last executing test programs: 10m17.585964765s ago: executing program 32 (id=1811): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @mcast1, @private0, 0x7800, 0x1, 0xfffffffc, 0xdc67}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r1, 0xffffb000) 10m7.065653513s ago: executing program 33 (id=1964): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x4000) r2 = fsopen(&(0x7f00000002c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) fchdir(r3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0xf1, 0x101002) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m26.892366601s ago: executing program 34 (id=2353): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) (async) eventfd(0x100000ae) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000180), &(0x7f0000000340)=0x4) (async) sendto$packet(r0, &(0x7f0000000200)="d6f43275d34060c75efdd555f39ee6da584a34fe00c2ecb0dfd5facf7563312ea97131e33ec180f13e0a37cc2f516272e89272121360c8172fcd4166aad69c939566246b2406afb17727cf3e0b2e493abdd1c7b804bf6183bccc4f05f104e45b2b1ac5643995e4b17c9dad745fe1d920290034746034cd4e2be7a6d4b6818f7a5bcbba1d8a7f8483dc09dc24341f02159586aa54ad6a8e58ced1858c76a222f6f2437d0473223f92154623e0cc904034d65202aebc9865fa30d1d33607ba3f635bb0044eef3b6c837e", 0xc9, 0x40000, &(0x7f00000000c0)={0x11, 0x16, 0x0, 0x1, 0xb, 0x6, @remote}, 0x14) read$eventfd(r0, &(0x7f0000000640), 0x8) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async, rerun: 32) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace(0x8, r2) (async) unlinkat(r0, &(0x7f0000000380)='./file0\x00', 0x200) (async, rerun: 64) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) (rerun: 64) 2m17.431586032s ago: executing program 0 (id=8774): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000006e40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x41) gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000006c0)="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", &(0x7f0000000500)="222bdb754f5a2cffdaafc851aa05910b9a7f0c39c9f5ca2ca0036c51c00b68b83f1ea72910891bedad79e11d34e4446d70acfe40e46652ecbc88cd430e22d45c430b23d11123cb9ed44cc153dd631fed8a4bd19862dfaff01279ca48c387c6ac62ae33b616e7b68d1434b4015faf13a00df203a46765501b6cc7557ad4ceedb91977615f2c38d383f52c80"}}, &(0x7f0000000080)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x82) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101", @ANYRESOCT], 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2a042, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) 2m15.868269964s ago: executing program 0 (id=8813): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000200)=0xa4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0xfffffffffffffffb, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x9}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200000) r3 = memfd_secret(0x80000) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000040)={0x9, r3, 'id1\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000200)=0xa4) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0xfffffffffffffffb, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x9}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200000) (async) memfd_secret(0x80000) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000040)={0x9, r3, 'id1\x00'}) (async) 2m15.819291724s ago: executing program 0 (id=8814): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) (async) prlimit64(0x0, 0x3, &(0x7f0000000140)={0xe, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 2m15.748208665s ago: executing program 0 (id=8815): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000001340), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000001"], 0x18, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 2m15.747344565s ago: executing program 0 (id=8817): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x59, r1, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4040804) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 2m15.669833915s ago: executing program 0 (id=8819): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x82802, 0x4f) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYRESHEX, @ANYRES32, @ANYBLOB="08000300000000001400020076657468315f746f5f627269646765000800030003"], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x240008d4) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "2e5237601a87f08faccc1418fbc3da00", [0xfffffffffffffce8, 0xa]}}) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x1, 0x5, 0x8, 0xb4ea, 0x10001, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000340)=r3) (async) io_setup(0xfffffffe, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f0000001640)=[&(0x7f0000000300)={0x4000000, 0x0, 0x0, 0x1, 0x7d, r0, &(0x7f0000000280)='a', 0x6, 0x5}]) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 2m0.509957277s ago: executing program 35 (id=8819): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x82802, 0x4f) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYRESHEX, @ANYRES32, @ANYBLOB="08000300000000001400020076657468315f746f5f627269646765000800030003"], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x240008d4) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "2e5237601a87f08faccc1418fbc3da00", [0xfffffffffffffce8, 0xa]}}) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x1, 0x5, 0x8, 0xb4ea, 0x10001, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000340)=r3) (async) io_setup(0xfffffffe, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f0000001640)=[&(0x7f0000000300)={0x4000000, 0x0, 0x0, 0x1, 0x7d, r0, &(0x7f0000000280)='a', 0x6, 0x5}]) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 1m59.541956495s ago: executing program 7 (id=9042): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='blkio'}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, r0, 0x3000) r4 = socket(0x8000000010, 0x2, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'gretap0\x00', 0x1800}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x9) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000380)={0x7f, 0xa4f, 0x3, 0x6, 0x80, "d2993dbaf1c41bdaaacce510430554caddbd3a", 0xfff, 0x9}) write(r6, &(0x7f0000000180)="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", 0x184) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m51.411176735s ago: executing program 6 (id=9149): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) rt_sigaction(0x17, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01ebbf3470fa7c063df", 0x1c000004, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={'\x00', 0xfff7, 0x7fff, 0x3, 0x8001, 0x5, 0xffffffffffffffff}) syz_io_uring_setup(0x4021, &(0x7f0000000240)={0x0, 0x38d, 0x8, 0x2, 0xda}, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f0000000080)) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xcf4e74310708dfc2, 0xc}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 1m51.365742825s ago: executing program 6 (id=9150): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc7eb63ed20ec6bd6) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="15000000e0981ddca5e7620af1f8e0ad65ffff0010000008003950322030302e75"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x30, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0xc00, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c776606000000", @ANYRESHEX=r3, @ANYBLOB=',k']) mmap$binder(&(0x7f00000ca000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0xfff) read$FUSE(r1, &(0x7f0000000740)={0x2020}, 0x2020) chdir(&(0x7f0000000240)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe6b) setresuid(0xee00, 0xee00, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x8460a6, &(0x7f0000000280)={[{@noprefix}]}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100)) 1m51.268212336s ago: executing program 6 (id=9151): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x10007ffd) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x20, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0x6}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) 1m51.257835846s ago: executing program 6 (id=9152): r0 = getpgrp(0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f4, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x58, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_pidfd_open(r0, 0x0) syz_pidfd_open(r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m51.095646897s ago: executing program 6 (id=9153): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0xa0, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)={@fda={0x66646185, 0x1, 0x1, 0x26}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x2}}, 0x0}, 0x40}, @acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fda={0x66646185, 0x3, 0x0, 0x33}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0xb, 0x0, &(0x7f0000000200)="8f4c0a646a93743877c637"}) r1 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x60, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x48, r3, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4070}, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0xa0, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)={@fda={0x66646185, 0x1, 0x1, 0x26}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x2}}, 0x0}, 0x40}, @acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fda={0x66646185, 0x3, 0x0, 0x33}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0xb, 0x0, &(0x7f0000000200)="8f4c0a646a93743877c637"}) (async) socket(0xa, 0x3, 0x3a) (async) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x60, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x48, r3, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4070}, 0x4) (async) 1m50.928135418s ago: executing program 6 (id=9154): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) (async) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x7, 0x100ba7) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, 0x0) (async) write$tcp_mem(r0, &(0x7f0000000100)={0x0, 0x2d, 0x800, 0xa, 0x40000000000009, 0x2c}, 0x48) (async) timer_create(0x0, &(0x7f0000000100)={0x0, 0x34, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bind$inet(r3, &(0x7f0000000040)={0x2, 0x1000, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee22965", 0x12}], 0x1}}], 0x2, 0xc044) (async) r4 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000300), 0x5b0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) (async) timer_settime(r2, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000000c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close(0xffffffffffffffff) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000800)=[{{&(0x7f0000000380)={0x2, 0x159, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000440)="5bc32ce8b9ea1a926f4076e437e5a6f538be28276a860a422fade8ef245ed652570ea038df224a526545d4872de1c4452eaca9c2ed881c823a1757c90c5258a09892d3d2d4368db06a57e27c72419f8862f7486a62ae57a001aa5d1759", 0x5d}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000500)="ece516716d5926c2fa3e9168bbca4767bf1ddee1f8eab74bd0fc01b6aafdd7471aed22658e0573f235", 0x29}, {&(0x7f0000000540)="3a9fd7ff76ca48cd68a851b7ae63", 0xe}, {&(0x7f0000000580)="94d002f4", 0x4}, {&(0x7f00000005c0)="2e8ca70b0b125cec932500cffee1f6298c3b276bdb68d81993c8d35d161446c386738e79433995cb2a22b19e5f4f90ab58ff5fa518932fc1a78f5f90fb9be34d37724bfc7d", 0x45}, {0xfffffffffffffffe}, {&(0x7f00000006c0)="49436afff559c4a280fdfff245fac6b88a313eed53e97ed2c6809b948e607459bbae9b3af47076b979708c3da766b6eec98e51912f7fe9e99ac701bb5ab6540ad34eaab3239c3e2e59b95e7f5346209581ef2255d45b8f93f57a7151ff8d290d76ec3917bb948f53d4be5ccd053a8a75f6c94403fc77abf3d94650c7d5b6630d9266f9902653c54b158d7988342d8e88031e6e82d194b0a7c9ad8930a0d03888694db122ee335eae8c659f7621", 0xad}], 0x6}}], 0x2, 0x92) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x0, @private}, 'syz_tun\x00'}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) capset(&(0x7f0000000240)={0x20071026, r4}, &(0x7f00000002c0)={0x9, 0x5, 0x9, 0xc, 0x3, 0x10001}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000040)={0x1}) 1m44.521037636s ago: executing program 36 (id=9042): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='blkio'}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, r0, 0x3000) r4 = socket(0x8000000010, 0x2, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'gretap0\x00', 0x1800}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x9) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000380)={0x7f, 0xa4f, 0x3, 0x6, 0x80, "d2993dbaf1c41bdaaacce510430554caddbd3a", 0xfff, 0x9}) write(r6, &(0x7f0000000180)="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", 0x184) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m35.811857591s ago: executing program 37 (id=9154): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) (async) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x7, 0x100ba7) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, 0x0) (async) write$tcp_mem(r0, &(0x7f0000000100)={0x0, 0x2d, 0x800, 0xa, 0x40000000000009, 0x2c}, 0x48) (async) timer_create(0x0, &(0x7f0000000100)={0x0, 0x34, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bind$inet(r3, &(0x7f0000000040)={0x2, 0x1000, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee22965", 0x12}], 0x1}}], 0x2, 0xc044) (async) r4 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000300), 0x5b0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) (async) timer_settime(r2, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000000c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close(0xffffffffffffffff) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000800)=[{{&(0x7f0000000380)={0x2, 0x159, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000440)="5bc32ce8b9ea1a926f4076e437e5a6f538be28276a860a422fade8ef245ed652570ea038df224a526545d4872de1c4452eaca9c2ed881c823a1757c90c5258a09892d3d2d4368db06a57e27c72419f8862f7486a62ae57a001aa5d1759", 0x5d}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000500)="ece516716d5926c2fa3e9168bbca4767bf1ddee1f8eab74bd0fc01b6aafdd7471aed22658e0573f235", 0x29}, {&(0x7f0000000540)="3a9fd7ff76ca48cd68a851b7ae63", 0xe}, {&(0x7f0000000580)="94d002f4", 0x4}, {&(0x7f00000005c0)="2e8ca70b0b125cec932500cffee1f6298c3b276bdb68d81993c8d35d161446c386738e79433995cb2a22b19e5f4f90ab58ff5fa518932fc1a78f5f90fb9be34d37724bfc7d", 0x45}, {0xfffffffffffffffe}, {&(0x7f00000006c0)="49436afff559c4a280fdfff245fac6b88a313eed53e97ed2c6809b948e607459bbae9b3af47076b979708c3da766b6eec98e51912f7fe9e99ac701bb5ab6540ad34eaab3239c3e2e59b95e7f5346209581ef2255d45b8f93f57a7151ff8d290d76ec3917bb948f53d4be5ccd053a8a75f6c94403fc77abf3d94650c7d5b6630d9266f9902653c54b158d7988342d8e88031e6e82d194b0a7c9ad8930a0d03888694db122ee335eae8c659f7621", 0xad}], 0x6}}], 0x2, 0x92) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x0, @private}, 'syz_tun\x00'}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) capset(&(0x7f0000000240)={0x20071026, r4}, &(0x7f00000002c0)={0x9, 0x5, 0x9, 0xc, 0x3, 0x10001}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000040)={0x1}) 1m7.371957341s ago: executing program 9 (id=9629): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300001800000000000000000000000400030000000000fdffffffffffffff07000000000000000000000000000000050006006c0000000a00000000000000fc010000000000000000000000001700000000000000000004000400000000000700000000000000000000000000000000000000000000000200010000000000000000060000000005000500008000000a00000000000000ff01000000000000000000000000000100000000000000000200130001"], 0xc0}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000a00)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="20070100000046ddec4b0e"], 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f2c, 0x4}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x5c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x40084) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, '\r', 0x3a, '\xcb\x94-\xa8|55a', 0x3a, './file0'}, 0x30) truncate(&(0x7f0000000200)='./file0\x00', 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000c00)={'sit0\x00', 0x0, 0x700, 0x40, 0x7, 0xf, {{0x64, 0x4, 0x0, 0x8, 0x190, 0x68, 0x0, 0x0, 0x29, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x3c, 0x9d, 0x1, 0x0, [{@empty, 0x3}, {@loopback, 0x46d}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x32c}, {@dev={0xac, 0x14, 0x14, 0x3a}}, {@rand_addr=0x64010102, 0x2}, {@rand_addr=0x64010100, 0x9}]}, @timestamp_addr={0x44, 0x4c, 0x65, 0x1, 0x7, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0x8}, {@private=0xa010101, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x292}, {@rand_addr=0x64010101, 0x6}]}, @cipso={0x86, 0x76, 0xffffffffffffffff, [{0x1, 0xc, "5e9d5f9200e5ec83eaf1"}, {0x0, 0xd, "141c4daeef055ea20d4e1a"}, {0x6, 0x8, "53f22d16cc93"}, {0x9c8740ee6f17f25a, 0x11, "608e752d5d715a018e4d612947dabe"}, {0x7, 0x12, "4ab2f578a1dfa869c430b215fa1b7355"}, {0x7, 0xd, "598367178c9cdf01bd9fff"}, {0x6, 0x10, "4d63152089b432a4ebf24df179b4"}, {0x0, 0xf, "46d9a603feb49b99a9e61a1969"}]}, @noop, @timestamp_addr={0x44, 0x4c, 0x45, 0x1, 0x1, [{@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x7}, {@remote, 0xfffffffc}, {@multicast2}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x5}, {@multicast2, 0x47a}, {@remote, 0x8}, {@private=0xa010100, 0x5}]}, @timestamp={0x44, 0x1c, 0xb5, 0x0, 0x1, [0x7, 0xfffffffc, 0x0, 0x7, 0x5, 0x9]}, @lsrr={0x83, 0xf, 0x10, [@multicast2, @broadcast, @remote]}]}}}}}) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r6}, 0x14) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000000)={0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="20040900000000000000dcd895a91fc12685e91cb5c9efc4d4c61dfd08d7ac671e0337da272ba6bcec"], &(0x7f00000004c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f00000006c0)={0x34, &(0x7f00000000c0)={0x20, 0xc, 0xf, "7caed15fd3cf516c453714f2cd04e7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xffffc000) 1m4.394228363s ago: executing program 9 (id=9667): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') dup3(r2, r3, 0x80000) (async) dup3(r2, r3, 0x80000) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r4, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x33, 0x5, 0x0, 0x7f11b2d5, 0x0, 0x0, 0x0, 0xffff7ffc, 0xfffffffd, 0x6, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000000, 0xc}}) r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r3, 0x0, 0xffffffff) (async) sendfile(r5, r3, 0x0, 0xffffffff) 1m4.273134864s ago: executing program 9 (id=9668): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffc01) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000180)=[@wr_crn={0x46, 0x20, {0x4, 0x6}}, @code={0xa, 0x63, {"66b8ef000f00d0640fc730400f01ca66b839008ec80f7987ad20a30666baf80cb89fa21287ef66bafc0cec8f095098eb460fbaa3a20b347ee666baf80cb808aa348fef66bafc0c66b8090066ef660f38803a"}}, @code={0xa, 0x52, {"66baf80cb864932d8cef66bafc0ced66400f3882390f01c945ddc20f09c4a2419a77000fc73508530000440fc79b0030000026653e650fc79cbb594677220f01ca"}}, @cpuid={0x14, 0x18, {0x9, 0x9}}, @code={0xa, 0x60, {"0f8a0000000066b8fd000f00d0f3460fc7b6199c00006765430f01f8def367f3420fc771002e450f098fa9d8918193000000b9800000c00f3235002000000f3066baf80cb8d443018def66bafc0ced"}}, @in_dx={0x82, 0x20, {0x94f7, 0x2}}, @wr_drn={0x6e, 0x20, {0x5, 0x9d0}}, @code={0xa, 0x4d, {"c4413f7c38f3430f0fc80d0f00d4c4c1e5634b0043d766470fc7b43105000000673e3665f240a7660f38809447000000006567430f01cb6765db68bc"}}, @wrmsr={0x1e, 0x20, {0x327, 0x4}}, @wr_drn={0x6e, 0x20, {0x0, 0x5}}, @wrmsr={0x1e, 0x20, {0xbde}}, @wr_drn={0x6e, 0x20, {0x2, 0x2}}, @out_dx={0xaa, 0x28, {0x6363, 0x7, 0x4}}, @set_irq_handler={0xbe, 0x20, {0x1d, 0x1}}, @uexit={0x0, 0x18, 0x8000}, @in_dx={0x82, 0x20, {0x30e3, 0x4}}, @wrmsr={0x1e, 0x20, {0x60a, 0x1}}], 0x2fa}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x98, 0x0, &(0x7f0000000540)=[@increfs_done, @acquire, @register_looper, @decrefs={0x40046307, 0x3}, @increfs_done={0x40106308, 0x3}, @register_looper, @free_buffer={0x40086303, r2}, @release={0x40046306, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/88, 0x58, 0x2, 0x7}, @flat=@handle={0x73682a85, 0x100}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000500)={0x0, 0x28, 0x40}}}], 0x2d, 0x0, &(0x7f0000000600)="0454914f815f29d8b6148e33645d11f69c9583874fea0f178a3130e6cfd91260845c22d37318e68ea4323942c4"}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x3) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd22ffff32", 0x6}], 0x1, 0x0, 0x10000) r6 = gettid() ptrace$peeksig(0x4209, r6, &(0x7f0000000680)={0xffffffff00000001, 0x0, 0x1}, &(0x7f00000006c0)=[{}]) r7 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r7, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x400, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x179}, {0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0xffffffffffffffff, {[0x8, 0x4, 0x6, 0x6e, 0xfffffc01, 0x2, 0x6, 0x7]}}, 0x5c) syz_usb_connect(0x2, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.635545284s ago: executing program 9 (id=9698): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) (async) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r1, &(0x7f0000016440)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000016440)={0x2020}, 0x2020) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)={0x40000000}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m1.589273774s ago: executing program 9 (id=9700): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @loopback, 0x9}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r1, &(0x7f0000000080)="800037bb", 0x4, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1m1.480197925s ago: executing program 9 (id=9701): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x80041284, 0x3) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "2e5237601a87f08faccc1418fbc3da00", [0xfffffffffffffce8, 0xa]}}) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r3, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f0000000280)='a', 0x1, 0x5}]) 59.800050727s ago: executing program 8 (id=9717): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"a2e39b214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838681a0890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b343b0d076c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900004288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a60560808df823412449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1df1000000000000000c9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073034d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef7becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe505003d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6ae4effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6afcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d71eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8f0dbf6ee3e169279ce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139af06fc76957227ffff2de20a4b8e370000000000000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d471c8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2398f0c09d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949d9a92587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15aa82000000000000a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x1000}}, 0xfffffffffffffd7f) r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f00000003c0)={[], 0xf000}, 0x1000) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x0, 0x1012) getuid() openat$binderfs(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000180)={0xffffff87, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="4011af000000b7"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000003e40), 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000003c0)={0x24, &(0x7f00000002c0)={0x40, 0xf, 0xc0, {0xc0, 0x24, "613fbf1a5935fe3416bed557e8dce3015f395b303711180bc9ac3ba5d53573f2c67166ac5d2b16c0f4d764c23c288292a7c67c39f10705f193e0935d807bd269accc6d820803da58c7af8a712da9978d281c3ba0dba945870ce138168d623568f6d24663c7b90c1f3352bb355fac00f7fbd00fa4aee9048f1e8e1950cdf7d4e56e170ca5dd5be30e7a89d645295b2c214c50143014ed99275bae7a8da1a21274d8fcde8a7a18ba678addd8c28b2168d969f40f7e964b09d8cd156a41dc26"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x4}]}}, 0x0}, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x40, 0xe, 0x45, "eec72d8f0577cde593388b6257317682eb728cd9853e22825a1278cbb11dd78cd8fe55f3eac6c100ed535c28a9f51156f51db87b04bca4b778f635208927e30d5f95975648"}, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x1, 0x70, "f2d8d45b836d79f3d28e35abb0487af947d7dd02eabb564107562adf09d1455fed3e6a2cc54bc9c737c3d3fa6098c6432661554cec9cc549eb790c28ca1484596597a5a2c9cb94e541799aa5fc07df1b1a84ede8be5846cdbd6208625653f2a62dbe6716851f7ad51a064ad18d555621"}, 0x0}) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) epoll_create(0x3) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000080)={0x3, 'vlan1\x00', {0x80000009}}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r0, 0xffffa000) 56.486960582s ago: executing program 8 (id=9756): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x20a, 0x3}, @flat=@binder={0x73622a85, 0x1001, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/2, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 56.380057563s ago: executing program 8 (id=9758): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x4, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x64, &(0x7f0000000100), 0x3) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x8, 0xfff9, 0x3, 0x3, 0x4, 0x7f, 0xe, 0x9c, 0x42, 0x7, 0xf, 0x30, 0x2}, {0x5, 0x3, 0x0, 0x7f, 0x4e, 0x9, 0x6, 0x7, 0x7f, 0x2, 0x1, 0x5, 0x8}, {0xffffffff, 0x800, 0x80, 0xd, 0x81, 0x2, 0x1, 0x4, 0xb, 0x10, 0x8, 0x0, 0x7}], 0x7fffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000f80180c2000002aaaaaaaaaabb86dd6d0000000fc088fffc010000000000000000000000000000ff020000000000000000000000000001"], 0xffa) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r2, &(0x7f00000003c0)="d33dd4edc9ee576541234edcd9c29e0ee1279915798e9582c47f", 0x1a, 0x80, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) pwritev2(r7, &(0x7f00000035c0)=[{&(0x7f0000000180)="323c1fac9fcf57cbe40f228cb6cef25f5f2b4fa51439551758b4ad0c43b0cb0955af67be7c92d732d4f20d9511241b9f8c1c99", 0x33}, {0x0}], 0x2, 0x47, 0xf7ab, 0x0) (async) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0xffffffffffffffa2, 0x0, &(0x7f0000000040)=[@decrefs={0x400c6314, 0xfffffffd}, @decrefs], 0xfffffffffffffe4b, 0x0, 0x0}) 56.240136534s ago: executing program 8 (id=9761): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x40046721, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r5, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) (async) sendto$inet(r5, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x4004084, 0x0, 0x0) (async) sendto$inet(r5, 0x0, 0x0, 0x4004084, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) mremap(&(0x7f000000e000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000000e000/0x1000)=nil) 56.222683363s ago: executing program 8 (id=9762): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c142, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x40) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1c2085004}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) write(r0, &(0x7f0000000400)="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", 0xfffffcf1) 56.036083115s ago: executing program 8 (id=9764): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_get$pid(0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @fda={0x66646185, 0x9, 0x0, 0x36}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 56.035380965s ago: executing program 38 (id=9764): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_get$pid(0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @fda={0x66646185, 0x9, 0x0, 0x36}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 46.200796418s ago: executing program 39 (id=9701): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x80041284, 0x3) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "2e5237601a87f08faccc1418fbc3da00", [0xfffffffffffffce8, 0xa]}}) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r3, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f0000000280)='a', 0x1, 0x5}]) 18.636719063s ago: executing program 1 (id=10237): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000015c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e7505521481f5d3bb1945"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000080)={0x0, 0x0}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/key-users\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f00000003c0)=r6) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000820}, 0xc, &(0x7f00000000c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="e01100002500010026bd7000fcdbdf25090000000c009500040000000000000056540301c78d9933a7f85540a1a617182eb5b3134ad72d16a6faff9f88dc656c8398e626651f5bc0416155171b716dbc823301e6f77db32547455f0d4b0995f88d70782d7446f13c69683f1893087ecb6c80b3ca0e53efb165f82f83e031217da7a9533be13b8889c3f6ec7fbe7cbcad1c2c46de2af9edc0589dfbcfc67d8c4a8f13a2b902c6f2fc48dd350ba2b8a4cd5dc191430f6df5d2118905fd7e59d453c199640400400008001f00", @ANYRES32=0x0, @ANYBLOB="101047802b33ace274c6c1639a6ddd2434c3bcd80af0b514327ad1f15ebcfbef461fc6671e541153a9826c1f0be93d99442bebe56e2fd5102bc77384c60fd6612a4b95c7df9a3762b9e577756d6933cc1e4f89acde76f7dae7258d2f0d4e2b3abe59f58e1bccc0e9986379e3a4db4a928bd929d61c8109b244921e97bf761c7fff9a4d5ca67aeb4ec6d4919bc3d98afe2a083ab903df9d1adf910e725d11c1e22687d817df038f9c20bfaaae138a6396ab9b2b86cec317569311e4416802fbcba0754f8b33ec43f2c197a1a1a87cebd8a64eb1a19602008e91ca09fc3dc0fae73b5e16a5ca3f1db3c72011a79b0a0f32ab5018dcc7c2a6525674c4d3514508e56bf64bd9c209ab0a2244c57aeed602d0f4f042a7df6271601a2d338593504b02e98f0e1a4e8ed087481e20b8e77b89d8f9a7be5acd62edfb490dad6d1aef89e6f05a33ba7e4d058bdbbf93777fcdd64314d82720da758366f3ebc26c54f29e3f9b941b2d59564aebbaafafafed5980bdd9446b19724f73b28a0c0ab29187efa795df297d8f64ea51e2ea874e834d44c1d5539e4e2434131ff6bf2ad13c69f0a32ddfbc4e04da0cb4c0d990adfa39762d65bf6efe7cfe5e4fdd8115c1ca85f72019de9d117e4b763d9ed870f28d7298f35911ee7cff79dd7f5c29d7b935b1fab64526017cb0e9f2b2f389fa8ddd6ebf778fe4b1528606c8a677bd0d906618c6bd4ed796f706c0af66aaf470949aced153747e9805dc89fba752007ad11ca67ad28cc14e03392271df55ed3fbc8a90cea4d63c51a77e2b21a9a47cd2faa7e0df32162028c94b9a8b4d97bc38777ad0b8e2fcb064892a60a43fe665cab09a743d4883e35f53538758f82db44e5cd93116d303586c251d0f6b7c658ca10e6ce849c7dc9fac896e83a31d35f62b159bcf2134d280c498ac64751618566e4d5d59ae6f0c6a1b7de95b96cc056d35983b70350ff2b68c9ac4fcb5f4d94d089efc267335865b4d89cb3de8f7b25765ba9c151883f942b5b99387fdbbd0bc6f2f68a9f1978ea66e94f6eac8a454eec59a93bfb024bf7fe0045c4d03d14302fc579e9e50e5fe67fb905515a2e966216c211bc9ae72597a5e65ba1d1743788f36d996959a72c8c409cbf2207cbd3ff4a2224d077f21203e62e4063ab102aa5fea7c7d85770a02ece21be79cdfe9cab5246e04b7128a822ffcef8cf2ece2c25c8f8abc83b524d8478a2792d56bc783acdfb9869c453138c58b3eb5c5e87225603ae1ac2433ff631172bbb3ee96b39a8545888af6c1426e9bf979ec5c7eec2ae264450424b6118e063a43e6b1f050d5acceed1a339dc347348bf6f36dc28ab8c7d9898adaafd1a30ee4e5f10ee76fa388fdf5f77ce34d79f275bfd93fef7203bc09f6428cbcad6223bf441d7dd9e0a5570bf37dad6ac6eb2cf592c80a0abe637ebf02048462dd047bcee5df6802c4abd4b0f69015cbb6a46d66788fb4657f6a7ce236a612e9c751f68bddb0315ab51ce982c34b2e89f383b7400944cfa0d8e716add7d448bec44822ba13cef8eca48ca4ecc7ea3cfc07eeb33f6822af4356a6d7468a86cb756162192703b03c5997d633f12a588ed62aa2704d67b08d7dbec7fe7dfc5f016fd1f387c9c56126a53d60641dc5727bc8093cb4b9f1e6d5973b2f6d80ec686928d8629664441477a916a96359de15bd06b2c2f28f65a48af0d7b5a05d6862577c20a7a687df7d4b65ef3e0624b2baa0adb2290f3301f45c8b4cfc449769de4043c0ec257be3437c5c25692ed2a4c563c08e2e27bb6ca89394f23613a5694d2c1c773106aadeee5fd70f2b9917fb7239935594911693e1945ddb12b372ac1c044a5212f2f732b578ac17d6d0367f4bbe96e30906af1f65aeed2a728c19eb6c3dc61899f14b37f40c74f4c6acb14197846c7d4428271660d2ca2fa788fc8a663a22fb6fe944947ec498aa7813f86153343dcedbc17ee221c87fd2260d0c87c0f2009feeac3b3f872c4bbcb26921ca03df22900f566bcfff12294f9d4ae09b4ae985caf61ecfa08ec6bf61f053db84a47bf3aa085f86f137015a6b7339ed1662cae1dff94d1a213a0f5174839559e305a789b5e533e53da565be8b5079e8d0d6eea010c49ccae7f08b0f26d241cc215f9f83b25be69f683fc1688607cd74d6c97b754f94696aa11e99e36a9f0501bf9deaf064acbcfd9d4cb0e98fd70522a1d5210b3763787607a1c90400640fa96a290052c44487b1d071a5eab0d4dfc6780b076cf906c94acd9d3e8e92827e7f9698d704b2448f841442fecad87386afb5c5fa6271f9120e077f63967604587f8d9f31f1c768d561d449e44303275a499f743dfc8fc5679f2e147c7e9bbca8d058b649e683562fb5800e270532d35f40f512c2a36ab2ca6939c8ecb7b6f48912cad846f1737e3587f14fd21d653937de625019dc56c32f63372d9098319e646345a438f4844f46b4caafb7cd19730191b9e474797c3caff946644aa31fef6e3e5a4c9ff8dcc47d8db1bd87c73f93522e358a8777e649c02bb4dfe9d812e961ab8994d02e384224ce0e2c0f70990afc6e6317190a970a349c7ae8b1a02896fbb7dd4183d43446977a6b642d150045fb7988ab6dc03ee9c06bf44cceca53dfa6848cdccb969a20c135f3603131c5a627e7ccc3b54e35b9ee6e7273190ef6718a8122ee594ff6020fa6f09bdc3ea92a77059c92e98303b95f07174cf6fc1ad35dd9955d0b200596758604dc01a6f127d5933c957d618075a266a98c831ccbdf84a1d87a7f3fe893dae0ca0b921c5e3ef0137805fa41605dc3ca06b6e87c9579319932968ee8b818421284ffad63bf3eabec2338a4d8e2318b863cf7fa747f8294cb9499070588d2a87ef9588d994069d0098844d26aeefb941d1b787ce9b8936fd7d2b17e327f45cfb162b53a544c4bd6770e5476af27855c45091e7e83f32e64df730aa1cef0cbef7141e0a73cf1a17ecc8ecbe19498d1117f6af77453e842121dd9272e1f1b248928abb6b554d220537d4d08521b2b048a63548c449bd0caa8e784b6b319fbf2b68bba235ca9e5fb932b5744f990b36f791748b9a0dda2b8d3e12e9ce4adc78a6b2f79bc37a6d0fa9ad6e59dc90427cfe14323426b94296fa76c2c139a2fa60ffab7a8a8575c8f518e3967d2dcf138fba1e1602da20820b7bd7db3a9f7c2aa35be9714eafaeba4f0c2d00d6f921dad20b77026007d491f680e04a36d1e282f12e60b9564fc2c47dfc38ade573c71b8533be146e50f438dca7b9ae1ce3545e82482866dee96e222ef71d127eb8ed5f6afa907dff34d6bf3b0ae1c1c4648fafe6e3a27f5c1eb97f7f4bf1ec4e8841d0a9fc536d58b83c62c5fdfd9182ec3be58155ec33cf2beb3e73a7047a7619f1469dc503d07948fc73e33ccdd121e368a5d4fd2998f63fcdda6cc380bff9dc14b232f8e31746cc4843fe1b3716dda182ed74be9e57b75cea1229e325b8c9c5c239788f65f7c47878a85777f27b3b0336424e805d4a45574303b5056732fe162cfe9947e6d2ac2b64ecd19d3b028c022d3f448a1917d3c6b4b3297bc590f9d2dfa7b093dd5e30ae614bf01ca582e189098b323a6bb4d27a76e71f5fb4a9920cf9f9ed17890981880c80ccc819b045e962504923305edd9016e827ddef4a0dc1096a2abef883d556b2b5b5488a368b5d346ed38c12d068d560ca99f9dd255c01f2b2c89f4761fef356b198bc054b7cbed0cf0b21ebe8f6324c430fc69681eeb98b2b9ed337a3cb9db7647561142f826931f5a388eb2f342e9db1215abda3189cd5e10b995dbb70ee6f00b0aacac16a06bb21613a0d0111ca9b626bead423c4f6eb0ffe9cb54dcf0c8b6e334bb0b83bbbc784721b0a116319c59abd9f5cc2f05cc5f68af4c5961e8f044fae338da2ae2fa5dc29f203990876b9b4a61452af42250d5426d5fe94a1e190d040678ebf6f34bf585e639b6921ab0b60f59d8aff5f71db7689466cafeb8bbd0dd1861285e335075ae98882138ef74101a9a05e86ee150cf20a574933290e1222640fb919d979ebacb6143037237410f1c1e259613fad28166a4a8e72d84d77574b7a3403f74e94e3d129589db1b1c7d4bdd159fabf43da6602c9464a49ea7b28fac974b37543081d63c74a068d29bfe66b928382e86fb89ce03406ea641addd8cc132c7217984cccd4ae18a9da3a5dee4ca2971949abe7651db4a765b95e2d5150598c670000dc7c65ead08479ba4b0f1537c626c22d02554985fb835a5f9da8d78b608ea668f29ae3b48dcbc5ec5961133ee3777eb2e1e8d51d095a5550caa7dfdd2b3050d5128212c53db5e19bf3cab376205885216e27d7c46b5fe1aa5362e8e808b5f295c41a06d690a1f72e9f621348c9109c103390a2d05b3e4ef3e4229ee4b2ea890b44417c137f2d09edc14bae29a0a2fcb921ac40937270d594c0011e67653afa49386a40d60f60ed4f2486b70023d610f138720b6a32da25be42849cc791afe411941389332823da60d29306da0372747ead32cc5c4b1f6d4fef752ee5d90ee01cde8c18f3046fbfc4e567c2994878741a5b056c2c1007ad30fbf69a51ee03d82a7af29709ad9d9805a13d17f6db6b109b3c7b5f9d9e9c12211eb060295758800422a5ee34a52fa1f810bf03853e791b8c5a0e3441700eaa34ed0a1bedf05d8e39d44312d21e2b14f0b32692a400f0274bd5111ec802fcb27d0a2716642e6c044cb5e042d1d5de69a73510f235bb0902c89c4f1edc7cbf210b7e4da590eb674031ec6d92b66963b4f8b88a46f184050f966f7b276ab8110eaace11a32ce90fe7ac01801fdc0ca42be105b59e9956c4bcc5cfc1b0ad85fafcaa4d061cc986171b185c220a9d8dc1d176bfec34fb4e7fb4e103ae7ad2765131fc8336a2bff3dcfc602b63570c937e937e31a157785718bc083348d6a775ecad372c30e1f6ad3fc718fe3c2eb4b9c1c96505a9c7f44c9d57a2807dbbed43f788132e9bf69caa40ae28a8a03299a42bb5d2177a52e3bc4fc8489102e9e51f093a7fc0dcd22ff7561158492eac4ceb4a48f81339bca30749f975aef207ca47c779424213701f1b110103b84afbef4c7cb6fd7c1f5eec9af09906920f663e55303df7500cac62b4617205538ff39c98429b8a6c917c89186a1a221ab17a9c00beb47fa088576231e4da121872305520a9bd02657187d3856e3145d3e9448b2bee4e7f53ee9da74f596a70efd6a8415f7d198c1c604ed5ea22274ea8fef255cbccb5b5995ec0f7d5c77b09227fb1ea0f803ef34821605362e0962e1c6bf6d97d7913537f4018ccb34151e472741ee608633bd1bdd33115dcbe310f9af9a6618eef800bf9a26159a420beebb619b0e4012e585ab63565fa0f2ecf4b6b650c8db9016ba54746602be29c5ca6d4ba05fe44dede1fe793761aa86b607c5da54acc44887b34eebd9baaa6df74746835fbb557efdd2a7f6a0a5b8a3bac3d8f17d89a8b6eadc5bdec48b6352af4bbbc70341b6e07284eb65381dadbdfedcc0387c163ab32778894787f6ce696a3ee753d9388c725af7796333c68625920bf23374a4351d316b7298be5b63f89bae73616cb2a5995858390562448b05211f6bffea31500808897c9b1f13a3d2a5413bc4ba55bb970c57e3fd05054fce56dda7449ea79fb1e2afd04fb5e59534a8ca7be2c47f37d995a19091dd96f91600721b62321a4d0f50d78e7caacc73ce7c68d219587242350564ff83eadbfd96901c28a20fc3735332aeb9158e559d70b8efabeb261900c4c7f9d469ebeb7349ea48fefab517bdaf200c003e00f9ffffffffffffff1f4e224134facdff30bb665f6b4ac285444ddb1b18cc64130b54000d004f60d6395be96655324a876f91b98737930fd2826eabfc4acadf42a9ac2511b76b6e01c42d08cf7eb504077f18b16524779736ce8fa2f2686b008d092d6886880a6c8904ce6ac55206a879cd5903cb8e8aa32676586b39b3b579c0ae529364b0994475c7ed526d7b61a7df065f697428249c6f7865ca4af0b13a810907e8ccee3b79490508102b763d1cc08bdf796c528c90bd0f6f85e747121ea8129e936a096e954367f7c23eb52f0e915ff9eb9267387447234424c1afbb76436631cf1ac483a6d299b66a58bdf091fa0c00b10008000000000000000800330081ffffff000000"], 0x11e0}, 0x1, 0x0, 0x0, 0x4008094}, 0x204c850) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r10 = gettid() r11 = getpid() rt_tgsigqueueinfo(r11, r10, 0x5, &(0x7f0000000280)={0x0, 0xa4, 0x6}) r12 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r12, &(0x7f0000000740)=""/384, 0x200008c0) r13 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r13, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x8, 0x3, 0x0, 0x7, 0x4, 0x1, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x2e, 0x4b}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x6000, 0x4000, 0x8, 0x9d, 0x3, 0x5, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0xe6e78c00, [0x0, 0x401, 0x7, 0xc5]}) ioctl$KVM_GET_MSRS_cpu(r13, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x80a, 0x0, 0x4000008}]}) 18.324653384s ago: executing program 4 (id=10243): getpgrp(0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) bind$bt_l2cap(r1, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) listen(r1, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 18.243306445s ago: executing program 4 (id=10246): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400"], 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010100}, 0xc) setreuid(0xee01, 0x0) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x488080, 0x1b6) r2 = fsopen(&(0x7f0000000480)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='/dev/udmabuf\x00', &(0x7f0000000100)='ext2\x00', 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e22, 0x800, @local, 0x5}, {0xa, 0x4e24, 0xc25, @mcast2, 0x9}, 0x0, {[0x8, 0xfffffffa, 0x3, 0x3ff, 0x3, 0x0, 0x100, 0x6d8]}}, 0x5c) 17.775043078s ago: executing program 1 (id=10259): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x7f, 0x3, 0x33, 0x248, 0x1fc0, 0x2e3, 0x2}, "e6e93b3ae38a30802a39a7eeada341c6c3ab89cbed48d2f18bca739f06887eec849777214f547f3ad1964dc7c0d20cc29da59b766eb477d5e4a2d680e21223b7622ac25be9cb5b017912cd4c0caa0cb0bc1835b2102cf36c058b49b52b5ab8da326e18472f9fc871d7fd48819a6e187e7663d9221615d4866033e4f74141d30ae5ac8a1979ce5dbb29f3afd3c354a183908963494f8dd97f8ecba26829abd6cf8c4acce2613ef55c78e65f0afc0fdec0ac31cfaf985ea25d2edc29869ad2c750bd7ea8c9b199af515ebf1e54b03b4ada4fc4313749433d9ca3e8c45d0be0d7136b9d49a3fefdcae987a9e9747ea396", ['\x00', '\x00', '\x00', '\x00']}, 0x50f) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000740)={0x2, 0xa6, "05dee739ddde85aa3403a9de23dbd5e9aaa54bccfa66c1e4c11050ecb23836c775715c3566311e8ca8169e729ba5a953edff2c5f3885858ee2cadfa5b893aaeb6c9ba5ce69835907ca1f4467f77b8795cf5947492a29448878b9cbfe71b4e770d0fec3ec17733526fb59500063924eab30c0084203abc9a0a5e6f41f2c7315a90105d1be439203fa6de2d7f3e43ee5334d86c51f531599e0a5acf199ae5bb70a15a06e7f3999"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000001100)={0x4e, 0x1, 0x3, 0x9dff, 0xf, "800300eb00cbe600"}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0xc0000) r2 = dup3(r1, r0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_settime(r6, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c5, 0x1000, 0x0, 0x97, 0x10, 0x3, 0x3, 0x7, 0x0, 0x5147], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000001140)={{0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x4000, 0x6, 0x4, 0x8d, 0x9095, 0xf36f, 0x2, 0x5d, 0x6a, 0x3, 0x2}}) r7 = socket(0x8000000010, 0x2, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000040)={'veth1_macvtap\x00', 0x1802}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)=0x0) prlimit64(r8, 0x0, &(0x7f00000000c0)={0x1, 0x4}, &(0x7f0000000100)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xff) 17.013464154s ago: executing program 4 (id=10264): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$vga_arbiter(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='unlock '], 0xb) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f00007f2000/0x2000)=nil, 0x2000}}) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4800, &(0x7f0000000100)=ANY=[@ANYBLOB="6f626a5f726f6c653dbbe7d0feff96572c00e3328be94e4cbe7115f41eef522879abd5080000c77150c26df570abbdfe593b5ad2eb4448c8af34957d34bc3ea3f1c228f86ab65d2dff3e2f1f56c9b92162555b9f5a33800310d9e30c0a48c94aa577a452a110ef37e766b49b1a7fa75f2f04ae22d9b92ede09770140786ce70f05880fae7effefcb9c16e77801b32b34143508885cc7c601e981e1e8f18e8be1e26f004c3a6f68604659b2992c4ee4ec062d68c43f99"]) 16.586678127s ago: executing program 1 (id=10266): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x100010, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000480)={0x42, 0x5, 0x1, 0x3}, 0x10) recvfrom$packet(r2, 0x0, 0x0, 0x2, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x8}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x5, 0xa, 0x5, @mcast1, @private1, 0x7800, 0x8000, 0x5, 0x5}}) getpeername$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'erspan0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x8000, 0x20, 0x81, 0x9, {{0x1d, 0x4, 0x2, 0x3, 0x74, 0x64, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010102, {[@cipso={0x86, 0x2a, 0xf645117b059a62fa, [{0x5, 0xa, "b4fd4561e2bf88fd"}, {0x1, 0x8, "da2e72aa0d77"}, {0x6, 0x12, "6bd61d7ba91a4add308a2fb64344401d"}]}, @lsrr={0x83, 0x7, 0x32, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x18, 0x3, 0x1, [{@rand_addr=0x64010100, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x3}, {@broadcast, 0x400}, {@private=0xa010100}, {@multicast1, 0xb9c}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x7c, r7, 0x40d, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000011) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) open$dir(&(0x7f00000002c0)='./file0\x00', 0x80, 0x28) dup2(r11, r12) r13 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000240)={0x0, &(0x7f00000000c0)=[@set_irq_handler={0xbe, 0x20, {0xfd, 0x1}}], 0x20}) ioctl$KVM_SET_GUEST_DEBUG_x86(r13, 0x4048ae9b, &(0x7f0000000000)={0x1, 0x0, {[0x4, 0xe613, 0x401, 0x0, 0x0, 0xfffffffffffffffb, 0x4000000006, 0x7fffffff]}}) ioctl$KVM_RUN(r13, 0xae80, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) 16.582641818s ago: executing program 4 (id=10267): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001b40)=0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="240000001e005f0214ffffffffff03000000000000000000000000000800090020000000", 0x24) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020127bd7000fedbdf250300000014000900fe8800000000000000000000000001010800080008000200060001004e200000"], 0x38}, 0x1, 0x0, 0x0, 0xc854}, 0x44880) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x3011c32, &(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRESOCT=0x0, @ANYRESDEC=r0]) 16.421030528s ago: executing program 4 (id=10268): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x7ff, 0x913d, 0x0, 0x6, 0xf42, 0x7}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in6=@empty, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) connect$pppl2tp(r2, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, {0xa, 0x4e21, 0x101, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}}}, 0x32) getsockopt(r2, 0x111, 0x4, 0x0, &(0x7f0000000080)) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000180), &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r5, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000057b000/0x400000)=nil) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x800) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000040)) r8 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f000089a000/0x3000)=nil, 0x3000}, 0x1}) 16.26853614s ago: executing program 4 (id=10271): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0x184) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x2a, 0x4000000000000ffb, 0x0, 0x0, 0x9, 0xc, "faf98317e5a114d989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfff, 0x40000000a]}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x22e0d09eeec38667, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x91) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fsetxattr$trusted_overlay_upper(r4, 0x0, &(0x7f00000004c0)={0x0, 0xfb, 0x15, 0x5, 0xd, "6e1994616a5da7db7d35cec7ccf564d3"}, 0x15, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0xffffc000) 16.155413921s ago: executing program 1 (id=10274): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000780)="df6556a8", 0x4, 0xfffffffffffffffe) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 16.083530691s ago: executing program 1 (id=10276): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e7551ecdef6"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14208000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x23) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000140)={0x6, 0xdddd1000, 0x0, r4}) sendfile(r4, r3, 0x0, 0xffffffff) 15.950957102s ago: executing program 1 (id=10281): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async, rerun: 32) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) (rerun: 32) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "2e5237601a87f08faccc1418fbc3da00", [0xfffffffffffffce8, 0xa]}}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ipvlan1\x00', 0x2000}) (async) io_setup(0x1, &(0x7f00000016c0)=0x0) (async) read$FUSE(r1, &(0x7f0000001700)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x0, r3}, 0x10) (async) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0xa8d58000) io_submit(r2, 0x4, &(0x7f0000000540)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000200)="4774d0088906e7", 0x7, 0x5, 0x0, 0x0, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000000280)="d1c685b7f2abd7221b07a262dc71dafb84c08c2207e5aa9cac4397d7cb4ddaff8eafd5c157c68f68f775b0e1fd72aca62fee14520c0cc45c8bdf", 0x3a, 0x66d, 0x0, 0x1, r4}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x9, r4, &(0x7f0000000300)="f2a040a016bd69b693f55e7c1fa8c8ec0a386ae5f83d3316efb34cf807d21b4004dd6a4f9e3b619cf5550a1fae524da1691b1b41abaf2ab40c772590455c62e19181bb26d842f07f171462c06a2ec92f958d21baaa1a69f7d2d9942c497cabc1c73152d8f179e45d62474bdd01497ca05aebb1abd7a28b1a6672d2f958f4dacdf5782af9b1d981f523ed3fdc2f7f5c485b0a827636b5", 0x96, 0x6, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x9410b1b213a4935f, 0x4, r1, &(0x7f0000000400)="b2e7e2e96dbb8e2a167ccac032314b7908fe86e21b1052e6fbc18859a27f316cadf9980d82bf5474af54e6f8c17ee93e449498349579e1e6f4603c330869205903a1ca1a4746e2863c549635197fb974d762c7a239ccde4d4c76b6664162b8505d3118431ec511b184a600225178d0e0311c986b896cdaca81ce5a88c6aa93e28d1ac862062c1fb1b84fdcf495cb1817f52e7bce3cbdf2bd10da64c6a0b561a45db75a224449efd13209860205be16a473a3a616d41d13afe0554c797b37b61afb7c10fa7c6fb0540957a30ed4192b5d", 0xd0, 0x3, 0x0, 0x3}]) 1.570358889s ago: executing program 5 (id=10477): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x210f, 0x1000000000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x4, 0x10003}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r3, @ANYRESDEC=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x81c}, 0x20000004) unshare(0x20040600) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 1.560304178s ago: executing program 5 (id=10478): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000005040)="3b4d8c4516843962c5c8f51da2fbcd8a0c36a4ec1e1dfd55b2c748a1b484c23ce735545be9e7897728cfeef5c7eadd497e5cf411d7d95c1b39851725b5a3db2e9c0c303df580396ce90b05f949add4d416ff139262c88fb549af08a042a0ef35d16151fac7d29f1dae9d3f7f6791645b5ac7d8412c661e6f731e7c361efca4bcf5f299a9bc49f3a48d731fe25eece2d61bbeb3085e0cf86f445057e71852239c05978f44fd8b9a955e2dfdb329aa7ae476d5896d122db28e1a325227c650e89a238b986991c3", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)="d876f725cd46c27d3c7403f4699c", 0xe}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000c80)="f2", 0x1}], 0x1}}], 0x3, 0x4085) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x68, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.529498149s ago: executing program 5 (id=10479): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x14b20000}, 0x1c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setfsuid(0xee01) setfsuid(0xee01) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) unshare(0x62040200) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000b699871c0300000000"], 0x48) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[@ANYBLOB="4c0000001400050925bd7000fbdbdf250a0603004e264e23000000000000002c0600000001000000feffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x26004801}, 0xc810) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB="72772c00534a8134caae188c70eeba6c7b0d3210d07b4b188b51e790da2757f8900aae9686668460ad88b48c0c84629a099c9bec112a553c0e85cbed530e0f512e63ead4866f71d74611398c11f457aa193506d7e5a18d393a37927c326fa5427010b40ae307bf2a345c946f0f9deee046a740e067f89c2cd396e6939e0ad9f4217a75bb50b546d4c45f4d22e80fa5b388f5e71ad433896e4b060468ba3aa3545d951023b192dca45c846e2e3e"]) 1.448140679s ago: executing program 5 (id=10480): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pipe2(&(0x7f0000001040), 0x80800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) connect$can_bcm(r3, &(0x7f0000000080)={0x1e}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000400), &(0x7f0000000440)=0x8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b46, &(0x7f0000000000)={0x0, 0xbf9e, 0x1, 0x1, 0xc3}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/7, 0xffffffffffffff3f, 0x2, 0x21}, @fda={0x66646185, 0x9, 0x20000000000, 0x29}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x1000}, @clear_death={0x400c630f, 0x1}], 0x56, 0x0, &(0x7f0000000380)="f22439c47e109c6096ea2bae1f7d03b8c44245ee48a8a255e0db445a21505ddddb4f9e2515db95a1de45d524bb52899f326bab2c88053f7a7475b3ec0373c50a7a4d67df5fde31db1a31325bebcf85b344c0596e65b8"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x400}], 0xfffffffffffffea0, 0x0, 0x0}) 1.35707312s ago: executing program 3 (id=10481): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000580)={'bridge_slave_0\x00', 0x0}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x149182, 0x0) mmap(&(0x7f0000422000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x12b8a000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$BLKRRPART(r0, 0x125f, 0x0) fcntl$setpipe(r0, 0x407, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.311210731s ago: executing program 3 (id=10482): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002a00)={0x14, 0x24, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x44, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_OURS={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xfffffffffffffef7, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c815}, 0x404c094) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1a8) fsmount(r3, 0x1, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r5 = openat2$dir(0xffffff9c, &(0x7f0000000280)='./file0/file1\x00', &(0x7f0000000140)={0x20340, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000240)={0x8000000000000001, 0x3, 0x0, 0xfffffffb}) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2a40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x16) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r9, 0x8010aebc, &(0x7f0000000000)={0x2000, 0xc000}) signalfd4(r8, &(0x7f0000000140)={[0x8000000000000001]}, 0x8, 0x80000) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r10, 0x4008ae61, &(0x7f0000000300)={0xffffffbe, 0xfff}) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) 1.151915912s ago: executing program 3 (id=10483): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x17e0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x8, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x5e}}}}}]}}]}}, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) keyctl$session_to_parent(0x12) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/custom0\x00', 0x801, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f00000003c0)) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0xc0) (async) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000280)) (async) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x400, 0x20, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x909080, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@ignoreqv}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@flag='rw'}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@flag='posixacl'}, {@hash}, {@smackfsroot={'smackfsroot', 0x3d, '\x1c)\x83'}}, {@uid_lt={'uid<', r4}}]}}) request_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffff9) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xca40, 0x20) (async) r6 = getuid() quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, r6, &(0x7f0000000380)='./file0\x00') fcntl$getownex(r5, 0x10, &(0x7f0000000840)) (async) keyctl$session_to_parent(0x12) (async) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x32, &(0x7f0000006c00)=0x1, 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x8004) 1.151335062s ago: executing program 40 (id=10271): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0x184) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x2a, 0x4000000000000ffb, 0x0, 0x0, 0x9, 0xc, "faf98317e5a114d989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfff, 0x40000000a]}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x22e0d09eeec38667, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x91) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fsetxattr$trusted_overlay_upper(r4, 0x0, &(0x7f00000004c0)={0x0, 0xfb, 0x15, 0x5, 0xd, "6e1994616a5da7db7d35cec7ccf564d3"}, 0x15, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0xffffc000) 1.151175642s ago: executing program 3 (id=10485): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="200a07200000070f00f4000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000005600)={0x0, 0x0, &(0x7f00000055c0)={&(0x7f0000005540)={0x28, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8009}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1006}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_FILTER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4894}, 0x0) (async) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000380)={0x9a5, "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"}) 669.111495ms ago: executing program 41 (id=10281): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async, rerun: 32) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) (rerun: 32) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "2e5237601a87f08faccc1418fbc3da00", [0xfffffffffffffce8, 0xa]}}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ipvlan1\x00', 0x2000}) (async) io_setup(0x1, &(0x7f00000016c0)=0x0) (async) read$FUSE(r1, &(0x7f0000001700)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x0, r3}, 0x10) (async) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0xa8d58000) io_submit(r2, 0x4, &(0x7f0000000540)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000200)="4774d0088906e7", 0x7, 0x5, 0x0, 0x0, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000000280)="d1c685b7f2abd7221b07a262dc71dafb84c08c2207e5aa9cac4397d7cb4ddaff8eafd5c157c68f68f775b0e1fd72aca62fee14520c0cc45c8bdf", 0x3a, 0x66d, 0x0, 0x1, r4}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x9, r4, &(0x7f0000000300)="f2a040a016bd69b693f55e7c1fa8c8ec0a386ae5f83d3316efb34cf807d21b4004dd6a4f9e3b619cf5550a1fae524da1691b1b41abaf2ab40c772590455c62e19181bb26d842f07f171462c06a2ec92f958d21baaa1a69f7d2d9942c497cabc1c73152d8f179e45d62474bdd01497ca05aebb1abd7a28b1a6672d2f958f4dacdf5782af9b1d981f523ed3fdc2f7f5c485b0a827636b5", 0x96, 0x6, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x9410b1b213a4935f, 0x4, r1, &(0x7f0000000400)="b2e7e2e96dbb8e2a167ccac032314b7908fe86e21b1052e6fbc18859a27f316cadf9980d82bf5474af54e6f8c17ee93e449498349579e1e6f4603c330869205903a1ca1a4746e2863c549635197fb974d762c7a239ccde4d4c76b6664162b8505d3118431ec511b184a600225178d0e0311c986b896cdaca81ce5a88c6aa93e28d1ac862062c1fb1b84fdcf495cb1817f52e7bce3cbdf2bd10da64c6a0b561a45db75a224449efd13209860205be16a473a3a616d41d13afe0554c797b37b61afb7c10fa7c6fb0540957a30ed4192b5d", 0xd0, 0x3, 0x0, 0x3}]) 617.724736ms ago: executing program 3 (id=10487): socket(0xf, 0x1, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf1, 0x64, 0x10}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xf8, 0x5}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x6, 0x5d, 0x2, 0x40}, 0x45, &(0x7f0000000140)={0x5, 0xf, 0x45, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x2, 0x7a}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "e0d4edf8a3ee3e4202f36ea4643866ba"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "c70711329c1da9242ecabdc79cbd31ee"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x5, 0x74, 0xb99, 0x2}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x429}}, {0x8f, &(0x7f0000000200)=@string={0x8f, 0x3, "070dc6ebbf1febfa0b4516ad62b8d48d865e6a5e1e30f9b0e666a487fab7365af7d8f7d14d6ba89cc3fefec258ee9aa58ea1c40b90b8b5256911062cf4b9613303c24fbb26b0c37337eaa1933c42279f249b75bcc7460ece05d25f5e462aa708a95d158d632d39e37edabde41037474d434f69d76b5a00949089292a9f0f921eb09907e1463236a48f30080c3e"}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x20, 0x11, 0x3b, {0x3b, 0x11, "21358cfdebe6b81d13a2b151aa7aa8c8594d832b2a312fc85270c9978989fa56417f966778aaf17d82f6e538d6cdbd890726aa527c5b6b3973"}}, &(0x7f0000000380)={0x0, 0x3, 0x71, @string={0x71, 0x3, "befbd713c84a8ca584382f496cdd9b7e643bfdc982f06d9ae6ef1fe558a363c8a56d0a665c295cd7e92063976c56edf6b936612c641df9f316c20816dd86936f8a7606377b711ee94077cf16ee786446ee5a0bd052310366c409586592687e51a560f4642e0d6655df856e77c2b0a6"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000440)={0x0, 0x11, 0x5e, "83640001d02335e072ee5ce663ea71407e6cd04bab47f9231089c58bd0fdce1a430d780b8146ad2298e97379310bbfa65ce740662b1f01eca634ef7af674767c28daa64e1cf201c59343a98b341077a6b38264827fd1f4e71e581ef4f96c"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000540)={0x20, 0x0, 0x2a, {0x28, "13b58e9b3e26e791577fd9f73fa446db93445201561fcdc3eacfe93307a5c398a76365b3fdab0612"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x68}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x8}}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 576.222366ms ago: executing program 5 (id=10488): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x32, 0x11, 0x1, {0xa, @udp_ip4_spec={@multicast1, @multicast1, 0x4e21, 0x4e22, 0x5d}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0xfb44, [0x5, 0x9]}, @esp_ip4_spec={@local, @private=0xa010100, 0x9}, {0x0, @broadcast, 0x46, 0x3ff, [0x2]}, 0x4, 0x2}}}) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) 539.045636ms ago: executing program 5 (id=10489): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(r1, 0x9) syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0) (async) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000003440)={0x14, 0x0, &(0x7f0000003400)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000004000)={0x24, 0x0, &(0x7f0000003f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc47}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000004000)={0x24, 0x0, &(0x7f0000003f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc47}}, 0x0, 0x0}, 0x0) unshare(0x22020600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FICLONE(r4, 0x40049409, r3) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="0030d9000000d903194f114397cca089643731e585664c8b80ca9f143b02fe94d9c4d9ffebe5bc8f0d734de85ca1efe0c0702bd6c107c68a82"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_clone(0x6002000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)="5779377856374493573beed0a34827bac7d25e22ed0b013d42d4b5fab076e88fab32ef74ffa9ed64467297bc9f3b9513d88766203b3245636c86752e53dddbe637726f5215c6e4e2f11fe65353cba52f15344fc61147a4e7da204fff6b6159ef7e222018bd4985864e55b29c3d1338217707dd57176ce4f69b5592a92ae5f0422a086a09248d91f86e79dab686771bf4f065d896d7d3e961ee0553bee8e1e2b06206d34e7c863853ecda68918c350e207816400ef43d926584cfc90d013d6f14f137f08e93c873b99b8fb113cde34cfa38a9") write(r1, &(0x7f0000000400)="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", 0xfffffcf1) (async) write(r1, &(0x7f0000000400)="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", 0xfffffcf1) 380.679917ms ago: executing program 2 (id=10491): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030", @ANYRESDEC=0x0, @ANYRES32=r2, @ANYRESDEC=r3], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$rfkill(r5, &(0x7f0000000200), 0x8) r6 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$tcp_congestion(r6, &(0x7f0000000040)='bic\x00', 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000004c0)=@req3={0x410000, 0xffffffff, 0x210000, 0xffffffff, 0x3}, 0x1c) write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB='1-6:'], 0x31) readv(r0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3) 255.881848ms ago: executing program 2 (id=10492): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000000)="521244d489b2e653", 0x8, 0x4000, &(0x7f0000000040)={0xa, 0x4e24, 0x7f3, @private1, 0x10c3}, 0x1c) (async) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000000c0)=0x28) (async) listen(r0, 0xffffefda) (async) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x800) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @loopback, @dev}, &(0x7f00000001c0)=0xc) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x8880, 0x0, 0x17}, 0x18) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000d01}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x2}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r4, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000500)={0x7, 'nicvf0\x00', {0xe0000}, 0xe000}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000900)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f00000005c0)={0x2f4, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0xff}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x2d0, 0x8, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x88d}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}, {0x28c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb0}, @WGPEER_A_ALLOWEDIPS={0x238, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4}, 0xea6a718129a84ef9) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) (async) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000980)={'team_slave_1\x00', 0x1}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x12c, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x40000001) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x68, r8, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ec41329fb916"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "886b1e024390f7ffcff4a6866a54e7bc"}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) pwritev2(r0, &(0x7f0000000f00)=[{&(0x7f0000000d80)="12f53a81bdf99208c08757499cd0112d395a60604b38d17739e8312f2c468fae6493543c8bced2b9543f1576fdd45e9fbf453460d18f84ea053512e17caec5e0a56828f11629bcd12fc4c2da35a792c2a92fb674731048f2f0ce14d6a60a531dee2618c91c3ca575a5f86d63b1cc03a595ad92620895db21135f498daf88d76c1bfb66e04df51fb1333c084ac78865b55d7fbd24504a086359aea2cbb39c19bf4485f74b27f8ea6a609fd2f235ea00d9c5a4325d6ca4ca3a285405a141a53d69e83ea9ec680b1cab2b580d", 0xcb}, {&(0x7f0000000e80)="0e526c5717ed798b753558c4d3d94e9bf9e6709a32787335c9c7a3a33328d3001eaaa5256e8ef2490410e9a61fac0015418b2543dae2d6735f83b88fc248aed2a77ed719f533fb7b9160bbf6124d6db5660803abfbba8d4e0d1655d9b0a536e28e5b0d3d2cf419f5abdef67ebf1026b07dbf", 0x72}], 0x2, 0x7, 0x7fff, 0x8) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000001100)={0x1, 0x1, &(0x7f0000000f80)=""/235, &(0x7f0000001080)=""/31, &(0x7f00000010c0)=""/40, 0x6000}) (async) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000001140)={0x3}) (async) bind$inet(r1, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xe0, r4, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x80080) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001380)={'#! ', './file0', [{0x20, 'macvlan1\x00'}, {0x20, '\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, {0x20, '\xff\xff\xff\xff\xff\xff'}], 0xa, "abd6f4d36de40e268fda0c989ff2bb1c19ce5827a6ba1c86c06c8697e65552a2d8c744a0e62a5708bca7346c5d3380191b5d146117d6e1ab7d6526f33738811951c866db59a0c9d1998196f910b8e1e32197e1a45b932d7a760b77defa003cbba08edcddaa3b4dffa0ac74634d32643954cebe7ae8f7eca36c2c3885c7fe02827b759e5fb152d8cf4905c7d133f380744ac65baba62f1bf404e38429b0fca583733d60f8d2db546c8234dd1681ae2e936919a754ce09b4225d4e3cf6014ca4f14a"}, 0xfe) (async) ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) (async) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000001480)={0xa, {0x2, 0x3, 0x20}}, 0xa) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x14, r8, 0x20, 0x70bd29, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000a1) (async) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f00000015c0)=0x3dee, 0x4) 238.325168ms ago: executing program 2 (id=10493): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x7, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 200.956689ms ago: executing program 2 (id=10494): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 116.058739ms ago: executing program 2 (id=10495): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000000)={0x2f, 0xd, '\x00', [@pad1, @calipso={0x7, 0x50, {0x0, 0x12, 0x6, 0x9, [0x1, 0x82f, 0x5, 0xbf94, 0x1, 0xfffffffffffffff0, 0x100000000, 0xa, 0x7f]}}, @enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0xad}, @hao={0xc9, 0x10, @private1}]}, 0x78) (async, rerun: 32) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (rerun: 32) r3 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r2, 0x200000f, 0x30, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 64) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0xffffff7f, @local, 0x6c0}, 0x1c) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f00000000c0)=""/185, &(0x7f0000000180)=0xb9) (async, rerun: 64) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000001c0), &(0x7f0000000200)=0x8) (async, rerun: 64) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x800, @mcast2, 0x2}, 0x1c) (async) sendmmsg$sock(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000300)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000380)="0e4b2345d13a3e73097a5210893cd0f6c14c09064dc8b492bcd00c8399050682cabc1063bd79e97b46a22a2fafb74b4351dd3170c7f6c5e0461661a0b799efa3e831c3c544fb839387eef16021452ea3ce67f64bf1c724fe3efb5292525c637e59f2a2cb526dfa4805417c623b2e097aa218746cc2059a9d517495003313bda49897a927f078375d05d9fd7af8af9c6363c9ee07f06a7d0d638459df5106f69401e09236abc7a618a5a292df4b1cdb15ea770f28abe7cb3c6547941ce95820d7da89ef295b2145a49c6a6a1c33ce991ad0c561fade9725b00d22887cee94f05e0e3616c511a6351675370ca99ed9dea530c52a94f5afa2e7644f82f91400a6a811e6f9b3afdf8bc53b993badb63c2792e19cc573aae06b1c5bd1dadaae7c7ee8c801df47611e4e23d2435d42cc4d3f7b9213fb5425f02f9d1da5b5878478738b6a64b5955f7f481959cbf16c9da4e1744f2083611132cd75ec73e19a916c19992f624eff1a5d15df6012c6b24d3dcc0032483a9547cf0c2b8ee5cc0054f0344b39166eb95f4d19a06972380557c8423199f747f4ba145e8088a471899cdf9de7bea0fa3a975f69f263ae341162dbdc57dd7334d6e80a79d0d7cbdc273c2d13555d6b27d4deee81186d822f2086275424404677fd667dfe5ab912ff0e4c02fb11cc838956210731e553afc8a03540b45e75259daa123bc3a3f3a2460646740ef5f77263badd1769cfe5005ca2a8e49a13e50dccde5733825970e5422285f162630a0c93e481634d8c8d7d02a5f11cd3931346004a29ddebf6a0cb93e3957ea915454b6581432ea7cd17a976b652c3b874f62a5bfab410742843bee8aef31c39f0c07365549c50a5d7ef3e846ad66262dae638699bc7cff0d1af6d9660b754c096bd42abf80e304a52cdb9147cb7a03385286a8735af252d60b7ca12f09e466c2b625cbc8cf03ea8e56e790492cfcb826c4eb5eceb02bc5ea7edb541876dc55a364a803f8744e3537e12542d175545a8b66dd2d7ead9798cd38c0382623343cbecbcea6e67759edb0333b68cf7bee8655fdbba8b7ac09e15946aad8e1aa62bd5b53f075c4971b8546945868292222289f86d069a0ea1a954ce17791c46fac9bb759dd43627009dd81ec3db0275f01f0c33296c06717ba6145baf15f9f139e27ae2c9290c12f05ff4612dad7432bd7423dadb70e05b31e5160b1d9aa28ab6f86bc95aefdd0ada3fd5afc27e6b9feb1aae1b8c86e60f35086c00a9ca1933e6554a2bdbc57fcbba15f2c2150db062adf7cf52a9b997d1e83ece68f8834098f42b2c9de9ddffe6b5f83e872ca836b09480bbbc4be6becebebdb39459501396ffe864b1ce9cb40748189cbfbab4688fc539c68d7e85158756500ee264df5582078991e1ccdc8c3738f31af545c508d92b767565e403de297bd41f63a8a54028d65bcf2400d5f523da299178439fbff0f58383b22973de4553ea892c3521adbfbf3577e66495db79fd23c1c150469aa36e4feefcbc14d29da5fef89130c2ea4e78ec30d8b7b2c22879ac8b680a78b62e31ee41f00767d31e4eb402e70474b3baa6cb691b4c3e2abe729ab4fb0c793c4b6e510c50d727ce353e5c98469504a0f0904e7eb9281f6a67738295fa7eab700b4fbae95e71dc10a9a8a60c928ea9f045e0570c159e0f3bdaff900be6126e39935cada022c744d8b3f72920814514572acccd707b2fb03b5a1e6495a3d3ddbbeaf862c34be938387bd638e94b2c50141fe386d084cf2a7d24b8a1a3dc9b795b0d223b0fb94b53113c5c6553d1c057b5a71f97a1d8c1a190ce6723ba8edcac380ff458c81ed9ecc0f8df39d17f2e84262db650bacd3368fa2228a6699c806239030568ebe4b83b7fb4f289f64dc5d2a8cde73a3baae62b7b483c80022c48bcb9a836dd4c0b92422d83c78e41f61598925d5a06a480f763b045d7a21e476e8706d5dc2fc4d621e74dcc67c769cb7528bf37152ac7a9250d4fced2167b5c21977a910f9c81a7262f91e60e87dd4410789caaedca9cb3887dee01089c07393f02dbaeb90431e7857e6a6cbf159c2880b4f9f08cc776fb12a54fb2f3ccd8e200b0b442447ae9fd0116c070628b643e6eec10a140438d9f116903f291c8fbff59dcb2c117b3d8793d67fb6662860a9b5fdc124f384ed9f8974b3ac7349aed7f79f6084927da53edbe7f6f4e8c1ab813def04238f8580a96bb8df408107bf88b349614ec677ddd385248ef51733788cd7bd6e4408d9649b8c04572b7a80c7f3c12cdacd4445c9f20aec554f61c5be4aad188e58f0406024ce1886608ad58078595d48987e0deb9cdf4d6a8042f60cf53691b46c60b5416286bfc614aef2888ba1210cb2e86032684bdf8abf4cccba8ab1e0be5f27d4075395ae9570a939aefe7bcc7a7ce982ebaa41a5c9c3db60a840badf2bd8179231f7e26af3cdd077411a8a2bc00684299184e22e0da8e0f8b126ee7a0a14491c334111c6c7e33f2f786e3eadef8605c2aa1ff7c2113ab999d5b89a84a22931823c877897941fbf76e6d1c0a996f6efdd971a13d70ff31f0551c3294d020d4179856839ef9da8eb222be8bf099db3b9abba4f4cff309ca41f9c725db48b6f7723702ac63d06da7f316142446d6e3077c9c50950cd281cf1dfbde3f94c875cb6be63560c13e93bb1ad6e9c1560a97d9e8cc24db39a18045417fd83509bc0240d79bacec36eff9d1aa98fc4fb6a21f4b2ef639cf63ebb153d4e6764d8cbbddb268c2ae0caf3940e775cef7f068d8b41cd0ca4c077c876d1e99d59005804e2401d53cafb208cba173dfd452f292b4c89ab13efa4165737ca3a4704087d162f4159209423d5b71aeada48ae734056132b1e1126a5a40ae528cbbd03c965b8788e52af9dd297d6a231b48a0d69a8c83f8dc974a0b4df5f3e501119496edd10489fc3573d483468c22f2fdc9381ce24813654f019557995e693c1a17602c78013b1c7e285ab55ed2e69a923df920018e0acdaa4bb13f145f37d02efdb2730058261b565595e7e1469ab66a0a7b57369c129ca6bfd3f3e0308d20d6d2eac8b199428f32f363df692daa90c1390b0ccc1da869bdb5d4ff3525416c09336678259ae3ade178affa14d6a359605323891b388f210e07e25dd2032f5d425978c9794e68b822d2162d90e28f1b77a05a25da0ad605e08f0aa488b1cfd1d4ae28bb0ed97bd3eec766663ec6bd6ccb2d2b52979c907a19b98d003607667a784d360640eb53aff1564cc44398b9e526abb8f85d02552113e59df78519a8d926ccac848d490572ffb7c831fd32d0ec76223d39aad16dcb954ec1f763211a317e103720bd848da4288312b2c417915c34a0fa4a0a706197462028d6d7717e7f38edc6a16b242123f172c33ab8555a2e3e9c19bd0d70c723f5c7f6d258e0778a0c863c102857712935fd4371edbabe4042945eda628dd5dc4bd7e832d372f8ec8a895ee75582151ba0bf6137cfa3cd34821d58ad4e08a25f49310dbbcd95a6c0553f93b7519004fb074368a39c65bf4a342c1acfd31028518547ad50cf1028d09a50d663e1dc4aaea08c7c409382827a6ad0fede5d2e24a9ca2797ca51ef1a9152417bb80d754ef83cc8c63c3976eedb496f3e9edff40823793e5ec84cb1b752bab6b0384782042b5ec397a5c3278d87ae78bf3f3955e4b7b0faf82ea579d6745db6aa0e9b9ee700d5d78b1d6912cebfbc66453d81ef356fb793de536016a44c2d703756d193558b91234aa541fa8cc7200f8853256300b96dfcc0b92d9e576bc3d589eac1966cfd97ca4b3d5f7ad2755345a31f593cbdc02acb55dccf56f7d858a3c1d6db9ea95305a68c4605ba0d8a2983aa60755f50c06652ff75960773fc31359158067524f9b4de19ef01674b10cbd197c953632dabbbdb3749d42986951d1ef5cc6815a05b45e827177d7aa1e90aa65da28189450863748bb266d4ee8baed048247940db06227921aba1f4497be575ca96f19c975d001e25984069d43135c139b7ed47ad2bf5906beeaadccc2ef314db8a421d87e4ba6867205693f86136d633cd18b429d27f166037f563e5a1a1890941aa2b1800b962d8c124cf8c470df26c8529d59f27c5035822eb1afccaf7e569955827b569712e1bd0bfe9d3b293cc93169d2bd60070362ebdebfd8bcd8e000e33bc2e62014b59c1ae5e7aac51868b6561a4e7e1e5443d7d19f461b32c7953edcb473c36ef742d7d63b784394578f025158597824133298cb8cbf136b1984bf29ec8cd991ac1abb171cf79f1589707e1bf20c58d63a8fe4d24049269c82a7bf957593ef2ec322d1bfb8a76662c72698db22497a5e6c8c5ac5b55340971a9067d972d1ba024383034ee4147b59fbb782d1c27f5989fa168c2c1feffb4085e50910cc815993272a3e03bffd2ad677fc978bd678ccc277036a8fba3d90d623235b490fc3d5ef3fa16e1b12710f538e31c4116b7f92455c97f9f123813abd6b74b914c7a31f8196524cba5d3a26cb781a81db0175c52132d09d3def74c71812a530ccd6b81e286fa6964d336c172e983380eaad2a32f37d9d6772ac02d3a68b7ccc8e651d95698792390de3098ade19db0a9bf5f9dc8c713bed2bf5d434b5a5401434b798650ef3ef3e3ba57235df9862236b43434ca31e40ce810eca2ee459d3a273bfcdd85b82efeda1d7bfb6bc26beb52d5f50391f892be7321b597008fb01cca031174570c38c83b4363c8303ba63a5f830d52155503521f36558c5880705241817f54a1537ad8b196eb8495d127531dfa226970de1b9aba5eb5a1bcb70ddc6bfa47ad952f9cfce80ed09165bc327a5a2dd1d743806c1cc182a6708cdaaeaeb332b34e562474ef17df7c0d45e198f0027e94275ceeaad11376819fd15fcc5d3260ce9f400d7b942a2a71f0ada8575e2125819453619d5ba05a371c6314728d7ab8d5eaa4e89ab1989cfa4d74475a2451f2bbf0001c9cd1457bf82c63a5c6064501e6140739f52e8f92a931f6df27e817e0764f86c0266cb1ceb8e2f0ebf99556f2e39736158aa5bb478b99f375d1029ccb22ddc3caf5ac17ce7e2f27e51559b799122bf3062510222aa5efdd7980d5314f9a94b68a36c5800734997ac98798d82751a66cd600b5c4eeaf47e4ef88521262460db74a51c7fdb529554dc04c21ab76381555a30b379544d41ccd2e219a8e9091ec935df548583d42d9020ec2b012874971fc7bb0a00b02c95b0f4753dbcbda284bedf78d36b115df3015a33129fccb932d5acf928b0c13482f065029451a9aed9bc7b143248fcd037f52e0de0cee1d62df874e787e0cc76a2c544730b3a331b1fa406d6839c3d1afa5242b93ec70cc23b40a66406876191e65e4e44de4b75d5d39273443c90d86de1bb2213233b6836259d5812a8a40e7902acb7423073f289612ce0fec01d07c74c502aa419ae9eda579763ded868a47672c10c495be181737dbf206c5f8cf806ef149327bc421aad5eb84f47e197fd72a919201ebbd4c0d5c1bd751e3e9c5b0919e8d822aaf8d0e40ccc5e5482ce478b19517b9ac9ff6a17aca0de8617e594bdcd5ac7d4beb9ea005e9f8cc25308bbb067315a84821341fda5ec600cdd0d7608f21db8099955d4a2fc99f68d03ecd9c9a74013df74e231f34040b756a4ceac2b404e7142d943f614782ca63ae2c325f5e683b855a3839c0f4a560f46a3900b337f70703f6e4e5577f081eb45d801940def586bc1b956a04f380a3b43754def8b9efc5b041804486fc9e46a3c86df47f768cc30a7f53583717b6bb72dccae478", 0x1000}, {&(0x7f0000001380)="3e019ec015133afa68c0849dcacae80c5dce938ca5dea695130e33028374cad1d6cbdbbfff2c3e15e834548b79b164d0701b92a598fa5cacaa612fe737ba", 0x3e}, {&(0x7f00000013c0)="9641b02fa4933062f79e30504a84135e84c67bb0ec0496bb9260fb63a7d97a2d12643808cc6dd033f984a8fe3aba4f2c537d3b3934bb742e91a637c054803c9c41204985c64635c7b591be86a8741163d2abf7a358e614f02fcdf4f6f2e7354e5ea2c55b348aa717adff91bede823308afbc24d14edae0c0ac066a75396177fe356dbf8332f0211195753c", 0x8b}], 0x3, &(0x7f00000014c0)=[@txtime={{0x18, 0x1, 0x3d, 0xb3ac}}, @mark={{0x14, 0x1, 0x24, 0x100}}], 0x30}}, {{&(0x7f0000001500)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001580)="40eef65c1a3121c34f8ac7573af7fec96ca1166e70bb179f0433f1e9914fa4583b6ff1a5cf720f53a863a284564d70ee139f493f5faf5ae80cd67b854c20e959af1fba82391d38547258b142da6994648603a3d11507f1cfddd635a1177762868fa193d66a464272a21d64c71aa4164c2f55f86db32129624184411da7628fb79e10eb2b7b6fe4bf73952cc90417f083eccaf074271024b8aff247117e6152e68128598e2ea6a19e9818b07b42502435f63b1360ba386f1dcc5d1d1445a68c0a", 0xc0}, {&(0x7f0000001640)="5543402642730995064b6e948a007ef44d5c29ba46a605f038c270e94e0abf206a8d9ae2f9f0efe16cd6ccece9c8d8ef3b0cedd742d5d0eab8aa306d71319007093795033dc4b98229061c2c0ed46d8335bd61b4ec27feb6fab799603a4ec7d9502e656178946f6df19cc946ac5c3153d7fc4e7a2e0705e3bbc43442f7ab2f35b3435330fd9d432a5a7e0610ae0af0a0fe0936bb7ff73ac5a5c151f6576e0557fc092dbdad42baa0191a1b6ba0c4903f53eb7d813ddb63a20292e58c23a9fee8841391c7bf7550b743a01c2d618e69ecab2aa8aef9a8a8e9b742b67bc1f4085c950d226dd06310222f48387ccf", 0xed}], 0x2}}, {{&(0x7f0000001780)=@l2tp6={0xa, 0x0, 0x6a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6, 0x3}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001800)="1878ed7f0637b245265d10adf6756c8e3e058528e4b754fb2f8691e52f7538ac28f817f126ea4be06af053e117c0a680a0f27f40fd4d9b84e7df64d4ec33059edfaf9d17a3c09032cd656c20ab5571b914e8e49e60168329a8070b3c94acd305206ff0fad838843599d36156828929e5aabcab1185063bf212e49fbb7bdaf31379b43529dbaf914897b175a18033dc879281a5c6509d004dba302af90a09bf92ff9dbf1a63f98573c7b721ccc2e134a43169be74a710b5350ec5fbd029", 0xbd}, {&(0x7f00000018c0)="f84f02d3a0c2f23d48346d79d395f1d504648a75dc8148ec25c863fc20515aeac421d61a01c497da729dfef14ba698b239a7abbf0b7005eed5500044dcef6456d185e2d8038d8ce9b5b03a097d8a1a7b657a07a51e1622dec19642d0208ba1359355f50915aea7c9233faa499422bc492a8a4bfe724e44da0e1191f279307121c3f017b5373960fb3e1f4f81a1495019e4853ba7b884ade5760d8bae93b5ea7805827d6f9fdf0ad186d2c252e39a9c0bc790593e059859eec233b65a47716a95bb76a994d95df676feffbce2904cc4abbea922a75a6bb79b7f2db5b3663ab6068eaeaeb39bbe2036", 0xe8}, {&(0x7f00000019c0)="162108bfb94a99fefa692bd3d6a22d189960314f2541fbb06ad0d8638c325d4029d82e833aad2d92fa7ed0f8a6809b646b1717c04b530b74397fcd2147f55b83e3f45a16ffab15172e89071b94e39f5aac340547b2cc55134b839cb058da52d13d20409166e9b7120582017611fc4678f97fcd425d1c81a769338803cd0969443b78c975587749d1b7fd1e0b3dd645ac7bada544ec9263071a708bb94d98e14b63f308e752ed4fc44f49b23bef0ce55b555a00066892d10541de6bcad34386ba8224ff43297d8aab6126f3db3a5817b7f1c71b46c504de817f295078c3de1614cd1bedf2", 0xe4}, {&(0x7f0000001ac0)="b6a6e274e1de5662d4a81595eaa45a5bc0c567eb9e8401ec4d6008d7f3caef734d0eca1fe8c93d165979c2f40de0293a94d632ed606daa03839b22", 0x3b}], 0x4, &(0x7f0000001b40)=[@timestamping={{0x14, 0x1, 0x25, 0xcfe}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x48}}], 0x3, 0x800) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000001c80)=0x1) bind$inet6(r0, &(0x7f0000001cc0)={0xa, 0x4e23, 0x29ed, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x1}, 0x1c) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000001d00)={[0xe]}, 0x8, 0x80000) write$selinux_create(r6, &(0x7f0000001d40)=@objname={'system_u:object_r:su_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x2, 0x20, './file0\x00'}, 0x53) (async, rerun: 32) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000001dc0)="d59bf0a046eed9e0747c6be39976235801498c6a8557db0ec635d67f7393c00fcebcfe7903614c138465704f4fddf4cd6d2a87d46f088efd8d0eb5fa9ff0ede0426f20fda5e475f2", 0x0, 0x48) (rerun: 32) r8 = memfd_secret(0x0) close_range(r8, r7, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000000) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000001f40)={0x3, 0x5, 0xd000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000a, 0x50, r6, 0xe7680000) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000001fc0)={0xe, 0x30, '\x00', 0x1, &(0x7f0000001f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002040), r6) sendmsg$NL80211_CMD_DEL_TX_TS(r8, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x34, r9, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}]}, 0x34}}, 0x10) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000002140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 74.80075ms ago: executing program 2 (id=10496): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}]}}) syz_usb_connect(0x2, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e01020000000108000b020102082407"], 0x0) setfsgid(0xee01) (async) setresgid(0x0, 0x0, 0x0) (async) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) personality(0x8) (async) uname(&(0x7f0000000240)=""/201) (async) sendfile(r0, r1, 0x0, 0xffffffff) 0s ago: executing program 3 (id=10497): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5ac90800001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a", 0x99) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000005ac1414bb00"], 0x18}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000240)={0xf97cff8c, 0x8, 'SE Linux', "d342abed27eee65a0e0c4eeb14c962324a8bef8938b7ce9a39713e8b617facc1378847d7d6dc5848d19374050c63aef8c9e1697e6b736bf34ad4ad36f4b8e3b867c861f6c6bcb6712c3432230c67ee4b7af66016260e541c127450f54e94738cfb5e2e0d7f0554605d3af4169cd04822747e3ccce8807eb59f2012e33a51f5d7b3edb9417c03427fa7da5150140d78d979eebd0668b76c4140a481581799659ce5fbf42f3e8567e207a88d55d745d5c196f8b960f1a32a9b725deb58d574"}, 0xce) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5437, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x0, 0x100000000}) close_range(r3, r2, 0x0) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 693.968652][ T10] usb 10-1: USB disconnect, device number 3 [ 694.063675][T28767] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9394'. [ 694.109519][T28734] netlink: 188 bytes leftover after parsing attributes in process `syz.8.9381'. [ 694.134317][T28734] rust_binder: Write failure EINVAL in pid:92 [ 694.135296][ T64] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 694.150758][T28769] rust_binder: Error in use_page_slow: ESRCH [ 694.150779][T28769] rust_binder: use_range failure ESRCH [ 694.163251][T28769] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 694.169957][ T64] usb 9-1: USB disconnect, device number 10 [ 694.173343][T28769] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 694.193906][T28769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:249 [ 694.554971][T28796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:105 [ 694.650003][T28800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:107 [ 694.775046][T28811] overlayfs: failed to clone upperpath [ 694.831337][T28816] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 694.861043][T28812] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 694.911490][T28809] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 695.243278][T28841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 695.243311][T28841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268 [ 695.263760][T28840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 695.420328][T28850] rust_binder: Error in use_page_slow: ESRCH [ 695.433846][T28850] rust_binder: use_range failure ESRCH [ 695.450452][T28850] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 695.455961][T28850] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 695.464762][T28850] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:272 [ 695.522739][T28861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:130 [ 695.937343][ T64] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 695.977401][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 696.099774][ T64] usb 2-1: config 0 has an invalid interface number: 182 but max is 1 [ 696.108383][ T64] usb 2-1: config 0 has no interface number 1 [ 696.114636][ T64] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 696.123781][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.132005][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 696.138629][ T64] usb 2-1: config 0 descriptor?? [ 696.146160][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.161861][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.175513][ T10] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 696.190819][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.203878][ T10] usb 10-1: Product: syz [ 696.208195][ T10] usb 10-1: Manufacturer: syz [ 696.212885][ T10] usb 10-1: SerialNumber: syz [ 696.364191][T21505] usb 2-1: USB disconnect, device number 15 [ 696.424787][T28878] netlink: 76 bytes leftover after parsing attributes in process `syz.9.9430'. [ 696.451256][ T10] usb 10-1: 0:2 : does not exist [ 696.459693][ T10] usb 10-1: unit 9 not found! [ 696.477170][ T10] usb 10-1: 4:0: cannot get min/max values for control 1 (id 4) [ 696.488606][ T10] usb 10-1: 4:0: cannot get min/max values for control 2 (id 4) [ 696.505844][ T10] usb 10-1: USB disconnect, device number 4 [ 696.570585][T28242] udevd[28242]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 696.872549][ T36] kauditd_printk_skb: 693 callbacks suppressed [ 696.872566][ T36] audit: type=1400 audit(2000002888.715:90782): avc: denied { read write } for pid=27399 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 696.904234][ T36] audit: type=1400 audit(2000002888.715:90783): avc: denied { read write open } for pid=27399 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 696.930535][ T36] audit: type=1400 audit(2000002888.715:90784): avc: denied { ioctl } for pid=27399 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 696.956320][ T36] audit: type=1400 audit(2000002888.725:90785): avc: denied { create } for pid=28900 comm="syz.1.9439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 696.976143][ T36] audit: type=1400 audit(2000002888.725:90786): avc: denied { create } for pid=28900 comm="syz.1.9439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 696.996702][ T36] audit: type=1400 audit(2000002888.785:90787): avc: denied { watch } for pid=28900 comm="syz.1.9439" path="/91/control" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 697.048412][ T36] audit: type=1400 audit(2000002888.785:90788): avc: denied { setopt } for pid=28900 comm="syz.1.9439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 697.070228][ T36] audit: type=1400 audit(2000002888.785:90789): avc: denied { setopt } for pid=28900 comm="syz.1.9439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 697.076103][T28905] audit: audit_backlog=65 > audit_backlog_limit=64 [ 697.089984][ T36] audit: type=1400 audit(2000002888.785:90790): avc: denied { write } for pid=28900 comm="syz.1.9439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 697.155161][T28909] netlink: 212 bytes leftover after parsing attributes in process `syz.1.9441'. [ 697.406452][T28930] netlink: 'syz.5.9449': attribute type 4 has an invalid length. [ 697.419019][T28930] netlink: 'syz.5.9449': attribute type 4 has an invalid length. [ 697.436203][T28929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 697.442592][T28929] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 697.498461][T28939] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 697.506614][T28939] rust_binder: Read failure Err(EFAULT) in pid:151 [ 697.777316][ T1097] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 697.939546][ T1097] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 697.950577][ T1097] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 697.959734][ T1097] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.969447][ T1097] usb 10-1: config 0 descriptor?? [ 697.975838][T28943] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 698.190400][ T1097] hid-generic 0003:04F3:0755.005B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 698.383747][T28954] overlayfs: failed to clone upperpath [ 698.387539][T28944] bridge0: port 3(veth0_to_team) entered blocking state [ 698.397173][T28944] bridge0: port 3(veth0_to_team) entered disabled state [ 698.406835][T28944] veth0_to_team: entered allmulticast mode [ 698.423133][T28944] veth0_to_team: entered promiscuous mode [ 698.435406][ T1097] usb 10-1: USB disconnect, device number 5 [ 698.696354][T28973] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 698.887353][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 699.037309][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 699.045191][ T10] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 699.054328][ T10] usb 9-1: config 0 has no interface number 0 [ 699.060459][ T10] usb 9-1: config 0 interface 184 has no altsetting 0 [ 699.069759][ T10] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 699.078841][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.087907][ T10] usb 9-1: Product: syz [ 699.092092][ T10] usb 9-1: Manufacturer: syz [ 699.096694][ T10] usb 9-1: SerialNumber: syz [ 699.103835][ T10] usb 9-1: config 0 descriptor?? [ 699.121226][ T10] smsc75xx v1.0.0 [ 699.198795][T28981] 9pnet_fd: Insufficient options for proto=fd [ 699.733148][ T10] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 699.745286][ T10] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 699.979049][T29004] 9pnet_fd: p9_fd_create_tcp (29004): problem connecting socket to 127.0.0.1 [ 699.989554][T29004] 9pnet_fd: p9_fd_create_tcp (29004): problem connecting socket to 127.0.0.1 [ 700.000276][T29004] 9pnet_fd: p9_fd_create_tcp (29004): problem connecting socket to 127.0.0.1 [ 700.010866][T29004] 9pnet_fd: p9_fd_create_tcp (29004): problem connecting socket to 127.0.0.1 [ 700.021448][T29004] 9pnet_fd: p9_fd_create_tcp (29004): problem connecting socket to 127.0.0.1 [ 700.775382][T29030] netlink: 'syz.1.9482': attribute type 1 has an invalid length. [ 700.787387][T29030] input: syz0 as /devices/virtual/input/input65 [ 700.844198][T29033] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 700.933309][T29037] binder: Unknown parameter '' [ 700.976861][ T10] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 701.005362][ T10] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 701.032495][ T10] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 701.045463][ T10] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 701.057807][ T10] usb 9-1: USB disconnect, device number 11 [ 701.234091][T29049] random: crng reseeded on system resumption [ 701.288370][T29049] rust_binder: Write failure EFAULT in pid:193 [ 701.437436][T29074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 701.505251][T29074] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 701.511841][T29074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 701.520645][T29074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:312 [ 701.530621][ T1097] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 701.729974][ T1097] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.741021][ T1097] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.752457][ T1097] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 701.761691][ T1097] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 701.770329][ T1097] usb 10-1: Manufacturer: syz [ 701.776325][ T1097] usb 10-1: config 0 descriptor?? [ 701.857306][ T10] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 701.927684][ T36] kauditd_printk_skb: 744 callbacks suppressed [ 701.927702][ T36] audit: type=1400 audit(2000002893.775:91497): avc: denied { ioctl } for pid=29078 comm="syz.8.9497" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 701.984441][ T36] audit: type=1400 audit(2000002893.825:91498): avc: denied { ioctl } for pid=29048 comm="syz.9.9488" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 702.009646][ T36] audit: type=1400 audit(2000002893.825:91499): avc: denied { ioctl } for pid=29048 comm="syz.9.9488" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 702.037982][ T36] audit: type=1400 audit(2000002893.885:91500): avc: denied { ioctl } for pid=29078 comm="syz.8.9497" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 702.063268][ T36] audit: type=1400 audit(2000002893.885:91501): avc: denied { ioctl } for pid=29078 comm="syz.8.9497" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 702.064722][ T10] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 702.099017][ T10] usb 9-1: can't read configurations, error -71 [ 702.185443][ T36] audit: type=1400 audit(2000002894.025:91502): avc: denied { ioctl } for pid=29048 comm="syz.9.9488" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 702.187831][ T1097] pyra 0003:1E7D:2CF6.005C: unknown main item tag 0x0 [ 702.210571][ T36] audit: type=1400 audit(2000002894.025:91503): avc: denied { ioctl } for pid=29048 comm="syz.9.9488" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 702.219654][ T1097] pyra 0003:1E7D:2CF6.005C: unknown main item tag 0x0 [ 702.250211][ T1097] pyra 0003:1E7D:2CF6.005C: unknown main item tag 0x0 [ 702.257048][ T1097] pyra 0003:1E7D:2CF6.005C: unknown main item tag 0x0 [ 702.263884][ T1097] pyra 0003:1E7D:2CF6.005C: unknown main item tag 0x0 [ 702.270832][ T1097] pyra 0003:1E7D:2CF6.005C: unknown main item tag 0x0 [ 702.277683][ T1097] pyra 0003:1E7D:2CF6.005C: unknown main item tag 0x0 [ 702.286454][ T1097] pyra 0003:1E7D:2CF6.005C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 702.352260][ T36] audit: type=1400 audit(2000002894.195:91504): avc: denied { read write } for pid=27399 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 702.382402][ T36] audit: type=1400 audit(2000002894.195:91505): avc: denied { read write open } for pid=27399 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 702.409576][ T36] audit: type=1400 audit(2000002894.195:91506): avc: denied { ioctl } for pid=27399 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 702.458147][T29094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 702.512312][T29100] rust_binder: Error in use_page_slow: ESRCH [ 702.518819][T29100] rust_binder: use_range failure ESRCH [ 702.524878][T29100] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 702.530395][T29100] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 702.538344][T29100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:323 [ 702.626838][T29108] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 702.639551][T29108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:125 [ 702.650778][T29108] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 702.660265][T29108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 702.670242][T29108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:125 [ 702.694963][T29110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 702.705811][T29110] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 702.766310][T29114] @0Ù: renamed from bond_slave_1 (while UP) [ 702.876514][T29114] tipc: Started in network mode [ 702.881476][T29114] tipc: Node identity 4, cluster identity 4711 [ 702.887922][T29114] tipc: Node number set to 4 [ 702.892731][T29118] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9510'. [ 702.901881][T29118] tipc: Invalid UDP bearer configuration [ 702.901901][T29118] tipc: Enabling of bearer rejected, failed to enable media [ 703.211502][ T1097] pyra 0003:1E7D:2CF6.005C: couldn't init struct pyra_device [ 703.222818][ T1097] pyra 0003:1E7D:2CF6.005C: couldn't install mouse [ 703.230777][ T1097] pyra 0003:1E7D:2CF6.005C: probe with driver pyra failed with error -71 [ 703.242023][ T1097] usb 10-1: USB disconnect, device number 6 [ 703.303326][T29140] fido_id[29140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 703.553206][T29144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 703.553932][T29143] rust_binder: Error in use_page_slow: ESRCH [ 703.562013][T29144] rust_binder: Error in use_page_slow: ESRCH [ 703.568232][T29144] rust_binder: use_range failure ESRCH [ 703.574240][T29144] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 703.579816][T29143] rust_binder: use_range failure ESRCH [ 703.582205][T29144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 703.587915][T29143] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 703.594092][T29144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:330 [ 703.602959][T29143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 703.619405][T29143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:330 [ 703.659867][T29147] binder: Bad value for 'max' [ 703.659896][T29146] binder: Bad value for 'max' [ 703.832467][T29155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 704.218606][T29177] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 704.227131][T29177] rust_binder: Read failure Err(EFAULT) in pid:152 [ 704.246463][T29178] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 704.263112][T29178] rust_binder: Read failure Err(EFAULT) in pid:152 [ 704.448513][T29186] __vm_enough_memory: pid: 29186, comm: syz.8.9532, bytes: 18014402804453376 not enough memory for the allocation [ 704.744067][T29204] overlayfs: failed to resolve './bus': -2 [ 704.855372][T29205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29205 comm=syz.1.9536 [ 704.868804][T29214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:199 [ 704.873380][T29215] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9541'. [ 704.960012][T29221] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 704.974448][T20281] Bluetooth: hci0: Frame reassembly failed (-84) [ 705.154438][T29229] __vm_enough_memory: pid: 29229, comm: syz.1.9545, bytes: 18014402804453376 not enough memory for the allocation [ 705.197799][T29232] SELinux: security_context_str_to_sid () failed with errno=-22 [ 705.458428][T29241] netlink: 'syz.1.9549': attribute type 27 has an invalid length. [ 705.468239][T29241] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 705.557296][ T1446] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 705.703653][ T1446] usb 9-1: device descriptor read/64, error -71 [ 705.725622][T29265] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 705.732808][T29265] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 705.747271][T29265] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 705.761349][T29265] rust_binder: pid 29265 performed invalid decrement on ref [ 705.947297][ T1446] usb 9-1: device descriptor read/64, error -71 [ 706.187350][ T1446] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 706.317901][ T1446] usb 9-1: device descriptor read/64, error -71 [ 706.485965][T29283] /dev/rnullb0: Can't lookup blockdev [ 706.557290][ T1446] usb 9-1: device descriptor read/64, error -71 [ 706.677346][ T1446] usb usb9-port1: attempt power cycle [ 706.867276][ T1097] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 706.937704][ T36] kauditd_printk_skb: 524 callbacks suppressed [ 706.937721][ T36] audit: type=1400 audit(2000002898.785:92031): avc: denied { ioctl } for pid=29292 comm="syz.1.9568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 706.978376][ T36] audit: type=1400 audit(2000002898.825:92032): avc: denied { ioctl } for pid=29236 comm="syz.8.9548" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 707.017847][ T36] audit: type=1400 audit(2000002898.865:92033): avc: denied { ioctl } for pid=29292 comm="syz.1.9568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 707.037436][ T632] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 707.043200][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 707.056839][ T1097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 707.058599][ T1446] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 707.087272][ T1097] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 707.096353][ T36] audit: type=1400 audit(2000002898.895:92034): avc: denied { ioctl } for pid=29292 comm="syz.1.9568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 707.096382][ T36] audit: type=1400 audit(2000002898.895:92035): avc: denied { ioctl } for pid=29292 comm="syz.1.9568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 707.096404][ T36] audit: type=1400 audit(2000002898.895:92036): avc: denied { ioctl } for pid=29292 comm="syz.1.9568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 707.096428][ T36] audit: type=1400 audit(2000002898.895:92037): avc: denied { ioctl } for pid=29292 comm="syz.1.9568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 707.096449][ T36] audit: type=1400 audit(2000002898.895:92038): avc: denied { ioctl } for pid=29292 comm="syz.1.9568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 707.096469][ T36] audit: type=1400 audit(2000002898.925:92039): avc: denied { read write } for pid=28426 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 707.096911][ T36] audit: type=1400 audit(2000002898.925:92040): avc: denied { read write open } for pid=28426 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 707.165064][T29295] SELinux: security_context_str_to_sid () failed with errno=-22 [ 707.177112][ T1446] usb 9-1: device descriptor read/8, error -71 [ 707.209761][ T1097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.317507][ T1097] usb 2-1: config 0 descriptor?? [ 707.323628][T29293] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 707.369785][ T1446] usb 9-1: device descriptor read/8, error -71 [ 707.576853][T29312] netlink: 84 bytes leftover after parsing attributes in process `syz.5.9576'. [ 707.607743][ T1446] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 707.659599][ T1446] usb 9-1: device descriptor read/8, error -71 [ 707.667639][T29314] netlink: 4432 bytes leftover after parsing attributes in process `syz.9.9577'. [ 707.749401][ T1097] hid-generic 0003:04F3:0755.005D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 707.806965][ T1446] usb 9-1: device descriptor read/8, error -71 [ 707.927353][ T1446] usb usb9-port1: unable to enumerate USB device [ 707.942746][T29330] netlink: 'syz.5.9583': attribute type 4 has an invalid length. [ 707.959185][T29293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.973964][T29293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.191137][ T1446] usb 2-1: USB disconnect, device number 16 [ 708.304548][T29340] netlink: 'syz.8.9586': attribute type 12 has an invalid length. [ 708.987301][ T1097] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 709.139113][ T1097] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 709.150329][ T1097] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 709.163329][ T1097] usb 2-1: config 0 interface 0 has no altsetting 0 [ 709.169970][ T1097] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 709.179065][ T1097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.188982][ T1097] usb 2-1: config 0 descriptor?? [ 709.342762][T29361] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 709.350660][T29363] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9595'. [ 709.897290][ T1097] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 709.942282][T29387] fuse: Bad value for 'fd' [ 710.059253][ T1097] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 710.070982][ T1097] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 710.081933][ T1097] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 710.091866][ T1097] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 710.104790][ T1097] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 710.113862][ T1097] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.121088][ T1446] usb 2-1: USB disconnect, device number 17 [ 710.123613][ T1097] usb 9-1: config 0 descriptor?? [ 710.188583][T29393] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 710.196617][T29393] rust_binder: Write failure EINVAL in pid:396 [ 710.241641][T29395] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9604'. [ 710.258161][T29395] rust_binder: Error in use_page_slow: ESRCH [ 710.258181][T29395] rust_binder: use_range failure ESRCH [ 710.264213][T29395] rust_binder: Failed to allocate buffer. len:88, is_oneway:true [ 710.269848][T29395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 710.277630][T29395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:398 [ 710.359426][T29375] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 710.386405][T29400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:402 [ 710.908578][T29409] rust_binder: 220: no such ref 3 [ 710.922903][T29409] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 710.930486][T29409] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 710.939157][T29409] rust_binder: 220: no such ref 2 [ 711.067406][ T1097] usbhid 9-1:0.0: can't add hid device: -71 [ 711.086000][ T1097] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 711.110752][ T1097] usb 9-1: USB disconnect, device number 18 [ 711.274786][T29419] input: syz1 as /devices/virtual/input/input66 [ 711.401359][T29423] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 711.496453][T29427] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 711.518471][ T1097] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 711.543643][T29429] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9617'. [ 711.568560][T29429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9617'. [ 711.719760][ T1097] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 711.731706][T29434] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 711.734228][ T1097] usb 9-1: config 179 has no interface number 0 [ 711.746639][ T1097] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 711.763659][ T1097] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 711.780973][ T1097] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 711.799444][ T1097] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 711.815660][ T1097] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 711.829120][ T1097] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 711.838284][ T1097] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.850758][T29417] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 711.883362][ T1097] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 711.910557][ T1097] xpad 9-1:179.65: probe with driver xpad failed with error -5 [ 711.951891][ T36] kauditd_printk_skb: 530 callbacks suppressed [ 711.951908][ T36] audit: type=1400 audit(2000002903.795:92571): avc: denied { create } for pid=29439 comm="syz.1.9621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 711.983520][ T36] audit: type=1400 audit(2000002903.825:92572): avc: denied { create } for pid=29441 comm="syz.5.9622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 711.995435][T29440] netlink: 'syz.1.9621': attribute type 10 has an invalid length. [ 712.005648][ T36] audit: type=1400 audit(2000002903.835:92573): avc: denied { read } for pid=29439 comm="syz.1.9621" dev="nsfs" ino=4026533364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 712.014291][T29440] netlink: 17 bytes leftover after parsing attributes in process `syz.1.9621'. [ 712.042419][ T36] audit: type=1400 audit(2000002903.835:92574): avc: denied { read open } for pid=29439 comm="syz.1.9621" path="net:[4026533364]" dev="nsfs" ino=4026533364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 712.066311][ T36] audit: type=1400 audit(2000002903.835:92575): avc: denied { create } for pid=29439 comm="syz.1.9621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 712.095935][T21505] usb 9-1: USB disconnect, device number 19 [ 712.104003][ T36] audit: type=1400 audit(2000002903.835:92576): avc: denied { ioctl } for pid=29439 comm="syz.1.9621" path="socket:[121156]" dev="sockfs" ino=121156 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 712.146808][ T36] audit: type=1400 audit(2000002903.835:92577): avc: denied { create } for pid=29439 comm="syz.1.9621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 712.167121][ T36] audit: type=1400 audit(2000002903.835:92578): avc: denied { create } for pid=29439 comm="syz.1.9621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 712.187381][ T36] audit: type=1400 audit(2000002903.855:92579): avc: denied { write } for pid=29441 comm="syz.5.9622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 712.218342][ T36] audit: type=1400 audit(2000002903.875:92580): avc: denied { write } for pid=29441 comm="syz.5.9622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 712.352960][T29461] fuse: Bad value for 'group_id' [ 712.358131][T29461] fuse: Bad value for 'group_id' [ 712.472989][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 712.639126][T29474] __vm_enough_memory: pid: 29474, comm: syz.8.9630, bytes: 18014402804453376 not enough memory for the allocation [ 712.817288][T21505] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 712.927307][ T64] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 712.979531][T21505] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 712.988738][T21505] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.998457][T21505] usb 10-1: config 0 descriptor?? [ 713.077415][ T64] usb 9-1: Using ep0 maxpacket: 16 [ 713.085807][ T64] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 713.095253][ T64] usb 9-1: config 0 has no interface number 0 [ 713.102027][ T64] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.113830][ T64] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.124816][ T64] usb 9-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 713.138117][ T64] usb 9-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 713.147183][ T64] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.157525][ T64] usb 9-1: config 0 descriptor?? [ 713.368235][ T64] usbhid 9-1:0.1: can't add hid device: -32 [ 713.374253][ T64] usbhid 9-1:0.1: probe with driver usbhid failed with error -32 [ 713.720780][ T1097] usb 9-1: USB disconnect, device number 20 [ 714.067332][ T1097] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 714.420420][T29532] netlink: 84 bytes leftover after parsing attributes in process `syz.5.9648'. [ 714.474905][ T1097] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 714.482579][ T632] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 714.487487][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 714.488723][ T1097] usb 9-1: can't read configurations, error -71 [ 714.538156][T29542] rust_binder: got new transaction with bad transaction stack [ 714.538180][T29542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:447 [ 714.851685][T29553] /dev/rnullb0: Can't lookup blockdev [ 714.968487][T29563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 715.041094][T21505] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 715.058047][T21505] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 715.069891][T21505] asix 10-1:0.0: probe with driver asix failed with error -71 [ 715.079065][T21505] usb 10-1: USB disconnect, device number 7 [ 715.120310][T29568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9660'. [ 715.175773][T29573] rust_binder: Write failure EFAULT in pid:459 [ 715.175874][T29571] input: syz1 as /devices/virtual/input/input67 [ 715.327324][ T1097] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 715.407361][T20281] Bluetooth: hci0: Frame reassembly failed (-84) [ 715.489644][ T1097] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.501069][ T1097] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.512267][ T1097] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 715.525940][ T1097] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 715.535794][ T1097] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.552560][ T1097] usb 9-1: config 0 descriptor?? [ 715.719306][T20281] Bluetooth: hci1: Frame reassembly failed (-84) [ 715.726535][T29589] rust_binder: 240: no such ref 0 [ 715.731750][T29589] rust_binder: 240: no such ref 3 [ 715.736987][T29589] rust_binder: 240: no such ref 2 [ 715.743506][T29589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:240 [ 715.977281][ T1097] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 715.993938][ T1097] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 716.001374][ T1097] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 716.008859][ T1097] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 716.016275][ T1097] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 716.023721][ T1097] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 716.031151][ T1097] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 716.038603][ T1097] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 716.046033][ T1097] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 716.053466][ T1097] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 716.060915][ T1097] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 716.068353][ T1097] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 716.075751][ T1097] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 716.083202][ T1097] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 716.090661][ T1097] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 716.098381][ T1097] plantronics 0003:047F:FFFF.005E: No inputs registered, leaving [ 716.109427][ T1097] plantronics 0003:047F:FFFF.005E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 716.177074][ T64] usb 9-1: USB disconnect, device number 22 [ 716.225869][T29594] overlayfs: failed to clone upperpath [ 716.498459][T29620] netlink: 92 bytes leftover after parsing attributes in process `syz.5.9680'. [ 716.719160][T29622] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 716.827748][T29631] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 716.849427][T29632] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9684'. [ 716.957774][ T36] kauditd_printk_skb: 568 callbacks suppressed [ 716.957791][ T36] audit: type=1400 audit(2000002908.805:93149): avc: denied { create } for pid=29635 comm="syz.8.9685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 716.989295][ T36] audit: type=1400 audit(2000002908.805:93150): avc: denied { write } for pid=29635 comm="syz.8.9685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 717.023430][ T36] audit: type=1400 audit(2000002908.805:93151): avc: denied { read } for pid=29635 comm="syz.8.9685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 717.059932][ T36] audit: type=1400 audit(2000002908.805:93152): avc: denied { read } for pid=29635 comm="syz.8.9685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 717.084161][ T36] audit: type=1400 audit(2000002908.805:93153): avc: denied { write } for pid=29635 comm="syz.8.9685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 717.106278][ T36] audit: type=1400 audit(2000002908.805:93154): avc: denied { create } for pid=29635 comm="syz.8.9685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 717.127761][ T36] audit: type=1400 audit(2000002908.805:93155): avc: denied { write } for pid=29635 comm="syz.8.9685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 717.148565][ T36] audit: type=1400 audit(2000002908.805:93156): avc: denied { read } for pid=29635 comm="syz.8.9685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 717.170007][ T36] audit: type=1400 audit(2000002908.805:93157): avc: denied { create } for pid=29635 comm="syz.8.9685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 717.190918][ T36] audit: type=1400 audit(2000002908.805:93158): avc: denied { write } for pid=29635 comm="syz.8.9685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 717.267333][ T10] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 717.420788][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.431121][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 717.437469][ T632] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 717.440082][ T689] Bluetooth: hci0: command 0x1003 tx timeout [ 717.457311][ T10] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 717.466392][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.474401][ T10] usb 9-1: Product: 鈶列ڗ銢➑绿ᘷ宩늿ï¬î·²ã¼”迺é–ã½é¿³ï®¨â˜¡åƒ‡ï‘¼ë•¥â€¼ìŽíŠ³å¼¤é™¢âš’è’‘ë…˜í딿뤪煖㡬ᶪ᠈ḃ仳ᆂ캼弫춬嵓 [ 717.490247][ T10] usb 9-1: Manufacturer: ëœï”«é¤Žç™¬á„®åž¥æ¢šëµ¤é¸¤å®‰çˆ“鬡âžì”俣훗ʕ櫎⧻䰔१쪞⦹瀯ව濘読뫖엣乵çŽá¨œç¤² [ 717.503724][ T10] usb 9-1: SerialNumber: 藋㔨䥻햑ᱬ↹푼ᴣꚇ져ꑇΣ퇼粽凲᳚갑귞ë‹ïŸ§ê³½ä¤Œï—¨à£‹â·Šä‹´ë‚¯ê¨­ç°¸ëŠŸá®¬ì¨›ì®¤êŽ¸æ”›ë§Žå§·È°é”若厖ﲭ蚈Ეà¥åŒ€è¯‡î‘£å–’徘迲䶓í˜è“›ê©Žâ³˜ç·²ç“†í„ƒíž¦ãœ«í€ï³˜é¡§è“ºæ†Žë‰á€›ã”Žï£©å›§ã¾ˆæŠƒè±œæ¢‚傆ïŸá­ŠëŠ–îµˆï± [ 717.743187][ T10] usb 9-1: 0:2 : does not exist [ 717.751283][ T10] usb 9-1: USB disconnect, device number 23 [ 717.757286][ T632] Bluetooth: hci1: command 0x1003 tx timeout [ 717.757320][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 717.811273][T28242] udevd[28242]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 718.271805][T29668] __vm_enough_memory: pid: 29668, comm: syz.8.9696, bytes: 18014402804453376 not enough memory for the allocation [ 718.357265][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 718.396188][T29676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 718.423368][T29678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 718.430079][T29678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:246 [ 718.458160][T29679] rust_binder: 234: no such ref 3 [ 718.473732][T29679] rust_binder: inc_ref_done called when no active inc_refs [ 718.473758][T29679] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 718.488541][T29679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:234 [ 718.536986][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 718.555303][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.563332][ T10] usb 2-1: Product: syz [ 718.567521][ T10] usb 2-1: Manufacturer: syz [ 718.572103][ T10] usb 2-1: SerialNumber: syz [ 719.308844][T29693] netlink: 'syz.5.9705': attribute type 4 has an invalid length. [ 719.525249][T29706] netlink: 17 bytes leftover after parsing attributes in process `syz.8.9709'. [ 719.538917][T29707] netlink: 'syz.8.9709': attribute type 63 has an invalid length. [ 719.546828][T29707] netlink: 5 bytes leftover after parsing attributes in process `syz.8.9709'. [ 719.763406][T29713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:257 [ 719.845847][T29715] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 719.929192][T29719] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 719.941450][T29719] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 719.947959][T29719] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 719.956154][T29719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:261 [ 720.397423][ T437] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 720.557326][ T437] usb 9-1: Using ep0 maxpacket: 32 [ 720.565231][ T437] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 720.576696][ T437] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50609, setting to 1024 [ 720.588194][ T437] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 720.597466][ T437] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.606659][ T437] usb 9-1: config 0 descriptor?? [ 720.613017][T29727] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 720.621221][ T437] hub 9-1:0.0: USB hub found [ 720.823151][ T437] hub 9-1:0.0: 1 port detected [ 721.129924][ T10] usb 2-1: USB disconnect, device number 18 [ 721.406447][T29766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 721.408860][T29766] rust_binder: Error in use_page_slow: ESRCH [ 721.415387][T29766] rust_binder: use_range failure ESRCH [ 721.422263][T29766] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 721.427931][T29766] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 721.435723][T29766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:488 [ 721.517910][T29773] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 721.805009][T29791] SELinux: security_context_str_to_sid () failed with errno=-22 [ 721.848041][ T437] hub 9-1:0.0: hub_hub_status failed (err = -32) [ 721.857336][ T437] hub 9-1:0.0: config failed, can't get hub status (err -32) [ 721.877829][ T437] usbhid 9-1:0.0: can't add hid device: -32 [ 721.883428][T29793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 721.883811][ T437] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 721.884204][T29793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 721.917345][T29793] rust_binder: 514: no such ref 1 [ 721.936522][T29793] rust_binder: Error in use_page_slow: ESRCH [ 721.936546][T29793] rust_binder: use_range failure ESRCH [ 721.945240][T29793] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 721.950810][T29793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 721.958951][T29793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:514 [ 721.980426][ T36] kauditd_printk_skb: 581 callbacks suppressed [ 721.980446][ T36] audit: type=1400 audit(2000002913.825:93740): avc: denied { read write } for pid=27399 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 722.034385][T29803] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 722.034748][T29803] rust_binder: Write failure EINVAL in pid:516 [ 722.043466][ T36] audit: type=1400 audit(2000002913.825:93741): avc: denied { read write open } for pid=27399 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 722.074989][ T36] audit: type=1400 audit(2000002913.825:93742): avc: denied { ioctl } for pid=27399 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 722.110941][ T36] audit: type=1400 audit(2000002913.875:93743): avc: denied { read } for pid=29801 comm="syz.1.9742" name="binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 722.140472][ T36] audit: type=1400 audit(2000002913.875:93744): avc: denied { read open } for pid=29801 comm="syz.1.9742" path="/dev/binderfs/binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 722.166189][ T36] audit: type=1400 audit(2000002913.875:93745): avc: denied { map } for pid=29801 comm="syz.1.9742" path="/dev/binderfs/binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 722.200605][ T36] audit: type=1400 audit(2000002913.875:93746): avc: denied { read } for pid=29801 comm="syz.1.9742" path="/dev/binderfs/binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 722.225727][ T36] audit: type=1400 audit(2000002913.875:93747): avc: denied { ioctl } for pid=29801 comm="syz.1.9742" path="/dev/binderfs/binder1" dev="binder" ino=32 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 722.253115][ T36] audit: type=1400 audit(2000002913.875:93748): avc: denied { ioctl } for pid=29801 comm="syz.1.9742" path="/dev/binderfs/binder1" dev="binder" ino=32 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 722.279590][ T36] audit: type=1400 audit(2000002913.885:93749): avc: denied { create } for pid=29802 comm="syz.5.9741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 722.407412][ T335] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 722.557320][ T335] usb 2-1: Using ep0 maxpacket: 16 [ 722.564524][ T335] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.576082][ T335] usb 2-1: config 0 interface 0 has no altsetting 0 [ 722.582708][ T335] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 722.591761][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.601189][ T335] usb 2-1: config 0 descriptor?? [ 722.813672][ T335] usbhid 2-1:0.0: can't add hid device: -71 [ 722.820226][ T335] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 722.829289][ T335] usb 2-1: USB disconnect, device number 19 [ 723.445395][T29844] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 723.446273][T29844] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 723.453469][T29844] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 723.467712][T29844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:527 [ 723.495205][T29847] rust_binder: Error while translating object. [ 723.504786][T29847] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 723.511141][T29847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:270 [ 723.577434][ T335] usb 9-1: USB disconnect, device number 24 [ 723.731093][T29860] fuse: Bad value for 'fd' [ 724.023637][T23927] bridge_slave_1: left allmulticast mode [ 724.029404][T23927] bridge_slave_1: left promiscuous mode [ 724.035029][T23927] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.043035][T23927] bridge_slave_0: left allmulticast mode [ 724.048879][T23927] bridge_slave_0: left promiscuous mode [ 724.054508][T23927] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.109796][T29868] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.116885][T29868] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.124074][T29868] bridge_slave_0: entered allmulticast mode [ 724.130322][T29868] bridge_slave_0: entered promiscuous mode [ 724.137553][T29868] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.144593][T29868] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.151699][T29868] bridge_slave_1: entered allmulticast mode [ 724.157914][T29868] bridge_slave_1: entered promiscuous mode [ 724.171393][T23927] veth1_macvtap: left promiscuous mode [ 724.176976][T23927] veth0_vlan: left promiscuous mode [ 724.277749][T29868] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.284803][T29868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.292273][T29868] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.299423][T29868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.365897][T20279] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.373578][T20279] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.391229][ T7673] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.398346][ T7673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.419100][ T7673] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.426176][ T7673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.503693][T29868] veth0_vlan: entered promiscuous mode [ 724.531850][T29868] veth1_macvtap: entered promiscuous mode [ 724.865283][T29901] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 724.865314][T29901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 725.073273][T29912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:21 [ 725.087080][T29912] rust_binder: Error while translating object. [ 725.096322][T29912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 725.102554][T29912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 725.347374][ T335] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 725.509242][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 725.519836][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 725.532725][ T335] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 725.541928][ T335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.549964][ T335] usb 4-1: Product: syz [ 725.554114][ T335] usb 4-1: Manufacturer: syz [ 725.558736][ T335] usb 4-1: SerialNumber: syz [ 725.564618][ T335] usb 4-1: config 0 descriptor?? [ 725.572688][ T335] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 725.986208][ T335] usb 4-1: USB disconnect, device number 65 [ 726.727375][ T1446] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 726.794988][T29926] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 726.804495][T29926] rust_binder: Write failure EINVAL in pid:33 [ 726.879386][ T1446] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 726.893590][ T1446] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 726.903777][ T1446] usb 2-1: config 0 has no interface number 0 [ 726.912453][ T1446] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 726.921572][ T1446] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.929594][ T1446] usb 2-1: Product: syz [ 726.933750][ T1446] usb 2-1: Manufacturer: syz [ 726.938365][ T1446] usb 2-1: SerialNumber: syz [ 726.944300][ T1446] usb 2-1: config 0 descriptor?? [ 727.154739][ T36] kauditd_printk_skb: 547 callbacks suppressed [ 727.154759][ T36] audit: type=1400 audit(2000002918.995:94297): avc: denied { ioctl } for pid=29913 comm="syz.1.9779" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 727.186357][ T36] audit: type=1400 audit(2000002918.995:94298): avc: denied { ioctl } for pid=29913 comm="syz.1.9779" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 727.315460][ T36] audit: type=1400 audit(2000002919.155:94299): avc: denied { read write } for pid=29868 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 727.340046][ T36] audit: type=1400 audit(2000002919.155:94300): avc: denied { read write open } for pid=29868 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 727.372278][ T36] audit: type=1400 audit(2000002919.155:94301): avc: denied { ioctl } for pid=29868 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 727.376712][ T1446] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 727.403464][ T36] audit: type=1400 audit(2000002919.175:94302): avc: denied { create } for pid=29927 comm="syz.3.9784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 727.424525][ T1446] usb 2-1: No valid video chain found. [ 727.426194][ T36] audit: type=1400 audit(2000002919.185:94303): avc: denied { read write } for pid=29927 comm="syz.3.9784" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 727.455218][ T36] audit: type=1400 audit(2000002919.185:94304): avc: denied { read write open } for pid=29927 comm="syz.3.9784" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 727.481833][ T36] audit: type=1400 audit(2000002919.185:94305): avc: denied { ioctl } for pid=29927 comm="syz.3.9784" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 727.507040][ T36] audit: type=1400 audit(2000002919.185:94306): avc: denied { ioctl } for pid=29927 comm="syz.3.9784" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 727.584061][ T1446] usb 2-1: USB disconnect, device number 20 [ 727.590082][ T335] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 727.759343][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.769402][ T335] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 727.778550][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.789071][ T335] usb 4-1: config 0 descriptor?? [ 728.145732][T29957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 728.151249][T29957] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 728.157790][T29957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 728.165816][T29957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:533 [ 728.215904][T29959] futex_wake_op: syz.1.9795 tries to shift op by -1; fix this program [ 728.267302][ T335] hid-picolcd 0003:04D8:C002.005F: No report with id 0x11 found [ 728.477458][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 728.627357][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 728.635168][ T31] usb 2-1: config 1 has an invalid interface number: 161 but max is 2 [ 728.644044][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.654353][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 728.663275][ T31] usb 2-1: config 1 has no interface number 0 [ 728.671903][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53 [ 728.681248][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.689373][ T31] usb 2-1: Product: syz [ 728.693533][ T31] usb 2-1: Manufacturer: syz [ 728.698160][ T31] usb 2-1: SerialNumber: syz [ 728.917727][ T31] usb 2-1: 161:2 : does not exist [ 728.922852][ T31] usb 2-1: unit 9 not found! [ 728.930823][ T31] usb 2-1: USB disconnect, device number 21 [ 728.962951][T28242] udevd[28242]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.161/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 729.133247][T29970] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9798'. [ 729.142387][T29971] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9798'. [ 729.402665][T29995] netlink: 72 bytes leftover after parsing attributes in process `syz.5.9806'. [ 729.480430][T29999] 9pnet_fd: Insufficient options for proto=fd [ 729.566439][T30006] /dev/rnullb0: Can't lookup blockdev [ 729.823395][T30024] rust_binder: 549: no such ref 2 [ 730.128476][T30028] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 730.133123][T30028] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 730.139827][T30028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 730.148092][T30028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:555 [ 730.296860][T30035] binder: Bad value for 'max' [ 730.410478][T21505] usb 4-1: USB disconnect, device number 66 [ 730.442388][T30046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.458085][T30049] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 730.464202][T30046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.498702][T30050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.517808][T30050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.533391][T30046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.546115][T30046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.663152][T30056] rust_binder: 568: no such ref 3 [ 730.668263][T30056] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 730.675296][T30056] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 730.682457][T30056] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 730.689626][T30056] rust_binder: 568: no such ref 0 [ 730.847325][T21505] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 730.997316][T21505] usb 4-1: Using ep0 maxpacket: 16 [ 731.006703][T21505] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 731.015971][T21505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.024026][T21505] usb 4-1: Product: syz [ 731.029307][T21505] usb 4-1: Manufacturer: syz [ 731.033944][T21505] usb 4-1: SerialNumber: syz [ 731.048609][T21505] r8152-cfgselector 4-1: Unknown version 0x0000 [ 731.055051][T21505] r8152-cfgselector 4-1: config 0 descriptor?? [ 731.461479][ T335] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 731.478606][ T335] hid-generic 0000:0000:0000.0060: hidraw0: HID v0.00 Device [syz1] on syz0 [ 731.493552][ T335] r8152-cfgselector 4-1: USB disconnect, device number 67 [ 731.707311][ T64] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 731.869257][ T64] usb 2-1: config 0 has no interfaces? [ 731.876055][ T64] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 731.885264][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 731.893328][ T64] usb 2-1: SerialNumber: syz [ 731.899479][ T64] usb 2-1: config 0 descriptor?? [ 732.160846][ T36] kauditd_printk_skb: 679 callbacks suppressed [ 732.160863][ T36] audit: type=1400 audit(2000002924.005:94986): avc: denied { remount } for pid=30065 comm="syz.1.9829" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 732.161051][T30077] binder: Unknown parameter 'defcontext01777777777777777777777' [ 732.603643][ T36] audit: type=1400 audit(2000002924.445:94987): avc: denied { create } for pid=30078 comm="syz.5.9834" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 732.630997][ T36] audit: type=1400 audit(2000002924.445:94988): avc: denied { name_bind } for pid=30078 comm="syz.5.9834" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 732.653570][ T36] audit: type=1400 audit(2000002924.445:94989): avc: denied { node_bind } for pid=30078 comm="syz.5.9834" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 732.682013][ T36] audit: type=1400 audit(2000002924.445:94990): avc: denied { create } for pid=30078 comm="syz.5.9834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 732.703043][ T36] audit: type=1400 audit(2000002924.475:94991): avc: denied { create } for pid=30083 comm="syz.3.9835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 732.722998][ T36] audit: type=1400 audit(2000002924.475:94992): avc: denied { mounton } for pid=30083 comm="syz.3.9835" path="/17" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 732.745240][ T36] audit: type=1400 audit(2000002924.475:94993): avc: denied { mount } for pid=30083 comm="syz.3.9835" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 732.767477][ T36] audit: type=1400 audit(2000002924.475:94994): avc: denied { setopt } for pid=30083 comm="syz.3.9835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 732.787359][ T36] audit: type=1400 audit(2000002924.475:94995): avc: denied { setopt } for pid=30083 comm="syz.3.9835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 733.360449][T30134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9854'. [ 733.842477][T30144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9858'. [ 733.853657][T30145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9858'. [ 733.954622][T30147] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.961773][T30147] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.969280][T30147] bridge_slave_0: entered allmulticast mode [ 733.975692][T30147] bridge_slave_0: entered promiscuous mode [ 733.983449][T30147] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.990577][T30147] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.997789][T30147] bridge_slave_1: entered allmulticast mode [ 734.004200][T30147] bridge_slave_1: entered promiscuous mode [ 734.031117][T30160] 9pnet_fd: Insufficient options for proto=fd [ 734.105007][T30147] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.112087][T30147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.119381][T30147] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.126430][T30147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.185760][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.205413][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.219341][T23511] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.226438][T23511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.238571][T23511] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.245757][T23511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.314806][T30147] veth0_vlan: entered promiscuous mode [ 734.345337][T30147] veth1_macvtap: entered promiscuous mode [ 734.462600][ T1446] usb 2-1: USB disconnect, device number 23 [ 734.571700][T30184] rust_binder: 4: no such ref 2 [ 735.047567][T30205] rust_binder: 12: no such ref 3 [ 735.052727][T30205] rust_binder: inc_ref_done called when no active inc_refs [ 735.052750][T30205] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 735.067871][T30205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:12 [ 735.072057][T30205] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 735.227275][ T335] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 735.232693][T30223] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 735.255755][T30223] rust_binder: Write failure EINVAL in pid:26 [ 735.338358][T30229] 9pnet_fd: Insufficient options for proto=fd [ 735.387335][ T335] usb 2-1: Using ep0 maxpacket: 16 [ 735.409010][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.423201][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.433919][ T335] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 735.449955][ T335] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 735.460301][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.471760][ T335] usb 2-1: config 0 descriptor?? [ 735.637340][ T437] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 735.682769][T30204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.691372][T30204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.789268][ T437] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 735.798676][ T437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.809933][ T437] usb 5-1: config 0 descriptor?? [ 735.914231][ T335] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0061/input/input69 [ 735.935472][ T335] microsoft 0003:045E:07DA.0061: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 736.020052][ T437] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 736.047810][ T437] asix 5-1:0.0: probe with driver asix failed with error -32 [ 736.067380][ T437] usb 5-1: USB disconnect, device number 8 [ 736.125913][T30204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 736.130142][ T335] usb 2-1: USB disconnect, device number 24 [ 736.477422][ T437] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 736.617292][ T437] usb 5-1: device descriptor read/64, error -71 [ 736.751122][T30269] fuseblk: Unknown parameter 'groupäŸd' [ 736.857344][ T437] usb 5-1: device descriptor read/64, error -71 [ 736.907336][ T1446] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 737.057296][ T1446] usb 2-1: Using ep0 maxpacket: 16 [ 737.065553][ T1446] usb 2-1: unable to get BOS descriptor or descriptor too short [ 737.076438][ T1446] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 737.085840][ T1446] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 737.097266][ T437] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 737.097965][ T1446] usb 2-1: config 13 has no interface number 0 [ 737.113527][ T1446] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 737.126706][ T1446] usb 2-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 737.140855][ T1446] usb 2-1: config 13 interface 50 has no altsetting 0 [ 737.158110][ T1446] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 737.168067][ T36] kauditd_printk_skb: 616 callbacks suppressed [ 737.168083][ T36] audit: type=1400 audit(2000002929.015:95612): avc: denied { ioctl } for pid=30262 comm="syz.1.9892" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 737.168099][ T1446] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.180304][ T36] audit: type=1400 audit(2000002929.015:95613): avc: denied { execmem } for pid=30281 comm="syz.5.9900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 737.201902][ T1446] usb 2-1: Product: syz [ 737.234079][ T1446] usb 2-1: Manufacturer: syz [ 737.237293][ T36] audit: type=1400 audit(2000002929.075:95614): avc: denied { ioctl } for pid=30258 comm="syz.4.9890" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 737.239988][ T1446] usb 2-1: SerialNumber: syz [ 737.271649][T30263] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 737.272235][ T36] audit: type=1400 audit(2000002929.115:95615): avc: denied { ioctl } for pid=30262 comm="syz.1.9892" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 737.303950][ T437] usb 5-1: device descriptor read/64, error -71 [ 737.310293][ T36] audit: type=1400 audit(2000002929.115:95616): avc: denied { ioctl } for pid=30262 comm="syz.1.9892" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 737.335391][ T36] audit: type=1400 audit(2000002929.115:95617): avc: denied { ioctl } for pid=30262 comm="syz.1.9892" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 737.360558][ T36] audit: type=1400 audit(2000002929.125:95618): avc: denied { ioctl } for pid=30262 comm="syz.1.9892" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 737.386706][ T36] audit: type=1400 audit(2000002929.145:95619): avc: denied { create } for pid=30284 comm="syz.5.9901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 737.387973][T30287] netlink: 'syz.5.9902': attribute type 11 has an invalid length. [ 737.407689][ T36] audit: type=1400 audit(2000002929.145:95620): avc: denied { connect } for pid=30284 comm="syz.5.9901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 737.434093][ T36] audit: type=1400 audit(2000002929.145:95621): avc: denied { create } for pid=30284 comm="syz.5.9901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 737.488979][T30263] netlink: 'syz.1.9892': attribute type 6 has an invalid length. [ 737.505459][ T1446] usb 2-1: MIDIStreaming interface descriptor not found [ 737.547371][ T1446] usb 2-1: USB disconnect, device number 25 [ 737.557259][ T437] usb 5-1: device descriptor read/64, error -71 [ 737.598369][T28413] udevd[28413]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.50/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 737.667724][ T437] usb usb5-port1: attempt power cycle [ 738.007316][ T437] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 738.030275][ T437] usb 5-1: device descriptor read/8, error -71 [ 738.159427][ T437] usb 5-1: device descriptor read/8, error -71 [ 738.347361][ T31] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 738.397454][ T437] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 738.419261][ T437] usb 5-1: device descriptor read/8, error -71 [ 738.487330][ T31] usb 2-1: device descriptor read/64, error -71 [ 738.559222][ T437] usb 5-1: device descriptor read/8, error -71 [ 738.667478][ T437] usb usb5-port1: unable to enumerate USB device [ 738.721817][T30329] netlink: 'syz.3.9916': attribute type 27 has an invalid length. [ 738.729765][ T31] usb 2-1: device descriptor read/64, error -71 [ 738.740652][T30329] veth0_vlan: left promiscuous mode [ 738.746254][T30329] veth0_vlan: entered promiscuous mode [ 738.891327][T30346] veth1: entered allmulticast mode [ 738.900378][T30345] veth1: left allmulticast mode [ 738.967326][ T31] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 739.097339][ T31] usb 2-1: device descriptor read/64, error -71 [ 739.278865][T30354] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 739.279282][T30354] rust_binder: 40: no such ref 3 [ 739.293119][T30354] rust_binder: Failed to allocate buffer. len:176, is_oneway:true [ 739.344309][ T31] usb 2-1: device descriptor read/64, error -71 [ 739.467376][ T31] usb usb2-port1: attempt power cycle [ 739.493245][T30366] /dev/rnullb0: Can't lookup blockdev [ 739.777366][ T1446] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 739.827327][ T31] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 739.849888][ T31] usb 2-1: device descriptor read/8, error -71 [ 739.929110][ T1446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 739.940107][ T1446] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 739.949174][ T1446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.958696][ T1446] usb 5-1: config 0 descriptor?? [ 739.965690][T30370] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 739.979805][ T31] usb 2-1: device descriptor read/8, error -71 [ 740.217331][ T31] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 740.267736][ T31] usb 2-1: device descriptor read/8, error -71 [ 740.400094][ T31] usb 2-1: device descriptor read/8, error -71 [ 740.412510][ T1446] hid-generic 0003:04F3:0755.0062: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 740.507524][ T31] usb usb2-port1: unable to enumerate USB device [ 740.612881][ T335] usb 5-1: USB disconnect, device number 13 [ 741.255989][T30415] rust_binder: Write failure EFAULT in pid:605 [ 741.447203][T30433] rust_binder: 30430 RLIMIT_NICE not set [ 741.462409][T30434] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 741.468741][T30433] rust_binder: 64: no such ref 0 [ 741.481049][T30438] rust_binder: Error in use_page_slow: ESRCH [ 741.481067][T30438] rust_binder: use_range failure ESRCH [ 741.497019][T30438] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 741.504342][T30438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 741.514036][T30438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:614 [ 741.571367][T30443] overlayfs: failed to clone upperpath [ 741.779172][T30462] netlink: 396 bytes leftover after parsing attributes in process `syz.3.9961'. [ 741.851964][T30468] overlayfs: failed to clone lowerpath [ 741.943023][T30478] netlink: 'syz.4.9966': attribute type 16 has an invalid length. [ 741.951768][T30478] netlink: 'syz.4.9966': attribute type 3 has an invalid length. [ 741.960830][T30478] netlink: 64054 bytes leftover after parsing attributes in process `syz.4.9966'. [ 742.072112][T30483] tipc: Started in network mode [ 742.092719][T30483] tipc: Node identity , cluster identity 4711 [ 742.112536][T30483] tipc: Failed to set node id, please configure manually [ 742.128123][T30483] tipc: Enabling of bearer rejected, failed to enable media [ 742.183362][ T36] kauditd_printk_skb: 618 callbacks suppressed [ 742.183379][ T36] audit: type=1400 audit(2000002934.025:96240): avc: denied { create } for pid=30482 comm="syz.4.9968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 742.259346][ T36] audit: type=1400 audit(2000002934.075:96241): avc: denied { map } for pid=30482 comm="syz.4.9968" path="socket:[124433]" dev="sockfs" ino=124433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 742.304783][ T36] audit: type=1400 audit(2000002934.075:96242): avc: denied { read } for pid=30482 comm="syz.4.9968" path="socket:[124433]" dev="sockfs" ino=124433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 742.339493][ T36] audit: type=1400 audit(2000002934.075:96243): avc: denied { map } for pid=30482 comm="syz.4.9968" path="socket:[124433]" dev="sockfs" ino=124433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 742.374221][T30483] audit: audit_backlog=65 > audit_backlog_limit=64 [ 742.382662][ T36] audit: type=1400 audit(2000002934.075:96244): avc: denied { read } for pid=30482 comm="syz.4.9968" path="socket:[124433]" dev="sockfs" ino=124433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 742.406198][T30483] audit: audit_lost=258 audit_rate_limit=0 audit_backlog_limit=64 [ 742.414430][T30483] audit: backlog limit exceeded [ 742.416394][ T36] audit: type=1400 audit(2000002934.075:96245): avc: denied { map } for pid=30482 comm="syz.4.9968" path="socket:[124433]" dev="sockfs" ino=124433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 742.450372][T30483] audit: audit_backlog=65 > audit_backlog_limit=64 [ 742.500408][T30498] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 742.511212][T30498] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 742.521004][T30498] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 742.534323][T30498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:625 [ 742.941514][T30500] SELinux: failed to load policy [ 742.985213][T20279] Bluetooth: hci0: Frame reassembly failed (-84) [ 743.051268][T30506] netlink: 228 bytes leftover after parsing attributes in process `syz.4.9975'. [ 743.444713][T30526] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 743.680258][T30533] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 743.767108][T30535] incfs: Options parsing error. -22 [ 743.795023][T30535] incfs: mount failed -22 [ 744.065235][T30542] netlink: 164 bytes leftover after parsing attributes in process `syz.5.9990'. [ 744.597118][T30571] cgroup2: Unknown parameter 'fowner<00000000000000000000' [ 744.642445][T30571] SELinux: Context system_u:object_r:getty_log_t:s0 is not valid (left unmapped). [ 744.717780][T30582] rust_binder: 114: no such ref 3 [ 744.725133][T30582] rust_binder: inc_ref_done called when no active inc_refs [ 744.725158][T30582] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 744.742101][T30582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:114 [ 745.037323][ T632] Bluetooth: hci0: command 0x1003 tx timeout [ 745.037375][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 745.501227][T30605] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 746.420284][T30659] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 746.427507][T30659] rust_binder: Write failure EINVAL in pid:145 [ 746.510638][T30662] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 746.659351][T30672] binder: Unknown parameter 'fscontext?}' [ 746.753009][T30676] overlayfs: missing 'lowerdir' [ 747.067290][ T64] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 747.218075][ T36] kauditd_printk_skb: 522 callbacks suppressed [ 747.218096][ T36] audit: type=1400 audit(2000002939.065:96766): avc: denied { ioctl } for pid=30683 comm="syz.4.10037" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 747.249670][ T36] audit: type=1400 audit(2000002939.065:96767): avc: denied { ioctl } for pid=30683 comm="syz.4.10037" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 747.275329][ T36] audit: type=1400 audit(2000002939.115:96768): avc: denied { ioctl } for pid=30683 comm="syz.4.10037" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 747.301316][ T36] audit: type=1400 audit(2000002939.115:96769): avc: denied { ioctl } for pid=30683 comm="syz.4.10037" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 747.304454][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.328032][ T36] audit: type=1400 audit(2000002939.145:96770): avc: denied { ioctl } for pid=30683 comm="syz.4.10037" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 747.337923][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.363738][ T36] audit: type=1400 audit(2000002939.185:96771): avc: denied { ioctl } for pid=30683 comm="syz.4.10037" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 747.372548][ T64] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 747.410419][ T64] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 747.419485][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.428837][ T64] usb 5-1: config 0 descriptor?? [ 747.437274][ T36] audit: type=1400 audit(2000002939.275:96772): avc: denied { ioctl } for pid=30683 comm="syz.4.10037" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 747.462578][ T36] audit: type=1400 audit(2000002939.275:96773): avc: denied { ioctl } for pid=30683 comm="syz.4.10037" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 747.488650][ T36] audit: type=1400 audit(2000002939.275:96774): avc: denied { ioctl } for pid=30683 comm="syz.4.10037" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 747.514421][ T36] audit: type=1400 audit(2000002939.275:96775): avc: denied { ioctl } for pid=30683 comm="syz.4.10037" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 747.841760][ T64] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 747.849471][ T64] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 747.856909][ T64] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 747.864471][ T64] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 747.871912][ T64] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 747.879395][ T64] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 747.886836][ T64] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 747.894333][ T64] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 747.901750][ T64] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 747.909204][ T64] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 747.916595][ T64] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 747.925202][ T64] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 747.932623][ T64] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 747.940273][ T64] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 747.947808][ T64] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 747.955330][ T64] plantronics 0003:047F:FFFF.0063: No inputs registered, leaving [ 747.966217][ T64] plantronics 0003:047F:FFFF.0063: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 748.106639][T30707] /dev/sr0: Can't lookup blockdev [ 748.148352][ T64] usb 5-1: USB disconnect, device number 14 [ 749.266268][T30753] /dev/rnullb0: Can't lookup blockdev [ 749.278404][T30755] /dev/rnullb0: Can't lookup blockdev [ 749.377607][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.377902][T30763] rust_binder: Error in use_page_slow: ESRCH [ 749.387989][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.394634][T30763] rust_binder: use_range failure ESRCH [ 749.401996][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.407872][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.414525][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.417594][T30763] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 749.422244][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.427717][T30763] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 749.437163][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.441863][T30763] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:642 [ 749.452636][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.466807][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.473633][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.480610][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.487427][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.494159][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.500982][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.507653][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.514331][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.521154][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.528118][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.534910][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.541728][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.548628][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.556110][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.562986][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.569660][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.576316][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.583111][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.589815][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.596528][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.603280][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.609921][ T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 749.610371][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.625626][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.632429][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.639222][T30762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.777359][T30774] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 749.795014][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.818280][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.839771][ T31] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 749.849410][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.858894][ T31] usb 5-1: config 0 descriptor?? [ 749.924001][T30781] 9pnet_fd: Insufficient options for proto=fd [ 750.037300][ T64] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 750.069407][ T31] arvo 0003:1E7D:30D4.0064: unknown main item tag 0x0 [ 750.078489][ T31] arvo 0003:1E7D:30D4.0064: unknown main item tag 0x0 [ 750.085423][ T31] arvo 0003:1E7D:30D4.0064: unknown main item tag 0x0 [ 750.092312][ T31] arvo 0003:1E7D:30D4.0064: unknown main item tag 0x0 [ 750.099172][ T31] arvo 0003:1E7D:30D4.0064: unknown main item tag 0x0 [ 750.106016][ T31] arvo 0003:1E7D:30D4.0064: unknown main item tag 0x0 [ 750.112839][ T31] arvo 0003:1E7D:30D4.0064: unknown main item tag 0x0 [ 750.120923][ T31] arvo 0003:1E7D:30D4.0064: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 750.187941][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 750.200410][ T64] usb 2-1: config 1 has an invalid interface number: 138 but max is 0 [ 750.218625][ T64] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 750.237462][ T64] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 750.250141][ T64] usb 2-1: config 1 has no interface number 0 [ 750.256248][ T64] usb 2-1: config 1 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 750.270756][T21505] usb 5-1: USB disconnect, device number 15 [ 750.275354][ T64] usb 2-1: config 1 interface 138 has no altsetting 0 [ 750.297458][ T64] usb 2-1: New USB device found, idVendor=10c4, idProduct=817e, bcdDevice=73.53 [ 750.319804][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.342612][ T64] usb 2-1: Product:  [ 750.346851][ T64] usb 2-1: Manufacturer: Щ [ 750.361605][ T64] usb 2-1: SerialNumber: Ъ [ 750.576597][ T64] usb 2-1: USB disconnect, device number 30 [ 750.681696][T30810] tipc: Enabling of bearer rejected, failed to enable media [ 751.000042][T30832] netlink: 'syz.5.10089': attribute type 4 has an invalid length. [ 751.020063][T30832] netlink: 'syz.5.10089': attribute type 4 has an invalid length. [ 751.041996][T30838] binder: Bad value for 'stats' [ 751.042736][T30835] binder: Bad value for 'stats' [ 751.545964][T30868] cgroup: fork rejected by pids controller in /syz5 [ 751.547282][ T31] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 751.717379][ T31] usb 2-1: device descriptor read/64, error -71 [ 751.932868][T30919] overlayfs: failed to clone upperpath [ 751.957303][ T31] usb 2-1: device descriptor read/64, error -71 [ 752.067311][ T1097] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 752.197276][ T31] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 752.207816][ T1097] usb 5-1: device descriptor read/64, error -71 [ 752.256280][ T36] kauditd_printk_skb: 579 callbacks suppressed [ 752.256298][ T36] audit: type=1400 audit(2000002944.095:97355): avc: denied { create } for pid=30956 comm="syz.3.10120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 752.283932][ T36] audit: type=1400 audit(2000002944.095:97356): avc: denied { write } for pid=30956 comm="syz.3.10120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 752.305352][ T36] audit: type=1400 audit(2000002944.095:97357): avc: denied { read } for pid=30956 comm="syz.3.10120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 752.308028][T30959] overlayfs: failed to clone upperpath [ 752.327379][ T36] audit: type=1400 audit(2000002944.105:97358): avc: denied { read } for pid=30956 comm="syz.3.10120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 752.352733][ T31] usb 2-1: device descriptor read/64, error -71 [ 752.359078][ T36] audit: type=1400 audit(2000002944.105:97359): avc: denied { create } for pid=30956 comm="syz.3.10120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 752.379895][ T36] audit: type=1400 audit(2000002944.105:97360): avc: denied { write } for pid=30956 comm="syz.3.10120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 752.412648][ T36] audit: type=1400 audit(2000002944.105:97361): avc: denied { read } for pid=30956 comm="syz.3.10120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 752.433454][ T36] audit: type=1400 audit(2000002944.105:97362): avc: denied { read } for pid=30956 comm="syz.3.10120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 752.454070][ T36] audit: type=1400 audit(2000002944.105:97363): avc: denied { create } for pid=30956 comm="syz.3.10120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 752.484656][ T36] audit: type=1400 audit(2000002944.105:97364): avc: denied { write } for pid=30956 comm="syz.3.10120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 752.537366][ T1097] usb 5-1: device descriptor read/64, error -71 [ 752.637401][ T31] usb 2-1: device descriptor read/64, error -71 [ 752.747405][ T31] usb usb2-port1: attempt power cycle [ 752.777289][ T1097] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 752.917316][ T1097] usb 5-1: device descriptor read/64, error -71 [ 753.038606][T30974] EXT4-fs: Conflicting test_dummy_encryption options [ 753.097402][ T31] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 753.120173][ T31] usb 2-1: device descriptor read/8, error -71 [ 753.146139][T30979] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10128'. [ 753.157313][ T1097] usb 5-1: device descriptor read/64, error -71 [ 753.253226][ T31] usb 2-1: device descriptor read/8, error -71 [ 753.267863][ T1097] usb usb5-port1: attempt power cycle [ 753.507353][ T31] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 753.529439][ T31] usb 2-1: device descriptor read/8, error -71 [ 753.607300][ T1097] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 753.629544][ T1097] usb 5-1: device descriptor read/8, error -71 [ 753.659159][ T31] usb 2-1: device descriptor read/8, error -71 [ 753.759325][ T1097] usb 5-1: device descriptor read/8, error -71 [ 753.767855][ T31] usb usb2-port1: unable to enumerate USB device [ 753.997374][ T1097] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 754.019262][ T1097] usb 5-1: device descriptor read/8, error -71 [ 754.149526][ T1097] usb 5-1: device descriptor read/8, error -71 [ 754.257875][ T1097] usb usb5-port1: unable to enumerate USB device [ 754.380866][T31003] 9pnet_fd: Insufficient options for proto=fd [ 754.502480][T31013] rust_binder: Write failure EFAULT in pid:663 [ 754.559470][T31013] kvm: kvm [31012]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 754.574605][T31013] kvm: kvm [31012]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 754.827845][T31023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.881443][T31028] rust_binder: Error in use_page_slow: ESRCH [ 754.888396][T31028] rust_binder: use_range failure ESRCH [ 754.894434][T31028] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 754.900879][T31028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 754.908806][T31028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:668 [ 754.919392][T31028] rust_binder: 668: no such ref 2 [ 755.170173][T31048] 9pnet_fd: Insufficient options for proto=fd [ 755.513282][T31058] netlink: 'syz.4.10159': attribute type 16 has an invalid length. [ 755.525514][T31058] netlink: 'syz.4.10159': attribute type 25 has an invalid length. [ 755.534587][T31058] netlink: 63326 bytes leftover after parsing attributes in process `syz.4.10159'. [ 755.759704][T31071] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 755.787421][T31071] rust_binder: 677: no such ref 2 [ 755.855301][T31074] rust_binder: Write failure EFAULT in pid:680 [ 755.883951][T31076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 755.891234][T31076] rust_binder: 682: no such ref 1 [ 756.048080][T31082] bridge0: port 3(erspan0) entered blocking state [ 756.054579][T31082] bridge0: port 3(erspan0) entered disabled state [ 756.061820][T31082] bridge0: port 3(erspan0) entered blocking state [ 756.068300][T31082] bridge0: port 3(erspan0) entered forwarding state [ 756.214861][T31085] netlink: 'syz.1.10169': attribute type 13 has an invalid length. [ 756.262685][T31087] rust_binder: Error while translating object. [ 756.262715][T31087] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 756.269051][T31087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:693 [ 756.527401][T31096] netlink: 17 bytes leftover after parsing attributes in process `syz.1.10173'. [ 756.554785][T31096] __vm_enough_memory: pid: 31096, comm: syz.1.10173, bytes: 18014402804453376 not enough memory for the allocation [ 756.987281][ T64] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 757.147305][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 757.154775][ T64] usb 2-1: config 108 has an invalid interface number: 2 but max is 0 [ 757.163730][ T64] usb 2-1: config 108 has no interface number 0 [ 757.170020][ T64] usb 2-1: config 108 interface 2 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 757.180994][ T64] usb 2-1: config 108 interface 2 altsetting 0 endpoint 0x4 has an invalid bInterval 255, changing to 11 [ 757.194690][ T64] usb 2-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice=75.78 [ 757.203804][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.212015][ T64] usb 2-1: Product: syz [ 757.216193][ T64] usb 2-1: Manufacturer: syz [ 757.220812][ T64] usb 2-1: SerialNumber: syz [ 757.431852][ T36] kauditd_printk_skb: 600 callbacks suppressed [ 757.431870][ T36] audit: type=1400 audit(2000002949.275:97965): avc: denied { create } for pid=31104 comm="syz.1.10177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 757.437623][T31105] tipc: Enabled bearer , priority 6 [ 757.448193][ T36] audit: type=1400 audit(2000002949.275:97966): avc: denied { write } for pid=31104 comm="syz.1.10177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 757.462185][T31105] syzkaller0: MTU too low for tipc bearer [ 757.468733][ T36] audit: type=1400 audit(2000002949.275:97967): avc: denied { read } for pid=31104 comm="syz.1.10177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 757.490849][T31105] tipc: Disabling bearer [ 757.493872][ T36] audit: type=1400 audit(2000002949.275:97968): avc: denied { read } for pid=31104 comm="syz.1.10177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 757.540885][ T36] audit: type=1400 audit(2000002949.275:97969): avc: denied { write } for pid=31104 comm="syz.1.10177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 757.566883][ T36] audit: type=1400 audit(2000002949.335:97970): avc: denied { create } for pid=31126 comm="syz.5.10184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 757.588854][ T36] audit: type=1400 audit(2000002949.355:97971): avc: denied { execmem } for pid=31104 comm="syz.1.10177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 757.637268][ T36] audit: type=1400 audit(2000002949.475:97972): avc: denied { execmem } for pid=31132 comm="syz.5.10185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 757.819163][ T36] audit: type=1400 audit(2000002949.665:97973): avc: denied { create } for pid=31104 comm="syz.1.10177" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 757.859481][ T36] audit: type=1400 audit(2000002949.665:97974): avc: denied { ioctl } for pid=31104 comm="syz.1.10177" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=126617 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 758.800173][T31168] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.807464][T31168] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.830005][T31170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:256 [ 758.834146][T31170] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 758.842576][T31168] bridge0: entered allmulticast mode [ 758.857379][T31170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:256 [ 758.868352][T31170] rust_binder: Write failure EFAULT in pid:256 [ 759.066645][T31178] netlink: 80 bytes leftover after parsing attributes in process `syz.5.10199'. [ 759.208935][T31179] rust_binder: Error while translating object. [ 759.208997][T31179] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 759.225332][T31179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:260 [ 759.358775][T31196] 9pnet_fd: Insufficient options for proto=fd [ 759.694235][T31209] rust_binder: Error while translating object. [ 759.694286][T31209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 759.700593][T31209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:277 [ 759.710909][T31209] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 759.814775][ T64] usbhid 2-1:108.2: couldn't find an input interrupt endpoint [ 759.838621][ T64] usb 2-1: USB disconnect, device number 35 [ 759.858614][T31215] rust_binder: Error while translating object. [ 759.858652][T31215] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 759.864873][T31215] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:283 [ 760.039495][T31228] rust_binder: Error in use_page_slow: ESRCH [ 760.048741][T31228] rust_binder: use_range failure ESRCH [ 760.054782][T31228] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 760.061591][T31228] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 760.069432][T31228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:285 [ 760.082397][T31230] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 760.299285][T31245] rust_binder: Write failure EFAULT in pid:295 [ 760.406638][T31252] random: crng reseeded on system resumption [ 760.429521][T31254] random: crng reseeded on system resumption [ 760.677312][ T1097] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 760.835460][ T1097] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 760.845629][ T1097] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 760.857452][ T1097] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 760.866693][ T1097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 760.875646][ T1097] usb 5-1: SerialNumber: syz [ 760.888006][ T1097] usb 5-1: 0:2 : does not exist [ 760.904070][T31267] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 760.912970][T31267] rust_binder: Write failure EINVAL in pid:713 [ 761.060954][T31273] kvm: kvm [31272]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 761.108474][ T1097] usb 5-1: USB disconnect, device number 20 [ 761.110385][T31253] overlayfs: overlapping lowerdir path [ 761.157428][T28242] udevd[28242]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 761.967382][ T1097] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 762.119368][ T1097] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.129694][ T1097] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 762.138902][ T1097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.148393][ T1097] usb 5-1: config 0 descriptor?? [ 762.363962][T31356] /dev/rnullb0: Can't lookup blockdev [ 762.370907][T31354] /dev/rnullb0: Can't lookup blockdev [ 762.483080][ T36] kauditd_printk_skb: 566 callbacks suppressed [ 762.483098][ T36] audit: type=1400 audit(2000002954.325:98541): avc: denied { create } for pid=31348 comm="syz.3.10260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 762.509259][ T36] audit: type=1400 audit(2000002954.325:98542): avc: denied { getopt } for pid=31348 comm="syz.3.10260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 762.529939][ T36] audit: type=1400 audit(2000002954.325:98543): avc: denied { create } for pid=31348 comm="syz.3.10260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 762.538456][ T1446] usb 5-1: USB disconnect, device number 21 [ 762.550507][ T36] audit: type=1400 audit(2000002954.325:98544): avc: denied { setopt } for pid=31348 comm="syz.3.10260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 762.647159][T23927] bridge_slave_0: left allmulticast mode [ 762.653056][T23927] bridge_slave_0: left promiscuous mode [ 762.659495][T23927] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.824193][T23927] tipc: Disabling bearer [ 762.830050][T23927] tipc: Left network mode [ 762.841449][T23927] veth1_macvtap: left promiscuous mode [ 762.847134][T23927] veth0_vlan: left promiscuous mode [ 762.985927][ T36] audit: type=1400 audit(2000002954.825:98545): avc: denied { read write } for pid=30147 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 763.014442][ T36] audit: type=1400 audit(2000002954.825:98546): avc: denied { read write open } for pid=30147 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 763.154771][ T36] audit: type=1400 audit(2000002954.825:98547): avc: denied { ioctl } for pid=30147 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 763.158511][T31372] binder: Unknown parameter 'obj_role' [ 763.278697][ T36] audit: type=1400 audit(2000002954.915:98548): avc: denied { create } for pid=31371 comm="syz.4.10264" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 763.352132][ T36] audit: type=1400 audit(2000002954.925:98549): avc: denied { ioctl } for pid=31371 comm="syz.4.10264" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=128103 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 763.410335][ T36] audit: type=1400 audit(2000002954.935:98550): avc: denied { ioctl } for pid=31371 comm="syz.4.10264" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=128103 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 763.505101][T31377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=31377 comm=syz.4.10267 [ 764.258400][T31425] netlink: 'syz.3.10282': attribute type 17 has an invalid length. [ 764.867074][T31442] overlay: Unknown parameter 'dont_hash' [ 765.467305][T31462] overlayfs: failed to clone upperpath [ 765.664044][T31493] /dev/loop0: Can't lookup blockdev [ 765.771725][T31509] fuse: Bad value for 'rootmode' [ 766.015035][T31517] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 766.042618][T31519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10315'. [ 766.708165][T31541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6160 sclass=netlink_route_socket pid=31541 comm=syz.5.10322 [ 766.948557][T31564] /dev/loop0: Can't lookup blockdev [ 767.042836][T31573] netlink: 'syz.3.10332': attribute type 4 has an invalid length. [ 767.051652][T31573] netlink: 17 bytes leftover after parsing attributes in process `syz.3.10332'. [ 767.067440][ T110] udevd[110]: worker [26400] /devices/virtual/block/loop7 is taking a long time [ 767.186436][T31592] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=31592 comm=syz.3.10338 [ 767.199327][T31591] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=31591 comm=syz.3.10338 [ 767.213412][T31591] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=31591 comm=syz.3.10338 [ 767.250928][T31594] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=31594 comm=syz.3.10338 [ 767.880582][ T36] kauditd_printk_skb: 405 callbacks suppressed [ 767.880599][ T36] audit: type=1400 audit(2000002959.725:98955): avc: denied { execmem } for pid=31603 comm="syz.3.10341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 767.906353][ T36] audit: type=1400 audit(2000002959.725:98956): avc: denied { create } for pid=31603 comm="syz.3.10341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 767.926208][ T36] audit: type=1400 audit(2000002959.725:98957): avc: denied { create } for pid=31603 comm="syz.3.10341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 767.946077][ T36] audit: type=1400 audit(2000002959.725:98958): avc: denied { write } for pid=31603 comm="syz.3.10341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 767.966179][ T36] audit: type=1400 audit(2000002959.725:98959): avc: denied { write } for pid=31603 comm="syz.3.10341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 767.986611][ T36] audit: type=1400 audit(2000002959.725:98960): avc: denied { write } for pid=31603 comm="syz.3.10341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 768.007137][ T36] audit: type=1400 audit(2000002959.765:98961): avc: denied { create } for pid=31606 comm="syz.3.10342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 768.028347][ T36] audit: type=1400 audit(2000002959.765:98962): avc: denied { write } for pid=31606 comm="syz.3.10342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 768.054051][ T36] audit: type=1400 audit(2000002959.765:98963): avc: denied { read } for pid=31606 comm="syz.3.10342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 768.074852][ T36] audit: type=1400 audit(2000002959.765:98964): avc: denied { read } for pid=31606 comm="syz.3.10342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 769.634604][T31671] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10360'. [ 770.319952][T31698] netlink: 'syz.5.10369': attribute type 4 has an invalid length. [ 770.327819][T31698] netlink: 'syz.5.10369': attribute type 5 has an invalid length. [ 770.335636][T31698] netlink: 'syz.5.10369': attribute type 1 has an invalid length. [ 771.237928][T31752] netlink: 'syz.3.10384': attribute type 1 has an invalid length. [ 771.245791][T31752] netlink: 'syz.3.10384': attribute type 2 has an invalid length. [ 771.392525][T31771] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10390'. [ 772.241467][T31794] netlink: 'syz.5.10399': attribute type 4 has an invalid length. [ 772.249382][T31794] netlink: 'syz.5.10399': attribute type 5 has an invalid length. [ 772.258305][T31794] netlink: 'syz.5.10399': attribute type 1 has an invalid length. [ 772.376416][T31812] netlink: 182 bytes leftover after parsing attributes in process `syz.5.10404'. [ 772.471623][T31823] fuse: Unknown parameter '000000000000000000000000x0000000000000007' [ 773.000545][ T36] kauditd_printk_skb: 363 callbacks suppressed [ 773.000562][ T36] audit: type=1400 audit(2000002964.845:99328): avc: denied { create } for pid=31830 comm="syz.5.10412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 773.026743][ T36] audit: type=1400 audit(2000002964.845:99329): avc: denied { write } for pid=31830 comm="syz.5.10412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 773.061410][ T36] audit: type=1400 audit(2000002964.905:99330): avc: denied { mounton } for pid=31832 comm="syz.5.10413" path="/519/bus" dev="tmpfs" ino=2814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 773.062508][T31833] overlayfs: disabling nfs_export due to verity=on [ 773.091348][T31833] overlayfs: failed to clone upperpath [ 773.120517][ T36] audit: type=1400 audit(2000002964.965:99331): avc: denied { create } for pid=31834 comm="syz.5.10414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 773.140634][ T36] audit: type=1400 audit(2000002964.965:99332): avc: denied { name_bind } for pid=31834 comm="syz.5.10414" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 773.162645][ T36] audit: type=1400 audit(2000002964.965:99333): avc: denied { node_bind } for pid=31834 comm="syz.5.10414" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 773.184671][ T36] audit: type=1400 audit(2000002964.965:99334): avc: denied { ioctl } for pid=31834 comm="syz.5.10414" path="socket:[128597]" dev="sockfs" ino=128597 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 773.485664][ T36] audit: type=1400 audit(2000002965.325:99335): avc: denied { create } for pid=31838 comm="syz.3.10415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 773.506880][ T36] audit: type=1400 audit(2000002965.325:99336): avc: denied { write } for pid=31838 comm="syz.3.10415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 773.528625][ T36] audit: type=1400 audit(2000002965.325:99337): avc: denied { read } for pid=31838 comm="syz.3.10415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 773.828231][T31860] tipc: Started in network mode [ 773.833121][T31860] tipc: Node identity 4, cluster identity 4711 [ 773.839349][T31860] tipc: Node number set to 4 [ 773.894228][T31871] netlink: 112 bytes leftover after parsing attributes in process `syz.3.10426'. [ 774.752021][T31884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10430'. [ 774.761126][T31884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10430'. [ 774.789702][T31886] fuse: blksize only supported for fuseblk [ 775.165437][T31920] 9pnet_fd: Insufficient options for proto=fd [ 775.487349][T31946] 9pnet_fd: Insufficient options for proto=fd [ 775.499598][T31946] overlay: ./file0 is not a directory [ 775.584150][T31949] bridge0: port 3(veth0_to_team) entered blocking state [ 775.591182][T31949] bridge0: port 3(veth0_to_team) entered disabled state [ 775.599332][T31949] veth0_to_team: entered allmulticast mode [ 775.605622][T31949] veth0_to_team: entered promiscuous mode [ 775.612041][T31949] bridge0: port 3(veth0_to_team) entered blocking state [ 775.619018][T31949] bridge0: port 3(veth0_to_team) entered forwarding state [ 776.862114][T31960] fuse: Bad value for 'user_id' [ 776.866992][T31960] fuse: Bad value for 'user_id' [ 778.202425][T31990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=31990 comm=syz.5.10473 [ 778.216746][ T36] kauditd_printk_skb: 241 callbacks suppressed [ 778.216761][ T36] audit: type=1400 audit(2000003230.064:99579): avc: denied { create } for pid=31989 comm="syz.5.10473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 778.243099][ T36] audit: type=1400 audit(2000003230.074:99580): avc: denied { create } for pid=31989 comm="syz.5.10473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 778.264487][ T36] audit: type=1400 audit(2000003230.074:99581): avc: denied { create } for pid=31989 comm="syz.5.10473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 778.285287][ T36] audit: type=1400 audit(2000003230.074:99582): avc: denied { create } for pid=31989 comm="syz.5.10473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 778.306332][ T36] audit: type=1400 audit(2000003230.074:99583): avc: denied { create } for pid=31989 comm="syz.5.10473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 778.327450][ T36] audit: type=1400 audit(2000003230.074:99584): avc: denied { create } for pid=31989 comm="syz.5.10473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 778.348381][ T36] audit: type=1400 audit(2000003230.074:99585): avc: denied { create } for pid=31989 comm="syz.5.10473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 778.369273][ T36] audit: type=1400 audit(2000003230.074:99586): avc: denied { create } for pid=31989 comm="syz.5.10473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 778.390225][ T36] audit: type=1400 audit(2000003230.074:99587): avc: denied { create } for pid=31989 comm="syz.5.10473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 778.411014][ T36] audit: type=1400 audit(2000003230.074:99588): avc: denied { create } for pid=31989 comm="syz.5.10473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 778.682358][T32015] overlayfs: failed to clone upperpath [ 778.914009][T32025] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.921137][T32025] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.928515][T32025] bridge_slave_0: entered allmulticast mode [ 778.934681][T32025] bridge_slave_0: entered promiscuous mode [ 778.942448][T32025] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.949520][T32025] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.956907][T32025] bridge_slave_1: entered allmulticast mode [ 778.963110][T32025] bridge_slave_1: entered promiscuous mode [ 779.031291][T32025] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.038421][T32025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.045755][T32025] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.052905][T32025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.093844][T23511] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.101426][T23511] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.114627][T31712] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.121743][T31712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.132089][T23511] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.139184][T23511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.200822][T32025] veth0_vlan: entered promiscuous mode [ 779.230370][T32025] veth1_macvtap: entered promiscuous mode [ 779.369645][T32037] overlayfs: missing 'lowerdir' [ 779.391351][T32037] overlayfs: failed to resolve './file1': -2 [ 779.413443][T32037] fuse: Unknown parameter '' [ 779.587002][T32049] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.594140][T32049] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.601506][T32049] bridge_slave_0: entered allmulticast mode [ 779.616937][T32049] bridge_slave_0: entered promiscuous mode [ 779.627623][T32049] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.643915][T32049] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.651154][T32049] bridge_slave_1: entered allmulticast mode [ 779.657749][T32049] bridge_slave_1: entered promiscuous mode [ 779.756839][T32064] rust_binder: Write failure EFAULT in pid:16 [ 779.839621][T32049] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.852783][T32049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.860119][T32049] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.867170][T32049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.919558][T31712] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.928953][ T37] INFO: task udevd:26400 blocked for more than 122 seconds. [ 779.949734][ T37] Not tainted syzkaller #0 [ 779.955100][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 779.963873][ T37] task:udevd state:D stack:0 pid:26400 tgid:26400 ppid:110 flags:0x00000000 [ 779.974114][ T37] Call Trace: [ 779.977506][ T37] [ 779.980489][ T37] __schedule+0x1322/0x1df0 [ 779.984997][ T37] ? __sched_text_start+0x10/0x10 [ 779.990040][ T37] ? __kasan_check_write+0x18/0x20 [ 779.995158][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 780.000490][ T37] ? __kasan_check_write+0x18/0x20 [ 780.005744][ T37] ? trace_contention_begin+0xc0/0xc0 [ 780.011139][ T37] schedule+0xc6/0x240 [ 780.015209][ T37] schedule_preempt_disabled+0x14/0x30 [ 780.020674][ T37] __mutex_lock+0x81e/0x1b50 [ 780.025260][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 780.032040][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 780.037878][ T37] ? __kasan_check_write+0x18/0x20 [ 780.042992][ T37] ? _raw_spin_lock+0x8c/0x120 [ 780.047778][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 780.052973][ T37] ? __asan_memcpy+0x5a/0x80 [ 780.057577][ T37] __mutex_lock_slowpath+0xe/0x20 [ 780.062594][ T37] mutex_lock+0x102/0x1c0 [ 780.066928][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 780.071781][ T37] ? disk_block_events+0xaf/0x120 [ 780.076831][ T37] ? _atomic_dec_and_lock+0x98/0x120 [ 780.082134][ T37] bdev_open+0xd5/0xd60 [ 780.086361][ T37] blkdev_open+0x3d1/0x560 [ 780.090793][ T37] ? __cfi_blkdev_open+0x10/0x10 [ 780.095725][ T37] do_dentry_open+0x97b/0x1510 [ 780.100502][ T37] vfs_open+0x86/0x230 [ 780.104579][ T37] ? __cfi_vfs_open+0x10/0x10 [ 780.109273][ T37] ? may_open+0x352/0x430 [ 780.113601][ T37] path_openat+0x2b6c/0x34b0 [ 780.118207][ T37] ? kasan_save_track+0x3e/0x80 [ 780.123056][ T37] ? kasan_save_alloc_info+0x40/0x50 [ 780.128394][ T37] ? getname+0x1b/0x30 [ 780.132487][ T37] ? x64_sys_call+0xe69/0x2ee0 [ 780.137295][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 780.143388][ T37] ? do_filp_open+0x3e0/0x3e0 [ 780.148118][ T37] do_filp_open+0x1c6/0x3e0 [ 780.152629][ T37] ? __cfi_do_filp_open+0x10/0x10 [ 780.157686][ T37] ? alloc_fd+0x4e7/0x5a0 [ 780.162015][ T37] do_sys_openat2+0x12c/0x1c0 [ 780.166708][ T37] ? do_sys_open+0x100/0x100 [ 780.171379][ T37] __x64_sys_openat+0x13a/0x170 [ 780.176286][ T37] x64_sys_call+0xe69/0x2ee0 [ 780.180881][ T37] do_syscall_64+0x58/0xf0 [ 780.185308][ T37] ? clear_bhb_loop+0x50/0xa0 [ 780.190081][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 780.195979][ T37] RIP: 0033:0x7fc49d8a7407 [ 780.200407][ T37] RSP: 002b:00007ffca9832620 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 780.208835][ T37] RAX: ffffffffffffffda RBX: 00007fc49e032880 RCX: 00007fc49d8a7407 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 780.216816][ T37] RDX: 00000000000a0800 RSI: 00005578c1202620 RDI: ffffffffffffff9c [ 780.224878][ T37] RBP: 00005578c10272c0 R08: 0000000000000000 R09: 0000000000000000 [ 780.232899][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 00005578c125c720 [ 780.240903][ T37] R13: 00005578c12680f0 R14: 0000000000000000 R15: 00005578c125c720 [ 780.248887][ T37] [ 780.255330][T31712] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.276937][ T37] INFO: task syz.0.8819:27006 blocked for more than 123 seconds. [ 780.284886][ T37] Not tainted syzkaller #0 [ 780.306691][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 780.315408][ T37] task:syz.0.8819 state:D stack:0 pid:27006 tgid:27005 ppid:19960 flags:0x00004004 [ 780.325653][ T37] Call Trace: [ 780.328988][ T37] [ 780.331923][ T37] __schedule+0x1322/0x1df0 [ 780.336455][ T37] ? __sched_text_start+0x10/0x10 [ 780.341478][ T37] ? kasan_save_track+0x4f/0x80 [ 780.346455][ T37] ? kasan_save_free_info+0x4a/0x60 [ 780.351714][ T37] ? __kasan_slab_free+0x5f/0x80 [ 780.356708][ T37] ? kfree+0x15c/0x460 [ 780.360781][ T37] ? efi_partition+0x444/0x3150 [ 780.365627][ T37] ? bdev_disk_changed+0x81c/0x1610 [ 780.370837][ T37] ? loop_reread_partitions+0x64/0x110 [ 780.376397][ T37] ? __kasan_check_write+0x18/0x20 [ 780.381514][ T37] schedule+0xc6/0x240 [ 780.385580][ T37] io_schedule+0x89/0xe0 [ 780.389844][ T37] folio_wait_bit_common+0x6ae/0x910 [ 780.395128][ T37] ? folio_wait_bit+0x50/0x50 [ 780.399925][ T37] ? __filemap_get_folio+0x932/0xaa0 [ 780.405206][ T37] ? __cfi_wake_page_function+0x10/0x10 [ 780.410770][ T37] ? __cfi___filemap_get_folio+0x10/0x10 [ 780.416412][ T37] ? kfree+0x15c/0x460 [ 780.420469][ T37] ? efi_partition+0x444/0x3150 [ 780.425317][ T37] do_read_cache_folio+0x14d/0x4d0 [ 780.430459][ T37] ? __cfi_blkdev_read_folio+0x10/0x10 [ 780.435922][ T37] read_cache_folio+0x54/0x90 [ 780.440612][ T37] read_part_sector+0xcc/0x250 [ 780.445457][ T37] msdos_partition+0x118/0x3000 [ 780.450357][ T37] ? __cfi_efi_partition+0x10/0x10 [ 780.455471][ T37] ? vsnprintf+0x19b8/0x1aa0 [ 780.460090][ T37] ? snprintf+0xdb/0x130 [ 780.464327][ T37] ? __cfi_msdos_partition+0x10/0x10 [ 780.469633][ T37] ? __cfi_snprintf+0x10/0x10 [ 780.474317][ T37] ? bdev_disk_changed+0x4f8/0x1610 [ 780.479568][ T37] bdev_disk_changed+0x81c/0x1610 [ 780.484589][ T37] ? __cfi_bdev_disk_changed+0x10/0x10 [ 780.490061][ T37] ? __kasan_check_write+0x18/0x20 [ 780.495175][ T37] ? mutex_unlock+0x8b/0x240 [ 780.499781][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 780.504803][ T37] loop_reread_partitions+0x64/0x110 [ 780.510103][ T37] loop_configure+0xfd8/0x1310 [ 780.514865][ T37] ? __cfi_loop_configure+0x10/0x10 [ 780.520092][ T37] ? unwind_get_return_address+0x51/0x90 [ 780.525735][ T37] ? __kasan_check_write+0x18/0x20 [ 780.530897][ T37] lo_ioctl+0x802/0x1d50 [ 780.535147][ T37] ? audit_log_end+0x1f1/0x240 [ 780.539924][ T37] ? common_lsm_audit+0x148c/0x1860 [ 780.545120][ T37] ? avc_has_extended_perms+0x895/0xdd0 [ 780.550685][ T37] ? ioctl_has_perm+0x384/0x4d0 [ 780.555532][ T37] ? selinux_file_ioctl+0x6e0/0x1360 [ 780.560967][ T37] ? security_file_ioctl+0x58/0xd0 [ 780.566878][ T37] ? __se_sys_ioctl+0x53/0x1b0 [ 780.571638][ T37] ? __x64_sys_ioctl+0x7f/0xa0 [ 780.576416][ T37] ? x64_sys_call+0x1878/0x2ee0 [ 780.581357][ T37] ? do_syscall_64+0x58/0xf0 [ 780.586302][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 780.593408][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 780.598098][ T37] ? __kasan_slab_free+0x6a/0x80 [ 780.603026][ T37] ? kmem_cache_free+0x1c1/0x510 [ 780.608403][ T37] ? __wake_up+0x169/0x190 [ 780.612816][ T37] ? audit_log_end+0x1f1/0x240 [ 780.618818][ T37] ? audit_log_end+0x1f1/0x240 [ 780.623581][ T37] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 780.629583][ T37] ? common_lsm_audit+0x148c/0x1860 [ 780.634776][ T37] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 780.640812][ T37] ? __cfi_common_lsm_audit+0x10/0x10 [ 780.646196][ T37] ? __kasan_slab_free+0x6a/0x80 [ 780.651132][ T37] ? kmem_cache_free+0x1c1/0x510 [ 780.656087][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 780.661569][ T37] ? avc_node_kill+0x29e/0x2f0 [ 780.666360][ T37] ? slow_avc_audit+0x18d/0x1f0 [ 780.671208][ T37] ? __cfi_slow_avc_audit+0x10/0x10 [ 780.676427][ T37] ? avc_denied+0x112/0x180 [ 780.680935][ T37] ? avc_has_extended_perms+0x895/0xdd0 [ 780.686492][ T37] ? avc_has_extended_perms+0x91a/0xdd0 [ 780.692044][ T37] ? do_vfs_ioctl+0xeda/0x1e30 [ 780.696829][ T37] ? preempt_schedule_common+0x2d/0x60 [ 780.702286][ T37] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 780.707937][ T37] ? __cfi_preempt_schedule+0x10/0x10 [ 780.713314][ T37] ? activate_task+0x38b/0x3d0 [ 780.718158][ T37] ? try_to_wake_up+0xe40/0x1b00 [ 780.723092][ T37] ? blkdev_common_ioctl+0x10e4/0x2810 [ 780.728568][ T37] ? blkdev_bszset+0x220/0x220 [ 780.733327][ T37] ? has_cap_mac_admin+0xd0/0xd0 [ 780.738279][ T37] ? futex_wake+0x63a/0x900 [ 780.742778][ T37] ? __cfi_do_futex+0x10/0x10 [ 780.747469][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 780.752140][ T37] blkdev_ioctl+0x546/0x680 [ 780.756669][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 780.761692][ T37] ? bpf_lsm_file_ioctl+0xd/0x20 [ 780.766646][ T37] ? security_file_ioctl+0x34/0xd0 [ 780.771754][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 780.776791][ T37] __se_sys_ioctl+0x135/0x1b0 [ 780.781461][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 780.786056][ T37] x64_sys_call+0x1878/0x2ee0 [ 780.790756][ T37] do_syscall_64+0x58/0xf0 [ 780.795349][ T37] ? clear_bhb_loop+0x50/0xa0 [ 780.800065][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 780.805955][ T37] RIP: 0033:0x7fd70b18f6c9 [ 780.810383][ T37] RSP: 002b:00007fd70bfb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 780.818828][ T37] RAX: ffffffffffffffda RBX: 00007fd70b3e5fa0 RCX: 00007fd70b18f6c9 [ 780.826811][ T37] RDX: 0000200000000080 RSI: 0000000000004c0a RDI: 0000000000000003 [ 780.834778][ T37] RBP: 00007fd70b211f91 R08: 0000000000000000 R09: 0000000000000000 [ 780.842767][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.850756][ T37] R13: 00007fd70b3e6038 R14: 00007fd70b3e5fa0 R15: 00007ffd4014c828 [ 780.858748][ T37] [ 780.861885][ T1446] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 780.877484][ T37] NMI backtrace for cpu 0 [ 780.877506][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 780.877529][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 780.877540][ T37] Call Trace: [ 780.877547][ T37] [ 780.877555][ T37] __dump_stack+0x21/0x30 [ 780.877583][ T37] dump_stack_lvl+0x10c/0x190 [ 780.877606][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 780.877630][ T37] dump_stack+0x19/0x20 [ 780.877653][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 780.877676][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 780.877700][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 780.877722][ T37] ? sched_show_task+0x379/0x560 [ 780.877744][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 780.877765][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 780.877788][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 780.877811][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 780.877838][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 780.877861][ T37] watchdog+0xd8f/0xed0 [ 780.877886][ T37] ? __cfi_watchdog+0x10/0x10 [ 780.877909][ T37] ? __kasan_check_read+0x15/0x20 [ 780.877935][ T37] ? __kthread_parkme+0x138/0x180 [ 780.877952][ T37] ? schedule+0xc6/0x240 [ 780.877976][ T37] kthread+0x2ca/0x370 [ 780.877994][ T37] ? __cfi_watchdog+0x10/0x10 [ 780.878017][ T37] ? __cfi_kthread+0x10/0x10 [ 780.878036][ T37] ret_from_fork+0x67/0xa0 [ 780.878059][ T37] ? __cfi_kthread+0x10/0x10 [ 780.878084][ T37] ret_from_fork_asm+0x1a/0x30 [ 780.878111][ T37] [ 780.878133][ T37] Sending NMI from CPU 0 to CPUs 1: [ 781.037529][ C1] NMI backtrace for cpu 1 [ 781.037544][ C1] CPU: 1 UID: 0 PID: 31465 Comm: syz.3.10297 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 781.037566][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 781.037576][ C1] RIP: 0010:kasan_check_range+0x0/0x2a0 [ 781.037602][ C1] Code: ff ff ff e9 c2 67 b3 03 cc 0f 0b b8 ea ff ff ff c3 cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 b0 01 48 85 f6 0f 84 c4 01 00 00 55 48 89 e5 41 57 41 [ 781.037615][ C1] RSP: 0018:ffffc90002ce7528 EFLAGS: 00000246 [ 781.037629][ C1] RAX: ffffffff81cc7fe6 RBX: ffffea0005947600 RCX: ffffffff81cc8337 [ 781.037643][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0005947600 [ 781.037655][ C1] RBP: ffffc90002ce7530 R08: ffffea0005943673 R09: 1ffffd4000b286ce [ 781.037666][ C1] R10: dffffc0000000000 R11: fffff94000b286cf R12: 1ffff1102923de7f [ 781.037677][ C1] R13: ffff8881491ef3f8 R14: dffffc0000000000 R15: 00007f5daec7f000 [ 781.037689][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 781.037702][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 781.037713][ C1] CR2: 000056212c6d6b98 CR3: 000000010f344000 CR4: 00000000003526b0 [ 781.037727][ C1] DR0: 0000000000000002 DR1: 0000000000000006 DR2: 0000000000000003 [ 781.037737][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 781.037746][ C1] Call Trace: [ 781.037752][ C1] [ 781.037757][ C1] ? __kasan_check_read+0x15/0x20 [ 781.037782][ C1] unmap_page_range+0xe97/0x3f80 [ 781.037800][ C1] ? __cfi_unmap_page_range+0x10/0x10 [ 781.037814][ C1] ? uprobe_munmap+0x181/0x490 [ 781.037831][ C1] unmap_vmas+0x2c5/0x3e0 [ 781.037845][ C1] ? __cfi_unmap_vmas+0x10/0x10 [ 781.037859][ C1] ? __kasan_check_write+0x18/0x20 [ 781.037878][ C1] exit_mmap+0x25b/0xb60 [ 781.037893][ C1] ? __cfi_exit_mmap+0x10/0x10 [ 781.037909][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 781.037925][ C1] ? uprobe_clear_state+0x2cd/0x340 [ 781.037942][ C1] __mmput+0x93/0x320 [ 781.037957][ C1] ? mmput+0x4d/0x170 [ 781.037970][ C1] mmput+0x55/0x170 [ 781.037984][ C1] do_exit+0x918/0x2630 [ 781.038001][ C1] ? __sched_text_start+0x10/0x10 [ 781.038019][ C1] ? __cfi_do_exit+0x10/0x10 [ 781.038036][ C1] ? __kasan_check_write+0x18/0x20 [ 781.038057][ C1] ? _raw_spin_lock_irq+0x8d/0x120 [ 781.038076][ C1] ? __kasan_check_read+0x15/0x20 [ 781.038094][ C1] ? cgroup_update_frozen+0x160/0x990 [ 781.038110][ C1] do_group_exit+0x22a/0x300 [ 781.038126][ C1] ? cgroup_leave_frozen+0x16c/0x2b0 [ 781.038140][ C1] get_signal+0x139d/0x14f0 [ 781.038160][ C1] arch_do_signal_or_restart+0x96/0x720 [ 781.038183][ C1] ? common_nsleep+0x93/0xb0 [ 781.038196][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 781.038216][ C1] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 781.038236][ C1] ? __kasan_check_read+0x15/0x20 [ 781.038255][ C1] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 781.038272][ C1] syscall_exit_to_user_mode+0x58/0xb0 [ 781.038288][ C1] do_syscall_64+0x64/0xf0 [ 781.038313][ C1] ? clear_bhb_loop+0x50/0xa0 [ 781.038328][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 781.038343][ C1] RIP: 0033:0x7f5daf9c1f85 [ 781.038355][ C1] Code: Unable to access opcode bytes at 0x7f5daf9c1f5b. [ 781.038362][ C1] RSP: 002b:00007f5db08bff80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 781.038377][ C1] RAX: fffffffffffffdfc RBX: 00007f5dafbe5fa0 RCX: 00007f5daf9c1f85 [ 781.038388][ C1] RDX: 00007f5db08bffc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 781.038398][ C1] RBP: 00007f5dafa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 781.038407][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 781.038417][ C1] R13: 00007f5dafbe6038 R14: 00007f5dafbe5fa0 R15: 00007ffeee8e2e88 [ 781.038430][ C1] [ 781.515344][T23511] bridge_slave_1: left allmulticast mode [ 781.521164][T23511] bridge_slave_1: left promiscuous mode [ 781.527657][T23511] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.535111][T23511] bridge_slave_0: left allmulticast mode [ 781.540779][T23511] bridge_slave_0: left promiscuous mode [ 781.547065][T23511] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.747731][T23511] veth1_macvtap: left promiscuous mode [ 781.753250][T23511] veth0_vlan: left promiscuous mode [ 782.057066][T23511] veth0_to_team: left allmulticast mode [ 782.062991][T23511] veth0_to_team: left promiscuous mode [ 782.068572][T23511] bridge0: port 3(veth0_to_team) entered disabled state [ 782.076117][T23511] bridge_slave_1: left allmulticast mode [ 782.081781][T23511] bridge_slave_1: left promiscuous mode [ 782.087440][T23511] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.094862][T23511] bridge_slave_0: left allmulticast mode [ 782.100639][T23511] bridge_slave_0: left promiscuous mode [ 782.106308][T23511] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.113886][T23511] bridge_slave_1: left allmulticast mode [ 782.119606][T23511] bridge_slave_1: left promiscuous mode [ 782.125288][T23511] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.132799][T23511] bridge_slave_0: left allmulticast mode [ 782.138482][T23511] bridge_slave_0: left promiscuous mode [ 782.144095][T23511] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.152343][T23511] bridge_slave_1: left allmulticast mode [ 782.158032][T23511] bridge_slave_1: left promiscuous mode [ 782.163615][T23511] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.171218][T23511] bridge_slave_0: left allmulticast mode [ 782.176911][T23511] bridge_slave_0: left promiscuous mode [ 782.182502][T23511] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.408775][T23511] tipc: Left network mode [ 782.413380][T23511] tipc: Left network mode [ 782.419641][T23511] veth1_macvtap: left promiscuous mode [ 782.425177][T23511] veth0_vlan: left promiscuous mode [ 782.431954][T23511] veth1_macvtap: left promiscuous mode [ 782.437516][T23511] veth0_vlan: left promiscuous mode