last executing test programs: 18m6.520752843s ago: executing program 32 (id=132): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x8, 0x5, 0x0, 0x1, [@generic="0bad07e0"]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x804) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x145100, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x2) ptrace(0x4208, r2) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f9, &(0x7f0000000a40)={'ip6gre0\x00', 0x0}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 18m4.983630144s ago: executing program 33 (id=9): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="a400000000010104000000000000000002000000380001801400018008000100ac1e000108000200e00000010c00028005000100000000001400018008000100e0000001080002000a010101240002800c000280050001000000000014000180080001000000000008000200e00000020800074000000000080008"], 0xa4}}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="78030000", @ANYRES16=r3, @ANYBLOB="240626bd7000ffdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x378}, 0x1, 0x0, 0x0, 0xc040}, 0x4008044) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r8, &(0x7f00000000c0)={0x40000009}) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) fadvise64(r9, 0x3, 0x0, 0x1) ioctl$BLKRRPART(r9, 0x125f, 0x0) read$FUSE(r9, &(0x7f0000004380)={0x2020}, 0x2020) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', 0x0, 0x2010860, &(0x7f0000000040)=ANY=[@ANYRES32=0x0]) 17m37.339733451s ago: executing program 34 (id=538): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x191) (async) rmdir(&(0x7f0000000100)='./control\x00') (async) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16m19.352149391s ago: executing program 35 (id=2061): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0xe23, 0x7fff, @loopback, 0x5}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x2400c049, &(0x7f00000001c0)={0xa, 0x4e20, 0x18000000, @loopback}, 0x1c) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x10, 0x3ec, 0x80, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x60004000}, 0x4c050) clock_gettime(0xfffffffffffffffc, 0x0) close_range(r3, 0xffffffffffffffff, 0x400000000000000) dup2(r4, r2) sendto$inet6(r1, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) recvmmsg(r1, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002002, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000a00)={[0x8001]}, 0x8, 0x80800) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r5, &(0x7f0000000240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r6, 0x406, r7) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)={0x1}) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x44002, 0x0) sendfile(r0, r10, 0x0, 0x800a121) 16m13.172210863s ago: executing program 36 (id=2176): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(r0, 0xfffffffffffff000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "67f00a64f35a6f8d657024e9c6"}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "35f96607af442a0aa0bc"}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040030}, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 15m34.648383757s ago: executing program 37 (id=2637): prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x10548c4, &(0x7f0000000180)=ANY=[@ANYRES64=0x0]) 14m33.190036021s ago: executing program 38 (id=3307): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086a059700002d8e475b4d343d189f07a2a21f30ef8c00000000010902240001000000000904000001030000000921"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x50, 0x0, &(0x7f0000000100)=0xff62) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\f'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, &(0x7f00000001c0)={0x40, 0x9, 0x52, {0x52, 0x4, "d86a516c9f212a724e51bec85a416496cb0ea92accff8bfb81f71d4ee4a63300f0f3a1ab6f70f038243581e9280b116f3c6fe56b319322a3c4e1b83a62ac1d57aab3fd0b5b51a3cadc37cab1e1d37e3d"}}, &(0x7f0000000240)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "a99a32305eacb1ecce2b887b7280dbc3f3080953c791985f2cca61816cc3badae0f6a5542f6fe4186077af371cb4267f69fd117b8a868cee2a91232b52a438accf360347f810df26a58bc73c8ea569f54021a329711c264cf9c58e3138f45c93feab276c349190b942a739e1245eaaaa8ba9772e5b00dede1f8d3ff62aa4482a06b75b40641ddea973c2d03843d0a50343cd356f6d6e356598cc6b7a5f5dfcd305b53fe9bf7ad16912c6e42aaf7438b09ab1a8"}}, &(0x7f0000000140)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x9, '/@ #'}, @local=@item_012={0x1, 0x2, 0x8, "d2"}, @global=@item_4={0x3, 0x1, 0x1, "2cfab66b"}, @global=@item_4={0x3, 0x1, 0x9, "b994b0ee"}, @global=@item_012={0x0, 0x1, 0x1}, @local=@item_012={0x1, 0x2, 0x4, "e9"}, @main=@item_012={0x1, 0x0, 0x9, "f5"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x10, 0x81, 0x1, {0x22, 0x4e5}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0xf, 0xbb, "e04ace1a5b3d2aaa2dd5f040ed813672af9e676e5c81b7848f9e74efeeefbb68a0acebd7e28eb82cd4f03ef58e6c5cb82a68e55071b1f79a702bc4ad055ffe484a38c910a53aff4b1b7197abc90e1a8a00b7d3bbca77880c38496021d71b9147328a3757771ee7dba8da6a587aa199bae3dc8fab5acf1339747edfc53f43c9fd5dc468a917660dc824bc4a7f815f755cd3528871ea17748169de37ff1edf735c97750a09f77baabe877b702eae74a1ecf7a00132c17918ce53bc21"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x1, 0xc, "316ca936b4348fd4159c5cac"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x9}}) creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0xffff, 0x600001) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') fcntl$addseals(r0, 0x409, 0x3) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000040)=0x4) getdents64(r4, 0x0, 0x0) 13m43.229537988s ago: executing program 39 (id=4557): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCSIFADDR(r1, 0x400452c8, &(0x7f0000000000)={'netpci0\x00', {0x2, 0x4e22, @loopback}}) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x1) fadvise64(r0, 0x1ff, 0x80000001, 0x5) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x149480, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x101, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, 0x0, &(0x7f0000000080)) 13m24.377960997s ago: executing program 40 (id=4907): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0802, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x648300, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0x7f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1d0) ioctl$FIBMAP(r2, 0x401070ca, 0x0) (async) ioctl$FIBMAP(r2, 0x401070ca, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000000)={0x80fd, 0x2}) close(0x3) 10m45.513619862s ago: executing program 41 (id=8120): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r2, 0x1, 0x48, &(0x7f0000000600)=0xdfa, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) quotactl_fd$Q_SYNC(r0, 0x0, 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x48, &(0x7f0000000600)=0xdfa, 0x4) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) 8m54.840417095s ago: executing program 42 (id=9992): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r0, 0x4068aea3, &(0x7f0000000100)={0xcc, 0x0, 0x2000000}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f0000000040)="8f0421ae8866000000005d7cde819b00737008c05ef558d2", 0x18) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r3, 0xff, 0x7, &(0x7f00000000c0)="0134c218", 0x4) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000dc7a2240c8042103c9a101020301090212000100000000090468200063741100"], 0x0) ioctl$EVIOCRMFF(r4, 0x40045506, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x81) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="07000000faffffffff241f"], 0x14}, 0x1, 0x0, 0x0, 0x20008030}, 0x8000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r10, 0x4020aea5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r11 = socket(0xa, 0x3, 0x3a) bind$inet(r11, &(0x7f0000000400)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 8m43.924557174s ago: executing program 43 (id=10379): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x9}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f00000002c0)=[@free_buffer], 0x0, 0x0, 0x0}) unshare(0xc000600) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x2) fcntl$notify(r3, 0x402, 0x100000000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x0, 0x6c}, 0x2, @in6=@empty, 0x3501, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe4) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0xfffffffffffffffd}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}}, 0xe8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_VMA(0x41555856, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x2, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0xf, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) connect$unix(r5, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) 8m43.672097128s ago: executing program 44 (id=10384): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@weak_binder={0x77622a85, 0x1101, 0x3}, @fda={0x66646185, 0x4, 0x0, 0x19}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) 7m47.090283606s ago: executing program 45 (id=11146): setreuid(0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="06", @ANYRES32=r2, @ANYRES32=r0], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '#'}}, {@noxattr}]}}) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r0, 0x0, 0x80000000) 7m11.88245684s ago: executing program 46 (id=11954): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x55, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6211d35fa6d5328fb7e7fdeebdfe2111754ec5aeaec6510241a36950b544877"}) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'veth1_to_bridge\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x31, 0xd, 0x8, {0x11, @tcp_ip4_spec={@multicast2, @dev={0xac, 0x14, 0x14, 0x16}, 0x4e21, 0x4e20, 0xfd}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, 0xf, 0x8, [0x7, 0xd]}, @usr_ip6_spec={@private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x0, 0x3}, {0x0, @empty, 0x0, 0x80, [0x8, 0x3]}, 0xda7c}}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x61, 0xf}, {0x6, 0x0, 0x0, 0x5}]}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffa) socket$packet(0x11, 0x2, 0x300) unshare(0x40020000) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r5, &(0x7f0000002400)={0x2020}, 0x2020) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103fcffffff7e394bcd2b0000000c0006"], 0x20}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x0, 0x0, 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100033060000000000000000fc020000000000000000000000000000f9010000000000000000000000000000008000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000340)="e5db14d4b1d7fe8001330f5f4c30f411221aeb981752fd4940e0553bf782a24d7a3b02c7bf2ec8b8c49e1c4b3ac05eb585090f42f5ea65ea29bf7d420abb3020a4bc3e6769aff596758e904af5680400"}) 5m26.643145348s ago: executing program 47 (id=13986): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',debug=C']) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',debug=C']) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000500)="10030600e0fc020004004788aa96a13bb1000011000a7389f252ae0dba4c807fca1a0022afc0d5071a204bd31870", 0x2e, 0x40800, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x200a02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x45809000) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f0000000000)) 5m5.976569062s ago: executing program 48 (id=14703): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f2", 0x2}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x4044805) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) recvmsg(0xffffffffffffffff, 0x0, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) r2 = getpgrp(r1) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000280)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x68800, 0x20) read$FUSE(r3, &(0x7f0000002040)={0x2020}, 0x2020) getdents64(r3, &(0x7f0000000180)=""/229, 0xe5) ptrace$cont(0x20, r1, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') clock_gettime(0x0, &(0x7f0000006c00)={0x0, 0x0}) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000140)={&(0x7f00000000c0)="92e3475f19c47a5259673586e5b8ae02fc3cd96f2332fce7db2450311fe8ed8c30600ea64b2a14d0e58dad03b61fb794fbe51f44aa9adefc40b1aec810901cec889d6c5e4ddb06d5ee4ff941ddbfb43c43b25f0a852fead7a3be0c48a9d14d53c7b979bb3755c20f7e4c1ed08ab72b2df310b372f03ffd7ddd23", 0x7a}) recvmmsg$unix(r4, 0x0, 0x0, 0x10000, &(0x7f0000006c40)={r5, r6+60000000}) setgroups(0x0, 0x0) read$FUSE(r4, &(0x7f0000003440)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x12, r0, 0x91045000) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r7, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r7, &(0x7f0000000280), 0x0, 0x20000844) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m47.9039914s ago: executing program 49 (id=15127): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x200082, 0x0) read(r3, &(0x7f0000000140)=""/32, 0x20) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r5, &(0x7f0000000540), 0x12) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24010000", @ANYRES16=r8, @ANYBLOB="010026bd7000004000000200000008000300", @ANYRES32=r7, @ANYBLOB="080026003c140000"], 0x24}}, 0x80) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) memfd_create(&(0x7f0000000080)='\xee8\xa5\xc17G\xa6\xe5\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f0000185000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r9 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r9, &(0x7f0000000300)={0x2, 0x4e22, @local}, 0x10) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r10, 0x10f16000) ioctl$KVM_RUN(r4, 0xae80, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r11, 0x0, 0x29, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) 4m37.840463569s ago: executing program 50 (id=15353): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/custom0\x00', 0x1c00, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) syz_clone(0xf41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x7, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto$packet(r2, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000180)={0xc9, 0x0, 0x0, 0x1, 0x10, 0x6, @multicast}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2000000000000322, &(0x7f0000000380)=[{0x1, 0xf7, 0x7, 0x100209}, {0x0, 0x5, 0xff, 0x1}]}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x884) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f00000000c0)="3900000013fc5fc40fc6ee1906424300034700bb65e1c3e4ffff01000000010000005600000025000000190004b1caa39a000400000007fd17e5ffff08", 0x3d}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1) socket$inet(0x2, 0x2, 0x0) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast1, @remote, @empty}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000000200)=0x80000000, 0x2) 1m58.946891564s ago: executing program 51 (id=18196): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES64=r1, @ANYRES32=r1, @ANYRES8=r5, @ANYRES16=0x0], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltuid}]}}) r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r7, r0, 0x0, 0x80000000) 1m57.512813633s ago: executing program 52 (id=18209): r0 = gettid() prlimit64(r0, 0x8, &(0x7f0000000000)={0x3, 0x6}, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wake_lock', 0x200100, 0x150) ioprio_set$pid(0x2, r0, 0x2007) waitid(0x0, r0, 0x0, 0x80000000, &(0x7f00000000c0)) r2 = inotify_init1(0x800) sync() r3 = getuid() sendmsg$nl_generic(r1, &(0x7f00000014c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001480)={&(0x7f00000001c0)={0x12b0, 0x12, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@typed={0x94, 0x4d, 0x0, 0x0, @binary="71b2cc42d1646faebb33035ef8650f9bf6bab95cc20e632f3666b2f44d7b55f73be572d871607bc7ff6325cfe8f044770ee44c2dccebfa2ef8c22083e8e015a09627aa5d61f0d78ee5f90e20b25a7968a6215ea046a61703dc696d532a5600c667c73278818762bb431ae387d35f5646d219089d0eaedad9d38b80fe20d23ad972d24a53a707c6aa7e200d1e868bd4d1"}, @typed={0xc, 0x7a, 0x0, 0x0, @u64=0x8}, @generic="b7a04d7efd5dea2d2b145ca13234050b39a8abb7edea7c638e703de5f580b16edc809e8978c4af28e79f77f8ea1418ae49ecd105fa2fe0ddb4d54c1aea5c52a88c0f6655ad235ac64db50c428585f5dca4a88dd349fa8a5f82aedc2e09085aca4f3f719eef415a1c8a7cd02eaa229c3f6daae71f27e4f948cfa85e69e8b865ed59a64e918ac79e5eccbff28faa34665a988adff6394a081672c2c36f6c8e6b9a16bf28c4eef3af5175b3c1ae11a58bd7ea2911253a8264cb26d322e15489fe1e46b668e7851e252689b7448e68aa0ffd82fce9e7600851f5260fe1c7470fe421034116eb6accc67b5204", @typed={0x8, 0x84, 0x0, 0x0, @u32=0xffffff80}, @nested={0x103c, 0x6a, 0x0, 0x1, [@nested={0x4, 0x123}, @typed={0xa, 0x25, 0x0, 0x0, @str=']q\xcb#{\x00'}, @nested={0x4, 0x5f}, @typed={0x8, 0x13f, 0x0, 0x0, @u32=0x100000}, @typed={0x8, 0x135, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x127, 0x0, 0x0, @fd=r2}, @nested={0x4, 0xb4}, @nested={0x4, 0xd3}, @nested={0x4, 0x7c}, @generic="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"]}, @nested={0xcb, 0xfb, 0x0, 0x1, [@nested={0x4, 0x1b}, @nested={0x4, 0x80}, @generic="25036af876d147dfefa34a47a9574f19f9c32a86ef8bc9e8f6ff4d177fa470d05bf132f29c6a6de8d43ac35ee09fb339146a76d436517b2a9c6f2c7aabdd8434dccbabe24321f489cdb74c4e57118b9aae6b91cd8417abe7989869bfbe80a2dbf1b7e106e77fc45561a09dd969a4bd0721e20eac8cc5428fb59d18309914e334bdaecd6c9c3072d3550ac89441485f97db2603643e75afba73414c598ffa7e69fa7791", @typed={0xc, 0x5c, 0x0, 0x0, @u64=0xb}, @typed={0xc, 0x6b, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x132}]}]}, 0x12b0}, 0x1, 0x0, 0x0, 0x10}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000001500), 0x800, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) listen(r4, 0x101) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000017c0)={0x0, &(0x7f0000001580)=[@uexit={0x0, 0x18, 0xfffffffffffffff7}, @code={0x1, 0x7c, {"6436410f782ce266ba210066b8000066ef2e430f01c5c40298f5fc48b800800000000000000f23c00f21f83503000f000f23f8430f0f930a000000b466baf80cb84460688aef66bafc0cb800200000ef26660fc7b50800008066baf80cb8e918018cef66bafc0cec440fa2"}}, @cpuid={0x2, 0x18, {0x9, 0x6}}, @uexit={0x0, 0x18, 0x5}, @cpuid={0x2, 0x18, {0x8}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x3ff, 0xcf}}, @cpuid={0x2, 0x18, {0x4, 0x8}}, @code={0x1, 0x64, {"c4e2553c1fb805000000b946e2878d0f01d966baf80cb80a9d988cef66bafc0c66edb9af0b00000f32b92d0300000f32f34e0f1ecb66b8b2008ee06736470f01c866460f383f04780f20c035080000000f22c0"}}, @code={0x1, 0x5f, {"0f01c866baf80cb8b05a2387ef66bafc0ced6666460fc7b700400000f2440f990364f3460f09f2400f38f08198ff00000f20c035000000400f22c0400f01c8400f019e6a000000676566430f50df"}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x5}], 0x22f}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000001800)={0x1, 0x0, [{0xbe6, 0x0, 0x6}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f00000018c0)={0x4, 0x7e, &(0x7f0000001840)="9b893ef859516c0516c610e061941c39ab407f7cab1728749514a35e0932ee4f2699ccac0dadd6954e2ca8af326fe20ddaf8ff05b6758c290d2242c783fb7ef711ec3df4d3145b7989477f831012732485fd3a82370d8204027a47ee390dcedfeee542b038da31422489ab719e75cd8fd3b1764f5fb4f5e30c02236220b9"}) syz_clone3(&(0x7f0000001b40)={0x140014000, &(0x7f0000001900)=0xffffffffffffffff, &(0x7f0000001940), &(0x7f0000001980), {0x7}, &(0x7f00000019c0)=""/177, 0xb1, &(0x7f0000001a80)=""/103, &(0x7f0000001b00)=[r0, r0, r0, r0, r0], 0x5, {r6}}, 0x58) writev(r8, &(0x7f0000001e40)=[{&(0x7f0000001bc0)="9dc75e0bc6ee9e145d981355c481d8d5654d80198b2b34695ffed8041abbd09d9cd32ca56550fa67cf134b7db0786ee6c2a8605e9e15da39033180e03b6e4e582d7d4e84f4c2b8132a66fefe5224518e539ce8918c3d51d19da5bc3a9ffb16070edac987eb2ab1d56ac3b5f7e60095e1db5b53fb66a31867fbe6", 0x7a}, {&(0x7f0000001c40)="7ffc79ebe174c876e708c00138a5c640de267e5a7ab6d1e620d2d24608cd", 0x1e}, {&(0x7f0000001c80)="e344d081c8e7317dda0c5c74bb383c6d4931dea94df3ae3a8c4d27d94e01b819244058638adca79b6fae3d1bb5cf6522a8121fcd91d3e3aa1d2eab371269238434931014da51f0608885baf6054fd5a21b0a", 0x52}, {&(0x7f0000001d00)="4caaba793f86114489543817f968ab", 0xf}, {&(0x7f0000001d40)="cf473b40b8f9c53250153424b20457c72439f368514552ac7fdd9e55ccad523623ff223b283ed8b42a9b0616ca99d6f25596e1d63aeb099986561d96afe32ba25164cae2bea7ae9b4e40f2043c588b17353991d015f282e294dc7bb74ecae5508837490157b4e992ffbb7e2c97e1f70587b4efcdc41521fdfcc6a6c13def703411e498e4a6fe4252b494a0d7f41462179d81d46d0fe57c5b8f0acf2e8cea99dec019d1d8fd", 0xa5}, {&(0x7f0000001e00)='Bu&\vT}', 0x6}], 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001f00)={'macvlan0\x00', &(0x7f0000001ec0)=@ethtool_test={0x1a, 0x1, 0x7, 0x2, [0x100000001, 0x7]}}) getpeername$packet(r5, &(0x7f0000001f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001f80)=0x14) mount(&(0x7f0000001fc0)=@filename='./file0\x00', &(0x7f0000002000)='./file0\x00', &(0x7f0000002040)='exofs\x00', 0x8, 0x0) r10 = openat(r5, &(0x7f0000002080)='./file0\x00', 0x40000, 0x40) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000002200)=@urb_type_bulk={0x3, {0xd}, 0x0, 0x20, &(0x7f00000020c0)="2c0501e079b3002c4b3d1b0b3fad3d59e78af8f48bde8704e2b1c8ddba63481e7ab64a9729e46ab704bb6942c83867551184f19748d95ccfa4629c5851593d4748ffee83031842c59a6be3894e229b8d850e4be7c9648639b1a10dc21e26790825cfb1ab3b6b0e37a0ad1e5d6b171e76d63091b67795371d561c498300d4db68709018d5dcb6276e1648a7902409ea2265309a33adea3d065002337f4ea359e740c35682eb053c36c6380805ce3990297f3489a29c4ae7205a307357d9be17fffeac4a030b6d1f82c9d588a667f9a3aece8959ac465ce9be723aa223", 0xdc, 0x2, 0x7fff, 0xf, 0x7, 0x2, &(0x7f00000021c0)="c9e67a2c207c3a745752a414fb4b8ccad5db8605a38a0f928a97"}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000002240)=0xffffffffffffffff, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r11, &(0x7f0000002880)=[{&(0x7f0000002280)}, {&(0x7f00000022c0)="9e7910a62dc087b211fa4069b222eb2f2f9ddee1c4beee22db4bf1897938324d3ddfead92da671122287f19411fe76b2903e5e6082c12deef0cc7d28d6ac36fc6eff0e7a930e2c7ec91c119b761be2cce0f02580e599f1d8246bddee69cd14791e3349c87fdaab2d90bae4a30b7462057085c198c391d18297c5d0073692b9d26fe99806629f1aa5ed62cf", 0x8b}, {&(0x7f0000002380)="5604f64268c44b339384d2487e9e3e9523bbbbe2064f290b2d2cef7906a6d1b484e457304e751c8310ee6faf0ddaf33bd50e1f9933cb67a2c22868f96dd222514bba4595fa3bc7e191e9562ca243b1548ba38f951d12536ff81652b631133843aaf2a7f0f92e18c86cc58317b2bd04d68eedd5cb2f53b76390d17caf474abae17468a62eb9652ea9c0bf1d0d513669f902c85b359ebe5a78be1b6d1967fcc827758b34c8d8de650c2d75f5", 0xab}, {&(0x7f0000002440)="4e7446952c4688f68a662be5f2ac35bff00e148c0ef2f1a6c36d6afc232cb969edcf582914e0dea983fedbb6738f4e663d8b68a1ff2d7e3092e361e4de32c7a7c231ed6b2a40366dd32e9f082244e42e734db030a99f7b4f7ef7d637fb0aab53575386bf75865a3ea0025a029b1af00ec2477f4520ec7d3afc1348337df2ac85f4740e6c241a86d06121bf47b5a8b713a92dcbff8d5423d567b289e282996cc4ace1694ab8f2e0fe46350114b32cb548ababf8397118efc958af58b6898c585426c4df44c069ac06491f2691280a88", 0xcf}, {&(0x7f0000002540)="9370c60cb6c72ad87e59b7f6dc68c6f455ccbb4a42b4b1ba74969aa313f5c1798c8c5f017a25b017b41381d150ebb3897b58b5638e118ceab0e6cbedb93d5f0d2f56d8e0f03be0f99c431dd407f4cd679ab3051e991e664a1f7cf664966b8cd8fe88c7f2c1a3677220b7026418c89f6fd9a681e906abd703f6836cd0c6d9a539e47eaa89a1b82e011d90d5a06dbadbaa4a1f30b71a0e5daa76a0540da5226e3a2067af9b0740d792da7e6d780959dcd6c19e78", 0xb3}, {&(0x7f0000002600)="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", 0xfc}, {&(0x7f0000002700)="8a3eb3484d0ebcdf47e54478c0cbf79a48df768c1f0bb50958eae6c3a5bf28538678013bc69cf1b4233c5593a8db6476d97d4cba5381f0a5483ff7c25be6e85f582e8cdc", 0x44}, {&(0x7f0000002780)="408d3b5d1388a099b3642c1eb9593adc14289d1718cc51fce040ea49a2c33ef8498fa9362550072ccf40d0f3d0837fbfe975e0225c678d42b3cd3f975757f67885927042868e3511466c7ced5f", 0x4d}, {&(0x7f0000002800)="070b4c0ea23c8cf5b4dbc6008ad93f87adfb71a75ec112d7cf5f811dca8210cecd", 0x21}, {&(0x7f0000002840)="0e8b8b247435823cbca5e09c3d5c79f11a005b388b6133d0380f5f2155156b6b6db071fd6a545668eb45d9", 0x2b}], 0xa) socket(0x2a, 0x80000, 0x8) sendmsg$can_bcm(r1, &(0x7f0000002a40)={&(0x7f0000002940)={0x1d, r9}, 0x10, &(0x7f0000002a00)={&(0x7f0000002980)={0x4, 0xa0a, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x1}, 0x2d, 0x3, 0x0, 0x0, "6ee5a7f96ab488c16c6360d8f6a2069d291bf259368f46c64b10b6f444174c6cbd3e35d496cb0f25031821345a67bbeaf5394c81041da7d9cd86f764c6704011"}}, 0x80}, 0x1, 0x0, 0x0, 0x2004c050}, 0x40020) 1m30.8607299s ago: executing program 53 (id=18457): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x40010, r0, 0x54201000) (async) inotify_init() (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) 1m19.161899791s ago: executing program 54 (id=18580): sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044014}, 0x4) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xf20f) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}], 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000200)={0x6, 'pim6reg\x00', {0x79}, 0x200}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x40, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x10}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xf}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xb}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xb}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1f90}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040840) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4020000) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000004c0)={0x4, 0x997c, 0x7}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, r2, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0xc810}, 0x8800) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x7, 0x4, {{0xd, 0x4, 0x2, 0x2, 0x34, 0x64, 0x0, 0x92, 0x29, 0x0, @multicast2, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @cipso={0x86, 0x1b, 0x2, [{0x1, 0x3, "af"}, {0x5, 0x5, "d070b0"}, {0x4, 0xd, "3e8fd8ae83b1eb5c0b4913"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000840)={'tunl0\x00', 0x0, 0x20, 0x80, 0x7, 0xc5, {{0x3f, 0x4, 0x2, 0x13, 0xfc, 0x68, 0x0, 0xe8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @empty, {[@cipso={0x86, 0x2e, 0x2, [{0x6, 0xd, "1ffae314d99d5b2bd5c4e4"}, {0x1, 0x9, "46b913390f9e3e"}, {0x0, 0x12, "b34e20a46b6991cacb63398bd5f8e9e3"}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x66, 0x2, [{0x7, 0x9, "c1fb4662094135"}, {0x0, 0xe, "d2320ae0dfd757766af90a7d"}, {0x1, 0xf, "e8567a56948437598b27528fac"}, {0x2, 0x2}, {0x7, 0xb, "6adcd3a682e1783d5e"}, {0x85a37169656c79d7, 0x7, "f3c040ae3d"}, {0x1, 0x11, "8887f769e1ea081b29998d2ef14b75"}, {0x6, 0x10, "a39e120232f939535f8f2e2b57e4"}, {0x2, 0x5, "6b3fe5"}]}, @rr={0x7, 0x23, 0xe7, [@multicast1, @local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @rand_addr=0x64010102, @empty]}, @rr={0x7, 0xb, 0x89, [@rand_addr=0x64010100, @loopback]}, @rr={0x7, 0x1b, 0x8f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x37}]}, @ssrr={0x89, 0x7, 0xe, [@empty]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000009c0)={'pimreg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000a00)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000b80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xc8, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x200}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x80000001}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40004}, 0x0) pipe2$9p(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x840) read(r10, &(0x7f0000000c00)=""/138, 0x8a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) syz_clone(0x80340800, &(0x7f0000000cc0)="05a1a6af310a0b8e8b67eee18b75ecd05404babc4ace21ec702cb54bd0b650efacf9bfcd2b3219bc78b5b524afe793c7a0745ff964caac429b440e83090a518fb7777bb0945ad4a040fdc77936c864238c1e8bb037f6a18f917329dd10fd3a68507411", 0x63, &(0x7f0000000d40), &(0x7f0000000d80), &(0x7f0000000dc0)="66836dd1318dacd02243daca4fa383a3a540a3d177317ff65956dea43a91dc5462816bf8") ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000e00)) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x128, r4, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x24040001}, 0x440c0) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x54, r2, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f0}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000001180)={0x9, r9, 'id0\x00'}) close(r11) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r12, 0x4068aea3, &(0x7f0000001200)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000001480)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x108, r2, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x48}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x3ff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}, @chandef_params]}, 0x108}, 0x1, 0x0, 0x0, 0x8001}, 0x80) 1m11.9588026s ago: executing program 4 (id=18785): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x81, @any, 0x0, 0x2}, 0xe) 1m11.9581038s ago: executing program 4 (id=18786): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x52) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getdents64(r1, &(0x7f00000002c0)=""/185, 0xb9) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f00000001c0)={0x712f, {0x4, 0x8, 0x0, 0x0, 0x40}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x2}) r2 = socket(0x10, 0x803, 0x0) mount$bind(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x2000000, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001100)) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB='mode=0000']) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000080)=0x3, 0x4) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r3, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 1m11.336541079s ago: executing program 1 (id=18801): r0 = syz_clone(0x41020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000180)={0x8800000000000000, 0x8080000, 0x800000, 0x0, 0x4}) setpgid(0x0, r0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x29485000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_timeval(r8, 0x1, 0x42, 0x0, &(0x7f0000000180)) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x3, 0x8, 0x2, @mcast2, @empty, 0x10, 0x46, 0xf534, 0x40}}) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) 1m11.178360101s ago: executing program 1 (id=18803): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(r0, r1, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r2, r2, 0x0, 0x7fffefff) ioctl$BLKRRPART(r2, 0x125f, 0x0) 1m11.029558483s ago: executing program 4 (id=18806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000340)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) (rerun: 64) 1m10.637387449s ago: executing program 1 (id=18808): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000) mkdir(&(0x7f0000004a40)='./file0\x00', 0x42) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000006b80), 0x8, &(0x7f0000006bc0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@index_on}]}) fsetxattr$security_evm(r0, &(0x7f00000000c0), 0x0, 0x0, 0x3) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x10520, 0x0) 1m10.546943479s ago: executing program 1 (id=18809): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20c900) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0xe0bd2a4bb8e9162}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x28}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000500)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 1m10.211150344s ago: executing program 1 (id=18810): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x2e, 0x21, 0x0, 0x0, {0x19}}, 0x14}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000440)=[@release, @clear_death={0x400c630f, 0x3}], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e651a746b6d8e0343222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, 0x0, 0xb0) sendfile(r0, r0, &(0x7f0000000000)=0x4, 0x1fa) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x2e, 0x21, 0x0, 0x0, {0x19}}, 0x14}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000440)=[@release, @clear_death={0x400c630f, 0x3}], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e651a746b6d8e0343222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r2, 0x0, 0x15) (async) dup(r2) (async) write$FUSE_DIRENTPLUS(r3, 0x0, 0xb0) (async) sendfile(r0, r0, &(0x7f0000000000)=0x4, 0x1fa) (async) 1m10.124325285s ago: executing program 1 (id=18812): mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="5fd4fe", 0x3}, {0x0}], 0x2}}], 0x1, 0x24000014) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/246, 0xf6, 0x42, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x4211, r1) fcntl$lock(r0, 0x21, &(0x7f00000000c0)={0x1, 0x1, 0x18000000000000, 0xb, r1}) 1m9.888419339s ago: executing program 55 (id=18812): mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="5fd4fe", 0x3}, {0x0}], 0x2}}], 0x1, 0x24000014) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/246, 0xf6, 0x42, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x4211, r1) fcntl$lock(r0, 0x21, &(0x7f00000000c0)={0x1, 0x1, 0x18000000000000, 0xb, r1}) 1m9.879821819s ago: executing program 4 (id=18815): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat(r4, &(0x7f0000000040)='./file0/file0\x00', 0x101000, 0x110) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r6, r5, 0x0, 0x80000000) 1m9.592364773s ago: executing program 4 (id=18817): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) write$cgroup_int(r0, &(0x7f0000000300)=0x4078c1d5, 0x12) syz_io_uring_setup(0x1a70, &(0x7f0000000080)={0x0, 0x0, 0x20000, 0x2, 0x0, 0x0, r0}, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0xd8, 0x23, 0x1, 0x0, 0x4, "", [@generic="6de8e141e86569f16748ceccf8aa06aa7622edfc16b2ce14f3052cf6910a89921623eed76b6d9bf5c20d494130239251d642722998b81a28186cc9fc90d102820720805efdc841bc666a4b65795f88cd3c1fa1909eb065d34f62c4fbe88d2cee236e9ec1563a444a64c729533eafcdb698e6c6fc7a88baa9efe24decfb307ea0806c19403daaad5b5a403d9db81356ce99b67b5f60521b22321f5293d7551a58d466ce89b61368595a3cd95a5b43309b5be5f8b1bab857bb58aa8f95eb7de6b54df0cebed5"]}, 0xd8}], 0x1}, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) 1m9.325680966s ago: executing program 4 (id=18821): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) syz_usb_connect$cdc_ncm(0x5, 0x7c, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0x1e, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1f, 0x1000, 0x5f}, {0x6, 0x24, 0x1a, 0x5}, [@mdlm_detail={0x4, 0x24, 0x13, 0x1}, @country_functional={0x6, 0x24, 0x7, 0x2, 0x4}, @mdlm_detail={0x4, 0x24, 0x13, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x3, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x3, 0x10}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x10, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2809}}]}) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000000840)="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", 0x7c1, 0x40001, 0x0, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 1m9.147403569s ago: executing program 56 (id=18821): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) syz_usb_connect$cdc_ncm(0x5, 0x7c, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0x1e, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1f, 0x1000, 0x5f}, {0x6, 0x24, 0x1a, 0x5}, [@mdlm_detail={0x4, 0x24, 0x13, 0x1}, @country_functional={0x6, 0x24, 0x7, 0x2, 0x4}, @mdlm_detail={0x4, 0x24, 0x13, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x3, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x3, 0x10}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x10, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2809}}]}) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000000840)="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", 0x7c1, 0x40001, 0x0, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 1m3.583443355s ago: executing program 2 (id=18887): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') fchdir(r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x10001, 0x12) r3 = socket$inet6(0xa, 0x80002, 0x0) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x8, 0x80000001) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 1m3.582992665s ago: executing program 2 (id=18888): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x79, 0xac}, 0x0) setreuid(0xee00, 0x0) setreuid(0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b00)=ANY=[@ANYBLOB="801200001300010000000000feffffff07"], 0x1280}, 0x1, 0x0, 0x0, 0x80000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r3, 0x45809000) pipe(&(0x7f00000001c0)) 1m3.582330095s ago: executing program 2 (id=18889): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"a516f53c6844f7fa4c5d35385d94c855", 0x0, 0x0, {0x8}, {0xffff, 0x8}, 0x8000000000000001, [0x1, 0x200, 0x2f, 0x4, 0x3, 0xa, 0x200, 0x6a5, 0x1, 0xc5, 0x1, 0x0, 0x4, 0xe6e, 0x4, 0x1]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000002500)={0x0, 0x8, 0x1, 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000003900)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000002900)={{r0}, r2, 0x12, @unused=[0x6, 0x4, 0x7, 0x80], @devid=r1}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x22202, 0x0) read$FUSE(r3, &(0x7f00000004c0)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x3, 0x0, 0x4}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3f}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m3.578968055s ago: executing program 2 (id=18890): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) mount$fuseblk(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2022000, &(0x7f0000000580)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@default_permissions}, {@allow_other}, {@blksize}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1e00}}, {}, {@max_read={'max_read', 0x3d, 0x2}}], [{@uid_lt={'uid<', r8}}, {@appraise}, {@context={'context', 0x3d, 'system_u'}}, {@audit}, {@uid_gt={'uid>', r9}}, {@smackfshat={'smackfshat', 0x3d, ']'}}]}}) sendmsg$can_bcm(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x400, 0x2, {0x77359400}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r10, 0x1, 0x6, 0x0, &(0x7f0000000040)) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m3.394651618s ago: executing program 2 (id=18891): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x4, 0x1, 0xc, 0x6f9e05f4}, {0x9, 0x40, 0x5, 0x33192222}, {0x9, 0xfa, 0x4, 0x5}, {0x7fff, 0x8, 0x4, 0x9}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'gretap0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x24048895, &(0x7f0000000240)={0xc9, 0x88a8, r2, 0x1, 0x7, 0x6, @local}, 0x14) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x1b, 0x76, 0x36, 0x20, 0x525, 0x9901, 0x3975, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x84, 0x4, 0x0, 0xc4, 0xc6, 0x1f}}]}}]}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0x498, 0x0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r5) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000000)=0x80a0000) userfaultfd(0x801) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="010000000206000003"], 0x48}}, 0x4000000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0xe0bd2a4bb8e8163}, @flat=@weak_binder={0x77622a85, 0x310a, 0x3}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m2.754436757s ago: executing program 2 (id=18903): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sync() ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.367813066s ago: executing program 6 (id=18938): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) accept(r0, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0) 1m1.328483057s ago: executing program 6 (id=18940): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="797407f5cea92bc6", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0xc011) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$P9_RREAD(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="32000000750200270000006b7192411fc65c6bf4442aacad6713103505ce01f7a931f842446d64d459643a647d6768d82ef19a6404516f0645adb5eadb7a429b619a1fdeda33d89cf69535a1fff458b0e07822b64a6de68f0fe075d107ae7afbeda0cc7aec7c4c57d0b0a5e89487e05f8fb9fed40ccd05014c7f5f5c29a48e9ded465df16df57aad48306269e3ddc34102c30501eb31b428278c4ebd14d8b6ac9946e2ccb67b86f0efe2e83e32db40f07d9247eb428da1e0ecff6806c0d0d0d36a928221134af37a0728c87ec8d7acf9b7c2b8bcbf39a5f7f1de5e8fe1c5da8212006dcdac2f6d44e953bca1b56778c8b7adcf7945684e5ddc3705f96a6b7f93cedf42a81664fad466f5f58f0d4cb02c1dc41c64e913a003e9c9c8c95503cb51ed68081701"], 0x32) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r10, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) vmsplice(r9, &(0x7f0000000580)=[{&(0x7f0000000040)="b0b70f91aa3c18adf48c728edc3cd81b4c06ba5f895b8b51af2a4e28bf0fb5c3675b8f09d4affe269eef880aec6e277892e8623bd3d83c28f49c3a3c9c211c33a5d22107b8826fa94fce18d55ae10a3815c6", 0x52}], 0x1, 0x0) sendfile(r8, r7, 0x0, 0x80000000) 1m0.708690645s ago: executing program 6 (id=18948): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) read(r1, &(0x7f0000000000)=""/72, 0x48) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r2, &(0x7f0000000400)="a399d7e4ad784ee25b5ef02167c690cdd3bfbf2859ee528df869afb8a34dfc", 0x1f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r1, 0xfffff000) flock(0xffffffffffffffff, 0x6) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x4, 0x2cbf) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) read(r1, &(0x7f0000000000)=""/72, 0x48) (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) write(r2, &(0x7f0000000400)="a399d7e4ad784ee25b5ef02167c690cdd3bfbf2859ee528df869afb8a34dfc", 0x1f) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r1, 0xfffff000) (async) flock(0xffffffffffffffff, 0x6) (async) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x4, 0x2cbf) (async) 1m0.681429875s ago: executing program 6 (id=18950): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)={0x0, 0x14, 0x12, "59055090b430f305adeadbebb850a6456f91"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, 0x0, &(0x7f0000000180)=0x2c) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'bond_slave_0\x00', 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) timer_create(0x3, 0x0, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x802, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)={0x0, 0x14, 0x12, "59055090b430f305adeadbebb850a6456f91"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, 0x0, &(0x7f0000000180)=0x2c) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'bond_slave_0\x00', 0x1000}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) (async) timer_create(0x3, 0x0, &(0x7f00000001c0)) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) (async) 1m0.639145016s ago: executing program 57 (id=18950): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)={0x0, 0x14, 0x12, "59055090b430f305adeadbebb850a6456f91"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, 0x0, &(0x7f0000000180)=0x2c) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'bond_slave_0\x00', 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) timer_create(0x3, 0x0, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x802, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)={0x0, 0x14, 0x12, "59055090b430f305adeadbebb850a6456f91"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, 0x0, &(0x7f0000000180)=0x2c) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'bond_slave_0\x00', 0x1000}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) (async) timer_create(0x3, 0x0, &(0x7f00000001c0)) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) (async) 57.814692285s ago: executing program 5 (id=19005): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffe000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x20000) fcntl$addseals(r1, 0x409, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3c00}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f00000003c0)) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x45809000) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') 57.774776295s ago: executing program 5 (id=19007): madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001180)="7587085f55d973ea82385de1c68274551ab847638ac8bc4ae9b8b65b223c0c31e9b36ef69562223ca6d2968838b828ef0a1910081968853351cfa919111e18076af9daff40f8e4041662803d26e1203703df68998e01d5c6ec9bb9ce8d264de530b1bdb3c818e6bc7752bb72ec452ef58ec9b7c51ac6600de61e8815aaaf9587a9edd9b12be8ea4c2904548b8b188bc878674e2a88f0a13fec0f25d5227577820e032b6e37128c4961cc2e3b92470526f1243f", 0xb3}, {&(0x7f0000001100)="068c3a681b030d9e2f0d9a8a055a130bae34ce940a34997193", 0x19}, {&(0x7f0000001240)="d0e6e245b445c1d7d0f8e7089d872b21ba219a4f14e0f5e1e2592c74f16c85a5da6c3ef22152d55645d4a5df797891588bfd7d47e970bdffc665adc569f72882c92aa10b14ddcac3a6215a29a46054f54b800bdd519129812b718230235cfe6e67f5860b69e28616ea56137b3f67e9d41fc0dc5e26111b60d4afe2c27647ef6940790b2de81b2ca44d0b7cf98aee4608e57c6a62420f352abfffb2", 0x9b}], 0x3, &(0x7f0000001340)=[{0xd8, 0x110, 0x2, "af309754007d816d3e70e699ec75f84668ee1ef21222b3496cdec1cfa1c9f70f849521301b74411ee3fcaa7928ca64536de099e6475510540c77ac5e39362bb5090846fde52e1ede26fe95fa51d591c7bc198b6877e80eddc220fd23e11b3c265f664d0055d3cf4e46cdc378fe4b1703af9b5cab4bab8e178bbaaa75ec5cc3fd946de3b9f64fbe38dd8133c5726698802a06b3063a773a7a4cd6fd05b5eb7aa39d244551a43aeeed3305affb7f14568b28ee6fd80b8baec8e143398d74aeb9c68d72743816cd67"}, {0xc8, 0x115, 0x3, "c8501de73d9f4813bb6c22b652e08e1f47f35876eccff7c995537e176b548986148df14fa5a78d6c6f4427ad2bc7eb85e13cbe5eec6a196c6fce1245e878c14fe8e8c0430b97927658d96bcd3d44a1607a0d37fa7c1c8d48add6a5d4b82c784cab7641681e54a9b871fd804015661e21fa07e7cb7707ce08d490931ab088e627f64e75f374f8d5a340c4f50738f319dd66c920f020d5e88fed08e7700a2090b2eb7ed8c8cd3b1e78cfbe64b8ea5b3cd9d110d3"}], 0x1a0}}, {{&(0x7f0000001500)=@ieee802154={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001580)="e774fee2339a3952accfb38338a5e313d4013fd55fe2ac3a837f85d73795d873b4d5bed3164a634141ec278310f60c6036ac69e97b924d6e698f9c20bae766a59b72412798485fd846039fd858a7ca9578952b46900255927352a7f4cd0d5d4f9e6f99226aa1675be22ffaabe03d3252a49af30e774d96b8d7acf25d0812601b5c5bd20ff37b37f4ccfe6217636428272ce0b75252b6ff7de99d1951423c847fe9e65c0753dabfc1005d7983c9a4012fae26392622d43f8f753f261ed3270a9e77ede13af8ddd23845783817bf4b4ef274e1364689dab06b007f5c08fc59db43", 0xe0}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000016c0)="b06719a526d31b9a4d0aec1e1a2349e72f1c3dc81d73b757293eaeba323221066dea0332fa7f249a18ffc59afc772dec0fe3738bcd0fa11ccb22b1c460d283c3c876a9deeb2437ebac42021c8c968e49af58459bc2e0bb42b7ee4e382494f17faa326723090473ddb663d34fc25a5dbac570c62da58c5fe141d0f3e2014496b8400d16f0cb391eb2973d8ca29ed166217cb26d58e81bb848bd016c7c364705c145729d3a65d240282d82", 0xaa}, {&(0x7f0000001780)="4d79ece44ed1b12a67804b65c775f372bf756c515e78bc61459bb2704ee1aff25ad1f22a158ae38d", 0x28}, {&(0x7f00000017c0)="a7d73c92a96b49816b5761c5075a9285f609915a50090a23bab106c720007f8f5a8a07578e1ff5a8edb0a2dfd6153353585f31b2ee9cf69162dddf65509d1483b8a1b3a49017a389fd953a5fc3245a83cf300db78ec2c53cb6f6d02a2948f4170e10d469dbc16d352502fc50f1962f913da10a41b168baf3cde9075cc96afd00b8e7617bec4bfb46330a941f6cd3b4e99c66a8d4fbf0cbb0ccd3249f4abeee54c42a62b6835d94af6694244a664a6f73b6420fc942e3f0d03bbf93ee27601291666cfc5fb9e934a76368d9f168df27187f6a6a56f7c895732bd40ebef44c38e5c4a0c33d4c70ac5132e7eda90ad23115c4fbf2bc", 0xf4}], 0x3, &(0x7f0000001900)=[{0x68, 0x101, 0x9, "dfe7041994c12dd55a0f35c3ca430d9841ca4a09f7010158184abece1abaade152dba04ecc41fff0b8131d2b8528a6bb3a415aaa441e72918bc9f3221399b23d3ebc3806c95cb892bf56632ff59e4432df"}], 0x68}}, {{&(0x7f0000001980)=@nl=@kern={0x10, 0x0, 0x0, 0x20000}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001a00)="f9fbbd1148af6b94fe812f2ee8e97597e78cf0461bf2b571d835a45e054c4b727335a7e3d1916e126b5be68e2d2fe5", 0x2f}, {&(0x7f0000001a40)="a5067b9f35322a6371d3", 0xa}], 0x2, &(0x7f0000001ac0)=[{0x50, 0x1, 0x0, "9ad0061f1f6f5806538ac55e2eb14aa393da1ff15907673b9568066f9cc6a7b947e59e7f125e4bbfd4698989f64732e3ffa9039cd22421df07"}, {0xd8, 0x29, 0x8000, "6729ef4997f08698aa2b71c2f915923569b372e6b8ddf4001a2d5615f594d0a6a8203928de8286d580b53ee043b2f8517c13010e05bd00910eb84774f652af900f42e82ff80603edc7b8254dc16a3e85abd18e6d312db41a1fb170d009482b38bdc60a011fedae93d7bb86cd1ca3e474eae9461b6e7184440fe6c28a6003c3b3c47026028c186251b98f4eaf88f64fe86804f1719448d53ae85d5f88d783351a809fcad36759d26e880075483b4cdeca4369bdecbe49979342bf2fc09ed097d7eca7fa"}, {0x80, 0x10b, 0x3, "fa2f681387671628f3a01f9ce66fa5902b11878999a4dca0a9b8d856ba74a24e4168ea105e04a736e475d4f28e66ee94c86f6f860ebd45afa19d80b6991412ca3242d5b1bcee1aab4e74e32c5a9106e6437bdda5dc6ab5f6811fd7f1eb6916a9e3bb31b93a86a6243d3b70"}, {0xa8, 0x119, 0x8, "926b795bb5c92682e41b82b446fbc9f40689f23653749a19ea0d3a6a7410b7c1958960edb12a2f279014d676d199dba717eae9230742550590e0dd5266aeb8f78287e6b97b7b46113fdad41ed1de6e715278dd2d662e93b97f07c3a622d5100fbf2bb3eff31a595befeb52cba549b433dc098fa05f9bca4092349e9e7bd369889c9cc7970ffceb75be6c7cf7038206e5a3b81f7e"}, {0x68, 0x0, 0x9, "e3a4fffa14585d43e65591741c130495785dfafdce4bbf713b27ebc1155b307b704eef5b69a9adb284ab061df1d7c2465a949a633708658aa8ba77f034e418e951b12eb70f78df0a7d252dcfed6c26d79d8344"}, {0x108, 0x110, 0x6a40, "197d780fef30ae3483a2ee27c2a955063ffa589b5f0e08469e11652777139a77ae25b83e9e7a79cefd9f0bdbe422cda0dec42aa74d6654eecc58853d86a8a61c7ab914d0f56d6ff987f893e5d493d6a3e2c2b9068745e74b8a348d86352d83afe02057a14a7fe11b2de7b9064071012bcda69e7cf159680913cbc92cf8337d03620fbf35fbf73d333757510eafd7821266bdafa40b0e4cdc1fe3aeff1e7040aac7f32de82fd082cf6ba9807a62d4ae3b4ca8f16ca8a0337dceb3f1fdf4973ab0f8fcc4d035a592e0c328600950a80f46b4b8ac4827f34546c66a36dd8fa8591e473c95716d0a1428741325209fdf4851653995cd386b"}, {0x70, 0x104, 0x7, "261ce9bd137c753e73a0f34d81901d120778811f45d4a582271209ddbc8a19c58d4db89e4b01ac88fd382678f2a9556f296a13d3eaedee5dfb583111c1279eaa45bb2edf9dcf862ce0b8c19be66a63d7d6b43fbbf533a8df03af11399f08ae"}, {0x18, 0x119, 0x28d0, "ea737f78d527e194"}, {0xf8, 0x10d, 0x3, "12e28f3b28dddf0b92393b5cdd026e0516de0a26a91e1fff80883ce832ec013e31cb5d3f378ac48ac723312289d33d411e193945a5c55d37b1632429873d08f6844c5b681c2098944dd629a2dc50bf3c83642cd8ce60d6042eaa04ba95a7ee23e3af3c54490fbe0341323b28a35a86abdc242ddf4d91ebbb2f5a3eed027ff2c3ed51604ded2a7b52d5bc8e29b07a130f955924eb357d85b89c2935b54e7efd016c0163e12bcdf75851884403e19f03e5ae5ff084c104d6a967ffed6c0b90dbfb079ee07a8cb2f46a148acb469d3899c522ef262d019c03ec6cab8beb10500e617d544fc32e"}], 0x540}}, {{&(0x7f0000002000)=@isdn={0x22, 0x4, 0x7, 0x6, 0x7}, 0x80, &(0x7f0000003340)=[{&(0x7f0000002080)="6222a43114c65b0d4fd0f4c122b6e80e4bc4d60c36898e31ced8eabe78e286a88b7fd0f3da1c168e1887781c22bcc5c3a521f38463c67c710f14fcb1b758b656ec223f70da9024a77865981c2a69f83f34c32aebd85a7688a2a719a0569a10cec39f922461d4c59d093b86fb13696d2a0189a05fe05f585b9b2224e03b47139a3173d051150e1e14bb26d9dab950d62e2d0f9642cdf58e5ef92088ad8b1d47b4c308", 0xa2}, {&(0x7f0000002140)="21da0f657bc4893e06f68e43b524aeab081f123e1ebbbe229389f9212ceaf562f2cb18fe1d7a250e0bead92d604133adb2f8321f84202840c4356ff8ec3fd8e3417e1142600c9ed96ca16e2169f6d66f09039125903e8bcf925efdbb9c3b61135fb6e01026d1e84f263a12128b8cb804feb34a6a4b2826d3e4dd87b9917f05ecd458155eae91ab5a5e4dea8061330fafcf50bf6e1b368a55c2c57472c19948aae3a977228120155ac0422ad664f866526f11f7fc2dac6ae26c14de5117526613b53a821adbe3767e580915e5a2a9b9ce80f3c41e92786e2d006bab5bcde7df966b24e223be54476a0e8455b94aac15f7db6c55c5", 0xf4}, {&(0x7f0000002240)="62f6", 0x2}, {&(0x7f0000002280)="796aff5fed8e23abd04a2b8adbdd843728346aec54f7de3d10807f1fe6f51a71f2f279f8bbc72254705ae4627d1a34d64559c943f4dd8748595c68278dfdadc67ec18e21d82e4a07db1249d8bad7440452102a0d60c636ae6b95c2ed586aa2da23ccd7023c015be3add4426d6e9544ab1a8dc02217365f4710143ef4e001351ab16b0745b7f31e5ef5166fc40b7ea3a9a8b7ad0788d84582093a7cbcaa6dae67d5b1f73e9b72b9ecf00d0d5d39b8d5621b36", 0xb2}, {&(0x7f0000002340)="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", 0x1000}], 0x5, &(0x7f00000033c0)=[{0x58, 0x1, 0x2, "468ebb5d079956fa98e27de553a032d4de1d16d86625ccf9d2fce37a5dd05682fda0c39b6db48719e80b6cae4e102615de3a0f224209c008de9a2b8fec6cae536f"}, {0xa0, 0x29, 0x5, "13324db15b745f7c476616b7cc632c367ba9722c96a180b37db5424f472f9db8af42488aee45975926ddcfd1b906ebde0d582467929429b2c30ec9de33c38e7dcd9601e1eb4abb10faa2afc00fc63f87d18288ea3c9eecb476d7c5b2e4eae2cbafa1249ee2a455cb8110bf8b36bf2dd23cae4c1dd95bd1042e844339bc6d1e3604fdf280681b6c4b5c0e7b60"}, {0xe8, 0x108, 0x5, "c440b5545d24668c086a0edb2dda982291d97dd781ac7fe84c7cfccfed631d99f3f36d6b7f066976bccc7dcf9906381dc1dca6adbb8872b7ebe832551729cd907753087036b35080ab99832946b7a5972a06e9379bbba05709835f09210f6b64c1678235f0244e925dd996f5866e21004399234271825f3f73d0ccc1ce955db7ff45634221c34594690b323323bc2e6dbc56cdae46dead2f68edac60962a9d2c6fd57242678a5ce53ee3af0e7388c840abf03fbfb6093ce76049b2996e585ba04c0b4bd7c7630b5de6f6fa5952d0f31b10d759609bebe4"}, {0x108, 0x3a, 0x6, "d22eab35618a3d0f2885af5fe63148fb91605c611dad7351178cd882307aa91f962a56a05c5e6d554f02531100b7c3e5e709760ba597d4d5079ea94f2482643ee64073ed70c8b2cf0fb93162eda3058d2d6b1475dd1061705cf5b0dc84dbb6ee7255233ad37f959c333933842b6ca10fc0652e693a62dc844ebe38902870635e6a4f919611dc8463f349ca5b476e4819561e544bd6ee9321fbe610d6c7b5afbca1a0bc986c1b41bc59236cf3a3737bced7ab890f1b964277e3680389a6b9ce3057c382365fc7b89b163cbd87ac09d83b91187c026f68f710cecf1cbcc7f8313dfefe9eb740fd3074737b004bc9cdba1c937262"}], 0x2e8}}, {{&(0x7f00000036c0)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, &(0x7f0000003980)=[{&(0x7f0000003740)="19affd7cef67751b1d80a916f27b5bfabf9f293b95e03bf11fad8db96e7a35ba1a39d917b0239ef427d18b3e4d9ea3775bbecf28f090799f84a8c34732c8d730c0f600fe232ff5850bbe054f3b487509bcb1af4e314a2f977459e83145a047014b80d1837e8fb9e474350633d40331e2c515c253d0c76a46932aec13294a013cdc41d13e15f9290060c3372d79e1623b87c2", 0x92}, {&(0x7f0000003800)="4caa609ecb7f170fe5778b624f5c450b23062aefaf3a95c034eaced748e13c609c41dbfb0cafba2f3de4d51a8f5e3dd6b7d13cfb205dccf211cb40bec608a15102c6d0a7c3568bddc73bca604070211780700040354a95a981cdff80d69426d4273044c795c42ab4552dca9c3cd37b5c12826f09215110c9dad261055c1788d8d4a658cb2bf432df33274b3a7f5633777d4085a3b91be6150ec74106f1003d220d0a94ef80245b3168ae7bd0bb59ba0d95a2f23c26", 0xb5}, {&(0x7f00000038c0)="6bbbaa5e6b2c6288603f1e0abb1dec818444076a1812ccfba49c47234cdb18abefc0dd2ca1212ee2ece408e6c74607eb97e818eb3b2168eaa49c72", 0x3b}, {&(0x7f0000003900)="10958e89e77d4f2e4107c8c839ba922524d17f6f8fa79c377a6c16bc06554fa803f2c5d4e9e1868930c5a1c03a63233366026243ab3406b11c9e3c20909a349dd72b929c4e24ab256f1a5b1ac485c67ca53b3b2b215e1212de8fe424c2b7b8991e408d83dd6b1cd9dd3d593dca24ad28ed082450a4ab09e6afbc", 0x7a}], 0x4}}], 0x6, 0x4800) fcntl$addseals(r0, 0x409, 0x8) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2e}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0xf}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x814) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000000)) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x1015, 0x2, 0x8, "1fc8941bdc348fc884526d1566423412", "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"}, 0x1015, 0x1) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) clock_nanosleep(0x9, 0xfcfd, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f0000000000)) 57.755872515s ago: executing program 5 (id=19008): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}]}}) r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r7, r0, 0x0, 0x80000000) 57.693466136s ago: executing program 5 (id=19010): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) r5 = dup(r3) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdn/=', @ANYRESHEX=r3, @ANYBLOB=',ignoreqv,\x00']) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000003c0)={0x6, 0xe, "51e81ad6602d4b043cead6a6b2ed"}) sendfile(r6, r0, 0x0, 0x80000000) 57.649300947s ago: executing program 5 (id=19011): r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r1, &(0x7f00000001c0)="0b0312002e0064000200475400f6", 0xe, 0x20000040, &(0x7f0000000140)={0x11, 0x7, r2, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) r3 = syz_pidfd_open(r0, 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x16200, 0x1) syz_open_procfs$userns(r0, &(0x7f00000000c0)) setns(r3, 0x24020000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000100)={0x1f, @none, 0xff}, 0xa) syz_open_procfs(r0, &(0x7f0000000040)='schedstat\x00') renameat(r4, 0x0, r4, &(0x7f0000000180)='./file0\x00') 57.44669066s ago: executing program 5 (id=19013): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x5, 0x1) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x0, 0x80a0000, 0x2, r3, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x5000, 0x4, r3, 0x19}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000043000100000000000000000002004000140001"], 0x28}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x98, &(0x7f0000000240)={0xc7, 0x7fff, 0x2}}) close_range(r1, r5, 0x0) 57.43870494s ago: executing program 58 (id=19013): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x5, 0x1) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x0, 0x80a0000, 0x2, r3, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x5000, 0x4, r3, 0x19}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000043000100000000000000000002004000140001"], 0x28}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x98, &(0x7f0000000240)={0xc7, 0x7fff, 0x2}}) close_range(r1, r5, 0x0) 50.88094058s ago: executing program 0 (id=19053): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x3]}, &(0x7f0000000080), 0x8) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x80010, r1, 0x99b33000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000040)=0xef, 0x1) 50.87585904s ago: executing program 0 (id=19054): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0xfc, 0x7ffffffe, &(0x7f0000000d40)={0xa, 0x4e24, 0x1, @mcast2, 0x9}, 0x1c) unshare(0x24060400) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x103002) syncfs(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x19, 0x0, &(0x7f0000000040)=[@exit_looper, @release={0x40046306, 0x1}, @release={0x40046306, 0x3}, @increfs={0x40046304, 0x2}], 0x9d, 0x0, &(0x7f0000000100)="60f9a8d41bf24b5e8aaeb76caaef50c179798b070d25cd969ff38ad0a69daa02e1d42e8637c4b5344bec0700ca649bbd205ca4a0b0e669e17941f8497e4cd98e3aea8e696a9f1e52445d815e9a1f022a51a4092378"}) 50.853683741s ago: executing program 0 (id=19055): write(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000200)={0x2000, 0x4000, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x1002, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000200)={0x2000, 0x4000, 0x1}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 50.754620092s ago: executing program 0 (id=19056): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) (async) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x22) (async) syz_open_procfs(r0, &(0x7f0000000040)='attr/keycreate\x00') chown(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a80)=ANY=[@ANYBLOB="40010000100001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000040030000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000000000000000000000100000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000002040000000000000000000000000000000000000000000004000000000000000000000000000000000004000000000000004000000000000400000000000000000000000000000000000000000000000500000000000000000000000a000100000000000000000008002300f8ffffff480001"], 0x140}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00', 0x68802, 0x40) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="000f090000f9709082"], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) syz_clone(0x1200000, &(0x7f0000000680), 0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000005c0)="256cb0562313c54a4c2f96bfdda81c4c512f38caee24a4722c6a1557df5f29918ce7b77f72a3e895f100dcfcd0a7ea51d22b881c507161d7fbd7dbf331e690c1918ed8170114c889d4fc4a7260a0ab17243587e005217594674a943efe958b9e30115b95e7c4636a824818231f41640077be2e9fac95e3") (async) userfaultfd(0x801) 49.283002972s ago: executing program 0 (id=19060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x10, 0x10, 0x1}, 0x10}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYRES64=r3, @ANYRES8=r3], 0x32600) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x4}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 49.212685123s ago: executing program 0 (id=19061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000080)={'nat\x00', 0xaf, "1f4c363f2f432fd4f6b448ffe0ca04a6b41a7945ea52cb58db7236972ce08489a73194da6d5ee179a0dc5b11a708f888054c658f51a640492220fb5108ee6ca1f92b50dfbdb58850cf53f9f00b89b99b7e1c1e85e74d1b900da5a6e2a674549ddb8a3ecf59586c65b1b14cb86ed30373cb4b964f8e2ee51715d805086b123413561b0ecb5905fd2a64fefdc768600f35534bc6626a4b597269ec5a80f56bdeae30cb2beb6e2f7c8611df1ce322da60"}, &(0x7f0000000180)=0xd3) close_range(r1, r1, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r3, 0x3a, 0xce, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 49.177987224s ago: executing program 59 (id=19061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000080)={'nat\x00', 0xaf, "1f4c363f2f432fd4f6b448ffe0ca04a6b41a7945ea52cb58db7236972ce08489a73194da6d5ee179a0dc5b11a708f888054c658f51a640492220fb5108ee6ca1f92b50dfbdb58850cf53f9f00b89b99b7e1c1e85e74d1b900da5a6e2a674549ddb8a3ecf59586c65b1b14cb86ed30373cb4b964f8e2ee51715d805086b123413561b0ecb5905fd2a64fefdc768600f35534bc6626a4b597269ec5a80f56bdeae30cb2beb6e2f7c8611df1ce322da60"}, &(0x7f0000000180)=0xd3) close_range(r1, r1, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r3, 0x3a, 0xce, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 46.721486407s ago: executing program 60 (id=18903): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sync() ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.918008496s ago: executing program 9 (id=19786): mkdir(&(0x7f0000000400)='./file0\x00', 0x11) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=T']) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 3.917849906s ago: executing program 9 (id=19787): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3e8, 0x10, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40000000}, 0x4) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e21, 0x5, @local, 0x9}, {0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1, {[0x1000, 0x1, 0x8001, 0xffffff00, 0x7fff, 0x6, 0x40, 0x81]}}, 0x5c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x3c43, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x40012020, 0x0, 0xfffffffffffffe08) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x10200, 0x1) syz_open_procfs$userns(r2, &(0x7f00000000c0)) setns(r3, 0x24020000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') r5 = syz_open_procfs(r2, &(0x7f00000001c0)='net/tcp6\x00') connect$unix(r5, &(0x7f00000002c0)=@file={0x5323877aaaa1c6aa, './file0\x00'}, 0x6e) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x2, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) umount2(&(0x7f0000000040)='.\x00', 0x2) renameat(r4, 0x0, r4, &(0x7f0000000180)='./file0\x00') 3.917637676s ago: executing program 9 (id=19788): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x1, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x202942) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x5f) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda", 0x61}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", '\x00', "bb100000004100"}, 0x28) readv(0xffffffffffffffff, &(0x7f0000000e40), 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x40040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000000000000000101"], 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x4008844) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000001c0)={0x4, 0x0, 0x20000}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_usb_connect(0x0, 0x0, 0x0, 0x0) fadvise64(r0, 0x1ff, 0x80000001, 0x5) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x101, 0x0) 3.349983914s ago: executing program 9 (id=19794): socket(0x11, 0x3, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 3.216085865s ago: executing program 9 (id=19796): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008020}, 0x40814) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300)={0x105800, 0x80, 0x10}, 0x18) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r3, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x48440}, 0x20008918) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) 3.213431485s ago: executing program 9 (id=19798): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x93, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES8, @ANYRESDEC=0x0, @ANYRES64=r0], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3801}}]}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0, 0x47}}, {{0x0, 0x0, 0x0, 0xffffff23}, 0x1b20cfe5}, {{0x0, 0xfffffd41, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001700)=""/197, 0xc5}, {&(0x7f00000022c0)=""/4117, 0x100b}, {&(0x7f0000001400)=""/82, 0x52}], 0x3}, 0xfffffffb}], 0x4, 0x2000, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x2) r2 = socket(0x28, 0x5, 0x0) r3 = eventfd(0x2) fchmod(r3, 0xa0ffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x948}, 0x1, 0x0, 0x0, 0x8010}, 0x8801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x80010, 0xffffffffffffffff, 0x88b35000) r4 = socket(0xa, 0x3, 0x3a) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x407, 0x0) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, 0x50) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300060000000903000038000000fcffffff0e00000000000500000005000000060000000000"], 0x38) close(r6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r7, 0x11, 0x2, &(0x7f0000000080)=""/61, &(0x7f0000000180)=0x3d) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r9 = epoll_create(0x10) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x142, 0x0) pidfd_send_signal(r10, 0x1e, &(0x7f0000000480)={0x8, 0x1, 0x100436}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000040)={0x80000008}) pwritev(r8, &(0x7f0000000500)=[{&(0x7f00000002c0)="1eef3f", 0x3}], 0x1, 0x9, 0x40000) 2.525823485s ago: executing program 7 (id=19810): prlimit64(0x0, 0xe, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)='./cgroup\x00', 0x9, 0x2) socketpair(0x25, 0x5, 0x80, &(0x7f0000000b80)={0xffffffffffffffff}) sendfile(r0, r0, &(0x7f0000000200)=0xdd4c, 0x4) socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0xb151, 0x6, 0xeb}, {0x7, 0x9, 0xfb, 0xee6d}]}, 0x10) 2.521338375s ago: executing program 7 (id=19811): timer_create(0x3, &(0x7f0000000140)={0x0, 0x3f, 0x2b8c46217dfebc6b}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000001, 0x20010, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e20, @local}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$fuseblk(0x0, 0x0, &(0x7f0000000300), 0x80001, 0x0) ioctl$sock_netdev_private(r2, 0x89fc, &(0x7f00000002c0)="92e8f1b7edce85c79f9b2707c4e225dec95a66676ac83a7a39") sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000006401010000000000000000000000000000000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000003200000000033000000000000000000000000000000000000000000000000000000000000000200"], 0xf8}, 0x1, 0x0, 0x0, 0x488d0}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) fadvise64(r6, 0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x45809000) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') 1.914022183s ago: executing program 7 (id=19824): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x760, 0x440) (async) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0x440) ioctl$BLKOPENZONE(r1, 0x40101286, &(0x7f0000000000)={0x8, 0xef35}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000002a00)=0x3, 0x4) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000090024206d041cc34000001e00110902"], 0x0) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000090024206d041cc34000001e00110902"], 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a0001e000000000000000000a000003"], 0x1c}}, 0x0) r4 = accept$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) getsockopt$packet_int(r4, 0x107, 0x1b, &(0x7f00000001c0), &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) (async) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/oops_count', 0x103000, 0x2) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/oops_count', 0x103000, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x240900, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) dup2(r9, r8) (async) r10 = dup2(r9, r8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000) ioctl$SNDRV_TIMER_IOCTL_START(r11, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r11, 0x54a0) 685.166481ms ago: executing program 3 (id=19832): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cgroup.kill\x00', 0x275a, 0x0) fchmod(r0, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@flat=@binder={0x73622a85, 0x8b, 0x3}, @flat=@handle={0x73682a85, 0x100}, @fda={0x66646185, 0x6, 0x0, 0x22}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @enter_looper, @enter_looper], 0x0, 0x1000000, 0x0}) 673.757881ms ago: executing program 3 (id=19833): r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x14340) r2 = epoll_create(0xb0e) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$cgroup_type(r4, &(0x7f0000000140), 0x9) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x880) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x800000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r6}}, {@noextend}, {@cache_mmap}, {@uname={'uname', 0x3d, 'cpuacct.usage_percpu\x00'}}, {@debug={'debug', 0x3d, 0x371}}], [{@uid_gt={'uid>', r7}}, {@smackfsdef={'smackfsdef', 0x3d, 'freezer.state\x00'}}]}}) r8 = creat(&(0x7f00000004c0)='./file0\x00', 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r9 = ioctl$TIOCGPTPEER(r8, 0x5441, 0x7fff) ioctl$TIOCMIWAIT(r9, 0x545c, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r10, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) ioctl$TIOCMSET(r4, 0x5418, &(0x7f00000006c0)=0x4) ioctl$LOOP_SET_FD(r8, 0x4c00, r5) open$dir(&(0x7f0000000700)='./file0\x00', 0x1, 0x2) write$cgroup_pid(r4, &(0x7f0000000740)=0xffffffffffffffff, 0x12) mount$bind(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x20400, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) close(r3) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f0000000840)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r13, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4994}, 0x20000000) 618.750991ms ago: executing program 3 (id=19834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x1b49, &(0x7f0000000180)={0x0, 0xffffffff, 0x30c0, 0x1, 0x18b}, &(0x7f0000000100), &(0x7f0000000140)) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x4, 0x1b, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0xc0085508, 0x0) r4 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0xe000200f}) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000440)=[@uexit={0x0, 0x18, 0xc19}, @uexit={0x0, 0x18, 0xff}, @cpuid={0x2, 0x18, {0x981, 0x7}}, @code={0x1, 0x4f, {"c422d593a4ec9b000000b94d0900000f3265460f01cf660f3824be007800000f225ac46379484cb426006666660ffd6900c4215d73d281420f01c4f30f09"}}, @uexit={0x0, 0x18}, @code={0x1, 0x54, {"2e0fc72eb805000000b9008000000f01c166b8da000f00d0c4819c5e6f9f65f34a0faee8b9800000c00f3235000100000f300f3766b8df008ed00f01f54335a7000000"}}, @uexit={0x0, 0x18, 0x9c}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x2, 0x18, {0x8, 0x10000}}, @code={0x1, 0x56, {"8fa928915fc08f2978803a0f01c9f326432bf8c744240000480000c74424024fffffffc7442406000000000f01142466b837000f00d0670fda010f215ff3440f01ea0f01cb"}}, @cpuid={0x2, 0x18, {0x8, 0x9}}, @cpuid={0x2, 0x18, {0x1bf6, 0x66}}, @cpuid={0x2, 0x18, {0x5, 0x4b1}}, @uexit={0x0, 0x18, 0x2}, @code={0x1, 0x4f, {"dbd6c4a3d921bc3d65f800007fc4a1235c6e0bcf430f22816542d13fc74424005e000000c74424020a000000ff1c24640f01ca66ba4300b000ee650f01d1"}}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0x0, 0x2}}, @code={0x1, 0x75, {"36470f785bfc440f20c03504000000440f22c08a960cd1ffff66baf80cb89c4d0682ef66bafc0ced66460fc7750ec4c3856ebf0f0000000066baf80cb8ff2e698aef66bafc0cec360fc7b68e9c0000420f21d5b952020000b84c000000ba000000000f30"}}, @cpuid={0x2, 0x18, {0x7, 0x8}}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x2, 0x18, {0x80000000, 0x1f}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x6a}, @cpuid={0x2, 0x18, {0x9, 0x5}}], 0x385}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)={0x9, 0x0, [{0x40000f90, 0x0, 0x1000}, {0xbcb, 0x0, 0xffffffffffff022c}, {0xb2e, 0x0, 0x8}, {0x6b1, 0x0, 0xfffffffffffff001}, {0x35c, 0x0, 0x7fffffff}, {0x3a2, 0x0, 0xffffffff00000000}, {0x64c, 0x0, 0x9}, {0x64d}, {0x773, 0x0, 0x80000001}]}) ppoll(&(0x7f0000000040)=[{r4, 0x4200}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050200000002fddbdf25120000001800018014000200626f6e645f736c6176655f310000000008000700000004"], 0x34}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x52, 0x0, 0x0) 154.792998ms ago: executing program 8 (id=19837): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, &(0x7f0000000000)=ANY=[@ANYBLOB='rlog_pages=0']) (async) pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 154.098448ms ago: executing program 8 (id=19838): madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x19) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000400)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0xfffffffffffffff9}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0x7, 0xdd18}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x2, 0x18, {0x4e, 0x829}}, @uexit={0x0, 0x18, 0x60000}, @code={0x1, 0x66, {"66450f3880bf00780000440f01c5b805000000b9981200000f01d90fbbe78f8948970ac4212914a90e00000066b882008ec048b800180000000000000f23c00f21f835020000000f23f8430f01c40fc7bff686bba1"}}, @uexit={0x0, 0x18, 0x26}, @code={0x1, 0x97, {"47c12703c744240005210000c744240200100000c7442406000000000f011424b805000000b9d20000000f01d9b91f0a0000b820e3f6a1ba7921f62e0f3048b84e000000000000000f23c80f21f835000000000f23f8f30f7ee7b805000000b9000000000f01d9b92d0300000f322e0fc7b6e1d52dab66baf80cb81e181488ef66bafc0c66ed"}}, @cpuid={0x2, 0x18, {0x0, 0x3}}, @uexit={0x0, 0x18, 0x4}, @cpuid={0x2, 0x18, {0x9, 0x10}}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x2, 0x18, {0x7fffffff, 0xd76d}}, @cpuid={0x2, 0x18, {0x6, 0x5}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x4}, @code={0x1, 0x55, {"65f20f7cf3450f32430f1b2b0f20d835200000000f22d8f34080a20000000000b90e0400000f322e46d9fdc4e281935482aa66450ff69b4f000000660f3881906044a021"}}, @code={0x1, 0x52, {"66b8e2008ee0b9800000c00f3235008000000f3042da777166b833018ec0460f01cf0f06660f1429400f6fd4262ef30f524cef1db805000000b9000000000f01d9"}}, @cpuid={0x2, 0x18, {0x9, 0xc}}, @code={0x1, 0x67, {"66ba430066edc4220d08780066ba4300b01deef2af66ba420066b8df3f66efc74424009fe525d7c744240219000000c7442406000000000f0114240f20d835080000000f22d866b84f000f00d8c4613d606a0043e700"}}], 0x3d3}) ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f0000ffe000/0x2000)=nil) r1 = socket$inet(0x2, 0x3, 0xfff) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000440)={{0x0, @dev={0xac, 0x14, 0x14, 0x37}, 0x4e21, 0x2, 'sed\x00', 0x10, 0x7, 0x38}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x6, 0x3, 0x6}}, 0x44) recvmmsg(r1, &(0x7f0000008740)=[{{&(0x7f00000004c0)=@nfc, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000540)=""/116, 0x74}, {&(0x7f00000005c0)=""/176, 0xb0}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/248, 0xf8}, {&(0x7f0000000800)=""/176, 0xb0}, {&(0x7f00000008c0)=""/69, 0x45}, {&(0x7f0000000940)=""/49, 0x31}, {&(0x7f0000000980)=""/142, 0x8e}, {&(0x7f0000000a40)=""/3, 0x3}], 0x9}}, {{&(0x7f0000000b40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)=""/82, 0x52}, {&(0x7f0000000c40)=""/96, 0x60}, {&(0x7f0000000cc0)=""/241, 0xf1}, {&(0x7f0000000dc0)=""/154, 0x9a}, {&(0x7f0000000e80)=""/173, 0xad}, {&(0x7f0000000f40)=""/80, 0x50}], 0x6, &(0x7f0000001040)=""/203, 0xcb}, 0x5}, {{&(0x7f0000001140)=@ax25={{}, [@netrom, @rose, @rose, @null, @default, @null, @rose, @bcast]}, 0x80, &(0x7f0000001300)=[{&(0x7f00000011c0)=""/99, 0x63}, {&(0x7f0000001240)=""/48, 0x30}, {&(0x7f0000001280)=""/67, 0x43}], 0x3}, 0xa9}, {{&(0x7f0000001340)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f0000002400)=""/71, 0x47}, 0x1}, {{&(0x7f0000002480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000002500)=""/62, 0x3e}, {&(0x7f0000002540)=""/139, 0x8b}, {&(0x7f0000002600)=""/76, 0x4c}, {&(0x7f0000002680)=""/58, 0x3a}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x5}, 0xffffffaa}, {{&(0x7f0000003740)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000005a40)=[{&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/59, 0x3b}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/35, 0x23}, {&(0x7f0000005840)=""/12, 0xc}, {&(0x7f0000005880)=""/252, 0xfc}, {&(0x7f0000005980)=""/35, 0x23}, {&(0x7f00000059c0)=""/84, 0x54}], 0x8, &(0x7f0000005ac0)=""/33, 0x21}, 0x80000001}, {{&(0x7f0000005b00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000005b80)=""/46, 0x2e}], 0x1, &(0x7f0000005c00)=""/28, 0x1c}, 0x8}, {{0x0, 0x0, &(0x7f0000007000)=[{&(0x7f0000005c40)=""/33, 0x21}, {&(0x7f0000005c80)=""/87, 0x57}, {&(0x7f0000005d00)=""/147, 0x93}, {&(0x7f0000005dc0)=""/52, 0x34}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/50, 0x32}, {&(0x7f0000006e40)=""/202, 0xca}, {&(0x7f0000006f40)=""/157, 0x9d}], 0x8}, 0x6}, {{0x0, 0x0, &(0x7f0000007300)=[{&(0x7f0000007080)=""/62, 0x3e}, {&(0x7f00000070c0)=""/151, 0x97}, {&(0x7f0000007180)=""/192, 0xc0}, {&(0x7f0000007240)=""/172, 0xac}], 0x4, &(0x7f0000007340)=""/162, 0xa2}, 0x9}, {{&(0x7f0000007400)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000086c0)=[{&(0x7f0000007480)=""/165, 0xa5}, {&(0x7f0000007540)=""/165, 0xa5}, {&(0x7f0000007600)=""/50, 0x32}, {&(0x7f0000007640)=""/4096, 0x1000}, {&(0x7f0000008640)}, {&(0x7f0000008680)=""/60, 0x3c}], 0x6}, 0xde8}], 0xa, 0x40000000, &(0x7f00000089c0)={0x0, 0x3938700}) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000008a00)=0x7aa, 0x4) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000008a40)={[0x100, 0x8000000000000000, 0xa759, 0x3, 0x4, 0x4, 0x0, 0x20f, 0xd49, 0xa3a, 0x35a, 0x100000000, 0xff, 0x3ff, 0xffffffff, 0x6], 0xd000, 0x10884}) sendmsg$AUDIT_TRIM(r2, &(0x7f0000008bc0)={&(0x7f0000008b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000008b80)={&(0x7f0000008b40)={0x10, 0x3f6, 0x620, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x6ff79ecab4ac2e4b) writev(r1, &(0x7f0000008c40)=[{&(0x7f0000008c00)="c0ec764b5a39ad436e5afe9d4597089e4a6743042ed8d03ac45361d5806551e72352abedf65961a7a8acb8bc", 0x2c}], 0x1) bind$inet6(r2, &(0x7f0000008c80)={0xa, 0x4e21, 0xd, @private2, 0x3}, 0x1c) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000008cc0)='/sys/kernel/fscaps', 0xb0002, 0x65) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffb000/0x4000)=nil) getresuid(&(0x7f0000008d40), &(0x7f0000008d80)=0x0, &(0x7f0000008dc0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000008e00)={'batadv0\x00', 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000009280)={&(0x7f0000008d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000009240)={&(0x7f0000008e40)=@updsa={0x3d4, 0x1a, 0x800, 0x70bd25, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0xb, 0x4e22, 0x5, 0x2, 0x0, 0x80, 0x89, 0x0, r4}, {@in=@broadcast, 0x4d4}, @in6=@mcast2, {0x9, 0xfffffffffffffffd, 0x0, 0x1b, 0x8, 0xc000000000000, 0x10000, 0x8}, {0xfffffffffffffff7, 0xa, 0x7fff, 0x6234bfa0}, {0x7, 0x9f5}, 0x70bd26, 0x3503, 0xa, 0x3, 0x1, 0x1}, [@algo_auth_trunc={0xa0, 0x14, {{'nhpoly1305\x00'}, 0x2a0, 0xc0, "533704fef8baf14e3b1400d2797103b23bfbc9382fc02d80013fbac6e3abacce231cde18abf977c63abc277b3ca76ba6e5a2e4c116bfe10a7d3c9c37d200737320728922c45b34cc2042181e3097cd414e0061e3"}}, @etimer_thresh={0x8, 0xc, 0xf6}, @offload={0xc, 0x1c, {r5}}, @algo_aead={0xe1, 0x12, {{'aegis256-aesni\x00'}, 0x4a8, 0x80, "5d8bf9a6815a78c7ef553d714f77bc4d0b8f6bec9e7eef09c9124499fc79ba5304c22492a1b25e4abdddeaa2e88bb984b44e3155dc592e15094ece1f5a7d69760fe25702097644a5788fea31411d23910608153b8f39cef4baa58884d82ffccb83de1038fc02f61c9ac10d3af86b288e09a82d12d54a729392dedb213dfebe01f78bf96c68a9138f0c756bfefa5d727c824c6516bf"}}, @replay_thresh={0x8}, @lifetime_val={0x24, 0x9, {0x4, 0x794, 0x9, 0x2}}, @policy_type={0xa}, @address_filter={0x28, 0x1a, {@in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x40, 0x4}}, @sec_ctx={0xe9, 0x8, {0xe5, 0x8, 0x0, 0xff, 0xdd, "ff11b06dbfd83458786de581e32490b315a08c7fbc9e2e4982c1c48aa533b8ad3c0fd8897c3c469f967ba23aafab902a9c48971d72fc267b81417ecd8ad9b971f9e71eff33f2ca83f3c92c0afeda9e43472983e48305dc9ec6baeba3b1ed953f7b1918c75fe35be959e80fd814661a7ed4a7e7408aa2dcf39689f2fc5189ec83ded4cacdbb2a4cefa9d8b3bee3d67948d0bf57698b864fe3d55cdf69de3ac7bc02bbe818fd009413b1f085b1c674bf66d91bbded10825f247799504e28353961c715ffd98a45f6268cdaf98bf6a57f48929e74eac095fab47f0a4114cd"}}]}, 0x3d4}}, 0x1) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f00000092c0)=""/225) r6 = socket$unix(0x1, 0x2, 0x0) symlink(&(0x7f00000093c0)='./file0\x00', &(0x7f0000009400)='./file0\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000009500)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000009440)=""/122, 0x7a, 0x0, &(0x7f00000094c0)=""/27, 0x1b}, &(0x7f0000009540)=0x40) ioctl$TIOCSBRK(r3, 0x5427) r7 = dup3(r6, r2, 0x80000) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000009580)) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000009600)={0x5, &(0x7f00000095c0)=[{0x1, 0x3, 0x7}, {0x2, 0x1, 0x4, 0x10001}, {0xf2, 0xc4, 0x8, 0x3}, {0xece, 0x58, 0x7, 0x10}, {0x5, 0x0, 0x5, 0x87ed}]}, 0x10) capset(&(0x7f0000009640)={0x19980330}, &(0x7f0000009680)={0x8, 0x6, 0x1, 0x82, 0x20, 0x6}) socket$inet6(0xa, 0x4, 0x7) ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000009700), r7) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f00000098c0)={&(0x7f00000096c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000009880)={&(0x7f0000009740)={0x10c, r9, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0xf6, 0x3, "ec9f94ada517ae0242c518a1528be9da91ae33b074b92776bf2dcbb85b38ec2615142734f0519b29f54762e584bc8eba0939a37672952eb11f5b21af215191e7d1cfddd81a8fd506db5081bac05429ff003b30cd359688fdc21b3074923b02df241a4206b5fa8c0014cf234753dd93bf1eefb5355b063a05f1e250e7a247fa8a8bd0adfec7fed61641af167773419618c4bb48de63c1bc78f224099dd22ae4ffddf4b8f347f4f4af504250f87937ec7d05455fdb0fd87bf35fc50ac97057768c67e19de768d2efafda546e1c96a4217d0aa868c11fb76247b0df526ed1c7968ce877fa1bca5e0679a731be19b1bf6df4c3e3"}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4040041}, 0xc001) 153.748818ms ago: executing program 8 (id=19839): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f000000cffc), 0x80, 0x2, 0x0, 0x0, 0x1800000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom0\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_print_times', 0x40901, 0x88) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2], 0x200001d0) close_range(r1, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'veth1_to_team\x00', 0x4}, 0x18) write$P9_RLERRORu(r2, &(0x7f0000000240)={0xd, 0x7, 0x1, {{}, 0x8}}, 0xd) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYBLOB="7a391670fc4a4e84132acb9e190403e146c841316fc4631c9aa062f25ca49bcb4ab6cfbb54a77af51bf33445a9f136ad3a8a7d81e2ae25f90f6452d2ef5c74806c7d9e69c6d94563f481f4848855aa247db96d83cac651a8bd3b13"], 0x68}, 0x1, 0x0, 0x0, 0x200480d0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000080)={0x6000, 0x8000}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r6 = getuid() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r7, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e80200000000000029"], 0x2e8}}], 0x2, 0x0) setreuid(0x0, r6) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)={0x2a8, 0x45, 0x400, 0x70bd26, 0x25dfdbfb, "", [@nested={0x28, 0x37, 0x0, 0x1, [@typed={0x8, 0xdd, 0x0, 0x0, @str='-{$\x00'}, @generic="8b600230ad67ce875b682253", @nested={0x4, 0xff}, @typed={0x8, 0x3b, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x97}]}, @nested={0x10, 0xdc, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0xe8}]}, @generic="a2a40e63264df6a05fa6e1278eb63503dddc394dad60d857dad468cf74e3fc16943c89e686a2ba48c67321e32b02b251609302b2e1c1cbad6ec410fe6e9724a88d33eeccaea6f29b7b145aa8246f1c86f30285e4ac4b4bcf2457d8b2414db39e677f8f6b336e88e12ad9c32e7e9dd3c9af84775e", @nested={0x1ea, 0x9f, 0x0, 0x1, [@nested={0x4, 0x3e}, @typed={0x8, 0x14b, 0x0, 0x0, @pid=r5}, @nested={0x4, 0xc5}, @typed={0x8, 0x6b, 0x0, 0x0, @uid=r6}, @generic="1bb2e70acf67d2e8aa5a309de0d1f2b450f316746faa2fb67c8b5e62d2df131b5a37784aa48007ac34e7bbf94c5e43192ec4975d0a21289fe98407c6f0eaac24bbcdbd6f0734aac861062c8070b49928794a930f0e23bc7e3537d4950763532fd86274d82b09eed643268013664222ad655c048de83972b0ddbcb2c5ab53b35b11df0ab9c15e23f0d59c3ec7bc2a9ca3e91b053992c83f1faef102b95956a4684eec120cf4640589547368d0a4b2d5e8235c3cfb468aaa682d81eb41ad522432e248eb7b3905614758c99c4a14d24497151896241b83cf961012e595ea78f5b6ce3c", @generic="3664b5859e00344f59a51b585eaee04197633393a0556cea4c40f4fa20d41675f0da72f193d3e8696558e30b126bb6a6bab0f4f7ed8898c140609636ba94f083da836005c3de07fd04da8700ba0ca26a534bcb06f9650d216e6aa71cf71b55a1dc431d4c420b3c97e1c321cd11515c7a32718c2053a8492ccd6d5fe771557ed96dd67305d58c6b21b26c64380f9cd0a5bc81ff711f7e3bc8c7a878581c029af0012e41a2e3e30598e2d1433c59762583d09d716674751e443301d96f08eddaae68d02a19bddcdcded41f3b616dd2c0241b949dab43c82bbb7fb7c8999b9a2f03bd21c9a9810876c2", @typed={0x4, 0xfe, 0x0, 0x0, @binary}]}]}, 0x2a8}], 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 139.428438ms ago: executing program 8 (id=19840): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x21, r0, 0x0, 0x2) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 80.452918ms ago: executing program 8 (id=19841): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0xe, 0x1000) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x4, 0x18, 0x1, "a334acb3977350bbc942105ca48d556afc11a0d1477827bd50cb74b5319318ffc3b7d450d1da9033ef1b8d168d81c25a98702d5bb1f5ba1d05dc4e5f2cb83e9f", "0375f0841d632b94d2052f5263c1f1d37e2dce0784ad23279517115c8a7cc8d529f496e4110798126660679e2be753cfbe92449dbddd6ac94e60fbf45fb39122", "0d64abb9cde0ba5ccea780d8aa2db29bf6f87f5b2fa144597049281dbc761284", [0x28, 0x8]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) (async) syz_io_uring_setup(0x498, 0x0, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x440000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x84000, 0x0) r6 = dup(r5) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x9) (async) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) (async) readahead(r2, 0x5, 0x8) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r8, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) write$binfmt_script(r8, &(0x7f0000000180)={'#! ', './file0'}, 0xb) (async) sendmsg$netlink(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x30, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x7, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1}, 0x0) (async) userfaultfd(0x801) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="010000000206000003"], 0x48}}, 0x4000000) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x180, 0x7, {}, {r9, r10/1000+10000}, {0x0, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x1}, 0x2a, 0x2, 0x0, 0x0, "137c89f9b11020c4b0b7feccbb9f901ad4428d9ddd201c036048adb5f6d79f007f1dfc07a11f5629dc5b20fb99e8de1dc111e6e312b8f0fabba2c2ccee0f5308"}}, 0x80}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0xe0bd2a4bb8e8163}, @flat=@weak_binder={0x77622a85, 0x310a, 0x3}, @flat=@weak_binder={0x77622a85, 0x100, 0x1}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0xfffffffffffffe02, 0x0, 0x0}) 0s ago: executing program 8 (id=19842): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r2, 0xfffffffffffffff9, 0x2) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, &(0x7f0000000180)={0xed, 0x0, 0x6}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x1b) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8010, 0xffffffffffffffff, 0xffffe000) madvise(&(0x7f0000860000/0x2000)=nil, 0x2000, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast1, 0x5, 0x6, 0x0, 0x0, 0x3, 0x867000c0, r6}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, @dev={0xfe, 0x80, '\x00', 0x19}, 0x1, 0x6, 0x4000, 0x100, 0x6, 0x580107, r6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) kernel console output (not intermixed with test programs): T21849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.910588][T21849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.917906][T21849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.924974][T21849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.947336][T14375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.954799][T14375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.965034][T14375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.972091][T14375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.981255][T14377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.988364][T14377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.016085][T21849] veth0_vlan: entered promiscuous mode [ 1036.023754][ T636] usb 10-1: device descriptor read/8, error -71 [ 1036.034341][T21849] veth1_macvtap: entered promiscuous mode [ 1036.296211][ T636] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1036.318733][ T636] usb 10-1: device descriptor read/8, error -71 [ 1036.414722][T21874] rust_binder: Error in use_page_slow: ESRCH [ 1036.414743][T21874] rust_binder: use_range failure ESRCH [ 1036.420759][T21874] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 1036.426658][T21874] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1036.434491][T21874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:13 [ 1036.457942][ T636] usb 10-1: device descriptor read/8, error -71 [ 1036.606462][ T636] usb usb10-port1: unable to enumerate USB device [ 1036.925474][ T36] audit: type=1326 audit(1510.169:52143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.1.18607" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7f7c2158e929 code=0x0 [ 1036.981872][ T36] audit: type=1326 audit(1510.225:52144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.1.18607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c2158e929 code=0x7ffc0000 [ 1037.005222][ T36] audit: type=1326 audit(1510.225:52145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.1.18607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c2158e929 code=0x7ffc0000 [ 1037.033860][ T36] audit: type=1326 audit(1510.225:52146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.1.18607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c2158e929 code=0x7ffc0000 [ 1037.057347][ T36] audit: type=1326 audit(1510.262:52147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.1.18607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c2158e929 code=0x7ffc0000 [ 1037.080820][ T36] audit: type=1326 audit(1510.262:52148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.1.18607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c2158e929 code=0x7ffc0000 [ 1037.131645][ T36] audit: type=1326 audit(1510.262:52149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.1.18607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c2158e929 code=0x7ffc0000 [ 1037.200196][ T36] audit: type=1326 audit(1510.262:52150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.1.18607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c2158e929 code=0x7ffc0000 [ 1037.247451][ T36] audit: type=1326 audit(1510.262:52151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.1.18607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c2158e929 code=0x7ffc0000 [ 1037.276825][ T36] audit: type=1326 audit(1510.262:52152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.1.18607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c2158e929 code=0x7ffc0000 [ 1037.464688][T21941] rust_binder: validate_parent_fixup: new_min_offset=16, sg_entry.length=0 [ 1037.464708][T21941] rust_binder: Error while translating object. [ 1037.473686][T21941] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1037.480010][T21941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:581 [ 1037.726590][T21954] rust_binder: 21954: no such ref 1 [ 1037.741195][T21954] rust_binder: 21954: no such ref 3 [ 1037.746460][T21954] rust_binder: Write failure EFAULT in pid:67 [ 1037.762873][T21956] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1037.787039][T21958] netlink: 104 bytes leftover after parsing attributes in process `syz.1.18621'. [ 1037.797153][T21959] netlink: 104 bytes leftover after parsing attributes in process `syz.1.18621'. [ 1038.763504][T21988] rust_binder: Write failure EFAULT in pid:606 [ 1038.809675][T22002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:95 [ 1039.006232][T22012] rust_binder: Error in use_page_slow: ESRCH [ 1039.015384][T22012] rust_binder: use_range failure ESRCH [ 1039.021439][T22012] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 1039.027019][T22012] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1039.035153][T22012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:99 [ 1039.197857][T22014] binder: Bad value for 'max' [ 1040.016558][T10996] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1040.128702][T22037] rust_binder: Error while translating object. [ 1040.128733][T22037] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1040.135240][T22037] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 1040.187549][T10996] usb 2-1: Using ep0 maxpacket: 8 [ 1040.206734][T10996] usb 2-1: config 1 interface 0 altsetting 98 endpoint 0x81 has an invalid bInterval 85, changing to 10 [ 1040.219212][T10996] usb 2-1: config 1 interface 0 altsetting 98 endpoint 0x2 has invalid maxpacket 2047, setting to 1024 [ 1040.230470][T10996] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1040.242715][T22046] fuse: Unknown parameter '10xffffffffffffffff' [ 1040.249745][T22048] netlink: 'syz.4.18648': attribute type 6 has an invalid length. [ 1040.257691][T22046] fuse: Bad value for 'fd' [ 1040.262218][T22048] netlink: 6016 bytes leftover after parsing attributes in process `syz.4.18648'. [ 1040.272667][T10996] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1040.281817][T10996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.290006][T10996] usb 2-1: Product: syz [ 1040.294307][T10996] usb 2-1: Manufacturer: syz [ 1040.299350][T10996] usb 2-1: SerialNumber: syz [ 1040.307368][T22020] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1040.432624][T22051] /dev/rnullb0: Can't open blockdev [ 1040.533321][T10996] usbhid 2-1:1.0: can't add hid device: -71 [ 1040.539406][T10996] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1040.548568][T10996] usb 2-1: USB disconnect, device number 26 [ 1040.934492][T22068] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 1041.171208][T22076] binder: Unknown parameter 'fscontext?}' [ 1041.295397][T22085] rust_binder: 22085: no such ref 3 [ 1041.300727][T22085] rust_binder: 22085: no such ref 3 [ 1041.350321][T22086] batadv_slave_1: entered promiscuous mode [ 1041.423989][T22090] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1041.714830][T22102] tc_dump_action: action bad kind [ 1041.734313][T22104] tun0: tun_chr_ioctl cmd 1074025675 [ 1041.739711][T22104] tun0: persist enabled [ 1041.744102][T22104] tun0: tun_chr_ioctl cmd 1074025675 [ 1041.749497][T22104] tun0: persist enabled [ 1042.147122][T22107] binder: Bad value for 'stats' [ 1042.185719][T22084] batadv_slave_1: left promiscuous mode [ 1042.250476][T22115] __vm_enough_memory: pid: 22115, comm: syz.9.18674, bytes: 1152922604118523904 not enough memory for the allocation [ 1042.342350][T22120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1042.342386][T22120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:216 [ 1042.352321][T22123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1042.585341][T22135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=22135 comm=syz.4.18679 [ 1042.598304][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18679'. [ 1042.614599][T22135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=22135 comm=syz.4.18679 [ 1042.718665][T22152] binder: Bad value for 'max' [ 1042.803233][T22165] binder: Bad value for 'stats' [ 1042.829200][T22169] binder: Bad value for 'stats' [ 1042.839599][T22169] fuse: Bad value for 'group_id' [ 1042.844796][T22169] fuse: Bad value for 'group_id' [ 1042.936600][T22185] overlay: ./file0 is not a directory [ 1043.045429][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 1043.045449][ T36] audit: type=1400 audit(1515.894:52166): avc: denied { mounton } for pid=22187 comm="syz.1.18697" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 1043.416111][ T2984] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1043.577813][ T2984] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1043.585942][ T2984] usb 10-1: not running at top speed; connect to a high speed hub [ 1043.594625][ T2984] usb 10-1: config 0 has no interfaces? [ 1043.602247][ T2984] usb 10-1: language id specifier not provided by device, defaulting to English [ 1043.612386][ T2984] usb 10-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1043.621562][ T2984] usb 10-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1043.629762][ T2984] usb 10-1: Product: syz [ 1043.634181][ T2984] usb 10-1: Manufacturer: syz [ 1043.638856][ T2984] usb 10-1: SerialNumber: syz [ 1043.645002][ T2984] usb 10-1: config 0 descriptor?? [ 1043.866404][ T36] audit: type=1400 audit(1516.661:52167): avc: denied { setattr } for pid=22191 comm="syz.9.18700" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1043.875330][ T636] usb 10-1: USB disconnect, device number 4 [ 1044.124290][T22209] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1044.124309][T22209] rust_binder: Read failure Err(EFAULT) in pid:152 [ 1044.142832][ T36] audit: type=1400 audit(2000000000.046:52168): avc: denied { ioctl } for pid=22210 comm="syz.1.18706" path="socket:[226519]" dev="sockfs" ino=226519 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1044.186981][ T36] audit: type=1326 audit(2000000000.102:52169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22214 comm="syz.1.18707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c2158e929 code=0x0 [ 1044.551519][ T36] audit: type=1400 audit(2000000000.439:52170): avc: denied { create } for pid=22220 comm="syz.9.18709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1044.645544][ T66] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1044.664916][T22227] rust_binder: 22227: no such ref 0 [ 1044.818388][ T66] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1044.826620][ T66] usb 2-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.40 [ 1044.840641][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.859878][ T66] usb 2-1: Product: syz [ 1044.865300][ T66] usb 2-1: Manufacturer: syz [ 1044.875772][ T66] usb 2-1: SerialNumber: syz [ 1045.100808][T22216] binder: Unknown parameter 'fsuuid' [ 1045.623939][T22234] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1045.623967][T22234] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:702 [ 1045.649995][T22236] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 1045.659210][T22236] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1045.667325][T22236] rust_binder: Read failure Err(EFAULT) in pid:704 [ 1046.166326][ T36] audit: type=1400 audit(2000000001.954:52171): avc: denied { setattr } for pid=22247 comm="syz.4.18720" name="NETLINK" dev="sockfs" ino=227402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1046.197838][T22248] fuseblk: Bad value for 'fd' [ 1046.206410][ T45] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1046.345367][ T45] usb 10-1: device descriptor read/64, error -71 [ 1046.497092][T22260] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1046.612603][ T45] usb 10-1: device descriptor read/64, error -71 [ 1046.879850][ T45] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1047.018848][ T45] usb 10-1: device descriptor read/64, error -71 [ 1047.273478][T22269] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1047.282323][ T45] usb 10-1: device descriptor read/64, error -71 [ 1047.288743][T22269] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1047.401890][T22280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.415019][ T45] usb usb10-port1: attempt power cycle [ 1047.425059][T22280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.425627][ T66] usbhid 2-1:1.0: can't add hid device: -71 [ 1047.432354][T22280] bridge_slave_0: entered allmulticast mode [ 1047.453424][T22280] bridge_slave_0: entered promiscuous mode [ 1047.457260][ T66] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1047.471157][T22280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.478932][T22280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.488815][T22280] bridge_slave_1: entered allmulticast mode [ 1047.494983][ T66] usb 2-1: USB disconnect, device number 28 [ 1047.498998][T22280] bridge_slave_1: entered promiscuous mode [ 1047.554318][T22280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.561396][T22280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.568715][T22280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.575771][T22280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.599926][T14375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.607471][T14375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.617388][T14376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.624466][T14376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.633917][T14375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.640984][T14375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.668072][T22280] veth0_vlan: entered promiscuous mode [ 1047.679476][T22280] veth1_macvtap: entered promiscuous mode [ 1047.756385][T22302] rust_binder: Write failure EINVAL in pid:4 [ 1047.767889][T22304] binder: Unknown parameter 'dont_measure' [ 1047.793247][ T36] audit: type=1326 audit(2000000003.470:52172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22308 comm="syz.2.18736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc97498e929 code=0x7ffc0000 [ 1047.799496][ T45] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1047.817935][ T36] audit: type=1326 audit(2000000003.470:52173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22308 comm="syz.2.18736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc97498e929 code=0x7ffc0000 [ 1047.826936][ T66] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1047.849960][ T36] audit: type=1326 audit(2000000003.470:52174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22308 comm="syz.2.18736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc97498e929 code=0x7ffc0000 [ 1047.878122][ T45] usb 10-1: device descriptor read/8, error -71 [ 1048.023855][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 1048.029869][ T45] usb 10-1: device descriptor read/8, error -71 [ 1048.037834][ T66] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 1048.047241][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.055284][ T66] usb 2-1: Product: syz [ 1048.059631][ T66] usb 2-1: Manufacturer: syz [ 1048.064242][ T66] usb 2-1: SerialNumber: syz [ 1048.069524][ T66] usb 2-1: config 0 descriptor?? [ 1048.076372][ T66] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1048.084187][ T66] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 1048.091857][ T66] usb-storage 2-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.12.30-syzkaller-g8ea40f524391) [ 1048.091857][ T66] Please send a copy of this message to and [ 1048.291297][ T45] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1048.317370][ T45] usb 10-1: device descriptor read/8, error -71 [ 1048.369326][T22341] rust_binder: Error in use_page_slow: ESRCH [ 1048.369351][T22341] rust_binder: use_range failure ESRCH [ 1048.375730][T22341] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 1048.381810][T22341] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1048.395949][T22341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:166 [ 1048.409951][T10996] usb 2-1: USB disconnect, device number 29 [ 1048.463081][ T45] usb 10-1: device descriptor read/8, error -71 [ 1048.579769][ T45] usb usb10-port1: unable to enumerate USB device [ 1048.686830][ T636] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1048.825560][ T636] usb 3-1: device descriptor read/64, error -71 [ 1049.082187][ T636] usb 3-1: device descriptor read/64, error -71 [ 1049.251519][T22360] binder: Bad value for 'max' [ 1049.334584][ T36] audit: type=1400 audit(2000000004.910:52175): avc: denied { connect } for pid=22362 comm="syz.1.18752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1049.355110][ T636] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1049.364570][ T36] audit: type=1326 audit(2000000004.938:52176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22362 comm="syz.1.18752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2158e929 code=0x7ffc0000 [ 1049.388387][ T36] audit: type=1326 audit(2000000004.938:52177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22362 comm="syz.1.18752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2158e929 code=0x7ffc0000 [ 1049.412417][ T36] audit: type=1326 audit(2000000004.966:52178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22362 comm="syz.1.18752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7c2158e929 code=0x7ffc0000 [ 1049.436451][ T36] audit: type=1326 audit(2000000004.966:52179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22362 comm="syz.1.18752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2158e929 code=0x7ffc0000 [ 1049.460403][ T36] audit: type=1326 audit(2000000004.966:52180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22362 comm="syz.1.18752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2158e929 code=0x7ffc0000 [ 1049.484694][ T36] audit: type=1326 audit(2000000004.985:52181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22362 comm="syz.1.18752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2158e929 code=0x7ffc0000 [ 1049.508682][ T636] usb 3-1: device descriptor read/64, error -71 [ 1049.515007][ T36] audit: type=1326 audit(2000000004.985:52182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22362 comm="syz.1.18752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2158e929 code=0x7ffc0000 [ 1049.539618][ T36] audit: type=1326 audit(2000000004.985:52183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22362 comm="syz.1.18752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7c2158e929 code=0x7ffc0000 [ 1049.573066][ T36] audit: type=1326 audit(2000000005.060:52184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22362 comm="syz.1.18752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7c215c11e5 code=0x7ffc0000 [ 1049.766411][ T636] usb 3-1: device descriptor read/64, error -71 [ 1049.884098][ T636] usb usb3-port1: attempt power cycle [ 1050.247397][ T636] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1050.270767][ T636] usb 3-1: device descriptor read/8, error -71 [ 1050.277441][T22379] binder: Unknown parameter 'context' [ 1050.316808][T22386] rust_binder: Failed to allocate buffer. len:4208, is_oneway:true [ 1050.408820][ T636] usb 3-1: device descriptor read/8, error -71 [ 1050.621574][T18833] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1050.675039][ T636] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1050.707458][ T636] usb 3-1: device descriptor read/8, error -71 [ 1050.781996][T18833] usb 10-1: Using ep0 maxpacket: 16 [ 1050.788511][T18833] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.799695][T18833] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.809948][T18833] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1050.823196][T18833] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1050.833312][T18833] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.845585][T18833] usb 10-1: config 0 descriptor?? [ 1050.857987][ T636] usb 3-1: device descriptor read/8, error -71 [ 1050.974459][ T636] usb usb3-port1: unable to enumerate USB device [ 1051.045870][T22400] binder: Bad value for 'max' [ 1051.051403][T22400] binder: Bad value for 'max' [ 1051.283794][T18833] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1051.300255][T18833] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1051.308009][T18833] microsoft 0003:045E:07DA.002C: unknown main item tag 0x4 [ 1051.315490][T18833] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1051.322861][T18833] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1051.330234][T18833] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1051.337548][T18833] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1051.344947][T18833] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1051.352351][T18833] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1051.360143][T18833] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1051.367558][T18833] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1051.374845][T18833] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1051.382235][T18833] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1051.389506][T18833] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1051.396923][T18833] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1051.404196][T18833] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1051.411515][T18833] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 1051.420618][T18833] microsoft 0003:045E:07DA.002C: No inputs registered, leaving [ 1051.437569][T18833] microsoft 0003:045E:07DA.002C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1051.450376][T18833] microsoft 0003:045E:07DA.002C: no inputs found [ 1051.457384][T18833] microsoft 0003:045E:07DA.002C: could not initialize ff, continuing anyway [ 1051.502217][T22388] rust_binder: 22388: no such ref 1 [ 1051.507892][T22388] rust_binder: 22388: no such ref 3 [ 1051.514754][T22388] rust_binder: Write failure EFAULT in pid:726 [ 1051.515590][ T636] usb 10-1: USB disconnect, device number 9 [ 1051.754794][T18833] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1051.915177][T18833] usb 2-1: Using ep0 maxpacket: 16 [ 1051.921739][T18833] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1051.929372][T18833] usb 2-1: can't read configurations, error -61 [ 1052.064848][T18833] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1052.100410][T22425] netlink: 12 bytes leftover after parsing attributes in process `syz.9.18772'. [ 1052.225216][T18833] usb 2-1: Using ep0 maxpacket: 16 [ 1052.239322][T18833] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1052.253487][T18833] usb 2-1: can't read configurations, error -61 [ 1052.260331][T18833] usb usb2-port1: attempt power cycle [ 1052.492431][ T636] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1052.599346][ T315] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 1052.631465][T18833] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1052.653194][T18833] usb 2-1: Using ep0 maxpacket: 16 [ 1052.659199][ T636] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.670265][ T636] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.680223][ T636] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1052.693259][ T636] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1052.702449][T18833] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1052.710179][ T636] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.718339][T18833] usb 2-1: can't read configurations, error -61 [ 1052.725355][ T636] usb 10-1: config 0 descriptor?? [ 1052.738337][ T315] usb 3-1: device descriptor read/64, error -71 [ 1052.866625][T18833] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1052.888338][T18833] usb 2-1: Using ep0 maxpacket: 16 [ 1052.894952][T18833] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1052.902589][T18833] usb 2-1: can't read configurations, error -61 [ 1052.908975][T18833] usb usb2-port1: unable to enumerate USB device [ 1052.994898][ T315] usb 3-1: device descriptor read/64, error -71 [ 1053.008535][ T636] usbhid 10-1:0.0: can't add hid device: -71 [ 1053.014802][ T636] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1053.033215][ T636] usb 10-1: USB disconnect, device number 10 [ 1053.262166][ T315] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 1053.411841][ T315] usb 3-1: device descriptor read/64, error -71 [ 1053.668413][ T315] usb 3-1: device descriptor read/64, error -71 [ 1053.700493][ T636] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 1053.786098][ T315] usb usb3-port1: attempt power cycle [ 1053.861934][ T636] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.872242][ T636] usb 10-1: config 0 has no interfaces? [ 1053.879259][ T636] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1053.888508][ T636] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.896625][ T636] usb 10-1: Product: syz [ 1053.900943][ T636] usb 10-1: Manufacturer: syz [ 1053.905728][ T636] usb 10-1: SerialNumber: syz [ 1053.911098][ T636] usb 10-1: config 0 descriptor?? [ 1054.133584][ T2984] usb 10-1: USB disconnect, device number 11 [ 1054.149523][ T315] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 1054.171957][ T315] usb 3-1: device descriptor read/8, error -71 [ 1054.310956][ T315] usb 3-1: device descriptor read/8, error -71 [ 1054.341565][T22466] binder: Unknown parameter 'context' [ 1054.511482][T22473] rust_binder: Write failure EFAULT in pid:311 [ 1054.566409][ T315] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 1054.599649][ T315] usb 3-1: device descriptor read/8, error -71 [ 1054.738754][ T315] usb 3-1: device descriptor read/8, error -71 [ 1054.870388][ T315] usb usb3-port1: unable to enumerate USB device [ 1054.881249][T22491] binder: Binderfs stats mode cannot be changed during a remount [ 1054.902702][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 1054.902718][ T36] audit: type=1400 audit(2000000010.121:52201): avc: denied { append } for pid=22492 comm="syz.1.18793" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1054.932506][T22493] sit0: entered promiscuous mode [ 1054.938501][T22493] netlink: 'syz.1.18793': attribute type 1 has an invalid length. [ 1054.946595][T22493] netlink: 9 bytes leftover after parsing attributes in process `syz.1.18793'. [ 1055.032332][T22508] rust_binder: Error while translating object. [ 1055.032392][T22508] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1055.043032][T22508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 1055.055504][T22510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1055.069490][T22510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:781 [ 1055.129358][T22515] netlink: 8 bytes leftover after parsing attributes in process `syz.9.18802'. [ 1055.148413][T22515] rust_binder: Write failure EFAULT in pid:783 [ 1055.198850][T18833] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1055.218232][T18833] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1055.425563][T22535] rust_binder: 22535: no such ref 2 [ 1055.795825][ T315] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1055.817220][T22541] overlayfs: missing 'lowerdir' [ 1055.946488][T22543] rust_binder: Error while translating object. [ 1055.946553][T22543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1055.979880][T22543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 [ 1055.989459][ T315] usb 10-1: Using ep0 maxpacket: 32 [ 1056.052850][ T315] usb 10-1: too many configurations: 17, using maximum allowed: 8 [ 1056.103836][ T315] usb 10-1: config 0 has no interfaces? [ 1056.127391][ T315] usb 10-1: config 0 has no interfaces? [ 1056.138944][ T315] usb 10-1: config 0 has no interfaces? [ 1056.175638][ T315] usb 10-1: config 0 has no interfaces? [ 1056.192210][ T315] usb 10-1: config 0 has no interfaces? [ 1056.198217][T22546] overlayfs: failed to resolve './file2': -2 [ 1056.209480][ T315] usb 10-1: config 0 has no interfaces? [ 1056.234663][ T315] usb 10-1: config 0 has no interfaces? [ 1056.266268][ T315] usb 10-1: config 0 has no interfaces? [ 1056.295558][ T315] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1056.319144][ T315] usb 10-1: New USB device strings: Mfr=0, Product=30, SerialNumber=0 [ 1056.359791][ T315] usb 10-1: Product: syz [ 1056.394762][ T315] usb 10-1: config 0 descriptor?? [ 1056.544645][T14379] bridge_slave_1: left allmulticast mode [ 1056.550351][T14379] bridge_slave_1: left promiscuous mode [ 1056.576301][T14379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.623513][T14379] bridge_slave_0: left allmulticast mode [ 1056.629216][T14379] bridge_slave_0: left promiscuous mode [ 1056.651128][T14379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.718206][ T636] usb 10-1: USB disconnect, device number 12 [ 1056.817044][T14379] veth1_macvtap: left promiscuous mode [ 1056.833056][T14379] veth0_vlan: left promiscuous mode [ 1056.934038][T22554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.943701][T22554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.951069][T22554] bridge_slave_0: entered allmulticast mode [ 1056.957388][T22554] bridge_slave_0: entered promiscuous mode [ 1056.964333][T22554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.971400][T22554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.978604][T22554] bridge_slave_1: entered allmulticast mode [ 1056.987495][T22554] bridge_slave_1: entered promiscuous mode [ 1057.207008][T22554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.214088][T22554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.221429][T22554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.228503][T22554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.326926][T14376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.335621][T22575] /dev/rnullb0: Can't open blockdev [ 1057.356974][T14376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.503841][T14376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.510966][T14376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.849400][T14375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.856491][T14375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.923337][T22597] binder: Unknown parameter 'm00000000017777777777' [ 1057.953989][T14379] bridge_slave_1: left allmulticast mode [ 1057.960407][T14379] bridge_slave_1: left promiscuous mode [ 1057.998554][T14379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.020022][T14379] bridge_slave_0: left allmulticast mode [ 1058.025722][T14379] bridge_slave_0: left promiscuous mode [ 1058.062385][T14379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.147798][ T2984] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1058.246476][T22554] veth0_vlan: entered promiscuous mode [ 1058.279839][T22554] veth1_macvtap: entered promiscuous mode [ 1058.299002][T14379] veth1_macvtap: left promiscuous mode [ 1058.305718][T14379] veth0_vlan: left promiscuous mode [ 1058.329523][ T2984] usb 3-1: Using ep0 maxpacket: 16 [ 1058.336239][ T2984] usb 3-1: too many configurations: 31, using maximum allowed: 8 [ 1058.345523][ T2984] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.356666][ T2984] usb 3-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1058.370446][ T2984] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1058.377164][T22602] sit0: entered promiscuous mode [ 1058.383286][ T2984] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.394660][T22602] netlink: 'syz.9.18833': attribute type 1 has an invalid length. [ 1058.402474][T22602] netlink: 1 bytes leftover after parsing attributes in process `syz.9.18833'. [ 1058.411661][ T2984] usb 3-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1058.431264][ T2984] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1058.439912][ T2984] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.461638][ T2984] usb 3-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1058.491789][ T2984] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1058.499575][ T2984] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.511701][ T2984] usb 3-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1058.526557][ T2984] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1058.534089][T22581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.534432][ T2984] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.552521][ T2984] usb 3-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1058.553069][T22581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.565758][ T2984] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1058.573151][T22581] bridge_slave_0: entered allmulticast mode [ 1058.580398][ T2984] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.587515][T22581] bridge_slave_0: entered promiscuous mode [ 1058.596267][ T2984] usb 3-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1058.615210][ T2984] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1058.622794][ T2984] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.631816][T22581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.641147][ T2984] usb 3-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1058.654263][ T2984] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1058.654634][T22581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.661977][ T2984] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.679120][T22581] bridge_slave_1: entered allmulticast mode [ 1058.679405][ T2984] usb 3-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1058.685930][T22581] bridge_slave_1: entered promiscuous mode [ 1058.698367][T22617] __vm_enough_memory: pid: 22617, comm: syz.6.18813, bytes: 1152922604118523904 not enough memory for the allocation [ 1058.716378][ T2984] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1058.729293][ T2984] usb 3-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 1058.741181][ T2984] usb 3-1: New USB device strings: Mfr=102, Product=24, SerialNumber=86 [ 1058.750006][ T2984] usb 3-1: Product: syz [ 1058.755028][ T2984] usb 3-1: Manufacturer: syz [ 1058.765964][ T2984] usb 3-1: SerialNumber: syz [ 1058.772151][ T2984] usb 3-1: config 0 descriptor?? [ 1058.838481][T22581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.845605][T22581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.852931][T22581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.860019][T22581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.893204][T14375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.901580][T14375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.918086][T22625] 8021q: VLANs not supported on vcan0 [ 1058.924104][T14375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.931188][T14375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.939737][T14375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.946807][T14375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.010122][T22581] veth0_vlan: entered promiscuous mode [ 1059.026247][T22581] veth1_macvtap: entered promiscuous mode [ 1059.045769][ T315] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1059.207532][ T315] usb 7-1: Using ep0 maxpacket: 16 [ 1059.217463][T22595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27683 sclass=netlink_route_socket pid=22595 comm=syz.2.18830 [ 1059.232383][ T315] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.246091][ T315] usb 7-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1059.267619][ T315] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1059.274373][ T2984] usbhid 3-1:0.0: can't add hid device: -71 [ 1059.280362][ T2984] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1059.289062][ T315] usb 7-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 1059.302828][ T2984] usb 3-1: USB disconnect, device number 41 [ 1059.309044][ T315] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.329007][ T315] usb 7-1: config 0 descriptor?? [ 1059.353530][ T36] audit: type=1400 audit(2000000014.283:52202): avc: denied { read } for pid=95 comm="acpid" name="mouse1" dev="devtmpfs" ino=1012 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1059.385512][ T36] audit: type=1400 audit(2000000014.283:52203): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=1012 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1059.411750][ T36] audit: type=1400 audit(2000000014.283:52204): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=1012 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1059.453528][T22653] input: syz0 as /devices/virtual/input/input113 [ 1059.552308][ T315] usbhid 7-1:0.0: can't add hid device: -71 [ 1059.559799][ T315] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1059.572112][ T315] usb 7-1: USB disconnect, device number 109 [ 1059.652816][T22660] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1059.772753][ T636] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1059.794142][T18833] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1059.933328][ T636] usb 6-1: Using ep0 maxpacket: 32 [ 1059.938866][ T636] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 1059.947459][ T636] usb 6-1: config 0 has no interfaces? [ 1059.953742][ T636] usb 6-1: config 0 has no interfaces? [ 1059.960557][T18833] usb 10-1: Using ep0 maxpacket: 16 [ 1059.971142][ T636] usb 6-1: config 0 has no interfaces? [ 1059.977307][T18833] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.987930][T18833] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1060.001504][ T636] usb 6-1: config 0 has no interfaces? [ 1060.007631][T18833] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 1060.016908][ T636] usb 6-1: config 0 has no interfaces? [ 1060.022498][T18833] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1060.031290][T18833] usb 10-1: Product: syz [ 1060.035564][T18833] usb 10-1: Manufacturer: syz [ 1060.040915][ T636] usb 6-1: config 0 has no interfaces? [ 1060.047088][ T636] usb 6-1: config 0 has no interfaces? [ 1060.053576][T18833] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 1060.063287][ T636] usb 6-1: config 0 has no interfaces? [ 1060.070471][ T636] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1060.079596][ T636] usb 6-1: New USB device strings: Mfr=0, Product=30, SerialNumber=0 [ 1060.087767][ T636] usb 6-1: Product: syz [ 1060.093051][ T636] usb 6-1: config 0 descriptor?? [ 1060.276762][T22656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.285344][T22656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.293876][T10996] usb 10-1: USB disconnect, device number 13 [ 1060.351574][ T2984] usb 6-1: USB disconnect, device number 59 [ 1060.403745][ T315] usb 7-1: new full-speed USB device number 110 using dummy_hcd [ 1060.565922][ T315] usb 7-1: config 0 has an invalid interface number: 144 but max is 0 [ 1060.574236][ T315] usb 7-1: config 0 has no interface number 0 [ 1060.583213][ T315] usb 7-1: New USB device found, idVendor=0e8d, idProduct=3329, bcdDevice=25.0f [ 1060.592626][ T315] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.600661][ T315] usb 7-1: Product: syz [ 1060.604920][ T315] usb 7-1: Manufacturer: syz [ 1060.609555][ T315] usb 7-1: SerialNumber: syz [ 1060.614944][ T315] usb 7-1: config 0 descriptor?? [ 1060.835189][ T636] usb 7-1: USB disconnect, device number 110 [ 1060.908822][T22700] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1060.908859][T22700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:121 [ 1060.924140][T22700] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1060.933728][T22700] rust_binder: Read failure Err(EFAULT) in pid:121 [ 1061.077572][T22722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:852 [ 1061.078475][T22723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:852 [ 1061.996479][ T315] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1062.072856][T22754] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1062.072905][T22754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 1062.167453][ T315] usb 7-1: Using ep0 maxpacket: 8 [ 1062.195721][ T315] usb 7-1: config 6 has an invalid interface number: 137 but max is 2 [ 1062.203972][ T315] usb 7-1: config 6 has an invalid interface number: 4 but max is 2 [ 1062.212324][ T315] usb 7-1: config 6 has an invalid interface number: 71 but max is 2 [ 1062.212343][T22758] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 1062.220436][ T315] usb 7-1: config 6 has no interface number 0 [ 1062.230055][T22758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:864 [ 1062.236537][ T315] usb 7-1: config 6 has no interface number 1 [ 1062.252102][ T315] usb 7-1: config 6 has no interface number 2 [ 1062.260158][ T315] usb 7-1: config 6 interface 137 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 16 [ 1062.270872][ T315] usb 7-1: config 6 interface 137 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1062.282236][ T315] usb 7-1: config 6 interface 137 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1062.283297][T22761] rust_binder: validate_parent_fixup: new_min_offset=16, sg_entry.length=0 [ 1062.293258][T22761] rust_binder: Error while translating object. [ 1062.293331][ T315] usb 7-1: config 6 interface 137 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1062.302100][T22761] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1062.308559][ T315] usb 7-1: config 6 interface 4 altsetting 6 endpoint 0x9 has invalid maxpacket 31191, setting to 64 [ 1062.319269][T22761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:867 [ 1062.329542][ T315] usb 7-1: config 6 interface 4 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 1062.359569][ T315] usb 7-1: config 6 interface 4 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 1062.371794][ T315] usb 7-1: config 6 interface 71 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 1062.382608][ T315] usb 7-1: config 6 interface 71 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 1062.394023][ T315] usb 7-1: config 6 interface 71 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 1062.410821][ T315] usb 7-1: config 6 interface 71 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 1062.421590][ T315] usb 7-1: config 6 interface 71 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 1062.432634][ T315] usb 7-1: config 6 interface 71 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1062.443769][ T315] usb 7-1: config 6 interface 71 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1062.455008][ T315] usb 7-1: config 6 interface 71 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 1062.466422][ T315] usb 7-1: config 6 interface 137 has no altsetting 0 [ 1062.473411][ T315] usb 7-1: config 6 interface 4 has no altsetting 0 [ 1062.480189][ T315] usb 7-1: config 6 interface 71 has no altsetting 0 [ 1062.487389][ T315] usb 7-1: string descriptor 0 read error: -22 [ 1062.493636][ T315] usb 7-1: New USB device found, idVendor=1bc7, idProduct=0021, bcdDevice=48.e2 [ 1062.502773][ T315] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.515037][T22752] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1062.523068][ T315] cdc_acm 7-1:6.137: skipping garbage [ 1062.528496][ T315] cdc_acm 7-1:6.137: skipping garbage [ 1062.536116][ T315] cdc_acm 7-1:6.4: More than one union descriptor, skipping ... [ 1062.545375][ T315] cdc_acm 7-1:6.71: Zero length descriptor references [ 1062.552194][ T315] cdc_acm 7-1:6.71: probe with driver cdc_acm failed with error -22 [ 1062.837721][T22780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=52 sclass=netlink_audit_socket pid=22780 comm=syz.2.18890 [ 1062.850686][T22780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=23 sclass=netlink_audit_socket pid=22780 comm=syz.2.18890 [ 1062.863406][T22780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=57 sclass=netlink_audit_socket pid=22780 comm=syz.2.18890 [ 1062.876049][T22780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pid=22780 comm=syz.2.18890 [ 1062.888829][T22780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=55 sclass=netlink_audit_socket pid=22780 comm=syz.2.18890 [ 1062.905793][ T636] usb 7-1: USB disconnect, device number 111 [ 1063.305284][T22795] netlink: 'syz.9.18895': attribute type 27 has an invalid length. [ 1063.320584][T22795] /dev/rnullb0: Can't open blockdev [ 1063.514853][T14374] Bluetooth: hci0: Frame reassembly failed (-84) [ 1063.531628][T22807] binder: Unknown parameter 'ck' [ 1063.585763][ T36] audit: type=1400 audit(2000000018.240:52205): avc: denied { shutdown } for pid=22813 comm="syz.5.18901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1063.720666][T22822] binder: Unknown parameter 'defcontext01777777777777777777777' [ 1063.733340][T22824] binder: Unknown parameter '' [ 1063.783312][T22830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18908'. [ 1064.320883][T22865] binder: Unknown parameter 'defcontext01777777777777777777777' [ 1064.368410][T22868] /dev/rnullb0: Can't open blockdev [ 1064.443765][T22878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1064.443793][T22878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:87 [ 1064.453459][T22878] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1064.462572][T22878] rust_binder: Read failure Err(EFAULT) in pid:87 [ 1064.494266][T22883] binder: Bad value for 'max' [ 1064.505536][T22882] binder: Bad value for 'max' [ 1064.511114][T22883] netlink: 16 bytes leftover after parsing attributes in process `syz.6.18928'. [ 1064.511121][T22884] netlink: 16 bytes leftover after parsing attributes in process `syz.6.18928'. [ 1064.547480][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.556969][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.571539][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.587106][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.588295][T22892] rust_binder: Write failure EFAULT in pid:35 [ 1064.597298][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.618354][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.627805][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.637214][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.646435][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.655906][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.665406][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.682200][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.691559][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.700811][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.710943][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.720174][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.729400][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.738592][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.747785][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.756988][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.767189][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.776489][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.785955][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.800606][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.810227][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.819719][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.828903][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.838120][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.847539][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.857802][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.867300][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.876873][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.886249][T22889] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 1064.913628][ T36] audit: type=1400 audit(2000000019.484:52206): avc: denied { relabelfrom } for pid=22901 comm="syz.6.18935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1064.933883][ T36] audit: type=1400 audit(2000000019.484:52207): avc: denied { relabelto } for pid=22901 comm="syz.6.18935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1065.046000][ T36] audit: type=1400 audit(2000000019.615:52208): avc: denied { accept } for pid=22907 comm="syz.6.18938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1065.054417][T22908] /dev/rnullb0: Can't open blockdev [ 1065.569441][ T36] audit: type=1400 audit(2000000020.101:52209): avc: denied { load_policy } for pid=22921 comm="syz.5.18944" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1065.569453][T22922] SELinux: policydb version 1147507387 does not match my version range 15-33 [ 1065.569485][T22922] SELinux: failed to load policy [ 1065.655307][ T36] audit: type=1400 audit(2000000020.176:52210): avc: denied { ioctl } for pid=22928 comm="syz.6.18947" path="/dev/usbmon9" dev="devtmpfs" ino=118 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1065.706206][T15310] Bluetooth: hci0: command 0x1003 tx timeout [ 1065.712478][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1065.949541][T14376] bridge_slave_1: left allmulticast mode [ 1065.957920][T14376] bridge_slave_1: left promiscuous mode [ 1065.964094][T14376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.971763][T14376] bridge_slave_0: left allmulticast mode [ 1065.977579][T14376] bridge_slave_0: left promiscuous mode [ 1065.983203][T14376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.077256][T22934] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.084429][T22934] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.091575][T22934] bridge_slave_0: entered allmulticast mode [ 1066.097943][T22934] bridge_slave_0: entered promiscuous mode [ 1066.104548][T22934] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.111600][T22934] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.118814][T22934] bridge_slave_1: entered allmulticast mode [ 1066.125654][T22934] bridge_slave_1: entered promiscuous mode [ 1066.132416][T14376] veth1_macvtap: left promiscuous mode [ 1066.138065][T14376] veth0_vlan: left promiscuous mode [ 1066.275408][T22934] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.282464][T22934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.289762][T22934] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.296817][T22934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.322113][T14377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.332378][T14377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.344516][T14377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.351611][T14377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.364138][T14379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.371243][T14379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.399688][T22934] veth0_vlan: entered promiscuous mode [ 1066.411404][T22934] veth1_macvtap: entered promiscuous mode [ 1066.702537][ T36] audit: type=1400 audit(2000000021.158:52211): avc: denied { execute } for pid=22970 comm="syz.7.18964" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1066.729577][T22972] netlink: 11 bytes leftover after parsing attributes in process `syz.5.18962'. [ 1066.749318][T22972] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 1066.750025][ T36] audit: type=1400 audit(2000000021.205:52212): avc: denied { write } for pid=22973 comm="syz.7.18965" name="/" dev="configfs" ino=1247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1066.781329][T22974] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1066.781353][T22974] rust_binder: Read failure Err(EFAULT) in pid:13 [ 1066.906252][ T36] audit: type=1400 audit(2000000021.355:52213): avc: denied { accept } for pid=22980 comm="syz.7.18968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1066.967378][T22986] 9pnet_fd: Insufficient options for proto=fd [ 1067.087708][T23007] rust_binder: Error while translating object. [ 1067.087781][T23007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 1067.094011][T23007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:920 [ 1067.105280][T23005] input: syz0 as /devices/virtual/input/input114 [ 1067.163383][T23009] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 1067.578951][T23043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 1067.636551][T23049] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1067.645802][T23049] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:937 [ 1067.856657][T23062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1067.866202][T23062] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 1067.873401][T23063] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1068.357472][T23074] binder: Bad value for 'stats' [ 1068.438653][ T36] audit: type=1400 audit(2000000022.776:52214): avc: granted { setsecparam } for pid=23079 comm="syz.9.19001" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1068.479092][T23080] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1068.563358][T23088] /dev/rnullb0: Can't open blockdev [ 1068.752267][T23102] 9pnet_fd: Insufficient options for proto=fd [ 1068.951874][T23104] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1069.020127][ T36] audit: type=1326 audit(2000000023.319:52215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23108 comm="syz.9.19015" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febf7f8e929 code=0x0 [ 1069.138344][T14377] bridge_slave_1: left allmulticast mode [ 1069.144050][T14377] bridge_slave_1: left promiscuous mode [ 1069.149726][T14377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.157192][T14377] bridge_slave_0: left allmulticast mode [ 1069.162973][T14377] bridge_slave_0: left promiscuous mode [ 1069.168611][T14377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.262020][T23110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.270398][T23110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.277680][T23110] bridge_slave_0: entered allmulticast mode [ 1069.283950][T23110] bridge_slave_0: entered promiscuous mode [ 1069.291086][T14377] veth1_macvtap: left promiscuous mode [ 1069.296721][T14377] veth0_vlan: left promiscuous mode [ 1069.345222][T23110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.352502][T23110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.359566][T23110] bridge_slave_1: entered allmulticast mode [ 1069.365922][T23110] bridge_slave_1: entered promiscuous mode [ 1069.419812][T23110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.426911][T23110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.434170][T23110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.441225][T23110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.463796][T14376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.471423][T14376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.481655][T14374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.488720][T14374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.497930][T14376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.505101][T14376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.531843][T23110] veth0_vlan: entered promiscuous mode [ 1069.543000][T23110] veth1_macvtap: entered promiscuous mode [ 1069.616874][T23116] cgroup: Unknown subsys name 'dont_measure' [ 1069.622994][ T36] audit: type=1326 audit(2000000023.880:52216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23115 comm="syz.0.19014" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7ff048f8e929 code=0x0 [ 1069.665435][T23122] input: syz0 as /devices/virtual/input/input115 [ 1070.737402][T23153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1070.737471][T23153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:51 [ 1070.761482][T23156] netlink: 'syz.7.19025': attribute type 16 has an invalid length. [ 1070.779089][ T36] audit: type=1400 audit(2000000024.975:52217): avc: denied { append } for pid=23155 comm="syz.7.19025" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1070.802440][T23156] usb usb1: usbfs: process 23156 (syz.7.19025) did not claim interface 0 before use [ 1071.032751][T23164] 9pnet_fd: Insufficient options for proto=fd [ 1071.200664][T23195] rust_binder: Write failure EFAULT in pid:85 [ 1071.234560][T23195] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1071.382814][ T2985] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1071.553823][ T2985] usb 1-1: Using ep0 maxpacket: 16 [ 1071.560288][ T2985] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1071.568638][ T2985] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.578807][ T2985] usb 1-1: config 0 has no interface number 0 [ 1071.586392][ T2985] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1071.595440][ T2985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.603458][ T2985] usb 1-1: Product: syz [ 1071.607678][ T2985] usb 1-1: Manufacturer: syz [ 1071.612275][ T2985] usb 1-1: SerialNumber: syz [ 1071.617529][ T2985] usb 1-1: config 0 descriptor?? [ 1071.886458][ T2985] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 1071.893286][ T2985] usb 1-1: No valid video chain found. [ 1071.893453][T23179] /dev/rnullb0: Can't open blockdev [ 1071.899855][ T2985] usb 1-1: USB disconnect, device number 43 [ 1072.356832][ T36] audit: type=1400 audit(2000000026.453:52218): avc: denied { map } for pid=23205 comm="syz.9.19042" path="socket:[235207]" dev="sockfs" ino=235207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1072.544447][ T36] audit: type=1400 audit(2000000026.621:52219): avc: denied { shutdown } for pid=23210 comm="syz.0.19044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1074.066082][ T45] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1074.226433][ T45] usb 10-1: Using ep0 maxpacket: 8 [ 1074.232808][ T45] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1074.241302][ T45] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.251945][ T45] usb 10-1: config 0 has no interface number 0 [ 1074.260901][ T45] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1074.270286][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.278403][ T45] usb 10-1: Product: syz [ 1074.283225][ T45] usb 10-1: Manufacturer: syz [ 1074.287917][ T45] usb 10-1: SerialNumber: syz [ 1074.293305][ T45] usb 10-1: config 0 descriptor?? [ 1074.299307][ T45] usb 10-1: Found UVC 0.04 device syz (046d:08c3) [ 1074.305916][ T45] usb 10-1: No valid video chain found. [ 1074.514744][ T36] audit: type=1400 audit(2000000028.464:52220): avc: denied { read } for pid=23235 comm="syz.9.19051" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1074.538833][ T36] audit: type=1400 audit(2000000028.464:52221): avc: denied { open } for pid=23235 comm="syz.9.19051" path="/344/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1074.563738][ T36] audit: type=1400 audit(2000000028.492:52222): avc: denied { ioctl } for pid=23235 comm="syz.9.19051" path="/344/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1074.761703][ T2985] usb 10-1: USB disconnect, device number 14 [ 1075.498022][T23242] netlink: 165 bytes leftover after parsing attributes in process `syz.0.19053'. [ 1075.507579][ T36] audit: type=1400 audit(2000000029.390:52223): avc: denied { map } for pid=23241 comm="syz.0.19053" path="socket:[235578]" dev="sockfs" ino=235578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1075.543988][T23244] rust_binder: 23244: no such ref 1 [ 1075.549225][T23244] rust_binder: 23244: no such ref 3 [ 1075.554560][T23244] rust_binder: Write failure EFAULT in pid:65 [ 1077.110676][T23265] rust_binder: Failed to allocate buffer. len:104, is_oneway:true [ 1077.413559][T14379] bridge_slave_1: left allmulticast mode [ 1077.427179][T14379] bridge_slave_1: left promiscuous mode [ 1077.432812][T14379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.440931][T14379] bridge_slave_0: left allmulticast mode [ 1077.446765][T14379] bridge_slave_0: left promiscuous mode [ 1077.452402][T14379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.575154][T23271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.582236][T23271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.589583][T23271] bridge_slave_0: entered allmulticast mode [ 1077.596586][T23271] bridge_slave_0: entered promiscuous mode [ 1077.603365][T23271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.611586][T23271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.618985][T23271] bridge_slave_1: entered allmulticast mode [ 1077.625426][T23271] bridge_slave_1: entered promiscuous mode [ 1077.632719][T14379] veth1_macvtap: left promiscuous mode [ 1077.638511][T14379] veth0_vlan: left promiscuous mode [ 1077.647436][ T45] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1077.794391][T23271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.801636][T23271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.808982][T23271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.816021][T23271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.824616][ T45] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.835024][ T45] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1077.848366][T14376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.848954][ T45] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1077.864855][T14376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.871945][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1077.883737][T14376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.890821][T14376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.893320][ T45] usb 10-1: SerialNumber: syz [ 1077.917340][T14374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.924586][T14374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.983413][T23271] veth0_vlan: entered promiscuous mode [ 1078.000018][T23271] veth1_macvtap: entered promiscuous mode [ 1078.119114][T23279] 9pnet_fd: Insufficient options for proto=fd [ 1078.173301][ T45] usb 10-1: 0:2 : does not exist [ 1078.189960][ T45] usb 10-1: unit 5 not found! [ 1078.200730][ T45] usb 10-1: USB disconnect, device number 15 [ 1078.217156][T20838] udevd[20838]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1078.406953][T23297] SELinux: Context system_u:object_r:restorecond_var_run_t:s0 is not valid (left unmapped). [ 1078.417496][ T36] audit: type=1400 audit(2000000032.121:52224): avc: denied { relabelto } for pid=23296 comm="syz.3.19070" name="file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:restorecond_var_run_t:s0" [ 1078.445741][ T36] audit: type=1400 audit(2000000032.121:52225): avc: denied { associate } for pid=23296 comm="syz.3.19070" name="file0" dev="tmpfs" ino=55 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:restorecond_var_run_t:s0" [ 1078.842931][T23302] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1001 [ 1078.855053][T23304] netlink: 12 bytes leftover after parsing attributes in process `syz.9.19073'. [ 1079.309047][T23321] fuse: Invalid gid '00000000000037777777777' [ 1079.328265][T23329] binder: Unknown parameter 'euid' [ 1079.328598][ T36] audit: type=1400 audit(2000000032.972:52226): avc: denied { listen } for pid=23327 comm="syz.7.19079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1079.563033][ T36] audit: type=1400 audit(2000000033.187:52227): avc: denied { append } for pid=23338 comm="syz.3.19083" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1079.784558][T23348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.791662][T23348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.799020][T23348] bridge_slave_0: entered allmulticast mode [ 1079.805252][T23348] bridge_slave_0: entered promiscuous mode [ 1079.811968][T23348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.819075][T23348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.826158][T23348] bridge_slave_1: entered allmulticast mode [ 1079.832699][T23348] bridge_slave_1: entered promiscuous mode [ 1079.886062][T23348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.893148][T23348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.900440][T23348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.907502][T23348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.932882][T14376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.940243][ T2985] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1079.948208][T14376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.958755][T14377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.965817][T14377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.975268][T14376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.982333][T14376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.012842][T23348] veth0_vlan: entered promiscuous mode [ 1080.024950][T23348] veth1_macvtap: entered promiscuous mode [ 1080.153506][ T2985] usb 10-1: Using ep0 maxpacket: 8 [ 1080.160633][ T2985] usb 10-1: config 3 has an invalid interface number: 45 but max is 0 [ 1080.168838][ T2985] usb 10-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1080.177664][ T2985] usb 10-1: config 3 has no interface number 0 [ 1080.183932][ T2985] usb 10-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1080.196925][ T2985] usb 10-1: config 3 interface 45 has no altsetting 0 [ 1080.205279][ T2985] usb 10-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1080.214486][ T2985] usb 10-1: New USB device strings: Mfr=247, Product=1, SerialNumber=3 [ 1080.270337][T23357] rust_binder: 23357: no such ref 2 [ 1080.275601][T23357] rust_binder: 23357: no such ref 1 [ 1080.280847][T23357] rust_binder: 23357: no such ref 1 [ 1080.286071][T23357] rust_binder: Write failure EFAULT in pid:4 [ 1080.320627][ T2985] usb 10-1: Product: syz [ 1080.332151][ T2985] usb 10-1: Manufacturer: syz [ 1080.336964][ T2985] usb 10-1: SerialNumber: syz [ 1080.493979][T23360] overlayfs: failed to resolve './file1': -2 [ 1080.598572][ T36] audit: type=1400 audit(2000000034.160:52228): avc: denied { map } for pid=23363 comm="syz.3.19090" path="socket:[236450]" dev="sockfs" ino=236450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1080.646134][T23366] netlink: 204 bytes leftover after parsing attributes in process `syz.3.19091'. [ 1081.111241][ T45] usb 4-1: new low-speed USB device number 104 using dummy_hcd [ 1081.155495][T23381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1081.162757][T23381] IPv6: NLM_F_CREATE should be set when creating new route [ 1081.170025][T23381] IPv6: NLM_F_CREATE should be set when creating new route [ 1081.390425][ T45] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1081.401562][ T45] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1081.412536][ T45] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1081.425689][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1081.434804][ T45] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 1081.444891][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.454125][ T45] usb 4-1: config 0 descriptor?? [ 1081.459455][T23375] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1081.535127][T23386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1081.682928][T23375] /dev/rnullb0: Can't open blockdev [ 1081.695573][ T45] usb 4-1: string descriptor 0 read error: -71 [ 1081.704804][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 1081.710953][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1081.719686][ T45] usb 4-1: USB disconnect, device number 104 [ 1082.250819][T23388] binder: Unknown parameter '' [ 1082.468279][T23390] 9pnet_fd: Insufficient options for proto=fd [ 1082.567133][T23395] kvm: kvm [23394]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882 [ 1082.781241][T23411] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1082.781283][T23411] rust_binder: Read failure Err(EFAULT) in pid:37 [ 1082.797358][T23411] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 1082.803917][T23411] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 1082.812148][T23411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:37 [ 1082.914734][ T2985] usb 10-1: USB disconnect, device number 16 [ 1082.926500][T20838] udevd[20838]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1083.054213][T23419] rust_binder: validate_parent_fixup: new_min_offset=16, sg_entry.length=0 [ 1083.054244][T23419] rust_binder: Error while translating object. [ 1083.062971][T23419] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1083.070272][T23419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 1083.753607][T23430] __vm_enough_memory: pid: 23430, comm: syz.8.19114, bytes: 1152922604118523904 not enough memory for the allocation [ 1083.834907][T23434] netlink: 104 bytes leftover after parsing attributes in process `syz.9.19116'. [ 1084.489431][ T636] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1084.650864][ T636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.661849][ T636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.671602][ T636] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1084.684570][ T636] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1084.693883][ T636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.702550][ T636] usb 4-1: config 0 descriptor?? [ 1084.818633][T23444] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1084.943050][T23451] input input119: cannot allocate more than FF_MAX_EFFECTS effects [ 1085.145433][ T636] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1085.152942][ T636] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1085.160371][ T636] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1085.167849][ T636] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1085.175301][ T636] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1085.182698][ T636] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1085.190288][ T636] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1085.197772][ T636] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1085.205214][ T636] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1085.213172][ T636] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1085.221005][ T636] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1085.228432][ T636] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1085.235815][ T636] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1085.243252][ T636] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1085.250868][ T636] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1085.258405][ T636] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 1085.268036][ T636] plantronics 0003:047F:FFFF.002E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1085.423191][ T315] usb 4-1: USB disconnect, device number 105 [ 1085.629305][T23458] KVM: debugfs: duplicate directory 23458-6 [ 1086.186176][T23473] /dev/rnullb0: Can't open blockdev [ 1086.293330][T23478] /dev/rnullb0: Can't open blockdev [ 1086.299858][T23478] SELinux: Context system_u:object_r:var_lock_t:s0 is not valid (left unmapped). [ 1086.309838][ T36] audit: type=1400 audit(2000000039.501:52229): avc: denied { relabelto } for pid=23477 comm="syz.9.19131" name="cgroup" dev="tmpfs" ino=1959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:var_lock_t:s0" [ 1086.352975][ T36] audit: type=1400 audit(2000000039.501:52230): avc: denied { associate } for pid=23477 comm="syz.9.19131" name="cgroup" dev="tmpfs" ino=1959 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_lock_t:s0" [ 1086.403060][ T36] audit: type=1400 audit(2000000039.530:52231): avc: denied { unlink } for pid=19771 comm="syz-executor" name="cgroup" dev="tmpfs" ino=1959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:var_lock_t:s0" [ 1086.436218][T23489] tc_dump_action: action bad kind [ 1087.351824][ T36] audit: type=1326 audit(2000000040.474:52232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23491 comm="syz.7.19137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0fb78e929 code=0x7fc00000 [ 1087.405910][ T36] audit: type=1326 audit(2000000040.474:52233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23491 comm="syz.7.19137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa0fb78e929 code=0x7fc00000 [ 1087.445154][ T36] audit: type=1326 audit(2000000040.474:52234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23491 comm="syz.7.19137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0fb78e929 code=0x7fc00000 [ 1087.469047][T23534] netlink: 5 bytes leftover after parsing attributes in process `syz.9.19151'. [ 1087.469179][ T36] audit: type=1326 audit(2000000040.474:52235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23491 comm="syz.7.19137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0fb78e929 code=0x7fc00000 [ 1087.502182][ T36] audit: type=1326 audit(2000000040.474:52236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23491 comm="syz.7.19137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0fb78e929 code=0x7fc00000 [ 1087.526137][ T36] audit: type=1326 audit(2000000040.474:52237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23491 comm="syz.7.19137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0fb78e929 code=0x7fc00000 [ 1087.526322][T23534] /dev/rnullb0: Can't open blockdev [ 1087.549836][ T36] audit: type=1326 audit(2000000040.474:52238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23491 comm="syz.7.19137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0fb78e929 code=0x7fc00000 [ 1087.634917][T23536] 9pnet_fd: Insufficient options for proto=fd [ 1087.641263][T23536] binder: Bad value for 'stats' [ 1087.694372][T23541] rust_binder: 23541: no such ref 1 [ 1087.704897][T23541] rust_binder: 23541: no such ref 0 [ 1087.726069][T23541] rust_binder: 23541: no such ref 0 [ 1087.737466][T23545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:64 [ 1087.817710][T23549] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1087.826860][T23549] rust_binder: Read failure Err(EFAULT) in pid:67 [ 1087.857463][T23557] binder: Unknown parameter 'fscontext?}' [ 1087.936110][T23565] overlayfs: failed to resolve './file1': -2 [ 1088.158939][T23578] rust_binder: 23578: no such ref 0 [ 1088.216230][T23581] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1088.327746][T23587] netlink: 104 bytes leftover after parsing attributes in process `syz.7.19171'. [ 1088.359647][T23590] netlink: 72 bytes leftover after parsing attributes in process `syz.8.19168'. [ 1088.392574][T23593] rust_binder: Error while translating object. [ 1088.392614][T23593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1088.406703][T23593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 1088.477723][T23609] 9pnet_fd: Insufficient options for proto=fd [ 1088.505058][T23611] rust_binder: Error while translating object. [ 1088.505096][T23611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1088.518944][T23611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:94 [ 1088.703011][T23635] netlink: 140 bytes leftover after parsing attributes in process `syz.8.19188'. [ 1088.855251][T23655] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1088.866314][T23655] overlayfs: failed to get uuid (377/file1, err=-13); falling back to uuid=null. [ 1089.042000][T23682] rust_binder: 23682: no such ref 1 [ 1089.155748][T23695] /dev/rnullb0: Can't open blockdev [ 1089.200962][T23697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1107 [ 1089.235860][T23703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1089.316012][T23715] /dev/rnullb0: Can't open blockdev [ 1089.524714][ T315] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1089.674541][ T315] usb 10-1: device descriptor read/64, error -71 [ 1089.735466][T23761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=23761 comm=syz.8.19230 [ 1089.748300][T23761] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19230'. [ 1089.941660][ T315] usb 10-1: device descriptor read/64, error -71 [ 1089.960843][T23764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19231'. [ 1089.970056][T23764] ip6_vti0: entered promiscuous mode [ 1089.975387][T23764] ip6_vti0: entered allmulticast mode [ 1089.992865][T23764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19231'. [ 1090.058255][T23766] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1090.198581][ T315] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1090.268413][T23783] netlink: 48 bytes leftover after parsing attributes in process `syz.8.19239'. [ 1090.294532][T23789] /dev/rnullb0: Can't open blockdev [ 1090.337223][ T315] usb 10-1: device descriptor read/64, error -71 [ 1090.593825][ T315] usb 10-1: device descriptor read/64, error -71 [ 1090.611841][T23802] random: crng reseeded on system resumption [ 1090.711480][ T315] usb usb10-port1: attempt power cycle [ 1090.903794][ T636] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1091.064146][ T636] usb 4-1: Using ep0 maxpacket: 32 [ 1091.070532][ T636] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 1091.078771][ T636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 55, changing to 7 [ 1091.085545][ T315] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1091.089832][ T636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8496, setting to 1024 [ 1091.110267][ T636] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1091.119615][ T636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.128111][ T636] usb 4-1: Product: syz [ 1091.132457][ T636] usb 4-1: Manufacturer: syz [ 1091.137116][ T636] usb 4-1: SerialNumber: syz [ 1091.141936][ T315] usb 10-1: device descriptor read/8, error -71 [ 1091.148626][ T636] usb 4-1: config 0 descriptor?? [ 1091.154434][ T636] hub 4-1:0.0: bad descriptor, ignoring hub [ 1091.165152][ T636] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1091.187897][T23808] 9pnet_fd: Insufficient options for proto=fd [ 1091.229157][T23816] netlink: 80 bytes leftover after parsing attributes in process `syz.8.19251'. [ 1091.279491][ T315] usb 10-1: device descriptor read/8, error -71 [ 1091.534696][ T315] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 1091.556960][ T315] usb 10-1: device descriptor read/8, error -71 [ 1091.696072][ T315] usb 10-1: device descriptor read/8, error -71 [ 1091.812660][ T315] usb usb10-port1: unable to enumerate USB device [ 1091.855376][ T45] usb 4-1: USB disconnect, device number 106 [ 1091.920045][T23826] netlink: 'syz.3.19255': attribute type 4 has an invalid length. [ 1091.929905][T23826] netlink: 'syz.3.19255': attribute type 4 has an invalid length. [ 1091.941402][T23826] : renamed from bridge0 (while UP) [ 1091.948490][T23826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1091.948516][T23826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165 [ 1091.991262][T23832] tipc: Enabling of bearer rejected, failed to enable media [ 1092.020426][T23834] netlink: 204 bytes leftover after parsing attributes in process `syz.8.19258'. [ 1092.044559][T23836] input: syz0 as /devices/virtual/input/input120 [ 1092.062219][T23836] input: syz1 as /devices/virtual/input/input121 [ 1092.076920][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 1092.076937][ T36] audit: type=1400 audit(2000000044.889:52306): avc: denied { read } for pid=95 comm="acpid" name="event4" dev="devtmpfs" ino=1047 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1092.110476][ T36] audit: type=1400 audit(2000000044.889:52307): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=1047 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1092.134375][ T36] audit: type=1400 audit(2000000044.889:52308): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=1047 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1092.502411][T23868] netlink: 328 bytes leftover after parsing attributes in process `syz.3.19269'. [ 1092.512212][T23868] netlink: 328 bytes leftover after parsing attributes in process `syz.3.19269'. [ 1092.540697][T23872] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1092.902987][ T45] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1092.942503][T23878] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 1092.952530][T23878] loop8: detected capacity change from 0 to 8 [ 1092.978013][T23880] loop8: detected capacity change from 8 to 6 [ 1092.984514][ C0] blk_print_req_error: 16 callbacks suppressed [ 1092.984528][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1092.999996][ C0] buffer_io_error: 14 callbacks suppressed [ 1093.000014][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1093.014392][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.023564][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1093.031467][T20838] loop8: unable to read partition table [ 1093.038827][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.048039][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1093.056224][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.065414][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1093.073499][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.082678][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1093.084923][T23880] loop8: unable to read partition table [ 1093.098543][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.107747][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1093.115718][ T36] audit: type=1400 audit(2000000045.853:52309): avc: denied { map } for pid=23883 comm="syz.8.19275" path="socket:[239933]" dev="sockfs" ino=239933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1093.146316][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.155537][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1093.163819][T23880] loop_reread_partitions: partition scan of loop8 (^{Z~P[]M,+-`1(6$~ [ 1093.163819][T23880] ۅ6Ã) failed (rc=-5) [ 1093.171550][ T36] audit: type=1400 audit(2000000045.853:52310): avc: denied { read } for pid=23883 comm="syz.8.19275" path="socket:[239933]" dev="sockfs" ino=239933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1093.179721][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.213576][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1093.222494][ T45] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1093.231780][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.231816][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1093.251688][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.255815][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.260846][ T45] usb 10-1: config 0 descriptor?? [ 1093.268968][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1093.340839][T23905] rust_binder: Error while translating object. [ 1093.340871][T23905] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1093.347235][T23905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:197 [ 1093.541408][T23929] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 1093.568999][T23930] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1093.569286][T23930] rust_binder: 23930: no such ref 4294967293 [ 1093.680636][ T45] usb 10-1: Cannot read MAC address [ 1093.685989][ T45] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1093.699030][ T45] usb 10-1: USB disconnect, device number 21 [ 1094.044814][T23939] rust_binder: Error in use_page_slow: ESRCH [ 1094.044834][T23939] rust_binder: use_range failure ESRCH [ 1094.051004][T23939] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 1094.056540][T23939] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1094.064395][T23939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:205 [ 1094.239360][T23946] binder: Unknown parameter '0xffffffffffffffff' [ 1094.322056][T23949] __vm_enough_memory: pid: 23949, comm: syz.9.19295, bytes: 1152922604118523904 not enough memory for the allocation [ 1094.362376][T23951] input: syz1 as /devices/virtual/input/input122 [ 1094.618450][ T36] audit: type=1400 audit(2000000047.275:52311): avc: granted { setsecparam } for pid=23970 comm="syz.9.19301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1094.669184][T23974] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 1094.739358][T23981] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1094.749236][T23983] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1094.862735][T23987] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 1094.862764][T23987] rust_binder: Error while translating object. [ 1094.873405][T23987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1094.879595][T23987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:220 [ 1094.900592][T23990] rust_binder: Write failure EFAULT in pid:223 [ 1095.030385][ T636] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1095.201431][ T636] usb 10-1: Using ep0 maxpacket: 8 [ 1095.207754][ T636] usb 10-1: config 0 has an invalid interface number: 240 but max is 0 [ 1095.216087][ T636] usb 10-1: config 0 has no interface number 0 [ 1095.222276][ T636] usb 10-1: config 0 interface 240 has no altsetting 0 [ 1095.233481][ T636] usb 10-1: New USB device found, idVendor=1e2d, idProduct=00f3, bcdDevice=87.65 [ 1095.242764][ T636] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.250903][ T636] usb 10-1: Product: syz [ 1095.255209][ T636] usb 10-1: SerialNumber: syz [ 1095.260542][ T636] usb 10-1: config 0 descriptor?? [ 1095.446334][T23998] netlink: 72 bytes leftover after parsing attributes in process `syz.8.19310'. [ 1095.502641][ T636] usb 10-1: USB disconnect, device number 22 [ 1095.524638][T24010] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19313'. [ 1095.629092][ T36] audit: type=1400 audit(2000000048.219:52312): avc: denied { setattr } for pid=24016 comm="syz.9.19315" name="/" dev="incremental-fs" ino=2185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1096.142196][ T636] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1096.313409][ T636] usb 10-1: Using ep0 maxpacket: 8 [ 1096.346408][T24024] kvm: pic: non byte write [ 1096.411805][ T636] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1096.443524][ T636] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1096.466405][ T636] usb 10-1: can't read configurations, error -71 [ 1096.811989][T24043] overlay: Unknown parameter 'fowner>00000000000000000000' [ 1096.833397][T24045] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1096.856567][T24050] 9pnet_fd: Insufficient options for proto=fd [ 1097.115056][T18833] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1097.183478][T24057] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 1097.184155][T24057] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 1097.275441][T18833] usb 4-1: Using ep0 maxpacket: 32 [ 1097.294448][T18833] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 1097.308733][T18833] usb 4-1: config 0 has no interfaces? [ 1097.315208][T18833] usb 4-1: config 0 has no interfaces? [ 1097.324026][ T36] audit: type=1400 audit(2000000049.800:52313): avc: denied { setopt } for pid=24058 comm="syz.9.19331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1097.326978][T18833] usb 4-1: config 0 has no interfaces? [ 1097.368840][T18833] usb 4-1: config 0 has no interfaces? [ 1097.376127][T18833] usb 4-1: config 0 has no interfaces? [ 1097.382494][T18833] usb 4-1: config 0 has no interfaces? [ 1097.390467][T18833] usb 4-1: config 0 has no interfaces? [ 1097.396878][T18833] usb 4-1: config 0 has no interfaces? [ 1097.403197][T18833] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1097.417362][T18833] usb 4-1: New USB device strings: Mfr=0, Product=30, SerialNumber=0 [ 1097.429464][T18833] usb 4-1: Product: syz [ 1097.434826][T18833] usb 4-1: config 0 descriptor?? [ 1097.582686][T24081] netlink: 'syz.7.19340': attribute type 28 has an invalid length. [ 1097.596871][T24081] rust_binder: Error while translating object. [ 1097.596926][T24081] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1097.603225][T24081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 1097.686675][T24087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1097.696331][T24087] rust_binder: 24084 RLIMIT_NICE not set [ 1097.703292][T24084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:219 [ 1097.716283][ T315] usb 4-1: USB disconnect, device number 107 [ 1097.735314][ T2989] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1097.774402][T14379] Bluetooth: hci0: Frame reassembly failed (-84) [ 1097.906124][ T2989] usb 10-1: Using ep0 maxpacket: 32 [ 1097.917075][ T2989] usb 10-1: too many configurations: 17, using maximum allowed: 8 [ 1097.948966][ T2989] usb 10-1: config 0 has no interfaces? [ 1097.955474][ T2989] usb 10-1: config 0 has no interfaces? [ 1097.961962][ T2989] usb 10-1: config 0 has no interfaces? [ 1097.968419][ T2989] usb 10-1: config 0 has no interfaces? [ 1097.974875][ T2989] usb 10-1: config 0 has no interfaces? [ 1097.981495][ T2989] usb 10-1: config 0 has no interfaces? [ 1097.988061][ T2989] usb 10-1: config 0 has no interfaces? [ 1097.994717][ T2989] usb 10-1: config 0 has no interfaces? [ 1098.001188][ T2989] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1098.010639][ T2989] usb 10-1: New USB device strings: Mfr=0, Product=30, SerialNumber=0 [ 1098.019100][ T2989] usb 10-1: Product: syz [ 1098.024483][ T2989] usb 10-1: config 0 descriptor?? [ 1098.270668][T18833] usb 10-1: USB disconnect, device number 25 [ 1098.548108][ T45] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 1098.709112][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1098.720246][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.730315][ T45] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1098.739464][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.748146][ T45] usb 4-1: config 0 descriptor?? [ 1098.972325][ T45] hid (null): report_id 2396544439 is invalid [ 1098.984792][ T45] hid-generic 0003:04F3:0754.002F: report_id 2396544439 is invalid [ 1098.993290][ T45] hid-generic 0003:04F3:0754.002F: item 0 4 1 8 parsing failed [ 1099.001127][ T45] hid-generic 0003:04F3:0754.002F: probe with driver hid-generic failed with error -22 [ 1099.012062][ T45] usb 4-1: USB disconnect, device number 108 [ 1099.242469][ T2989] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1099.381531][ T2989] usb 10-1: device descriptor read/64, error -71 [ 1099.638032][ T2989] usb 10-1: device descriptor read/64, error -71 [ 1099.713755][T24163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:276 [ 1099.894609][ T2989] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1099.916016][T15310] Bluetooth: hci0: command 0x1003 tx timeout [ 1099.922189][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1099.928383][T24098] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1100.013529][ T36] audit: type=1400 audit(2000000052.316:52314): avc: granted { setsecparam } for pid=24177 comm="syz.7.19372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1100.033068][ T36] audit: type=1400 audit(2000000052.316:52315): avc: granted { setsecparam } for pid=24177 comm="syz.7.19372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1100.044312][ T2989] usb 10-1: device descriptor read/64, error -71 [ 1100.076367][T10996] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1100.187058][T24184] tipc: Failed to remove unknown binding: 66,1,1/0:1846689309/1846689311 [ 1100.197160][T24184] rust_binder: Error while translating object. [ 1100.197188][T24184] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1100.203376][T24184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:239 [ 1100.237744][T10996] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1100.259029][T10996] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1100.270456][T10996] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1100.281758][T10996] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1100.290828][T10996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.299819][T24176] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1100.322311][ T2989] usb 10-1: device descriptor read/64, error -71 [ 1100.439887][ T2989] usb usb10-port1: attempt power cycle [ 1100.803322][ T2989] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1100.825760][ T2989] usb 10-1: device descriptor read/8, error -71 [ 1100.951639][T24176] rust_binder: Error while translating object. [ 1100.951681][T24176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1100.957906][T24176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:289 [ 1100.968574][ T2989] usb 10-1: device descriptor read/8, error -71 [ 1101.036026][T24186] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1101.167079][T10996] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1101.174709][T10996] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input124 [ 1101.185933][T10996] usb 4-1: USB disconnect, device number 109 [ 1101.230943][ T2989] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1101.253434][ T2989] usb 10-1: device descriptor read/8, error -71 [ 1101.392332][ T2989] usb 10-1: device descriptor read/8, error -71 [ 1101.511555][ T2989] usb usb10-port1: unable to enumerate USB device [ 1102.214786][T24200] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 1102.214816][T24200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 1102.222887][T24200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1209 [ 1102.233070][T24201] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1102.404205][T24216] /dev/rnullb0: Can't open blockdev [ 1102.429190][ T36] audit: type=1400 audit(2000000054.580:52316): avc: denied { setattr } for pid=24217 comm="syz.3.19387" path="/dev/urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1102.493939][ T36] audit: type=1326 audit(2000000054.636:52317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24221 comm="syz.9.19390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febf7f8e929 code=0x0 [ 1102.602590][T24229] rust_binder: 24229: no such ref 0 [ 1102.607874][T24229] rust_binder: Write failure EFAULT in pid:301 [ 1102.620010][T24232] tipc: Started in network mode [ 1102.631202][T24232] tipc: Node identity 7, cluster identity 4711 [ 1102.637416][T24232] tipc: Node number set to 7 [ 1102.746794][T24240] 9pnet_fd: Insufficient options for proto=fd [ 1102.799186][ T36] audit: type=1400 audit(2000000054.917:52318): avc: denied { shutdown } for pid=24245 comm="syz.8.19397" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1103.681263][T24274] tmpfs: Unknown parameter 'nowap' [ 1103.978414][T18833] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1104.086056][T24306] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25 sclass=netlink_tcpdiag_socket pid=24306 comm=syz.8.19418 [ 1104.098950][T24307] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25 sclass=netlink_tcpdiag_socket pid=24307 comm=syz.8.19418 [ 1104.138760][T18833] usb 10-1: Using ep0 maxpacket: 32 [ 1104.144455][T18833] usb 10-1: too many configurations: 17, using maximum allowed: 8 [ 1104.153285][T18833] usb 10-1: config 0 has no interfaces? [ 1104.159645][T18833] usb 10-1: config 0 has no interfaces? [ 1104.165930][T18833] usb 10-1: config 0 has no interfaces? [ 1104.172248][T18833] usb 10-1: config 0 has no interfaces? [ 1104.178666][T18833] usb 10-1: config 0 has no interfaces? [ 1104.185300][T18833] usb 10-1: config 0 has no interfaces? [ 1104.191583][T18833] usb 10-1: config 0 has no interfaces? [ 1104.198875][T18833] usb 10-1: config 0 has no interfaces? [ 1104.205222][T18833] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1104.214441][T18833] usb 10-1: New USB device strings: Mfr=0, Product=30, SerialNumber=0 [ 1104.222626][T18833] usb 10-1: Product: syz [ 1104.228225][T18833] usb 10-1: config 0 descriptor?? [ 1104.380925][T24316] binder: Bad value for 'stats' [ 1104.401079][T24319] input: syz1 as /devices/virtual/input/input125 [ 1104.567702][ T2989] usb 10-1: USB disconnect, device number 30 [ 1104.940582][ T2989] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1105.029384][ T36] audit: type=1326 audit(2000000057.012:52319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24310 comm="syz.8.19420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e28b8e929 code=0x7fc00000 [ 1105.082175][ T2989] usb 10-1: device descriptor read/64, error -71 [ 1105.228263][T24349] netlink: 'syz.8.19431': attribute type 4 has an invalid length. [ 1105.236238][T24349] netlink: 'syz.8.19431': attribute type 5 has an invalid length. [ 1105.244128][T24349] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.19431'. [ 1105.368244][ T2989] usb 10-1: device descriptor read/64, error -71 [ 1105.592046][ T36] audit: type=1400 audit(2000000057.527:52320): avc: denied { remount } for pid=24381 comm="syz.7.19442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1105.612671][ T36] audit: type=1400 audit(2000000057.555:52321): avc: denied { mounton } for pid=24381 comm="syz.7.19442" path="/90/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 1105.635774][ T2989] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1105.774468][ T2989] usb 10-1: device descriptor read/64, error -71 [ 1105.856536][T24389] rust_binder: 24389: no such ref 2 [ 1105.861853][T24389] rust_binder: 24389: no such ref 2 [ 1105.867085][T24389] rust_binder: Write failure EINVAL in pid:273 [ 1106.019112][T24391] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1106.041698][ T2989] usb 10-1: device descriptor read/64, error -71 [ 1106.159821][ T2989] usb usb10-port1: attempt power cycle [ 1106.512083][ T315] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1106.522816][ T2989] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1106.545241][ T2989] usb 10-1: device descriptor read/8, error -71 [ 1106.653388][ T36] audit: type=1326 audit(2000000058.527:52322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24420 comm="syz.8.19454" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e28b8e929 code=0x0 [ 1106.677464][ T315] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1106.689113][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1106.707805][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1106.717728][ T315] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1106.732009][ T315] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1106.742154][ T315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.742223][ T2989] usb 10-1: device descriptor read/8, error -71 [ 1106.757597][ T315] usb 4-1: config 0 descriptor?? [ 1107.003840][ T2989] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1107.026257][ T2989] usb 10-1: device descriptor read/8, error -71 [ 1107.165321][ T2989] usb 10-1: device descriptor read/8, error -71 [ 1107.198187][ T315] plantronics 0003:047F:FFFF.0030: ignoring exceeding usage max [ 1107.207491][ T315] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1107.214909][ T315] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1107.222416][ T315] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1107.229845][ T315] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1107.237248][ T315] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1107.244860][ T315] plantronics 0003:047F:FFFF.0030: No inputs registered, leaving [ 1107.255510][ T315] plantronics 0003:047F:FFFF.0030: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1107.281898][ T2989] usb usb10-port1: unable to enumerate USB device [ 1107.475851][ T2989] usb 4-1: USB disconnect, device number 110 [ 1107.578142][T24435] incfs: Options parsing error. -22 [ 1107.583459][T24435] incfs: mount failed -22 [ 1107.812919][T24465] overlayfs: failed to clone upperpath [ 1108.050189][T24487] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1108.059252][T24487] overlayfs: conflicting options: userxattr,verity=require [ 1108.459146][T24509] 9pnet_fd: Insufficient options for proto=fd [ 1109.040087][T24598] /dev/rnullb0: Can't open blockdev [ 1109.083859][ T36] audit: type=1400 audit(2000000060.801:52323): avc: denied { execheap } for pid=24605 comm="syz.9.19515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1109.118001][ T36] audit: type=1400 audit(2000000060.829:52324): avc: denied { mounton } for pid=24599 comm="syz.3.19513" path="/127/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1109.118074][T24614] fuse: Bad value for 'max_read' [ 1109.160337][T24621] overlayfs: missing 'lowerdir' [ 1109.180982][ T36] audit: type=1400 audit(2000000060.894:52325): avc: denied { name_bind } for pid=24622 comm="syz.8.19520" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1109.464872][T24660] 9pnet_fd: Insufficient options for proto=fd [ 1109.496291][T24665] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19533'. [ 1109.762049][T10996] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1109.922419][T10996] usb 4-1: Using ep0 maxpacket: 32 [ 1109.928743][T10996] usb 4-1: config 0 has an invalid interface number: 195 but max is 0 [ 1109.944951][T10996] usb 4-1: config 0 has no interface number 0 [ 1109.966312][T10996] usb 4-1: New USB device found, idVendor=0403, idProduct=ed22, bcdDevice=55.ea [ 1109.975411][T10996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.987642][T10996] usb 4-1: Product: syz [ 1109.997218][T10996] usb 4-1: Manufacturer: syz [ 1110.001903][T10996] usb 4-1: SerialNumber: syz [ 1110.009071][T10996] usb 4-1: config 0 descriptor?? [ 1110.038039][ T36] audit: type=1400 audit(2000000061.689:52326): avc: denied { shutdown } for pid=24694 comm="syz.9.19543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1110.240722][T10996] hub 4-1:0.195: bad descriptor, ignoring hub [ 1110.264476][T10996] hub 4-1:0.195: probe with driver hub failed with error -5 [ 1110.272401][T10996] ftdi_sio 4-1:0.195: FTDI USB Serial Device converter detected [ 1110.281274][T10996] ftdi_sio ttyUSB0: unknown device type: 0x55ea [ 1110.307668][T10996] usb 4-1: USB disconnect, device number 111 [ 1110.314325][T10996] ftdi_sio 4-1:0.195: device disconnected [ 1110.473897][ T36] audit: type=1326 audit(2000000062.101:52327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24712 comm="syz.7.19549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0fb78e929 code=0x0 [ 1110.987387][T24731] futex_wake_op: syz.3.19556 tries to shift op by 144; fix this program [ 1110.995908][T24731] netlink: 104 bytes leftover after parsing attributes in process `syz.3.19556'. [ 1111.084897][T14377] Bluetooth: hci0: Frame reassembly failed (-84) [ 1111.773980][ T36] audit: type=1326 audit(2000000063.317:52328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24750 comm="syz.9.19564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf7f8e929 code=0x7fc00000 [ 1112.545604][T24796] 9pnet_fd: Insufficient options for proto=fd [ 1113.259688][T15310] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1113.266144][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 1113.299026][ T36] audit: type=1107 audit(2000000064.739:52329): pid=24839 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='w\1)3`#@մ{ _ _/Rje<gWw02)ɸW' [ 1113.519091][T24868] veth0_virt_wifi: entered promiscuous mode [ 1113.586566][T24894] fuse: Unknown parameter '' [ 1113.610836][T24867] veth0_virt_wifi: left promiscuous mode [ 1113.648167][T24895] netlink: 20 bytes leftover after parsing attributes in process `syz.9.19617'. [ 1113.685656][T24897] /dev/sg0: Can't lookup blockdev [ 1113.820194][T24905] rust_binder: 24900 RLIMIT_NICE not set [ 1113.890853][T24909] rust_binder: Error while translating object. [ 1113.908323][T24909] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 1113.916558][T24909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:302 [ 1114.081251][T24923] rust_binder: Error while translating object. [ 1114.090638][T24923] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1114.097191][T24923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:442 [ 1114.882973][ T2989] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1115.044300][ T2989] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.054774][ T2989] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1115.064593][ T2989] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1115.079300][ T2989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1115.087506][ T2989] usb 4-1: SerialNumber: syz [ 1115.313007][T24956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:458 [ 1115.316179][ T2989] usb 4-1: USB disconnect, device number 112 [ 1116.894346][T25018] 2N: renamed from vcan0 (while UP) [ 1117.225054][T25049] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1117.589541][T25091] /dev/rnullb0: Can't open blockdev [ 1117.686233][T25090] /dev/rnullb0: Can't open blockdev [ 1117.941645][T25103] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1042 sclass=netlink_xfrm_socket pid=25103 comm=syz.9.19693 [ 1118.087868][T25121] overlay: ./file0 is not a directory [ 1118.102360][T25121] overlay: ./file0 is not a directory [ 1118.270719][T25133] netlink: 'syz.8.19707': attribute type 4 has an invalid length. [ 1118.391503][T25140] binder: Unknown parameter 'binder' [ 1118.518001][T25144] rust_binder: Error while translating object. [ 1118.518051][T25144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 1118.524363][T25144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:337 [ 1118.665537][T25150] overlayfs: failed to clone upperpath [ 1118.808971][T25159] rust_binder: 25159: no such ref 2 [ 1118.814262][T25159] rust_binder: 25159: no such ref 3 [ 1118.820025][T25159] rust_binder: 25159: no such ref 3 [ 1118.825298][T25159] rust_binder: 25159: no such ref 0 [ 1118.956953][T25177] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19726'. [ 1118.968305][T25177] netlink: 28 bytes leftover after parsing attributes in process `syz.7.19726'. [ 1119.116327][T18833] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1119.276712][T18833] usb 4-1: Using ep0 maxpacket: 16 [ 1119.283258][T18833] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1119.291793][T18833] usb 4-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.40 [ 1119.300961][T18833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.309021][T18833] usb 4-1: Product: 珘㙰朡ꁬ煮⺟䙺弉㱺짌엯꾨ꛫ吕ꌐ畋儹᪃훓톻덎䯇뉩螥˰郡㢰ٽ褈瑫繄룤蕾ⲅ㌍㽚遛㓬ํ맍튙䯧ፎЌ [ 1119.325741][T18833] usb 4-1: Manufacturer: Я [ 1119.330285][T18833] usb 4-1: SerialNumber: 䠊 [ 1119.768243][T18833] usbhid 4-1:1.0: can't add hid device: -71 [ 1119.774261][T18833] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1119.783173][T18833] usb 4-1: USB disconnect, device number 113 [ 1120.220909][T25224] netlink: 188 bytes leftover after parsing attributes in process `syz.8.19739'. [ 1120.230416][T25225] netlink: 188 bytes leftover after parsing attributes in process `syz.8.19739'. [ 1120.242184][ T36] audit: type=1400 audit(2000000071.240:52330): avc: denied { mounton } for pid=25223 comm="syz.8.19739" path="/bus" dev="rootfs" ino=98061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 1120.242249][T25224] overlayfs: failed to resolve './file0/../file0': -20 [ 1120.284116][T25228] netlink: 104 bytes leftover after parsing attributes in process `syz.8.19740'. [ 1120.316252][T25233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19742'. [ 1120.325601][T25234] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19742'. [ 1120.388835][ T36] audit: type=1400 audit(2000000071.380:52331): avc: denied { lock } for pid=25240 comm="syz.9.19744" path="socket:[247589]" dev="sockfs" ino=247589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1120.433323][T25243] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1120.433361][T25243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:506 [ 1120.782940][T25256] 9pnet_virtio: no channels available for device ./cgroup [ 1120.970737][ T36] audit: type=1326 audit(2000000071.922:52332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25261 comm="syz.9.19752" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febf7f8e929 code=0x0 [ 1121.542752][T25281] rust_binder: Error while translating object. [ 1121.542782][T25281] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 1121.549065][T25281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:521 [ 1121.569204][ T36] audit: type=1400 audit(2000000072.484:52333): avc: denied { listen } for pid=25282 comm="syz.3.19759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1121.704855][ T36] audit: type=1326 audit(2000000072.615:52334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25302 comm="syz.8.19767" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e28b8e929 code=0x0 [ 1121.918783][ T36] audit: type=1400 audit(2000000072.811:52335): avc: denied { listen } for pid=25346 comm="syz.8.19778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1121.987179][T25355] 9pnet_fd: Insufficient options for proto=fd [ 1122.345269][T25369] rust_binder: Error while translating object. [ 1122.345299][T25369] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1122.351570][T25369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:364 [ 1122.489599][T25379] netlink: 28 bytes leftover after parsing attributes in process `syz.9.19788'. [ 1122.868718][T10996] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1123.029072][T10996] usb 4-1: Using ep0 maxpacket: 16 [ 1123.035494][T10996] usb 4-1: config 1 interface 0 altsetting 232 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1123.050441][T10996] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1123.062404][T10996] usb 4-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 1123.071485][T10996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.079671][T10996] usb 4-1: Product: ခ [ 1123.084033][T10996] usb 4-1: Manufacturer: {揞Ꜣ뾦ߧ齬륥꩔嵨ᷤ䬀廻 [ 1123.092036][T10996] usb 4-1: SerialNumber: 쳩共몟䐉寫圎쟆ⵦ峉哗䔿뼌㛻稳ꤼ晴ڱﾺ딜⯞뜇堊뽟ᰝ榆⡡鋶៻䲁顦豺퀫扦酏춎꡷㜯힉쥿씠澊瀢빙稿莝뗡梊왥唔찚ᒻ顛럸糗搏潼쉦裏壜ꡜ䙫⸠梀玖쳬ׄ⨋迁⻦ᣏꖦ [ 1123.139731][T25400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1123.139771][T25400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:368 [ 1123.277290][T25419] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19802'. [ 1123.335556][T25391] incfs_lookup_dentry err:-1 [ 1123.350373][T25391] incfs: Can't find or create .index dir in ./file0 [ 1123.360552][T25391] incfs: mount failed -1 [ 1123.381709][T10996] usbhid 4-1:1.0: can't add hid device: -71 [ 1123.394745][T10996] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1123.415400][T10996] usb 4-1: USB disconnect, device number 114 [ 1123.628793][T25433] overlayfs: workdir and upperdir must reside under the same mount [ 1123.654917][T25435] 9pnet_fd: Insufficient options for proto=fd [ 1123.855217][T25441] /dev/rnullb0: Can't open blockdev [ 1123.873280][T25443] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19811'. [ 1124.432160][T25472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:392 [ 1124.470137][T25478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.488166][T25478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.863759][T25483] netlink: 104 bytes leftover after parsing attributes in process `syz.8.19826'. [ 1126.467249][T25540] netlink: 'syz.9.19843': attribute type 27 has an invalid length. [ 1128.994757][ T37] INFO: task syz.0.18209:20734 blocked for more than 122 seconds. [ 1129.002665][ T37] Not tainted 6.12.30-syzkaller-g8ea40f524391 #0 [ 1129.009807][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1129.018583][ T37] task:syz.0.18209 state:D stack:0 pid:20734 tgid:20733 ppid:18166 flags:0x00004004 [ 1129.028811][ T37] Call Trace: [ 1129.032129][ T37] [ 1129.035058][ T37] __schedule+0x132b/0x1e00 [ 1129.039602][ T37] ? __sched_text_start+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1129.044670][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 1129.050305][ T37] ? mutex_unlock+0x8b/0x240 [ 1129.054945][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 1129.060971][ T36] audit: type=1400 audit(2000000079.480:52336): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2767]" dev="pipefs" ino=2767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1129.084231][ T37] schedule+0xc6/0x240 [ 1129.088340][ T37] super_lock+0x150/0x300 [ 1129.092811][ T37] ? user_get_super+0x350/0x350 [ 1129.097731][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 1129.103309][ T37] ? __kasan_check_write+0x18/0x20 [ 1129.108455][ T37] iterate_supers+0x8a/0x560 [ 1129.113125][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 1129.118693][ T37] ksys_sync+0x95/0x160 [ 1129.122919][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 1129.127699][ T37] ? switch_fpu_return+0x12/0x20 [ 1129.132658][ T37] __ia32_sys_sync+0x12/0x20 [ 1129.137317][ T37] x64_sys_call+0x2a58/0x2ee0 [ 1129.142015][ T37] do_syscall_64+0x58/0xf0 [ 1129.146508][ T37] ? clear_bhb_loop+0x50/0xa0 [ 1129.151219][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1129.157201][ T37] RIP: 0033:0x7fcef238e929 [ 1129.161637][ T37] RSP: 002b:00007fcef09f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1129.170172][ T37] RAX: ffffffffffffffda RBX: 00007fcef25b5fa0 RCX: 00007fcef238e929 [ 1129.178198][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1129.186284][ T37] RBP: 00007fcef25b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1129.237397][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.245467][ T37] R13: 0000000000000000 R14: 00007fcef25b5fa0 R15: 00007ffe004fcc48 [ 1129.253493][ T37] [ 1129.273198][ T37] NMI backtrace for cpu 1 [ 1129.273218][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.30-syzkaller-g8ea40f524391 #0 410f6785ff867c4c7f19ffe1872815da26232c9e [ 1129.273247][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1129.273261][ T37] Call Trace: [ 1129.273269][ T37] [ 1129.273277][ T37] __dump_stack+0x21/0x30 [ 1129.273306][ T37] dump_stack_lvl+0x10c/0x190 [ 1129.273332][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1129.273359][ T37] dump_stack+0x19/0x20 [ 1129.273382][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 1129.273403][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 1129.273425][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 1129.273444][ T37] ? sched_show_task+0x379/0x560 [ 1129.273468][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 1129.273488][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 1129.273510][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 1129.273539][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 1129.273561][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1129.273584][ T37] watchdog+0xd8f/0xed0 [ 1129.273609][ T37] ? __cfi_watchdog+0x10/0x10 [ 1129.273631][ T37] ? __kasan_check_read+0x15/0x20 [ 1129.273656][ T37] ? __kthread_parkme+0x138/0x180 [ 1129.273683][ T37] ? schedule+0xc6/0x240 [ 1129.273706][ T37] kthread+0x2c7/0x370 [ 1129.273723][ T37] ? __cfi_watchdog+0x10/0x10 [ 1129.273745][ T37] ? __cfi_kthread+0x10/0x10 [ 1129.273762][ T37] ret_from_fork+0x64/0xa0 [ 1129.273806][ T37] ? __cfi_kthread+0x10/0x10 [ 1129.273824][ T37] ret_from_fork_asm+0x1a/0x30 [ 1129.273855][ T37] [ 1129.273863][ T37] Sending NMI from CPU 1 to CPUs 0: [ 1129.434711][ C0] NMI backtrace for cpu 0 [ 1129.434725][ C0] CPU: 0 UID: 0 PID: 24079 Comm: syz.7.19334 Not tainted 6.12.30-syzkaller-g8ea40f524391 #0 410f6785ff867c4c7f19ffe1872815da26232c9e [ 1129.434747][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1129.434762][ C0] RIP: 0010:stack_trace_consume_entry+0x0/0x2a0 [ 1129.434788][ C0] Code: 24 78 75 0e 48 8d 65 f0 5b 41 5e 5d c3 cc cc cc cc cc e8 c3 9f 11 04 0f 1f 00 b8 16 04 a0 5e 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 20 48 [ 1129.434802][ C0] RSP: 0018:ffffc900039bef60 EFLAGS: 00000257 [ 1129.434816][ C0] RAX: ffffffff817408ad RBX: ffffc900039bf020 RCX: 1ffff92000737d00 [ 1129.434828][ C0] RDX: ffffc900039bef01 RSI: ffffffff817408ad RDI: ffffc900039bf020 [ 1129.434858][ C0] RBP: ffffc900039beff0 R08: ffffc900039bef01 R09: 0000000000000000 [ 1129.434870][ C0] R10: 0000000000000000 R11: ffffffff81740900 R12: ffff888103679300 [ 1129.434882][ C0] R13: 1ffff92000737e18 R14: ffffffff81740900 R15: ffffc900039bef68 [ 1129.434895][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1129.434909][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1129.434921][ C0] CR2: 00005571fb820b90 CR3: 000000010b750000 CR4: 00000000003526b0 [ 1129.434935][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000002008 [ 1129.434946][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1129.434956][ C0] Call Trace: [ 1129.434961][ C0] [ 1129.434968][ C0] ? arch_stack_walk+0x12a/0x170 [ 1129.434992][ C0] ? stack_trace_save+0x9d/0xe0 [ 1129.435011][ C0] stack_trace_save+0x9d/0xe0 [ 1129.435030][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 1129.435049][ C0] ? stack_depot_save_flags+0x38/0x800 [ 1129.435071][ C0] ? __asan_memset+0x39/0x50 [ 1129.435089][ C0] save_stack+0xf8/0x1f0 [ 1129.435104][ C0] ? __reset_page_owner+0x450/0x450 [ 1129.435118][ C0] ? __kasan_check_read+0x15/0x20 [ 1129.435139][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 1129.435162][ C0] __reset_page_owner+0x79/0x450 [ 1129.435178][ C0] free_unref_folios+0xcb0/0x1570 [ 1129.435196][ C0] ? __cfi_free_unref_folios+0x10/0x10 [ 1129.435213][ C0] folios_put_refs+0x4c9/0x5c0 [ 1129.435231][ C0] ? __cfi_folios_put_refs+0x10/0x10 [ 1129.435247][ C0] ? folio_unlock+0x12f/0x1a0 [ 1129.435261][ C0] ? __cfi_workingset_update_node+0x10/0x10 [ 1129.435285][ C0] ? __cfi_folio_unlock+0x10/0x10 [ 1129.435301][ C0] __folio_batch_release+0xac/0x100 [ 1129.435317][ C0] truncate_inode_pages_range+0x352/0xb50 [ 1129.435337][ C0] ? __cfi_truncate_inode_pages_range+0x10/0x10 [ 1129.435358][ C0] ? __cfi_call_function_single_prep_ipi+0x10/0x10 [ 1129.435388][ C0] ? smp_call_function_many+0x50/0x50 [ 1129.435408][ C0] ? __cfi_invalidate_bh_lru+0x10/0x10 [ 1129.435431][ C0] ? __cfi_has_bh_in_lru+0x10/0x10 [ 1129.435454][ C0] truncate_inode_pages+0x28/0x40 [ 1129.435471][ C0] blkdev_flush_mapping+0x10e/0x290 [ 1129.435519][ C0] bdev_release+0x433/0x690 [ 1129.435543][ C0] ? __cfi_blkdev_release+0x10/0x10 [ 1129.435558][ C0] blkdev_release+0x19/0x30 [ 1129.435572][ C0] __fput+0x1fb/0xa00 [ 1129.435587][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1129.435605][ C0] ____fput+0x20/0x30 [ 1129.435619][ C0] task_work_run+0x1e3/0x250 [ 1129.435635][ C0] ? __cfi_task_work_run+0x10/0x10 [ 1129.435652][ C0] ? __kasan_check_write+0x18/0x20 [ 1129.435671][ C0] do_exit+0x9b4/0x2630 [ 1129.435687][ C0] ? __sched_text_start+0x10/0x10 [ 1129.435706][ C0] ? __cfi_do_exit+0x10/0x10 [ 1129.435722][ C0] ? __kasan_check_write+0x18/0x20 [ 1129.435740][ C0] ? _raw_spin_lock_irq+0x8d/0x120 [ 1129.435762][ C0] ? __kasan_check_read+0x15/0x20 [ 1129.435781][ C0] ? cgroup_update_frozen+0x160/0x990 [ 1129.435803][ C0] do_group_exit+0x22a/0x300 [ 1129.435820][ C0] ? cgroup_leave_frozen+0x16c/0x2b0 [ 1129.435842][ C0] get_signal+0x139d/0x14f0 [ 1129.435862][ C0] arch_do_signal_or_restart+0x96/0x720 [ 1129.435883][ C0] ? common_nsleep+0x93/0xb0 [ 1129.435904][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1129.435925][ C0] ? __se_sys_clock_nanosleep+0x300/0x390 [ 1129.435946][ C0] ? __kasan_check_read+0x15/0x20 [ 1129.435964][ C0] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 1129.435981][ C0] syscall_exit_to_user_mode+0x58/0xb0 [ 1129.436003][ C0] do_syscall_64+0x64/0xf0 [ 1129.436018][ C0] ? clear_bhb_loop+0x50/0xa0 [ 1129.436038][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1129.436057][ C0] RIP: 0033:0x7fa0fb7c11e5 [ 1129.436070][ C0] Code: Unable to access opcode bytes at 0x7fa0fb7c11bb. [ 1129.436079][ C0] RSP: 002b:00007fa0fc6c3f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1129.436094][ C0] RAX: fffffffffffffdfc RBX: 00007fa0fb9b5fa0 RCX: 00007fa0fb7c11e5 [ 1129.436107][ C0] RDX: 00007fa0fc6c3fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1129.436117][ C0] RBP: 00007fa0fb810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1129.436127][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1129.436136][ C0] R13: 0000000000000000 R14: 00007fa0fb9b5fa0 R15: 00007ffcb38416c8 [ 1129.436150][ C0] [ 1130.352888][T14376] bridge_slave_1: left allmulticast mode [ 1130.358552][T14376] bridge_slave_1: left promiscuous mode [ 1130.365329][T14376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.372799][T14376] bridge_slave_0: left allmulticast mode [ 1130.378551][T14376] bridge_slave_0: left promiscuous mode [ 1130.384252][T14376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.600083][T14376] veth1_macvtap: left promiscuous mode [ 1130.605610][T14376] veth0_vlan: left promiscuous mode [ 1131.646777][T14376] bridge_slave_1: left allmulticast mode [ 1131.652444][T14376] bridge_slave_1: left promiscuous mode [ 1131.658170][T14376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.665696][T14376] bridge_slave_0: left allmulticast mode [ 1131.671492][T14376] bridge_slave_0: left promiscuous mode [ 1131.677113][T14376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.684984][T14376] bridge_slave_1: left allmulticast mode [ 1131.690705][T14376] bridge_slave_1: left promiscuous mode [ 1131.696307][T14376] : port 2(bridge_slave_1) entered disabled state [ 1131.703786][T14376] bridge_slave_0: left allmulticast mode [ 1131.709438][T14376] bridge_slave_0: left promiscuous mode [ 1131.715177][T14376] : port 1(bridge_slave_0) entered disabled state [ 1132.041455][T14376] tipc: Left network mode [ 1132.106883][T14376] veth1_macvtap: left promiscuous mode [ 1132.112423][T14376] veth0_vlan: left promiscuous mode [ 1132.117997][T14376] veth1_macvtap: left promiscuous mode [ 1132.123510][T14376] veth0_vlan: left promiscuous mode