-1: USB disconnect, device number 21 [ 294.296817][ T45] usb 10-1: 0:2 : does not exist [ 294.320091][ T45] usb 10-1: USB disconnect, device number 9 [ 294.439503][T12375] netlink: 'syz.0.3888': attribute type 4 has an invalid length. [ 294.447634][T12373] netlink: 'syz.0.3888': attribute type 4 has an invalid length. [ 294.456654][T12373] netlink: 'syz.0.3888': attribute type 4 has an invalid length. [ 294.464490][T12373] netlink: 'syz.0.3888': attribute type 4 has an invalid length. [ 294.472901][T12373] netlink: 'syz.0.3888': attribute type 4 has an invalid length. [ 294.481284][T12373] netlink: 'syz.0.3888': attribute type 4 has an invalid length. [ 294.489200][T12373] netlink: 'syz.0.3888': attribute type 4 has an invalid length. [ 294.497157][T12373] netlink: 'syz.0.3888': attribute type 4 has an invalid length. [ 294.505080][T12373] netlink: 'syz.0.3888': attribute type 4 has an invalid length. [ 294.512969][T12373] netlink: 'syz.0.3888': attribute type 4 has an invalid length. [ 295.030696][T12400] fuseblk: Bad value for 'group_id' [ 295.036162][T12400] fuseblk: Bad value for 'group_id' [ 295.179825][ T36] audit: type=1400 audit(1753346743.426:788): avc: denied { setattr } for pid=12404 comm="syz.8.3898" name="IEEE-802.15.4-MAC" dev="sockfs" ino=51711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 295.783983][T12432] rust_binder: 92: no such ref 0 [ 295.876604][T12440] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 295.987547][ T3321] bridge_slave_1: left allmulticast mode [ 295.993311][ T3321] bridge_slave_1: left promiscuous mode [ 295.999042][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.007064][ T3321] bridge_slave_0: left allmulticast mode [ 296.012831][ T3321] bridge_slave_0: left promiscuous mode [ 296.018671][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.143896][T12442] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.151737][T12442] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.159188][T12442] bridge_slave_0: entered allmulticast mode [ 296.165788][T12442] bridge_slave_0: entered promiscuous mode [ 296.173598][ T3321] veth1_macvtap: left promiscuous mode [ 296.179228][ T3321] veth0_vlan: left promiscuous mode [ 296.227650][T12442] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.234754][T12442] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.241936][T12442] bridge_slave_1: entered allmulticast mode [ 296.248599][T12442] bridge_slave_1: entered promiscuous mode [ 296.304413][T12442] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.311484][T12442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.318913][T12442] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.326064][T12442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.356726][ T2644] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.364276][ T2644] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.375039][ T2641] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.382127][ T2641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.393963][ T2641] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.401061][ T2641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.409539][T12452] /dev/rnullb0: Can't open blockdev [ 296.435604][T12442] veth0_vlan: entered promiscuous mode [ 296.448627][T12442] veth1_macvtap: entered promiscuous mode [ 297.174819][T12543] binder: Bad value for 'defcontext' [ 297.261550][T12547] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 297.293442][ T36] audit: type=1400 audit(1753346745.566:789): avc: denied { create } for pid=12546 comm="syz.3.3946" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 297.294044][T12547] devtmpfs: Unknown parameter 'so„rc:-2|CòÍû~e' [ 297.375148][T12552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117 [ 297.401575][T12553] input: syz0 as /devices/virtual/input/input33 [ 297.446219][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3949'. [ 297.700099][ T36] audit: type=1326 audit(1753346745.976:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12567 comm="syz.0.3953" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fa0b8e9a9 code=0x0 [ 297.723457][ T306] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 297.856005][ T306] usb 10-1: device descriptor read/64, error -71 [ 298.095990][ T306] usb 10-1: device descriptor read/64, error -71 [ 298.227591][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.227636][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.233822][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.240003][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.246255][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.252818][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.259064][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.265345][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.272000][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.278977][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.285177][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.291754][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.298321][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.300452][ T36] audit: type=1400 audit(1753346746.576:791): avc: denied { map } for pid=12586 comm="syz.3.3958" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 298.304506][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.334177][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.340331][ T306] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 298.341192][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.354287][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.360781][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.366977][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.373094][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.379229][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.385364][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.391574][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.397713][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.403815][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.410029][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.416261][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.422601][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.428877][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.435377][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.441651][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.447865][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.453960][T12581] rust_binder: Write failure EFAULT in pid:21 [ 298.475983][ T306] usb 10-1: device descriptor read/64, error -71 [ 298.524294][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.524328][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.526811][T12607] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3964'. [ 298.531106][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.546472][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.553204][T12607] rust_binder: Write failure EINVAL in pid:39 [ 298.553253][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.565857][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.572622][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.579150][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.585682][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.592283][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.598949][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.605383][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.611834][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.618377][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.624798][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.631243][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.637686][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.644122][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.650592][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.657239][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.663802][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.670460][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.677145][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.683709][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.690336][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.696840][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.703739][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.710239][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.716784][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.723396][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.729956][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.736506][ T306] usb 10-1: device descriptor read/64, error -71 [ 298.736520][T12606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.856236][ T306] usb usb10-port1: attempt power cycle [ 299.006041][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 299.135979][ T45] usb 3-1: device descriptor read/64, error -71 [ 299.206068][ T306] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 299.216315][T12617] input: syz1 as /devices/virtual/input/input34 [ 299.227916][ T306] usb 10-1: device descriptor read/8, error -71 [ 299.260314][T12623] rust_binder: Failed to allocate buffer. len:65560, is_oneway:false [ 299.260353][T12623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 299.268487][T12623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:142 [ 299.309685][T12626] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 299.357074][ T306] usb 10-1: device descriptor read/8, error -71 [ 299.375996][ T45] usb 3-1: device descriptor read/64, error -71 [ 299.606004][ T306] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 299.615986][ T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 299.627153][ T306] usb 10-1: device descriptor read/8, error -71 [ 299.745993][ T45] usb 3-1: device descriptor read/64, error -71 [ 299.767036][ T306] usb 10-1: device descriptor read/8, error -71 [ 299.876069][ T306] usb usb10-port1: unable to enumerate USB device [ 299.985984][ T45] usb 3-1: device descriptor read/64, error -71 [ 300.096082][ T45] usb usb3-port1: attempt power cycle [ 300.247937][ T36] audit: type=1400 audit(1753346748.526:792): avc: denied { accept } for pid=12640 comm="syz.3.3975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 300.447168][ T45] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 300.480284][ T45] usb 3-1: device descriptor read/8, error -71 [ 300.521010][T12648] kvm: kvm [12647]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 300.531430][T12648] kvm: kvm [12647]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 300.540635][T12645] 9pnet_fd: Insufficient options for proto=fd [ 300.551482][T12648] kvm_intel: kvm [12647]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 300.563625][T12648] kvm: kvm [12647]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 300.572767][T12648] kvm: kvm [12647]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 300.626954][ T45] usb 3-1: device descriptor read/8, error -71 [ 300.704130][ T2644] bridge_slave_1: left allmulticast mode [ 300.713558][ T2644] bridge_slave_1: left promiscuous mode [ 300.719507][ T2644] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.727317][ T2644] bridge_slave_0: left allmulticast mode [ 300.733018][ T2644] bridge_slave_0: left promiscuous mode [ 300.739495][ T2644] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.763534][T12662] overlayfs: failed to clone upperpath [ 300.860619][ T2644] veth1_macvtap: left promiscuous mode [ 300.873162][ T2644] veth0_vlan: left promiscuous mode [ 300.873196][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 300.907552][ T45] usb 3-1: device descriptor read/8, error -71 [ 300.982681][T12674] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.989817][T12674] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.997032][T12674] bridge_slave_0: entered allmulticast mode [ 301.003674][T12674] bridge_slave_0: entered promiscuous mode [ 301.010266][T12674] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.017347][T12674] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.024497][T12674] bridge_slave_1: entered allmulticast mode [ 301.030896][T12674] bridge_slave_1: entered promiscuous mode [ 301.047037][ T45] usb 3-1: device descriptor read/8, error -71 [ 301.092110][T12674] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.099209][T12674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.106543][T12674] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.113673][T12674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.141588][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.149250][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.160404][ T45] usb usb3-port1: unable to enumerate USB device [ 301.168752][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.175904][ T3320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.183701][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.190789][ T3320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.218325][T12674] veth0_vlan: entered promiscuous mode [ 301.230932][T12674] veth1_macvtap: entered promiscuous mode [ 301.358773][T12683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 301.880054][T12718] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.881231][T12719] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 131074 [ 301.889536][T12718] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.896061][T12720] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 131074 [ 301.903871][T12718] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.916570][T12719] rust_binder: Write failure EFAULT in pid:168 [ 301.917938][T12718] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.926178][T12720] rust_binder: Write failure EFAULT in pid:168 [ 301.942209][ T36] audit: type=1326 audit(1753346750.216:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12717 comm="syz.3.3999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef6c78e9a9 code=0x0 [ 301.971605][ T36] audit: type=1326 audit(1753346750.216:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12717 comm="syz.3.3999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef6c78e9a9 code=0x0 [ 302.008421][T12732] rust_binder: 62: no such ref 1 [ 302.013469][T12732] rust_binder: 62: no such ref 2 [ 302.018476][T12732] rust_binder: inc_ref_done called when no active inc_refs [ 302.265429][T12754] /dev/loop0: Can't lookup blockdev [ 302.279321][T12756] fuseblk: Bad value for 'fd' [ 302.306481][T12760] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4011'. [ 302.327569][T12760] 9pnet_fd: Insufficient options for proto=fd [ 302.335149][T12760] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 302.666253][ T64] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 302.805976][ T64] usb 2-1: device descriptor read/64, error -71 [ 302.829555][ T36] audit: type=1400 audit(1753346751.106:795): avc: denied { bind } for pid=12777 comm="syz.3.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 302.940787][T12798] binder: Unknown parameter 'contextÀ' [ 303.046005][ T64] usb 2-1: device descriptor read/64, error -71 [ 303.196008][ T342] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 303.285990][ T64] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 303.325975][ T342] usb 3-1: device descriptor read/64, error -71 [ 303.415976][ T64] usb 2-1: device descriptor read/64, error -71 [ 303.566054][ T342] usb 3-1: device descriptor read/64, error -71 [ 303.655997][ T64] usb 2-1: device descriptor read/64, error -71 [ 303.725779][T12819] /dev/rnullb0: Can't open blockdev [ 303.776089][ T64] usb usb2-port1: attempt power cycle [ 303.805978][ T342] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 303.935982][ T342] usb 3-1: device descriptor read/64, error -71 [ 303.995990][ T9] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 304.115981][ T64] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 304.135984][ T9] usb 4-1: device descriptor read/64, error -71 [ 304.137118][ T64] usb 2-1: device descriptor read/8, error -71 [ 304.175996][ T342] usb 3-1: device descriptor read/64, error -71 [ 304.277035][ T64] usb 2-1: device descriptor read/8, error -71 [ 304.286398][ T342] usb usb3-port1: attempt power cycle [ 304.375988][ T9] usb 4-1: device descriptor read/64, error -71 [ 304.515992][ T64] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 304.536963][ T64] usb 2-1: device descriptor read/8, error -71 [ 304.616003][ T9] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 304.626032][ T342] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 304.646932][ T342] usb 3-1: device descriptor read/8, error -71 [ 304.667702][ T64] usb 2-1: device descriptor read/8, error -71 [ 304.746133][ T9] usb 4-1: device descriptor read/64, error -71 [ 304.776135][ T64] usb usb2-port1: unable to enumerate USB device [ 304.783693][ T342] usb 3-1: device descriptor read/8, error -71 [ 304.986491][ T9] usb 4-1: device descriptor read/64, error -71 [ 305.026003][ T342] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 305.046981][ T342] usb 3-1: device descriptor read/8, error -71 [ 305.096066][ T9] usb usb4-port1: attempt power cycle [ 305.177016][ T342] usb 3-1: device descriptor read/8, error -71 [ 305.286065][ T342] usb usb3-port1: unable to enumerate USB device [ 305.388973][ T36] audit: type=1400 audit(1753346753.666:796): avc: denied { mounton } for pid=12847 comm="syz.0.4045" path="/586/file0" dev="tmpfs" ino=3254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 305.412327][ T36] audit: type=1400 audit(1753346753.666:797): avc: denied { link } for pid=12847 comm="syz.0.4045" name="file0" dev="tmpfs" ino=3254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 305.435990][ T9] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 305.467053][ T9] usb 4-1: device descriptor read/8, error -71 [ 305.578593][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4052'. [ 305.597117][ T9] usb 4-1: device descriptor read/8, error -71 [ 305.835960][ T9] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 305.857007][ T9] usb 4-1: device descriptor read/8, error -71 [ 305.929563][T12883] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4058'. [ 305.984049][T12887] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 216, size: 133) [ 305.984081][T12887] rust_binder: Error while translating object. [ 305.994888][T12887] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 305.997024][ T9] usb 4-1: device descriptor read/8, error -71 [ 306.001558][T12887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 306.034265][T12894] rust_binder: Write failure EINVAL in pid:93 [ 306.058748][T12896] /dev/loop0: Can't lookup blockdev [ 306.116076][ T9] usb usb4-port1: unable to enumerate USB device [ 306.813652][T12916] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 306.867140][T12923] binder: Bad value for 'defcontext' [ 306.979888][ T36] audit: type=1326 audit(1753346756.258:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12905 comm="syz.0.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa0b8e9a9 code=0x7fc00000 [ 306.999174][T12935] rust_binder: Error while translating object. [ 307.003311][T12935] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 307.006906][T12938] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 307.013794][T12935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:207 [ 307.040569][T12946] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.070148][ T36] audit: type=1400 audit(1753346756.348:799): avc: denied { associate } for pid=12952 comm="syz.0.4082" name="kvm" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 307.186035][ T64] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 307.331318][T12963] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.338476][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 307.356021][T12963] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.366305][T12963] bridge_slave_0: entered allmulticast mode [ 307.372610][T12963] bridge_slave_0: entered promiscuous mode [ 307.382165][T12963] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.386478][ T64] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.390125][T12963] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.405962][ T64] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 307.412283][T12963] bridge_slave_1: entered allmulticast mode [ 307.421690][ T64] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 307.421891][T12963] bridge_slave_1: entered promiscuous mode [ 307.430980][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 307.444711][ T64] usb 3-1: SerialNumber: syz [ 307.488930][ T3321] bridge_slave_1: left allmulticast mode [ 307.494632][ T3321] bridge_slave_1: left promiscuous mode [ 307.506235][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.516208][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 307.522233][ T3321] bridge_slave_0: left allmulticast mode [ 307.528292][ T9] usb 2-1: config 0 has an invalid interface number: 218 but max is 0 [ 307.536610][ T9] usb 2-1: config 0 has no interface number 0 [ 307.542732][ T9] usb 2-1: config 0 interface 218 has no altsetting 0 [ 307.549783][ T3321] bridge_slave_0: left promiscuous mode [ 307.555434][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.564355][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice=4d.ad [ 307.573620][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.590739][ T9] usb 2-1: Product: syz [ 307.605633][ T9] usb 2-1: Manufacturer: syz [ 307.610334][ T9] usb 2-1: SerialNumber: syz [ 307.625504][ T9] usb 2-1: config 0 descriptor?? [ 307.645968][ T10] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 307.700043][ T3321] tipc: Left network mode [ 307.710554][ T3321] veth1_macvtap: left promiscuous mode [ 307.716964][ T3321] veth0_vlan: left promiscuous mode [ 307.741406][ T64] usb 3-1: USB disconnect, device number 25 [ 307.791545][T12963] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.798644][T12963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.805977][T12963] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.807172][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 307.813022][T12963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.835595][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.843172][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.843349][ T10] usb 4-1: config 1 interface 0 altsetting 232 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.866864][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 307.874610][ T2644] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.881700][ T2644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.885156][ T10] usb 4-1: New USB device found, idVendor=6253, idProduct=0100, bcdDevice= 0.40 [ 307.889544][ T2644] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.898207][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.905189][ T2644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.913303][ T10] usb 4-1: Product: syz [ 307.924715][ T10] usb 4-1: Manufacturer: syz [ 307.929411][ T10] usb 4-1: SerialNumber: syz [ 307.951831][T12963] veth0_vlan: entered promiscuous mode [ 307.964051][T12963] veth1_macvtap: entered promiscuous mode [ 307.994354][ T36] audit: type=1326 audit(1753346757.264:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff098e9a9 code=0x7ffc0000 [ 308.018683][ T36] audit: type=1326 audit(1753346757.264:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff098e9a9 code=0x7ffc0000 [ 308.043073][ T36] audit: type=1326 audit(1753346757.264:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feff098e9a9 code=0x7ffc0000 [ 308.067094][ T36] audit: type=1326 audit(1753346757.264:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff098e9a9 code=0x7ffc0000 [ 308.091407][ T36] audit: type=1326 audit(1753346757.274:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff098e9a9 code=0x7ffc0000 [ 308.117363][ T36] audit: type=1326 audit(1753346757.274:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feff098e9a9 code=0x7ffc0000 [ 308.142067][ T36] audit: type=1326 audit(1753346757.294:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff098e9a9 code=0x7ffc0000 [ 308.187523][ T36] audit: type=1326 audit(1753346757.294:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feff098e9a9 code=0x7ffc0000 [ 308.229474][ T36] audit: type=1326 audit(1753346757.294:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff098e9a9 code=0x7ffc0000 [ 308.253081][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 308.256801][ T36] audit: type=1326 audit(1753346757.294:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feff098e9a9 code=0x7ffc0000 [ 308.263697][T12976] incfs: Options parsing error. -22 [ 308.288852][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 308.299431][ T10] usb 4-1: USB disconnect, device number 26 [ 308.306756][T12976] incfs: mount failed -22 [ 308.615983][ T64] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 308.746517][ T64] usb 3-1: device descriptor read/64, error -71 [ 308.995992][ T64] usb 3-1: device descriptor read/64, error -71 [ 309.208717][T12992] rust_binder: Error while translating object. [ 309.208766][T12992] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 309.215124][T12992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 309.246018][ T64] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 309.319944][T13001] rust_binder: Error in use_page_slow: ESRCH [ 309.319974][T13001] rust_binder: use_range failure ESRCH [ 309.328329][T13001] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 309.334035][T13001] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 309.342191][T13001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:25 [ 309.405978][ T64] usb 3-1: device descriptor read/64, error -71 [ 309.454690][ T3320] Bluetooth: hci0: Frame reassembly failed (-84) [ 309.461214][ T3321] Bluetooth: hci0: Frame reassembly failed (-84) [ 309.625411][T13013] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 309.675974][ T64] usb 3-1: device descriptor read/64, error -71 [ 309.786099][ T64] usb usb3-port1: attempt power cycle [ 309.994540][ T9] snd-usb-audio 2-1:0.218: probe with driver snd-usb-audio failed with error -2 [ 310.004917][ T9] usb 2-1: USB disconnect, device number 22 [ 310.006661][ T8553] udevd[8553]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.218/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 310.038317][T13047] bpf: Bad value for 'uid' [ 310.145972][ T64] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 310.167071][ T64] usb 3-1: device descriptor read/8, error -71 [ 310.228130][T13066] rust_binder: pid 13066 performed invalid decrement on ref [ 310.297099][ T64] usb 3-1: device descriptor read/8, error -71 [ 310.439825][T13081] rust_binder: Error while translating object. [ 310.439868][T13081] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 310.446197][T13081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 310.479488][T13085] batadv_slave_1: mtu less than device minimum [ 310.507052][T13087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 310.518635][T13090] binder: Bad value for 'max' [ 310.536020][ T64] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 310.555995][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 310.564723][ T64] usb 3-1: device descriptor read/8, error -71 [ 310.697093][ T64] usb 3-1: device descriptor read/8, error -71 [ 310.705974][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 310.712217][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.723812][ T9] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 310.732923][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.740964][ T9] usb 4-1: Product: syz [ 310.745137][ T9] usb 4-1: Manufacturer: syz [ 310.749783][ T9] usb 4-1: SerialNumber: syz [ 310.755012][ T9] usb 4-1: config 0 descriptor?? [ 310.760852][ T9] usb 4-1: bad CDC descriptors [ 310.765777][ T9] usb 4-1: unsupported MDLM descriptors [ 310.806361][ T64] usb usb3-port1: unable to enumerate USB device [ 311.036868][ T452] usb 4-1: USB disconnect, device number 27 [ 311.224031][T13106] 9pnet_fd: Insufficient options for proto=fd [ 311.413419][T13119] binder: Unknown parameter 'defcontext00000000000000000000003' [ 311.421929][T13121] binder: Unknown parameter 'defcontext00000000000000000000003' [ 311.442505][T13123] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 311.446790][T13125] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 311.460007][T13125] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 311.468326][ T8987] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 311.469725][T13127] 9pnet_fd: Insufficient options for proto=fd [ 311.510707][T13132] devpts: called with bogus options [ 311.689299][T13162] block device autoloading is deprecated and will be removed. [ 311.721669][T13165] rust_binder: Write failure EFAULT in pid:127 [ 311.737793][T13168] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 311.752575][T13168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:129 [ 311.936003][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 312.096015][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 312.096019][ T342] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 312.110479][ T9] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1023 [ 312.120564][ T9] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1024 [ 312.130533][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 312.138595][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.147705][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 312.155307][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.163421][ T9] usb 4-1: Product: Б [ 312.167771][ T9] usb 4-1: Manufacturer: à°š [ 312.172411][ T9] usb 4-1: SerialNumber: syz [ 312.178326][T13159] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 312.185510][T13159] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 312.247043][ T342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 154, changing to 11 [ 312.258288][ T342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1961, setting to 1024 [ 312.269552][ T342] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 312.279986][ T342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.289085][ T342] usb 2-1: config 0 descriptor?? [ 312.294366][T13179] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 312.327408][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 312.336004][ T10] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 312.344382][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.354528][ T10] usb 3-1: config 0 has no interface number 0 [ 312.360685][ T10] usb 3-1: config 0 interface 156 has no altsetting 0 [ 312.368924][ T10] usb 3-1: New USB device found, idVendor=0499, idProduct=105b, bcdDevice=6f.21 [ 312.378639][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.386686][ T10] usb 3-1: Product: syz [ 312.390878][ T10] usb 3-1: Manufacturer: syz [ 312.395509][ T10] usb 3-1: SerialNumber: syz [ 312.401925][ T10] usb 3-1: config 0 descriptor?? [ 312.602693][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 312.615374][ T9] usb 4-1: USB disconnect, device number 28 [ 312.621717][ T10] snd-usb-audio 3-1:0.156: probe with driver snd-usb-audio failed with error -2 [ 312.633427][ T10] usb 3-1: USB disconnect, device number 30 [ 312.649572][ T8553] udevd[8553]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 312.703276][ T342] usbhid 2-1:0.0: can't add hid device: -71 [ 312.715646][ T342] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 312.724833][ T342] usb 2-1: USB disconnect, device number 23 [ 312.751357][T13203] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 312.789005][T13209] block device autoloading is deprecated and will be removed. [ 313.131009][T13223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 313.131039][T13223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:291 [ 313.222923][T13233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 313.228160][ T37] INFO: task udevd:7721 blocked for more than 122 seconds. [ 313.248633][ T37] Not tainted 6.12.30-syzkaller-g15178d63ac5e #0 [ 313.255592][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.264291][ T37] task:udevd state:D stack:0 pid:7721 tgid:7721 ppid:109 flags:0x00000000 [ 313.274601][ T37] Call Trace: [ 313.277969][ T37] [ 313.280942][ T37] __schedule+0x132b/0x1e00 [ 313.285541][ T37] ? __sched_text_start+0x10/0x10 [ 313.290614][ T37] ? kernel_text_address+0xa9/0xe0 [ 313.295739][ T37] ? __kasan_check_write+0x18/0x20 [ 313.300874][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 313.306195][ T37] ? __kasan_check_write+0x18/0x20 [ 313.311312][ T37] ? trace_contention_begin+0xc0/0xc0 [ 313.316711][ T37] schedule+0xc6/0x240 [ 313.320801][ T37] schedule_preempt_disabled+0x14/0x30 [ 313.326286][ T37] __mutex_lock+0x81e/0x1b50 [ 313.330895][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 313.337700][ T37] ? __kasan_check_write+0x18/0x20 [ 313.342826][ T37] ? _raw_spin_lock+0x8c/0x120 [ 313.347631][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 313.352833][ T37] ? __asan_memcpy+0x5a/0x80 [ 313.357448][ T37] __mutex_lock_slowpath+0xe/0x20 [ 313.362505][ T37] mutex_lock+0x102/0x1c0 [ 313.366866][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 313.371727][ T37] ? disk_block_events+0xaf/0x120 [ 313.376764][ T37] ? _atomic_dec_and_lock+0x98/0x120 [ 313.382046][ T37] bdev_open+0xd5/0xd60 [ 313.386344][ T37] blkdev_open+0x3d1/0x560 [ 313.390775][ T37] ? __cfi_blkdev_open+0x10/0x10 [ 313.395715][ T37] do_dentry_open+0x97b/0x1510 [ 313.400498][ T37] vfs_open+0x86/0x230 [ 313.404566][ T37] ? __cfi_vfs_open+0x10/0x10 [ 313.409810][ T37] ? may_open+0x352/0x430 [ 313.414143][ T37] path_openat+0x2b6c/0x34b0 [ 313.418776][ T37] ? kasan_save_alloc_info+0x40/0x50 [ 313.424075][ T37] ? getname_flags+0xc6/0x710 [ 313.428777][ T37] ? do_sys_openat2+0xcb/0x1c0 [ 313.433630][ T37] ? __x64_sys_openat+0x13a/0x170 [ 313.438698][ T37] ? do_filp_open+0x3e0/0x3e0 [ 313.443396][ T37] do_filp_open+0x1c6/0x3e0 [ 313.447926][ T37] ? __cfi_do_filp_open+0x10/0x10 [ 313.452963][ T37] ? alloc_fd+0x4e7/0x5a0 [ 313.457315][ T37] do_sys_openat2+0x12c/0x1c0 [ 313.462000][ T37] ? do_sys_open+0x100/0x100 [ 313.466742][ T37] __x64_sys_openat+0x13a/0x170 [ 313.471622][ T37] x64_sys_call+0xe69/0x2ee0 [ 313.476242][ T37] do_syscall_64+0x58/0xf0 [ 313.480691][ T37] ? clear_bhb_loop+0x50/0xa0 [ 313.485397][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 313.491319][ T37] RIP: 0033:0x7f29dc8a7407 [ 313.495758][ T37] RSP: 002b:00007ffc9b2b4b90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 313.504273][ T37] RAX: ffffffffffffffda RBX: 00007f29dd05e880 RCX: 00007f29dc8a7407 [ 313.512333][ T37] RDX: 00000000000a0800 RSI: 00005644b081c590 RDI: ffffffffffffff9c [ 313.520365][ T37] RBP: 00005644b05e12c0 R08: 0000000000000000 R09: 0000000000000000 [ 313.528365][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 00005644b082c540 [ 313.536382][ T37] R13: 00005644b0826990 R14: 0000000000000000 R15: 00005644b082c540 [ 313.544383][ T37] [ 313.552581][ T37] INFO: task syz.3.2593:8440 blocked for more than 123 seconds. [ 313.560810][ T37] Not tainted 6.12.30-syzkaller-g15178d63ac5e #0 [ 313.567806][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.576550][ T37] task:syz.3.2593 state:D stack:0 pid:8440 tgid:8439 ppid:7507 flags:0x00004004 [ 313.586846][ T37] Call Trace: [ 313.590143][ T37] [ 313.593079][ T37] __schedule+0x132b/0x1e00 [ 313.597620][ T37] ? __sched_text_start+0x10/0x10 [ 313.602658][ T37] ? kasan_save_track+0x4f/0x80 [ 313.607542][ T37] ? kasan_save_free_info+0x4a/0x60 [ 313.612771][ T37] ? __kasan_slab_free+0x5f/0x80 [ 313.617742][ T37] ? kfree+0x158/0x440 [ 313.621814][ T37] ? efi_partition+0x444/0x3150 [ 313.626790][ T37] ? bdev_disk_changed+0x81c/0x1610 [ 313.632007][ T37] ? loop_reread_partitions+0x64/0x110 [ 313.637484][ T37] ? __kasan_check_write+0x18/0x20 [ 313.642593][ T37] schedule+0xc6/0x240 [ 313.646673][ T37] io_schedule+0x89/0xe0 [ 313.650914][ T37] folio_wait_bit_common+0x6ae/0x910 [ 313.656208][ T37] ? folio_wait_bit+0x50/0x50 [ 313.660878][ T37] ? __cfi_wake_page_function+0x10/0x10 [ 313.666437][ T37] ? __filemap_get_folio+0x687/0x7c0 [ 313.671756][ T37] ? efi_partition+0x444/0x3150 [ 313.676634][ T37] do_read_cache_folio+0x14d/0x4d0 [ 313.681747][ T37] ? __cfi_blkdev_read_folio+0x10/0x10 [ 313.687234][ T37] read_cache_folio+0x54/0x90 [ 313.691935][ T37] read_part_sector+0xcc/0x250 [ 313.696729][ T37] msdos_partition+0x118/0x3000 [ 313.701604][ T37] ? __cfi_efi_partition+0x10/0x10 [ 313.706928][ T37] ? vsnprintf+0x19b8/0x1aa0 [ 313.711540][ T37] ? snprintf+0xdb/0x130 [ 313.715783][ T37] ? __cfi_msdos_partition+0x10/0x10 [ 313.721294][ T37] ? __cfi_snprintf+0x10/0x10 [ 313.726000][ T37] bdev_disk_changed+0x81c/0x1610 [ 313.731043][ T37] ? __cfi_bdev_disk_changed+0x10/0x10 [ 313.736520][ T37] ? __kasan_check_write+0x18/0x20 [ 313.741639][ T37] ? mutex_unlock+0x8b/0x240 [ 313.746270][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 313.751305][ T37] loop_reread_partitions+0x64/0x110 [ 313.756625][ T37] loop_configure+0xfd8/0x1320 [ 313.761408][ T37] ? __cfi_loop_configure+0x10/0x10 [ 313.766631][ T37] ? save_stack+0x11c/0x1f0 [ 313.771144][ T37] ? __kasan_check_write+0x18/0x20 [ 313.776304][ T37] lo_ioctl+0x76c/0x20a0 [ 313.780560][ T37] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 313.786504][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 313.791198][ T37] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 313.797310][ T37] ? update_curr+0x821/0xaa0 [ 313.801930][ T37] ? update_cfs_group+0x260/0x260 [ 313.807034][ T37] ? dequeue_entity+0xa9c/0x1750 [ 313.811988][ T37] ? stack_depot_save_flags+0x38/0x800 [ 313.817472][ T37] ? tg_unthrottle_up+0x980/0x980 [ 313.822512][ T37] ? do_dentry_open+0x97b/0x1510 [ 313.827492][ T37] ? vfs_open+0x21/0x230 [ 313.831747][ T37] ? path_openat+0x2b6c/0x34b0 [ 313.836531][ T37] ? do_filp_open+0x1c6/0x3e0 [ 313.841212][ T37] ? do_sys_openat2+0x12c/0x1c0 [ 313.846108][ T37] ? x64_sys_call+0xe69/0x2ee0 [ 313.850892][ T37] ? do_syscall_64+0x58/0xf0 [ 313.855484][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 313.861603][ T37] ? kvm_sched_clock_read+0x15/0x30 [ 313.867277][ T37] ? sched_clock_noinstr+0xd/0x30 [ 313.872339][ T37] ? sched_clock+0x44/0x60 [ 313.876798][ T37] ? sched_clock_cpu+0x75/0x400 [ 313.881678][ T37] ? sched_balance_newidle+0x845/0xe00 [ 313.887167][ T37] ? __cfi_sched_clock_cpu+0x10/0x10 [ 313.892464][ T37] ? __kasan_check_write+0x18/0x20 [ 313.897606][ T37] ? __switch_to+0xc7b/0x1310 [ 313.902313][ T37] ? psi_group_change+0xb44/0x1130 [ 313.907485][ T37] ? __cfi___switch_to+0x10/0x10 [ 313.912532][ T37] ? __kasan_check_write+0x18/0x20 [ 313.917671][ T37] ? finish_task_switch+0x1de/0x780 [ 313.922902][ T37] ? __switch_to_asm+0x3d/0x70 [ 313.927760][ T37] ? avc_has_extended_perms+0x7c7/0xdd0 [ 313.933339][ T37] ? __asan_memcpy+0x5a/0x80 [ 313.937972][ T37] ? avc_has_extended_perms+0x921/0xdd0 [ 313.943539][ T37] ? do_vfs_ioctl+0xeda/0x1e30 [ 313.948548][ T37] ? __futex_queue+0x19a/0x340 [ 313.953435][ T37] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 313.959156][ T37] ? __cfi___futex_queue+0x10/0x10 [ 313.964377][ T37] ? futex_wait_setup+0x1bc/0x260 [ 313.969431][ T37] ? __futex_wait+0x218/0x2a0 [ 313.974125][ T37] ? blkdev_common_ioctl+0x10e4/0x2660 [ 313.979623][ T37] ? blkdev_bszset+0x220/0x220 [ 313.984399][ T37] ? has_cap_mac_admin+0xd0/0xd0 [ 313.989353][ T37] ? futex_wake+0x63a/0x900 [ 313.993865][ T37] ? futex_setup_timer+0xb4/0xd0 [ 313.998846][ T37] ? futex_wait+0x29a/0x7a0 [ 314.003370][ T37] ? __cfi_do_futex+0x10/0x10 [ 314.008087][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 314.012780][ T37] blkdev_ioctl+0x549/0x680 [ 314.017326][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 314.022359][ T37] ? bpf_lsm_file_ioctl+0xd/0x20 [ 314.027343][ T37] ? security_file_ioctl+0x34/0xd0 [ 314.032470][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 314.037613][ T37] __se_sys_ioctl+0x135/0x1b0 [ 314.042308][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 314.046919][ T37] x64_sys_call+0x1878/0x2ee0 [ 314.051610][ T37] do_syscall_64+0x58/0xf0 [ 314.056052][ T37] ? clear_bhb_loop+0x50/0xa0 [ 314.060826][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 314.066746][ T37] RIP: 0033:0x7fa495f8e9a9 [ 314.071169][ T37] RSP: 002b:00007fa496dcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.079603][ T37] RAX: ffffffffffffffda RBX: 00007fa4961b5fa0 RCX: 00007fa495f8e9a9 [ 314.087596][ T37] RDX: 0000200000000380 RSI: 0000000000004c0a RDI: 0000000000000003 [ 314.095576][ T37] RBP: 00007fa496010d69 R08: 0000000000000000 R09: 0000000000000000 [ 314.103651][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.111777][ T37] R13: 0000000000000000 R14: 00007fa4961b5fa0 R15: 00007ffe1d322dd8 [ 314.119775][ T37] [ 314.124681][ T37] NMI backtrace for cpu 0 [ 314.124702][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.30-syzkaller-g15178d63ac5e #0 2e49b5e8bba3abd4e44f2eeb6ccfddb4f386a3cf [ 314.124738][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.124753][ T37] Call Trace: [ 314.124761][ T37] [ 314.124771][ T37] __dump_stack+0x21/0x30 [ 314.124803][ T37] dump_stack_lvl+0x10c/0x190 [ 314.124832][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 314.124860][ T37] ? preempt_schedule_irq+0x9c/0x100 [ 314.124890][ T37] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 314.124921][ T37] dump_stack+0x19/0x20 [ 314.124947][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 314.124972][ T37] ? raw_irqentry_exit_cond_resched+0x33/0x40 [ 314.124999][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 314.125024][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 314.125051][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 314.125078][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 314.125104][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 314.125130][ T37] watchdog+0xd8f/0xed0 [ 314.125159][ T37] ? __cfi_watchdog+0x10/0x10 [ 314.125186][ T37] ? __kasan_check_read+0x15/0x20 [ 314.125213][ T37] ? __kthread_parkme+0x138/0x180 [ 314.125245][ T37] ? schedule+0xc6/0x240 [ 314.125273][ T37] kthread+0x2c7/0x370 [ 314.125292][ T37] ? __cfi_watchdog+0x10/0x10 [ 314.125319][ T37] ? __cfi_kthread+0x10/0x10 [ 314.125340][ T37] ret_from_fork+0x64/0xa0 [ 314.125369][ T37] ? __cfi_kthread+0x10/0x10 [ 314.125390][ T37] ret_from_fork_asm+0x1a/0x30 [ 314.125424][ T37] [ 314.125433][ T37] Sending NMI from CPU 0 to CPUs 1: [ 314.288416][ C1] NMI backtrace for cpu 1 [ 314.288430][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.30-syzkaller-g15178d63ac5e #0 2e49b5e8bba3abd4e44f2eeb6ccfddb4f386a3cf [ 314.288456][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.288467][ C1] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 314.288494][ C1] Code: cc cc cc b8 2f 66 1d fe 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 8c 41 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 c3 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 314.288508][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c6 [ 314.288522][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366cc00 RCX: ffffffff8585c00e [ 314.288534][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000031029c [ 314.288544][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f39733 R09: 1ffff1103ede72e6 [ 314.288556][ C1] R10: dffffc0000000000 R11: ffffed103ede72e7 R12: 1ffff110206cd980 [ 314.288568][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87ca7de8 [ 314.288579][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 314.288592][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.288602][ C1] CR2: 00007feff0b82ab8 CR3: 0000000120446000 CR4: 00000000003526b0 [ 314.288617][ C1] Call Trace: [ 314.288623][ C1] [ 314.288631][ C1] default_idle+0x17/0x30 [ 314.288646][ C1] arch_cpu_idle+0xd/0x20 [ 314.288659][ C1] default_idle_call+0x3f/0x80 [ 314.288672][ C1] do_idle+0x1a0/0x470 [ 314.288695][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 314.288718][ C1] cpu_startup_entry+0x48/0x70 [ 314.288740][ C1] start_secondary+0x12e/0x140 [ 314.288757][ C1] common_startup_64+0x13b/0x157 [ 314.288777][ C1] [ 317.161059][ T109] udevd[109]: worker [7721] /devices/virtual/block/loop7 is taking a long time