last executing test programs: 3m2.557200889s ago: executing program 1 (id=82): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2d01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x12) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 3m2.488796471s ago: executing program 1 (id=84): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x4e24, 0x101, @mcast1, 0x200a3c}, {0xa, 0xffde, 0xbffffffd, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0xffffffffffffffff, {[0x4, 0x4, 0xfffffffb, 0xfffffef9, 0x0, 0x0, 0xc2]}}, 0x5c) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 3m2.476972911s ago: executing program 1 (id=85): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000400)={0x40, 0x22, 0xd5, {0xd5, 0x6, "d26f0812822a575cd086e25bc144573a8f1f5d54037105f39d89c75f9983cd87c0f9a368d0f74a220130338e0454d4aa27bb9c5ede0f2b9b1f36c481cc2578680878bfe62aa8b7301158595b8ec97829b2b722d47a221a954ef8dc0f60d60fa9365f7c3df674be20e87551455d4a8973b64b91824b3960f256f987b0938e95dc8c0d3897475d4f04f509f7b317e185816a7a94ac4b3fb389fffdea4db71d79499ea37dcc8ebe11cf715b1eaf98c48c6a4ae00d1a0a6df66b9a794f7ad54f600ae8ea88407bddc783181b806c85a5ca5473edd4"}}, &(0x7f0000000500)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "73cde96b3e483b3ff7e6297e9180e38411bf6a468ffd9acac8c8d658e302a348d91e0b93caebc9d44349c05f4cb2033e90258f618c1cbe28eab5dc07bd813daab6be3a0573240dd10a5a8c0201bd57c487da2e57144a60eb1b09f51a1883996c9dfdc26962567a5996fc97bd22c6a06e27b3362ffd79688f7d695188cdcf743f53604654cf7066d1d66063c1207f0929d8932af4b10655879f9118acb23b464ea53203fb6a77f20cd99fbcbe3ed209177576e889da525ec9d2c19fa17f1a27729631cfa1b5538ce32af6210c465dd7da6ac0be629d392731d8f300ff0cd7f1968b41403fd61a08cd63611f0b5d9a28d0810344fff6ea02"}}, &(0x7f0000000180)={0x0, 0xf, 0x1b, {0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x2, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0xf, 0x0, 0x2, 0xf00, 0xffff}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x76, 0x8, 0xd, 0x7, "418a278a", "fefcbbd6"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0xc, 0x0, 0x8, 0x0, 0x9}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000380)={0x20, 0xf, 0xa, "3afe867cd3b3242c45c5"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0xc0, 0x20}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x3ff}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000780)={0x40, 0xb, 0x2, '7K'}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000800)={0x40, 0x13, 0x6, @random="9c2f61f225d3"}, &(0x7f0000000840)={0x40, 0x17, 0x6, @random="e35d915431f6"}, &(0x7f0000000880)={0x40, 0x19, 0x2, "0bdd"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x4}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f00000002c0)=""/123, &(0x7f0000000080)=0x7b) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000001400)=[@release], 0x0, 0x0, 0x0}) 3m1.081685358s ago: executing program 1 (id=103): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket(0xa, 0x3, 0x87) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000300)={@loopback, 0x1d, r4}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = socket(0xa, 0x3, 0xff) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x47df, @local, 0xb3e}, 0x1c) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) r10 = dup(r6) r11 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r12}}], [], 0x6b}}) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000202, r12, &(0x7f00000000c0)='./file0\x00') getsockopt$netlink(r1, 0x10e, 0x2, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000240)=[{&(0x7f00000020c0)="bbf73d0c1e2044a11659f21eff48036983349dc43874210e104912bffb8f598101112dcc8dcf8700a489490d63834f650565c06a604a6ee660b0b214d783319103131be66a34144db07a78eaaa009fefbb2509", 0x53}], 0x1) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000640)={0xc, 0x0, &(0x7f0000000040)=[@decrefs={0x400c6314, 0x1}, @exit_looper], 0x0, 0x0, 0x0}) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) 3m0.939067581s ago: executing program 1 (id=106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) mount$binderfs(0x0, &(0x7f0000000300)='./binderfs\x00', 0x0, 0x84000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m0.767214864s ago: executing program 1 (id=109): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioprio_set$pid(0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv2(r1, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0x67}], 0x1, 0x5, 0x101, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000640)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000600)="c1130389", 0x4}], 0x2) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x13, 0x0, &(0x7f0000000580)="32a38f58982ed597c3f59d7a0ac78a4901fe17"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') (async) preadv2(r1, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0x67}], 0x1, 0x5, 0x101, 0x1) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) socket$netlink(0x10, 0x3, 0x6) (async) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000640)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000600)="c1130389", 0x4}], 0x2) (async) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x13, 0x0, &(0x7f0000000580)="32a38f58982ed597c3f59d7a0ac78a4901fe17"}) (async) 3m0.696518626s ago: executing program 32 (id=109): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioprio_set$pid(0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv2(r1, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0x67}], 0x1, 0x5, 0x101, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000640)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000600)="c1130389", 0x4}], 0x2) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x13, 0x0, &(0x7f0000000580)="32a38f58982ed597c3f59d7a0ac78a4901fe17"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') (async) preadv2(r1, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0x67}], 0x1, 0x5, 0x101, 0x1) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) socket$netlink(0x10, 0x3, 0x6) (async) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000640)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000600)="c1130389", 0x4}], 0x2) (async) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x13, 0x0, &(0x7f0000000580)="32a38f58982ed597c3f59d7a0ac78a4901fe17"}) (async) 1m47.474774054s ago: executing program 3 (id=1541): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) (async) fcntl$getflags(r4, 0x207) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000840)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r10}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="38b7c4cc49e8324113e0c15b81d7daf9"]}]}, 0x38}], 0x1}, 0xcc000) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r11, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r11, 0x4038ae7a, &(0x7f0000000180)={0xfffffffc, 0x90e, &(0x7f00000012c0)="62d6394533551e384143a49ef6c6523fe40a62eb9513de91b6dff52362e66326af99175390b0d073bbc88e4e5400f6cfd9e948b4d125ecb9e13b290b24f257c8439ffa2eabe9535067810d918fd2b7ed06015e47ab471983fefba1fbdfe27558be5bc8119d1de816a39d5424e5657417a482d1a6cb94113476910c482d04644f8781c72f65969ae21448242bffcb84be0abaab76ea848a2608e37f116f23ee4148a46c3cac2e11279c24dba5da8d33c20fa29e424bf9d7631bdcb0d33e74bac054fc62d9cfbb7ac2cc2322fb6ac4b5014cfd38938adc6fe7d6ba95222e162b035b6d5d180adc38da2460a11f2a26c30983bd268d13d90df71408411ef143b8297b42e25baecba570a0d825a22fabeb3e9a18a00f0b055d9d596fdf8a3ac4496e36a879ce6d8955b9c16a43db4d9bc32d96dd0565ebe4ee85e3d3b9751f597b79c103b445c99d96665c99547844a77fbe0b6e65cfa097d641e1815aeb4f6c5e4032d2bbded5504cac5b39f3e7a32ffb9639d428d97d3de2cafe07aa69a328f2b7619c04c1af2791420b2499f514d34bde62476d45416a2a32990853572efdb354f1147d59abcb5586bd0dc8ce9e4d4d7a66448f52f6f953296a6bc9e7eda0250b00479e74166e63b17a76b3c99b0166f029a4f379c4f4187f835f045ed7718ae303369483c4c47793ebe8657c823f1adccd81e68d838b3fdce9230875058bb7bd9221f7d06e8cbcf4a2f2185dcd512b00a763bfc4f3f930da16917c1508e9ff7f5faade76f2b57dd2b48f5bfb4578ad75db6038976cf23aa3a005fce647b01be17f3217736d1427589118097ca97d4ffe6ec986fa312ebbd7f476a992f87470e19545b49925bfd01784861f50b2a1ac424b95bd51f2b3e1038b505c56ce0756aa305027b9894eb19e928c55fe6999f7cba0aa50d6e79ce1727d3430bde76b9b8e7d5c75192f95ba92b4a69ae329e6eaba554f5b29a0c44e53815e08a8b014a50bd62f562d6fde10f7c6bf8faf4d61b8c98ed1ee690827a2da4387bfe1cd0051ee71f1d4590f5fd72dc8a88b03295c2f959eafad7f074eeb80766bfad5a0708163803abd93bc94b3dc01c5c9e302384dc660316442c945f0d7d052c657d1871280fc0a3c8f7f6dbbfcfd398ce6dabeeb4b7d973e6852619d538d4ab28a11717c09e238794273a5cc5f034125260d0ab99e9fa6bf2a4d7a0c3b61d337fbc061a6cb40502534c5d79e5bb01a18d93ee3b30bfa3654bf9f835c298663105915fb10e3eac4642bda476da36dcf2ba9f19134ec8835b6139d78d394714b027558e513b9ce54ef1a737d033d0cd1ac7564662aa7fce32c16b105d69b130f92e95087261d8c102e3179ed71a98c7546acd7ababdfe0fe08d36b52a90efe702832d73f18196593939e919a6aadfedc7cd3b518deb336df3716c33a9170361bffb900ddb021a91b08584b5dd5a88d3f399922edebe8a7108db38d10bd1d48caacb68428444e0efea57ab12df76a4e841b625938773c25f083018498ed3f5c0197645864a1ee82121a022dcaf5883cf2c735ca2b4d4a8ac9c6fccdb381b6820cb72ab2c4c84cc097762eb7096eae2e7931044deb624e2fff15182ef6b1b5ed2c3020c33d6312b6d8ac47751d5511b9e25e56d2c371ec44225cd11d14ea0da869b5725a0d73b41f9fa92327c5d065ad7bc8abf2a7e38182554e20482f54f8b3b664a4e9d548c0ecb17d52d6811d5b21325f448afcc972b3496220e55af0fdfae9cb14b32d56db3008b792211cf03b9b546f92ccce0ab8c3b6697a3b720de8e12f9a633f50a65c10abf866ab7dcc4617d0fe299feb9705710544a91d99b0560796e8eaadc8f9c117fd3dfc929d0784ddd779fa183cf2d320fd68aea254073af10e66e862aa27e92df94993605bc6b5e8e705c1c088f93f9d30922251184a6cf436c767a64c8fcd84475d8290808f827b4bf0b963008b287d24da4073a7e13f00f5d1038c5f6c5e596b8f9586e9f3aeee7a130adeae89e0aaf441ffa91271e25b6b6d70c74ecc5425bd64cf76ea73ee4fcd90c27d14ac135adfcaf69d34003138e576880d997323d2a78a14f7e78a0512cc8fa2889de143f741701cd533aaa3bf328b75409be0b43717753c6852fe5ecc2593bda6e71ade10e61b550bf5b162869ecac777e087d90db2d1dcf73eb019b98ea4feca69f8a3403cc2a96c8219df55a9b94eb0c60824169f36bd978e433dcc4d42c09558a7dabf20d1a94f3bac06f5060a513931565866b39bf9480d0106176ee11b00415e5dc8650f0ccef2ccfdd1e7a0059e71a9a35ba688dd7f26c1d8ac2ed0e955913436dd12faea924d9ed74d280274e2a74e9926239e8b6e6a1230c31c572a3b049b914fdc6d132e73294fb086de6b6e809d0bf3c5f76fc99f9badd522a1379c1598571debb93182f8a1f6fa06f8438745606caad10d81000ce22fab69e9c4746fe8a223e8bfb80ba89d783142ec53e0ebb0971ca489e6392b4463861d895d38b28724d693e893505260a6c88298edca199b397eb909431adb5a5fdd4f4abc6f5b620a2e5cd31a0c4c3664d01e338ed4132ae454bd8f982a89dd3b12b5ee444b7a39bb6e78c01c18878b3d279862f6eeec33d7e277b3f3c64076485b6498d72044ea1a0fd02dd66b55f5e336b1d1216ba79e6e09c1cbbb8a9a38e4cdd01040f036771aa89f50a676307dc86e94187db24f524c341b0f8d889ad27bafc7221bb0d47b6e968fd141df76a4043e2904bad562edc98b9870ce6ff5291137b5479ff468c03b3b85e74888140b8fe49c8a47832be21d9e7a6e49b2127b1c42eac05b43136dde9085118029e24be3257c6c7623e0ce410eb27e46a2fe578bf3444ccb0169cb5a8b5da333f9aa0ea0cff38e50ac0506ace23b625f7dc441af7459451501762df61948b0a7771b0d934453d75756e37e34b1b971ca029651483060c1bb2bb5562126c5d964ccd52d9c6d9d2a2fe02c2e70d3e3b5286e16e65863ba5508dd08cb44befdccbee977a2fde6252c10b7a81df7cce0ad25151c6faf72dbb09c8b644bdeabcb6b373da37a8e8e861fc107f95a8dbadf5de735b96e4a16b155aed55929126c06c55ec834a1c782b9195c4c062de1223288194ee17dbc72204505fb34c0b62e9ba53ec03cf2fbf8d7bae5109d0c1be2c462676f49ecb7beb486e0d8b862c02f9964009750e9c845455fa20391ac94012e117fea3b120fff7da7a87abf711d1e7bc6acb9cb4e0711d1b0bb4c9f74bf1f83cd6dd29458e3c2702a2b65455c23989b6de5571eba3cb66d9ccd5a62e2d8c726c9b1b4594ab9fc2e184bc73e86a21d71717c739f0f828b1db3a1a6dc4c73c5afac13901039b3baf7fb63e167500503bb77067bcfbdaedafba72022794249fec840e69a44d67f4c30e19c6b19b24c54a0fbb9714c803fcda56984afb5489f9c3a6496c11bde8c437ccb6a3b40b4c9067afc766fc1f795e278a7439a09310c8a1ffa8b9f3f7dfc2b1b9039a037203cb25009f46f44c5b36d4441b1ac9aa3c978fa562fd9f920bfcb0918ab1b87b8b5bb326ad997ed125b4cd632382f2b0497dc3e26ed9b69cc999068600f777e004323d270f1f68f40503903377d0b6788fdb68e4936a1e3dd85bc5871a4240cdab04407cb5582de243d7f4db8ae564862fb9e06e51ff7d33bfd2676c8dfe0c841735dd8a7f393003d703669a43b2c958094549bb7137bca2a02c7d7e9b50a7237d8d069e3a5bd9eb009a64948a869e7143340661bf4cabc7e32082011a9974f6f5c91ae6fb802a7d71bd32488377fea4e6305c56bfd50c395b19f8e61953a06d76f65759f306beeb84c2a6eacab966ab087acbba26b8d56195a4f3880854b664def0956dee302413c6321582b47e1be2fed1d5f751e10def3388e1ee0cd15f7784e95e33294d25388ae46eaca1fa576157295181a9f930537280ca1840791593e719da19dee213c304f53a9c4ad16a4602376abecbfd2734cb2717e0933b1cb1eb7985bcd0a7293ded65d773e82423028bc75a76e3b9f6f96e2f1052d9066b909929403077d70e19c80428519cb718d5c42a16e58922fa50f3ceddd111efb9eb29e101b4771dfcad13cd4789236547f31575b9dd6b5391581737ad174adedc50baccfad4b731385f8359fa4ed6c0b7a2736825b5f24124d60d449eb704f76058c6bd47742de9c5f4620cf5230077187799d1f11892f41a5a1724325d28d13e76fb44323c21d3a4a05f455f758a3ff8eaf4bb74a3d7827d9c1899403f49761930a838e1818e76b911dc1def7a28f825e971488fa79f3afb1dfcc2b125506605a3f1cec918f89608a9a19a0b4e41f10c365c891972d3c2e9f385c6ae3e265e536e012737fa05b039826b9f6b230b5cd549596b1ee8aa6049253aadf7623590afbe5e3efe0810628b1cae2b8233e5dbc6b50e5d1baf0a2e73d7a2ce9a395904a72d18015125f4f226ff64940245b1c86839b682d5a51e955bc4f8d95461cb7422e2f765e27f359935d5201c1327fcbf64fc0a9b2b4cd42464f831fab6884cd344ced840f2a4ff2244fbd973dee279de5f69ae1078c8bbea9c7620df8b8073a79a95f4a0602b646cdf1ae48bb8bcd3c75271aaf1b5f188cdab97d0d1467a1f0f36eea41fa27033f20fff594ae1d3a7482aff61049f91668ab0043bd4f3f8ddd965acdfd8a272be5e168fd093ad7bdeb7010e1ecd88ffc1ce07ae5ea51213930865eb26f1e6f7b307e6a035ab5962bc4231424fd71e99eb139f7d1b4d7d77f45ad46a32b7ae3835df98c419994aa96c8d0206d7bfb0980140b5fd9d7843d2bd0b7fadced876fa911df188ccdd6ad50ab34aa95472c01d132c26e2167c849570de8a43b33c4fa65c47c3392ad04d3c85fe76beba51ecc6292c829404406efc3e68400e255acba323d24e2d0c5a5c534f55a918f8ff368bc7e98338baa754f0c223b9794abfd4ffd6a887a0437858aee5cb9ab00bbe8ddb8f05c4f6528193039bb0280d4e95d66d22c12d2ee1db101d3ad6b1aa56d9d5a4b158c81d33e801f6db17a0e1bcb888cd7b3c8f12012108046ff640ff7ec0e14576c8b83da402f0d64d0d3dfc525109aac3667e56e3be2aac438bf35aa6aba5ce7a3093ff4975daa2d8d572e98b2168ad1094357b8afac7a6702a3455b2b25f4d7330ed9586cabe9b0f6220f3c5a0c8a93e09fa6797a8b695d3c931dc26e85b4abd7b11874f6b1b91335e215bc08c6cc5dd5cae828181af8ff25627d3aec224fa06957cfdd7223272dd25acd4eda859fd38b43930cf968444d7f51d4e5b40f9c5c197b9e0eb9683a557e672b12a5a152b7dfed8e7dccced06c92a6d600c1054f385227d808997da242318ae9225ee2db364b4eaf50265a99fb2f0bc329879e2aa9187b95f29a8535ce08f9589fb597ec4d6f644918112ca7bc52a715f02258134a807b2bff18cb18bac0a8c359feefc55a245e39cb96cbfd49daf8ee8fe084292787efe4f283a2839bb7a7a977a491bd9b08a2ffd3a2b5981eb03c4e3ee1ab2cf37c0a861507ee3a57fd5d7142e65350d9b99b0ce3934369d5200704fc15e909a7735b8491cb9bc59ae39a468ce1dd01e42942b4722a8ddd7d364a07132ef2657d96cc9c9d00ef993ead6b05a9b4d0a5ac9af59869721cb9f0fdf2c7484ae305b4deeb1d6a9137941404792ec26d23b9ae3c32076ce566b9e68a28fd723ea673847a4d0ff5451626dd5536e10ac4bc6b13b586b9850c6d4501299c768f402b456dff758ef456151e7f8030ed18d541d168cdfa4b5b975fb92b289989e893", &(0x7f0000000100), 0x1000}) (async) r12 = open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) sendfile(r12, r12, 0x0, 0x523) (async) ioctl$USBDEVFS_SUBMITURB(r12, 0x8038550a, &(0x7f0000000640)=@urb_type_iso={0x0, {0xa}, 0x7fe00, 0x84, &(0x7f0000000480)="2ea3df0b3c3fbceec674d8f180e750941177d640b62383ae85a8ff2385841be049e12194f5f468325b08839caf986db090cba02e995db0c95f0ad8b4adb0ecb66db408083f02ab0bd8f2482433a32a9fe4ceb1f138ac132eec1ed103e54a99e1cde7fa2aa3a8b856c503a937a24cac65f534491e527d8aab77ce462661183d5419b5fa488af80fcb76a26b859ea128ed267694f2e3fa87b6b79fa257ab63478366cd844012a4c8a0c1eeccdc1ad99fbd456c1adf184ae8681dba2b61ce01dfe68af15e406328b4b5f1a574fff844c7335fae73a192b8", 0xd6, 0x4, 0x4, 0x38, 0x1, 0x69740466, &(0x7f0000000580)="bc4a2e5e670d0cffdaf61e2364bea68dd825be3f6ba23a54ab9731adcc595c27c3957452e01713924e94aa1cdd983551e6eeb08df176e6d7efe238caff09eff421c07fc39d8eb56071e06de9b56e61f3f846e678d567463b47573cfe0c60851031c3f92f32cd8d03f57b22a84359c14e712701b2fce6c6ff04a3e9ce751fd42e7933a2554ea79cde57875e60b74f7431e1c20df35b2ba485f9a12d6a7b3951128e0ce65f33db3af7489ff87246b4243d406c430c35ff7afd", [{0x2a0a, 0x3, 0x4}, {0xc, 0x7, 0xc}, {0x2, 0xa2}, {0x7, 0x1000, 0x101}, {0x800, 0x4, 0x7fff}, {0xeb29, 0x9e, 0x5}, {0xb, 0x6de9, 0x1b3}, {0x7ff, 0x7, 0x7}, {0x7, 0x5, 0x7}, {0x3, 0x6, 0xa2}, {0x8, 0x2}, {0xcf5, 0xd, 0x5}, {0x1, 0x4, 0x8e8}, {0x7fff, 0x400, 0x6}, {0x9, 0x9, 0x2}, {0x7f, 0x9, 0x1}, {0x0, 0x7, 0x7}, {0xaef, 0x7f, 0xb}, {0x400000, 0x2, 0x1}, {0xffffffff, 0x0, 0x8}, {0x0, 0xf, 0x101}, {0x1e8e, 0x54bbf7e2, 0x5}, {0x1000, 0x575f, 0x8b}, {0x7, 0x4, 0x5}, {0x10, 0x28, 0x8}, {0x5, 0x0, 0x1}, {0x40, 0x3}, {0x6b9341f7, 0xffff, 0x2}, {0xb60, 0xb, 0xc45}, {0x7, 0x80000001, 0xc032}, {0x3, 0x10, 0x7}, {0xfffeffff, 0x622b, 0x9}, {0x9, 0x3, 0x7daf}, {0x3, 0xa216, 0xa5}, {0x91f, 0x8, 0x6}, {0x0, 0xfff}, {0x2, 0x8, 0x7}, {0x72, 0xb, 0x5}, {0x0, 0xeeb, 0x5}, {0x7, 0x9, 0xfff}, {0x1, 0xe39, 0x5}, {0xffffff01, 0x8001, 0xb}, {0x6, 0x10, 0x2}, {0xd, 0x6, 0x7}, {0x2a1d8730, 0x1, 0x19}, {0x8, 0x3, 0x7}, {0x8000, 0x1, 0x80}, {0x7, 0xb8b, 0x4}, {0xfa00, 0x40, 0x9}, {0xe, 0x81, 0x2}, {0x7, 0x1, 0x3f5f}, {0x24, 0x400ac7, 0x4}, {0x9, 0x7fffffff, 0x970}, {0x7, 0x8, 0x3}, {0xa, 0x4, 0xfffffff8}, {0x7, 0x20000000, 0x6ca}]}) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x17, 0x4, "e78ebfee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000001c0)={0x2, 0x0, @ioapic={0xd000, 0x8, 0x8, 0x0, 0x0, [{0xe, 0xff, 0x2, '\x00', 0xc}, {0x7, 0x92, 0xf8, '\x00', 0xd}, {0x8, 0x3, 0x2, '\x00', 0x3}, {0xc, 0x72, 0x39, '\x00', 0x6}, {0x3, 0x81, 0x8, '\x00', 0x5e}, {0x6, 0x1, 0x6, '\x00', 0x5}, {0xff, 0x9, 0x9, '\x00', 0x5}, {0x67, 0x8e, 0x3, '\x00', 0xf2}, {0xe7, 0xff, 0x7, '\x00', 0x2}, {0x9a, 0x9, 0x0, '\x00', 0x5}, {0x8, 0x6, 0xf1, '\x00', 0xdc}, {0x5, 0x3, 0xa0, '\x00', 0x1}, {0x1, 0x4, 0x3, '\x00', 0x5}, {0x4, 0xbe, 0x2, '\x00', 0x10}, {0x0, 0x81, 0x7, '\x00', 0xff}, {0x7, 0x80, 0x6, '\x00', 0x3}, {0x0, 0x8, 0x2, '\x00', 0x8}, {0xa3, 0x5, 0x4, '\x00', 0x3}, {0xd5, 0x5, 0x3, '\x00', 0x6}, {0x30, 0x8f, 0x5, '\x00', 0xe}, {0xff, 0x6, 0xe0, '\x00', 0x40}, {0x4, 0x80, 0x24, '\x00', 0x1}, {0xf8, 0x72, 0x9, '\x00', 0xf4}, {0x4, 0x1b, 0xe0, '\x00', 0x4}]}}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x802) close_range(r0, 0xffffffffffffffff, 0x0) 1m46.984744333s ago: executing program 3 (id=1548): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) unshare(0x4000100) (async) r1 = getpid() (async) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x2d, &(0x7f0000000080)={0x0, 0x10, 0x2}) (async) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r3, &(0x7f0000000740)=""/377, 0x179) (async) r4 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x70, 0x0, &(0x7f0000000640)=[@release={0x40046306, 0x1}, @free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x10, 0x2e}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x14}}, 0x0}, 0x400}, @dead_binder_done, @register_looper], 0x51, 0x0, &(0x7f0000000980)="1d597002c52f656f7527abe01eec1920a6a2fae7958f3ab1072aa2bb1593bd90951979f0078e74bf553b055163ef78a314a007aad5762fe8392ee7c3806cc6deeee06171dc997de54169f1b9bbf3ea191f"}) 1m46.13202195s ago: executing program 3 (id=1560): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 32) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (rerun: 32) r1 = memfd_create(&(0x7f0000000580)='}\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00b\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\xd7{\x01vR\x01\x80\x00\x00\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\x00\x00\x00\x00\x10\xfaK\x1f\x96l\v\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13t\xafNx\xc0$\x85\x9f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x94vz\xe1\x84\x99%\xa8\xbc\x18\xb2\xcd\"\x10\xd6\x84\xd0\xf1\x1bWE\x9e\x1d\xaf\v\x95\x80\x86\xaa\x82\x12}\xa1H\xd4e\x9et\'\\\xfa\x81J3N\xaa\xb0]\xb2\xb1\xd3\x14\x82\x875\xd0\xa9\x03\xc8\xb1\xf6\x1d\xf4\x8b\xbd\xbd-\xf9R4\xc4\xc5\x89(\x97\xd8\xd3\xb8-&p\xca\xc6\t\x8f=h\xe2\xdf\x9d\xf5\xb4(\x87\xf2\xa5X\x9f\x92\x06o\x10/\x0f~\xa9Q\xd9\xfd\xcaw\x17db\xfcD\xa0D\x85\x9d!\"/;\x13\xf3\x19\x9d\xe2\x9b\x9b4\xb4jt\xb7\x00'/618, 0x2) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xb0002012}) (rerun: 32) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) (async, rerun: 64) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x8000}) (rerun: 64) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000140)=0x1) (async, rerun: 64) open$dir(0x0, 0x20080, 0x10) (async, rerun: 64) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x51d, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x1000, 0x71, 0x7, 0x7, 0x1, 0x7, 0x0, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x5, 0x6, 0xb, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0xe, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x316, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x400, 0x9, 0x8, 0x0, 0x6, 0x7, 0x8000, 0x0, 0xfe000000, 0xffff, 0x2, 0x7f, 0x5, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x142, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x8, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x401, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0xd, 0x4, 0x6d01, 0x5, 0x9, 0x800000, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x3, 0x4, 0x1c, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x0, 0xa, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x148, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x7, 0xfffff000, 0xffff, 0x3, 0x7e, 0x20100, 0x9602, 0x7, 0x8000002, 0x4, 0x6, 0x1, 0x50080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x8000, 0x4, 0x5, 0xb1e, 0x9, 0x200, 0xffff3441, 0x7]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m46.078627912s ago: executing program 3 (id=1561): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x94, 0x10}, 0x18) mkdirat(r1, &(0x7f0000000640)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x802c, &(0x7f0000000180)={[{@xattr}]}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000200)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe67000) fadvise64(r0, 0x7, 0xf9c, 0x5) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) clock_gettime(0x6, 0x0) 1m46.077856431s ago: executing program 3 (id=1562): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x40000, 0x0, 0x0) recvmmsg(r2, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x4}, 0x5e}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffff22cb}], 0x4, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe00004a59ac3fab5a3b30692619d523a7eb0167d4f100fd8bcb"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}]}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'vxcan1\x00', @random="e7e091272d59"}) r6 = timerfd_create(0x8, 0x0) timerfd_settime(r6, 0x1, &(0x7f00000020c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[{0x18, 0x1, 0x1, 'b'}], 0x18}}], 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m46.026888372s ago: executing program 3 (id=1566): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) (async) r6 = socket(0x10, 0x2, 0x0) dup2(r6, r5) (async) write$FUSE_DIRENTPLUS(r5, 0x0, 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '#-\xb1@\'['}}]}}) (async) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000085e049d2000000000000109022400010000800f0904000004030000000921faff0901220700090581030002c904003881608c47107d1f770f9703b190faed5f29fa1c460848b316a9ea0989a090445616f66fe9ffc07ab48edb5dba3d67887c22eec74e76154e46f74f70e90c6e2fa66c7d0587889ca7d19011000000000000000000000000002df54a5fd84e"], 0x0) memfd_secret(0x0) (async) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_4={0x3, 0x1, 0x6, "0082714e"}]}}, 0x0}, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x4, @loopback, 0x8}, 0x1c) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000001fc0)=[{}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0xfffb, 0x10, 0x6dc6, 0xd510, 0xf}}) r9 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r9, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="daffc3fa80002cd21721a4af36a4a2ab00000000000000025a91f64b007f0c6a680f6c787f76d51f", 0x2a}], 0x1}, 0x4b00) (async) ioctl$TCFLSH(r1, 0x400455c8, 0x0) (async) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) (async) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) process_madvise(r11, 0x0, 0x0, 0x15, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m31.031560604s ago: executing program 33 (id=1566): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) (async) r6 = socket(0x10, 0x2, 0x0) dup2(r6, r5) (async) write$FUSE_DIRENTPLUS(r5, 0x0, 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '#-\xb1@\'['}}]}}) (async) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000085e049d2000000000000109022400010000800f0904000004030000000921faff0901220700090581030002c904003881608c47107d1f770f9703b190faed5f29fa1c460848b316a9ea0989a090445616f66fe9ffc07ab48edb5dba3d67887c22eec74e76154e46f74f70e90c6e2fa66c7d0587889ca7d19011000000000000000000000000002df54a5fd84e"], 0x0) memfd_secret(0x0) (async) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_4={0x3, 0x1, 0x6, "0082714e"}]}}, 0x0}, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x4, @loopback, 0x8}, 0x1c) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000001fc0)=[{}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0xfffb, 0x10, 0x6dc6, 0xd510, 0xf}}) r9 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r9, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="daffc3fa80002cd21721a4af36a4a2ab00000000000000025a91f64b007f0c6a680f6c787f76d51f", 0x2a}], 0x1}, 0x4b00) (async) ioctl$TCFLSH(r1, 0x400455c8, 0x0) (async) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) (async) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) process_madvise(r11, 0x0, 0x0, 0x15, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m30.518857164s ago: executing program 5 (id=1718): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001ac0)=""/4084, 0xff4, 0x2df) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r2, 0x400, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) syz_open_dev$MSR(&(0x7f0000000100), 0xf3a5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=@newsa={0x158, 0x10, 0x633, 0x200, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@loopback, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x33}, {@in6=@mcast1, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x1fe, 0x0, 0x2, 0x2dcd, 0x8, 0x0, 0x400000, 0x8000}, {}, {0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd25, 0x70bd29, 0x70bd2d, 0x70bd26, 0x10, [0x7ff]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048040) inotify_init() r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet(r5, &(0x7f0000000a40)={0x2, 0x4e24, @local}, 0x10) fcntl$setlease(r3, 0x400, 0x2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0x40187013, 0x0) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) write(r6, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 1m30.393050007s ago: executing program 5 (id=1720): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x2000) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x448, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x434, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x2b}, {0x4}, {0x4}, {0xc}, {0x5, 0x8, {0x1}}}}, @m_ipt={0x404, 0x9, 0x0, 0x0, {{0x8}, {0x2e8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x125, 0x6, {0x8, 'security\x00', 0x10, 0x0, "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"}}, @TCA_IPT_TARG={0x17f, 0x6, {0x2000, 'mangle\x00', 0x0, 0x5, "e3a1aab3ec4f20b89bacf892280348de1ccb3ed9ab23e68fcd8a75698d6c1c7a9a5f07f61792dfd5c63c61c65f15abfc42547e1fcda33a0f49b8b354df15be94e464276ebd69fc270c7d8aaded60c06ea4a15357904f5383aea8684d76b64598ca8cc41999f871826bd4381c49c0274c0f3a504204c84e33714ab83a4ab77b75bcda16cf91e84a914f637940d38322271c6a1d2bc848abb563504cfaa289beb12a89e85edded3a3b5d7c801166fc427f155c4f542cafdf4eb6fb5c1e4bbfc3548e75395932727aef4cbf93e4b29d0aa9f0b351e8c0492823181457b312d80c1fcf585c49bd48d00ec6a81db42d87ded10dcb5afe226daed6733457f374092f83d5465e501431e7b781c35249165189a035a1df732c99e4846b8144c98ab2569c903a3d3b0b85b94845e3b86aa7269086ee6054ee93ca5a1ed7f9a497ed2ae64f87f2d574c28c58ea8f545ab4af0000000000000000"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xf5, 0x6, "a55e2efce40f6bab37f04b0caa51b6227acccbc8b6cd6ea0d2a050a52cae348912c9207ee57e8b5179dc20b7d353bf46e7a4641ed1a1391abd5ac5b4c6c28408dfedfa02fa1a9a7d0949f4ddb0f8e68235606e324dfdd5e671519129362a83445ab28010d25e7b978625a6b46839558e7e7a742d4b13aff412bb50a5a1247af7fe64c92f2aaa5f85fe5b6874cf23f3e93037bb2753a871b84b49c3e9885011d8b2a1bf0a2ea3ec616dfc7c8b6faa589c2a514ac6d52c977bebb3065d1eb8dc139ba04a72da28493d3a1ba60704f04381c5ec6b032b4ecbb1d523d1b63ccd8e5051325c5e7d32265bd45d7e94bee3998dc2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x80c1}, 0x9080) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) creat(&(0x7f0000000000)='./file1\x00', 0x12) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001440)=""/126, 0x7e, 0x41) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x84, @local, 0x4}, {0xa, 0x0, 0x3, @mcast1}, 0x0, {[0x2, 0x8, 0xa, 0x0, 0x0, 0x0, 0x7ff, 0x4]}}, 0x5c) ioctl$SIOCGETSGCNT(r9, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r10) syz_usb_disconnect(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000200)='environ\x00') close_range(r4, 0xffffffffffffffff, 0x0) 1m28.972526155s ago: executing program 5 (id=1745): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sched_setscheduler(0x0, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0xe0586f4}}, {@version_u}]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0xf, 0xcbff, 0x0, {0x5, 0x5, 0x3, 0x6c, 0x7, 0x6, 0x1, 0x6, 0x101, 0x4000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statfs(&(0x7f00000000c0)='./file0/file0\x00', 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r5, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x74, r5, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @private0, 0x9}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)={0x200, r5, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa826}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x81, 0x3, "7f58e0a0058f5644b1ecc9484bc457e850a1a2a83c228abc0a6f480cd5f3feae8e0d2fa323dfafbc929573244e5aabe5ce93a4f13d6f510b63328861870c17456c9a47fed668c50388e31508fcc48d2c70d98349452068c8c966c1ed400e68cf113e59de3f7351ac5493c2c72a909e28e83963f3df468a3b685a83c618"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6245b4f0}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4ac5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x18, 0x3, "c60e7610887bc07ed6ea61249ff672bed6493098"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff9}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x40800}, 0x40080) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r8, 0x0) ioctl$MON_IOCT_RING_SIZE(r8, 0x9204, 0xe83ff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, @dev, @dev, 0x80, 0x0, 0x1, 0x2}}) sendfile(r0, r0, 0x0, 0x1000007fd) 1m28.094314092s ago: executing program 5 (id=1762): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) (async) write(r0, &(0x7f0000001400)="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", 0x1017) 1m27.904379595s ago: executing program 5 (id=1765): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0x1d, 0x4, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000200)={0x0, 0xcd6f, 0x1, 0x1, 0xc3}, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) shutdown(r1, 0x1) pause() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c504}, 0x0) r2 = userfaultfd(0x801) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) setns(r5, 0x2000000) mmap$usbmon(&(0x7f0000149000/0x1000)=nil, 0x1000, 0x2000000, 0x110, r5, 0x5) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000847000/0x1000)=nil, 0x1000}}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) fcntl$setflags(r5, 0x2, 0x1) write$uinput_user_dev(r6, 0x0, 0x0) socket(0x3, 0x3, 0x88) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) 1m27.018326273s ago: executing program 5 (id=1794): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1a, 0x800, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000100)={0x0, 0x6, 0x1}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) getpid() openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89101) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000280)=ANY=[@ANYBLOB="2a01000020000040b7080000000000000301090292000324010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff09240300"/73, @ANYRES8=r4, @ANYRES32=r2], 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='}.\x00') 1m11.968247136s ago: executing program 34 (id=1794): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1a, 0x800, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000100)={0x0, 0x6, 0x1}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) getpid() openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89101) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000280)=ANY=[@ANYBLOB="2a01000020000040b7080000000000000301090292000324010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff09240300"/73, @ANYRES8=r4, @ANYRES32=r2], 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='}.\x00') 43.300051616s ago: executing program 6 (id=2289): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010020, 0x0) sendmmsg$unix(r1, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r0, 0xacd55000) cachestat(r0, 0x0, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x2, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r3, 0x8, 0x70bd37, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x67}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22e}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 43.195225208s ago: executing program 6 (id=2290): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x8000000000000001}]) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x7, 0x80000006, 0x30, @empty, @empty, 0x8, 0x7, 0x0, 0xc}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) personality(0x5400004) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$TIOCSISO7816(r4, 0xc0285443, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) setgid(0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e20, @remote}, {0x6, @multicast}, 0x38, {0x2, 0xe25, @broadcast}, 'veth1_to_hsr\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x1, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x4) timer_delete(r8) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) r10 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f0000000040)={0x1, r10}) ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f0000000180)={0x1}) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "7c326c205268c4db", "62fed4212d235db48b23fd7d596e1507e44d33b6add8bf15e03224e2a453b39a", "8c8ce3ac", "cdaf8c2391f27854"}, 0x38) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/129, 0x81}, {0x0}, {&(0x7f0000000280)=""/81, 0x51}], 0x3, 0xffffffff, 0x8, 0xd) 42.358959454s ago: executing program 6 (id=2298): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2c8102, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0x800000, &(0x7f0000000180)='check=relaxed') r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r4, 0xa}) close_range(r0, 0xffffffffffffffff, 0x0) 42.343009414s ago: executing program 6 (id=2299): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') write$cgroup_subtree(r2, &(0x7f0000000600)=ANY=[@ANYBLOB='+cpu'], 0x5) mount(&(0x7f0000000000)=@filename='./file1\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='exfat\x00', 0x12e1440, 0x0) 42.268406396s ago: executing program 6 (id=2300): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000780)=""/154, 0x9a}, {&(0x7f0000000600)=""/159, 0x9f}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x810}], 0x7, 0x40000100, 0x0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 42.147294528s ago: executing program 6 (id=2301): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f00005ba000/0x14000)=nil, 0x14000, 0x1000002, 0x100010, r0, 0x4480c000) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x5, 0x4}) (async) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x5, 0x4}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$tun(0xffffffffffffff9c, 0x0, 0x200500, 0x0) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000002880)={0x0, 'veth0_vlan\x00', {}, 0xfffa}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000002d00)={'veth0_macvtap\x00', {0x2, 0x4e23, @empty}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 42.139980218s ago: executing program 35 (id=2301): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f00005ba000/0x14000)=nil, 0x14000, 0x1000002, 0x100010, r0, 0x4480c000) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x5, 0x4}) (async) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x5, 0x4}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$tun(0xffffffffffffff9c, 0x0, 0x200500, 0x0) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000002880)={0x0, 'veth0_vlan\x00', {}, 0xfffa}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000002d00)={'veth0_macvtap\x00', {0x2, 0x4e23, @empty}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 37.473374239s ago: executing program 2 (id=2354): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x80000000, 0x0) r2 = syz_pidfd_open(r1, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0xa000000c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in6=@mcast1, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xee00}, {@in=@empty, 0x0, 0x2b}, @in6=@local, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x6}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x23, 0x9}]}, 0x10c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) recvfrom$packet(r3, &(0x7f0000000240)=""/125, 0x7d, 0x40, &(0x7f0000000100)={0x11, 0x11, r6, 0x1, 0xdb, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @none, 0x8}, 0xa) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', r6, 0x10, 0x80, 0x5, 0x7fff, {{0xa, 0x4, 0x0, 0x13, 0x28, 0x65, 0x0, 0x81, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@generic={0x82, 0x12, "1c6850e036c1fd8dc85e0eac5e19d768"}]}}}}}) 37.274205613s ago: executing program 2 (id=2358): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/oops_count', 0x101400, 0x110) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xffffffff, 0x5, 0x6f0, 0x4}}}}, 0x45}, 0x1, 0x0, 0x0, 0xc040}, 0x8044) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000011c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008850}, 0x3) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01090050001280"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000001080), 0x76, 0x181a80) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x369a02, 0x109) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f00000023c0)='fscrypt:', &(0x7f0000002400)='./file0\x00', r5) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, &(0x7f0000002a40)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000001200)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xd4, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x79, 0x5b, "ccc6bc083e6f7d649cc023cf9c56cfc0298b15ee748d51ac1618cf683014856e5f2c317f17a570464758d2567ba5490ac1525e391c03fd60a20acd8d3496f705a65351830eea4e5a22a945c40a7d8405585aea02004634bc0721c45d1481333433d8cb4a6a9ad16923b58c9792d82d61c96ade815b"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x80}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x543c}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00^\x00\r'], 0x28}], 0x1}, 0x40844) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 37.170627595s ago: executing program 2 (id=2361): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0xdc3, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0xd, 0x3, 0xba52, 0x4000800, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x4, 0x1, 0x800de, 0x8, 0x4, 0x1, 0x199f, 0x8, 0x8000002, 0x9, 0xe, 0x4, 0x6, 0x4001000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c32, 0x101, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0xc, 0x0, 0x2, 0x401, 0xd, 0xffffffff, 0x379, 0x8, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x2c2, 0x3], [0x401, 0xc584, 0xffff, 0xcd1, 0x7, 0x3, 0x6, 0x4, 0xb, 0x10, 0x5, 0xd, 0xe88, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x11, 0x1000, 0x4, 0x4, 0xf, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x47, 0x2, 0x80000003, 0x4, 0x7, 0x0, 0x7, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x2, 0x1010001, 0x2007, 0x7, 0x4, 0xea, 0x9, 0x5, 0x8, 0xd9, 0x0, 0x7d, 0x403, 0x5], [0x1e6a, 0x7fff, 0x4, 0x3, 0x88, 0x2, 0x6, 0x0, 0x50, 0x2, 0x75f, 0xb, 0x402, 0x800, 0x4, 0x5, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x5, 0x1e0, 0x4, 0x5, 0x4, 0x3, 0x4, 0x1ff, 0x1000, 0x3b, 0xb, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x1000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x0, 0x6, 0x7fff, 0x2, 0xffffffff, 0xfffffbff, 0x1, 0x200, 0x7, 0x6, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x10) ioctl$UI_DEV_CREATE(r2, 0x5501) close_range(r1, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) unshare(0x62040200) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0xdc3, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0xd, 0x3, 0xba52, 0x4000800, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x4, 0x1, 0x800de, 0x8, 0x4, 0x1, 0x199f, 0x8, 0x8000002, 0x9, 0xe, 0x4, 0x6, 0x4001000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c32, 0x101, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0xc, 0x0, 0x2, 0x401, 0xd, 0xffffffff, 0x379, 0x8, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x2c2, 0x3], [0x401, 0xc584, 0xffff, 0xcd1, 0x7, 0x3, 0x6, 0x4, 0xb, 0x10, 0x5, 0xd, 0xe88, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x11, 0x1000, 0x4, 0x4, 0xf, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x47, 0x2, 0x80000003, 0x4, 0x7, 0x0, 0x7, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x2, 0x1010001, 0x2007, 0x7, 0x4, 0xea, 0x9, 0x5, 0x8, 0xd9, 0x0, 0x7d, 0x403, 0x5], [0x1e6a, 0x7fff, 0x4, 0x3, 0x88, 0x2, 0x6, 0x0, 0x50, 0x2, 0x75f, 0xb, 0x402, 0x800, 0x4, 0x5, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x5, 0x1e0, 0x4, 0x5, 0x4, 0x3, 0x4, 0x1ff, 0x1000, 0x3b, 0xb, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x1000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x0, 0x6, 0x7fff, 0x2, 0xffffffff, 0xfffffbff, 0x1, 0x200, 0x7, 0x6, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c) (async) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x10) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 37.070444257s ago: executing program 2 (id=2363): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async, rerun: 32) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r4, &(0x7f0000002080)=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) (async, rerun: 64) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) (rerun: 64) chown(&(0x7f0000001f40)='./file0\x00', r5, 0xee00) (async) sendmsg$nl_generic(r3, &(0x7f0000001f00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001ec0)={&(0x7f0000000600)={0x18a0, 0x3ff, 0x400, 0x70bd2b, 0x25dfdbff, {0x20}, [@typed={0x14, 0xff, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="f01524ba114364d0b9f76c1ea47368802dc0b38da94de21c9600d7716e558ab33bba50643eef003a100e4ce7ce337832cc8a771f6ab0453cf5399e9fdd68d3bed42557ab4a6c6a4b7b213b22c755248531ce4272592c2026ce6cd455c5547fc18f6dc21b697e721ec1fae5ef7a86face6b46ad1e0fddce23b26215ccbdcc6703fc6b2f7befabbed140ed1afb4b37aeea9701fbaa4e91669813d031613a576d40eebc27a75f3626be001f0d346ac7c24ac9cfb032ebe9ed1242649591", @generic="fb7d5c9cfd9a379a472fe098eaa1cb2d1ea151719017917976cda40e299b395a1c4a6438246fafab472b40876428c4a2c3ed11aa2fcf3a72cf6fccedd2fa1c1dbcad3bb5876788272f22f85f3635542e0cf6bf48669caaec7075d9392b0833cd78c62492ff8bc3aee79c5c7e066b29312e52b3bfc588da0e16ec28cc062c08ac25f6913570d930b91c19e1892714fd8c0216e805e3acf4b626676f808923d77a036585b25dfb14a2d48b548170d4ed5b452e0754ebc646730a24474e1b5a7530c42b763491bc0c5d708bd32527e7ff6ebd10", @nested={0x19d, 0xb0, 0x0, 0x1, [@nested={0x4, 0x38}, @nested={0x4, 0x9f}, @typed={0xc, 0x39, 0x0, 0x0, @u64=0xffffffffffffffff}, @generic="b3e7b9c10f47520b025151deccfe0176c7f172bff36c53265ed23437b8a7cfb2dc8bcfc7e0a2619cede659a126f68a5ea169ab6663eeccbdc6dc0bd1bf733d7221e272b26d110d335c5c34423b08b937a58035b9f5045b2d24b437cef077e4778ef1b9c5c071b0a2b668adffb8b31bb0b557a516460ff8301c1ceabe993f8dd4015031990d76410675d37e8e87bc65b856b939f29564d221a400ba7c183ba2172611c5701dd38d24", @nested={0x4, 0x11f}, @generic="63c5f0c65ea197ff7e6c93dbc6808419712e1c4fd3a7fc4fa2969f41024852aa29730290babe42e368a010254f65231e0e36aa0c935975a09bafaed4388f503cef5e72e5d7d08a6b8c76594c5bab0cb3ace8d83d0c7b8a301873c086820a6c24241410d86a554d4afc79f12185c3b3ac0d679e5e0cbdcb38b4521e434224e29711049bf35a26485d4d9de994c827ab85712336848827d4a06fa6295c0ff5b41703a3f4742e57b19ed805536e40c864998eeffcf851d3d81f6207fb0907688769cf9a4bdc1184f864f0d88a5f609fd056ce7320f4bf", @nested={0x4, 0x2d}]}, @generic="ca3d44cc417ee95bebf59b0875d30db03c60a13ec112813a4a57ff9658ca051ecc56189e1f5ac5cc955469", @nested={0x11e8, 0x27, 0x0, 0x1, [@typed={0x8, 0xc8, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x31}, @typed={0x9a, 0x0, 0x0, 0x0, @binary="bffa53f9aac2770d1ba5be603260411cfe92bf783c9fbf66d05402c7434e6ed1a70165aa2fcde4f3963f494bfb0f4628664210b55e0bc98295c78ec4d572a1de16088d5c6b88c6133feb45a25baaef58f1a34e1c8676e081eea4e42835e3a372922951185a1016d105fc690ea546c60d23b0a04fcd45e0ffbbd1edb54dcf2d898b80ef14e387d9ce482aca6b883235b2abeeef4e79f4"}, @generic="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", @typed={0x13a, 0xce, 0x0, 0x0, @str='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda'}]}, @nested={0x1b3, 0x48, 0x0, 0x1, [@nested={0x4, 0x3b}, @generic="9efa9c21f2c73d97b93dd00c081e01e9ba31e8d354f6d0a060f87514a12e30bf2eda3d542ca9c7a0286042cefb68b704ea0ec388a8dd190ce46b41484c678d8b518082460e410eb5c7acfb9b9cf58179a0adf3f949ad2a7c42a3f0394fa67f42f47ea7", @generic="35c43093289a7a613839d63513a7336179f91863fdebb57567680202fcf372d4e257c2dba16fb68d3aeeaffe9f96780ffaeddafeb589a04dd22ffef85c637055f782db0594bea6c124cc75defbd05f7077de256ebaf1d89eb48d9eb7e4e0a47345934cd2fe6f09035fefa962afaed2c1c3bf4292da3354665bc22fabe52181a3c382ae82bb43f5ba1b7bdd32ce16007406dff58c79375e37e5792c5c9ceca2f7d929b325db018b14993b1c88b1c32b7fd9f066b7daaa43b561e3a39df532872b1b647f32df4c72bf2f882030e8da6dad979d9538", @typed={0x8, 0x101, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x119}, @generic="501b9720de9ba109346df1302f09b8206dd5db1ab67281e03d207922ac4f8b6091fa9f68e791a27b8662c6d4319001c0f5242332de06dc2595b0141b05d579ced3f70b0db0fe7296d18cf9748b157d9f77588bc72b84905dae87c1a73ffee386", @typed={0x8, 0x31, 0x0, 0x0, @fd}]}, @typed={0x14, 0xe9, 0x0, 0x0, @ipv6=@private0}, @nested={0x16c, 0x11d, 0x0, 0x1, [@generic="f85907218d69fc721a1415e93d0cf6c7b412f8f541e345978b550bb7d17cdffd36e56231ebccf9a8ed9ccb089258c8d570cb017b8a4c11402122278e40ee1e16f77b8f5f2328dd39bf5f201f1e74702ba6bfc3f873f6f439a0515620c2f0803d48a875df5e5e39f0d47e5d134662d791bd3ba3cc5f0129d77356a5ce6e1c910f4a715e32c84ad0d5955272fd", @generic="72c0eadd3f1b5ff94904e564f59cf3ee1c4b1fea2ea0e38a3b2973d0cc2cf6426fc5d125d750894f11f3b70c3f241f4d16ec8ab452ea47cc96bc8c9d258fded8b12fc1dbd2b8f1d7a79f24a52bb359ee09ce7d72ec0b0ad67b406617968e4bb6a18abe99c48857ce49c1f55b9b2186ea2b0bb6a761c981e664b1cf4cc7a18bba7702d755d780fee1db9789cf07c2dcc184656cf7d899b428d9e45e547bc1d4dbcfa698951103ac8fb9eb8076ff5cf9b48a041cb022fd2d0f93efa3de6a84fa099af32a49a65f982fbc2e4cd9587d5659e958025caf9a6bd0", @nested={0x4, 0x106}]}]}, 0x18a0}, 0x1, 0x0, 0x0, 0x4044885}, 0x20000090) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x4, 0x0) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {0x6}, 0x6, 0xa1, &(0x7f0000000180)={0x60, 0xa, 0x9, 0x2, 0x8001}, 0x8, 0xd, 0x5, 0x0, 0x1000, 0x1ff, &(0x7f00000001c0)="a26720c2121a41a1550df85a88682afc3e01d3f59c73880c246ea553ac6d1af06a83f5dc5ff5d5a48f896c34a6412d159208f93fa9dd4356271f8be1f881fbcfd3fc05ee75706a100cd181a5d9ca573b24ab3c728d733169099a067e404b743d4e69d5bc8dc34b1f460aab25267cfafbba1bc38c3562b4472efb862cc8f21337"}) (async) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000000c0)=""/157) 36.981312439s ago: executing program 2 (id=2366): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') write$cgroup_subtree(r2, &(0x7f0000000600)=ANY=[@ANYBLOB='+cpu'], 0x5) mount(&(0x7f0000000000)=@filename='./file1\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='exfat\x00', 0x12e1440, 0x0) 36.91626146s ago: executing program 2 (id=2367): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x98, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)={0x30, 0x30, 0x30}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x2}, @fda={0x66646185, 0x4, 0x1, 0x25}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}}, 0x0}, 0x1000}, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 21.848225614s ago: executing program 36 (id=2367): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x98, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)={0x30, 0x30, 0x30}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x2}, @fda={0x66646185, 0x4, 0x1, 0x25}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}}, 0x0}, 0x1000}, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 7.554511373s ago: executing program 0 (id=2729): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000140)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r3, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 7.439422365s ago: executing program 0 (id=2731): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a070000003b9b701f40000400000000120000000000", 0x1d) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f00000000c0)={0x6, 0x0, [{0x34c, 0x0, 0x7fffffffffffffff}, {0x2e0, 0x0, 0x4}, {0xc0000104, 0x0, 0x2}, {0xa76, 0x0, 0x800}, {0xa8c, 0x0, 0x6}, {0xb6b, 0x0, 0x4141c2}]}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) socket(0x10, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) (async) write(r0, &(0x7f0000000040)="1c0000001a009b8a070000003b9b701f40000400000000120000000000", 0x1d) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f00000000c0)={0x6, 0x0, [{0x34c, 0x0, 0x7fffffffffffffff}, {0x2e0, 0x0, 0x4}, {0xc0000104, 0x0, 0x2}, {0xa76, 0x0, 0x800}, {0xa8c, 0x0, 0x6}, {0xb6b, 0x0, 0x4141c2}]}) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) (async) 7.327422677s ago: executing program 0 (id=2733): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[], 0x3ec}, 0x1, 0x0, 0x0, 0x54}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011001000000104c054b02fb8df7269ce982712400010000500009040020fd0300010009210300030122070009058103ff030000fd48bd6ff2538ae7c6bb4c7225d9193c701847b6426251c0c69428a52a526ccc968994b6a586ddf12fc854134463e5890af9a93a519ebc991d3c3a4f14e41dd2"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000034000)={0xc, {{0xa, 0x1, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10000000}}}, 0x88) getsockopt$inet6_buf(r7, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0022070000005b33985b533a"], 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4.09739374s ago: executing program 0 (id=2773): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x60, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/241, 0x0, 0x1, 0x21}, @fd={0x66642a85, 0x0, r4}, @flat=@handle}, &(0x7f0000000000)={0x0, 0x5d, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000001400)=[@release], 0x0, 0x0, 0x0}) 4.039630381s ago: executing program 0 (id=2774): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0xad, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "87a077211436"}, {0x5, 0x24, 0x0, 0x8091}, {0xd, 0x24, 0xf, 0x1, 0x80, 0xfffa, 0x0, 0x80}, {0x6, 0x24, 0x1a, 0x121, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x5, 0xfffc}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x0, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x58, 0xff, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0xb, 0x10}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x7, 0xa0, 0x3, 0x8, 0x50}, 0x2d, &(0x7f0000000140)={0x5, 0xf, 0x2d, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "97797db574281d61521fc315387160c7"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x80, 0x1000}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x9, 0x1}]}, 0x9, [{0xe2, &(0x7f0000000180)=@string={0xe2, 0x3, "b63c37f7467b11a7c288d1fd06b36fdc0ee3ba86bdb15f473b85f545ef57c4b81a2731cd96dcc758716ea38081a95d1e4839131e5f851c8711415fe3952b0d70e54ad403993e5ff71fc93a0339bdd560e386f2b45e6ad55d82104c3dd5dd4b90074f0c90f1591d4eef871c196b02d2621f50a6f8aa67a1ad99f62fa606ffb072c358ec6ac424e0a2c358f1e0eccd77e0ff1b089ddce895c7595b9500634837cafa0db1916489d62138a42cf66b3d553bbc59b599ff32c3aa488bd2d1968107ebfe5299f2b02c575c420a90d23e44cf77b67e0a2f4d2b0485db99674886bfbab3"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x95, &(0x7f00000002c0)=@string={0x95, 0x3, "61ec57a74bab54f7066ec6d10d6a165589f1465a181491f719854231c28af1dce4af1dfbca57cf1c520d96a346b6b4457a0cac2474ccfb4f73c3b56cf4f51435736cab54631c23f55fb09ff83a9b3625f18b3516bc9251bd36ae419fed2135b365d912513d7a023473511c9de79896ea4e39c3b333a733e002b4c30d64ac1ef021be52b0b902d123ce73666749d8be5020017b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2c01}}, {0xc3, &(0x7f00000003c0)=@string={0xc3, 0x3, "1fb496d335f66bccd0fc5f58634459388e085226c5ce0c165531cfb31424e1f5395c36f5d22681b80de8036678983390341c055b09e94a3feaeba21f751a9da1fc52cd6aa8249e38040b4dcf59c5f12059fa567fd51440ec33701230706a8fefe287c0ca2c0c3361b0961ebefcf3936b6e05d211027e2f45bedb1dc7493190967c0313249daa859b2ba185862d94f1e8b6b5737c289ab03f7fed7ea52d5ab97e28140d257cdaa85db1067acd3dacec513338576f6eb9d3c1fe440123b8714e6abf"}}, {0x6f, &(0x7f00000004c0)=@string={0x6f, 0x3, "7b5dc2b0072b87edff8899bb120ead69077ab1fa7aee63c35f706994f102a99fc21662ba9db3140b48e9a263df79830acbe1349ebaab3abfd8b77b3ed1ca5f9a17a02ba1eab249870c49b60249c1e1a6dbb6a0d3969eb75b642273914110fb26b292080a90398871a6f2427732"}}, {0x41, &(0x7f0000000540)=@string={0x41, 0x3, "c49ed95d84c688baad4e88072d6b089be6e29609c122b493d0a259cc1b1ae8f6256fd072b0fc894a113ae724f6b5135bf5d04cfac637c4eb84e3ea0802f707"}}, {0xb8, &(0x7f00000005c0)=@string={0xb8, 0x3, "951e2b379865710f673d3b88fa58da4f8af47a1b684d99942b88a8d8351e52b1dd8ad6fc7889f3b74ba0502f49ae3aa9a9b33652e6709bcddf308bf5685276424fd48eb1ee9425af17ba6427b905b2c8f5c5dc64c049935b668a560c55dc354a5d4977f0657e6a2f0977c0d79704071192a97a13b5e4a09d261d6bbd66d67d532009005c1f16d08bcee727efd6944f5aa4755b0fdd6dca07e01b2d695e624f2c5136a842fc1cdc5c131e20ddea1425b23b9ef3fa0dc2"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x82c}}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x90}, 0x61) close_range(r0, 0xffffffffffffffff, 0x0) 2.54207108s ago: executing program 0 (id=2794): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r4, &(0x7f00000007c0)=[{&(0x7f0000000740)="821c16b9de7840bd75ed1c8d2304f683aa55ae7db0413d406352dc5c", 0x1c}, {&(0x7f0000000380)="90aa6914ce8e8172", 0x8}], 0x2, 0x20000f50, 0x81100007, 0x10) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000f80)=ANY=[@ANYBLOB="4f2b36ed1fa5d7d13faac8dfb35c7af25f7d97bdcfb8f66f3f15289c8e506950ad14761d30f11854a312cd2f8f87031d24486bc92e8b008d7679875e", @ANYRESDEC=r0, @ANYRESOCT=r0], 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000700)={{0x12, 0x1, 0x340, 0x0, 0x0, 0x0, 0x60, 0x5ac, 0x24b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0xf0, 0x1b, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x3e76af23b8a3bc3b, 0x2, {0x9, 0x21, 0x5542, 0x1, 0x1, {0x22, 0x112}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0xcc, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0xfc, 0xa}}]}}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x201, 0x2, 0x8, 0x0, 0x8, 0x40}, 0x9a, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f9a000407100212b800010b100108080000011500066f1004614cb1caef5efcbd068c6ca6e61f245b603e8adbe76f2ee363992eba82d288ac769629f06c177c1d1c5c20ed035eea775c890f0845d6b95d53d004d2f73ebd34bcdc45c15e6275be46f2e4a80fbcb151e921c94ca645bcd96136b9eacfabb51667141004b274657bae5065fd339d65c7ba49e5fee8"], 0xa, [{0xd5, &(0x7f0000000880)=@string={0xd5, 0x3, "60a7010596fb1ccf6adce7df139abaf15f7abb20c88431ece3bc5bb342cdfe75baf9cb933b94a63538d07dd91bfa48a7c78a8926068a175ac5f458eb19cc44f7253ac70aaa45719a6249d8b21a4ce3e51759a932e495bb05d726a4db0ea991dc661477911b6e1071a079e5738cd34591152e0c02d60c6a50bdda0f821caec23de43583044f0c2d43a7b324de989699d5b087c2b8e5b5acb5095d3c0268b794b3e2475df862810e29d93350ef474cd7c8056f37d88ed59b386fec3db89f951da6ac372226dd8b9441265266ebf3696f71581468"}}, {0xd9, &(0x7f0000000980)=@string={0xd9, 0x3, "d6125a9e0f44916f1572566e29bb5966377faaad95c3d14e40a9bc339275f1c0385860f87d516d780d1ed01ba708e036c5bcafd852ea853c8ce1e0ff29ba35e7ef39ff0362ef07b6d97de13b764f4c2faf034dd4c7b60f9c959e587c0ed9ced0f09121e20681b3b4b799f073d0c0f79bed0638ff9075c017e1ca2f11e62ab1b57eaecdeede24d139781a0640ff141c22e8aa371720fdd2e5b73a44f43a1ebebbee24309e4ee834274e86c380ec1c2194662c0c3f4e36aeabfbcb53de913fed107ff6befa19d1029e7e51e4fe0540df507f521ebb758b04"}}, {0x9b, &(0x7f0000000a80)=@string={0x9b, 0x3, "135497d06e9d088f51ef1c05e25021f99dd7678201dcc019aff8428ef30d84d3f1ccea91fe2cded391da8993ccb853f36101d91e983aac895892171a1b8b097f5e95d3d58354dbcb9a9922bbc59c32cc3bd74caa1dab74cbb05af0baef676dd66e770cb22e047ae4942e2f469aef569e461c9eddf7abeb51ec83b9545d1e3abb9dac0936ff5ab9643c8931ec810cf253ff7781e49a64f79c91"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x42c}}, {0xf, &(0x7f0000000c40)=@string={0xf, 0x3, "cfc43101ffdf435d79e51e738c"}}, {0x60, &(0x7f0000000c80)=@string={0x60, 0x3, "e054f68c6bfd4b98968ffcb1d8acca0a0477e788be18250c922ed3e6c2d5fe2302d94f5957a8d947fcb61af82784c893c045b677242e2d6407676b92dc058b0a23c5374a5411956396803133ef52f8060728245d105eddc8723526c47612"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x0}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x808081, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x4, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x4, 0x6}, {0x64}, {0x6}]}) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) openat(0xffffffffffffffff, &(0x7f0000000f40)='./cgroup\x00', 0x800, 0x80) r9 = socket$netlink(0x10, 0x3, 0x2) r10 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000e00)={[0x9, 0x6, 0x1, 0x0, 0xfffffffffffff001, 0x471f34ae, 0x5, 0x401, 0x3, 0x3c0, 0x2, 0x8, 0x6, 0x1, 0x1, 0x9], 0x8080000, 0x40000}) preadv(r8, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1, 0x0, 0x4) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_usb_connect(0x0, 0x23a, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000680)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x38, 0xe1, 0x3, 0x8, 0x63}, 0xf2, &(0x7f0000000440)={0x5, 0xf, 0xf2, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "f7aeb0dde4bb0549645419467f86a15e"}, @generic={0xa7, 0x10, 0x2, "2da0bd9d14f7465cc3609e7041a8d8190db4b7b14ea05465f270fc1af2002bf93ea6f1a009bbaa188ad6aa372da0a5010c2fdd51585bdf55bb8b32463424e500a0f504d4e4478d46ec3ce7d964a8553004425c5c1c5f1d6de35dd3644e37c8673d4dd82656af2661f331fb06457cc4d9b05e4705cbce6e154f4a7208194a277be0bd328f65cdde9c678864f5ca0bab7603a9dbd5f1aede554eb42c639efa5bb05dfb1365"}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x2, 0xff00, 0x6, [0xff6f, 0x3f00, 0xff0030, 0xffc01e, 0x0, 0xff1f8f]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x54, 0x40, 0x0, 0x8b0d, 0x95}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x420}}, {0x65, &(0x7f0000000540)=@string={0x65, 0x3, "4ce40cfdf9b0ea72c64eeb7fb843c38421712ee3d824e0e05e2a7078c7003684ec9ec745ea24b180ea97bc384c075c4b06e1dad534c4c98e4fb02e68d48ec3ac0a5efe6c4a57c47ae3ccf48448cec06f449ce12ece9deddfab5d9e73e1e03222d2e895"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2001}}, {0x8, &(0x7f0000000640)=@string={0x8, 0x3, "9361d09e2b91"}}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x700}) 1.669727487s ago: executing program 7 (id=2803): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x380, 0x2}) r1 = dup(0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_complete(0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x800, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000c40da667"], 0x0}, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, r2) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x5, 0x0, 0x2008, "edf958e7e942"}}) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x9, 0x4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) 1.315300014s ago: executing program 4 (id=2805): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000000880)="66be8f037545cda1011298f0", 0xc) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x4, 0x2, 0x12, '\x00', 0xb}) (async) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000140)=0x2) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0xffffff11}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000780)=[@request_death], 0x0, 0x0, 0x0}) 1.314734804s ago: executing program 4 (id=2806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x7ffffffe) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect$uac1(0x2, 0xbc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa00030156c0000904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f24060205040200020001000100040c240202030202508000090111240605020507002e130a004ef102000000000904010101010200000905010920009301050725010003480f0904020000010200000904fc3b3699c75c6dda020101010200000905820920000d020000000000"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0xd, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e000000200"/88], 0x290) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x4, 0x2, 0x3}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4000, @remote}, 0x2}}, 0x2e) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f0000000040)={0x2b, 0x2c, 0x0, 0x6, 0x0, 0x6, 0x1, 0x2, 0xffffffffffffffff}) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000040)="d9b604") r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r9, 0x5420, &(0x7f0000000100)=0xcf5) ppoll(&(0x7f0000000280)=[{r5, 0x8520}], 0x1, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000240)={[0x200]}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 1.147032648s ago: executing program 8 (id=2810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x60, r1, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @private0, 0x9}}}}]}]}, 0x60}, 0x1, 0xd00, 0x0, 0x4000080}, 0x2400c000) 1.146792778s ago: executing program 8 (id=2811): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = dup2(r0, r0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1.127228518s ago: executing program 8 (id=2812): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0x0, 0xf0, 0x40, 0xfd, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x6}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x40, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x43, 0x46, 0x2, 0xd, 0x6, 0x3, 0xfc, 0x1}, {0x100000, 0x0, 0x3, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6e, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xdddd1000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x9, 0x0, 0xeeef0000, [0x4, 0x401, 0x8, 0x10800000000000c5]}) r4 = socket$inet6(0xa, 0x80003, 0x80) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000000)) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.067419099s ago: executing program 7 (id=2813): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4e7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002216000000056533ce03"], 0x0}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x100) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@mode={'mode', 0x3d, 0x7}}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 935.388792ms ago: executing program 8 (id=2814): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) r1 = dup(r0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x3) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x11, 0x10, 0x0, 0x2, 0x0}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0xa4, 0x0, &(0x7f00000003c0)=[@acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/171, 0xab, 0x2, 0x34}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}}, @enter_looper, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000380)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 782.553675ms ago: executing program 4 (id=2815): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x81, 0x3}, {0x61, 0xf}, {0x6, 0x0, 0x0, 0x5}]}) r1 = gettid() prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f00000001c0)={0x15, 0x10, &(0x7f00000024c0)="739c17c2c2cc029eecad068741dfda99"}) socket$packet(0x11, 0x3, 0x300) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x4, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$unix(0x1, 0x1, 0x0) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r5], 0x20}}, 0x0) write$char_usb(r3, &(0x7f0000000080)="17", 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) pread64(r0, &(0x7f00000029c0)=""/4082, 0xff2, 0xd36) 767.279705ms ago: executing program 4 (id=2816): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x4}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="480200001a0007000000000000000000fc020000000000000000000000000000e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4fffffff000000200000000000000000000007ffffffe0000000100000000e40c00000000000007000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x248}, 0x1, 0x0, 0x0, 0x4}, 0x0) 695.303477ms ago: executing program 4 (id=2817): r0 = syz_open_procfs(0x0, &(0x7f0000001580)='setgroups\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x280000d, 0x4010, r0, 0xffffc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r3 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) r4 = getpgrp(r3) sched_setscheduler(r4, 0x1, &(0x7f0000000000)=0xc11e) (async) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) 694.185116ms ago: executing program 4 (id=2818): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0x7, 0x6, "f0803bb547c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x17, 0x2, ':='}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) creat(&(0x7f0000000000)='./file1\x00', 0x12) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001440)=""/126, 0x7e, 0x41) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000001000)='9p\x00') unshare(0x2a020400) fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r4, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000080)) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) inotify_init() ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000140)) close_range(r1, 0xffffffffffffffff, 0x0) 502.94409ms ago: executing program 7 (id=2819): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) fchdir(r0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 473.199211ms ago: executing program 7 (id=2820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x60, r1, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @private0, 0x9}}}}]}]}, 0x60}, 0x1, 0xe00, 0x0, 0x4000080}, 0x2400c000) 415.264722ms ago: executing program 7 (id=2821): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x300, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}]}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x8, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffff8000, 0x4}}}}, 0x30}}, 0x2c040090) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x7, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x7, 0x1, 0x71, @empty, @mcast1, 0x7, 0x40, 0xfff, 0x7ff}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_PMK(r0, 0x0, 0x81) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)={0x1c, r9, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000180)={[0x100000001, 0x0, 0x4, 0x3, 0x4, 0x0, 0x6, 0x3, 0x401, 0x6, 0x101, 0x1ff, 0x7fffffff, 0x9c7, 0xc, 0x2], 0x80a0000, 0x100000}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r5) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r10, 0x45809000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r11, &(0x7f00000012c0)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8a1eaa0000000000004acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6bbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f7265f210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d65cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d1b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b40900f5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266ba65dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584143a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd83bd223a1e64a3a8271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b200fedea1c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3777c64b42336d70f0000000000000062e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r11, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, &(0x7f00000005c0)={0x0, 0x3938700}) openat$tun(0xffffffffffffff9c, 0x0, 0x200100, 0x0) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) 414.872562ms ago: executing program 7 (id=2822): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x81000, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000a0100000005fe060c10880008000f00fff3c00e1400", 0x26}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000140)=0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000003c0)={0x50, 0x0, r6, {0x7, 0x1f, 0x2000, 0xa68d7c519f008ff1, 0xffbc, 0x6, 0x8, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x6, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000c80)={{r7}, "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"}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28000, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x32) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x0, 0x3, {0xffffffff, 0x4, 0x9, 0x1000}}, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x100, 0x8) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) 14.64965ms ago: executing program 8 (id=2823): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = fsopen(&(0x7f0000000280)='cgroup\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) fremovexattr(r2, &(0x7f00000002c0)=@random={'system.', ':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B'}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 8 (id=2824): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x10001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r3, r3, 0x0, 0x7a680000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x84) fchdir(r7) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r8 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000000340)=""/71, 0x47) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1, 0x80000, 0xfffffffd}}, 0x30) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r9) rename(0x0, 0x0) r10 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f1c, {0x2, 0x0, @rand_addr=0x64010102}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) kernel console output (not intermixed with test programs): ype=1326 audit(2000000810.395:27517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6134 comm="syz.4.1994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8de78eec9 code=0x0 [ 143.350703][ T6140] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.351116][ T6140] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 143.357616][ T6140] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 143.365614][ T6140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1039 [ 143.386410][ T6142] fuse: Bad value for 'user_id' [ 143.400547][ T6142] fuse: Bad value for 'user_id' [ 143.417223][ T6144] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 143.425321][ T6144] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 143.433823][ T6145] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 143.558590][ T36] audit: type=1326 audit(2000000811.105:27518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.2.1999" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f419138eec9 code=0x0 [ 143.659808][ T6150] netlink: 57 bytes leftover after parsing attributes in process `syz.2.1999'. [ 143.670818][ T6150] binder: Unknown parameter 'fscontext?}' [ 144.533566][ T6165] fuse: Unknown parameter '8l"<3pZ' [ 144.593710][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'. [ 145.192944][ T6197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6197 comm=syz.0.2018 [ 145.277565][ T6211] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.320349][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.334331][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.336467][ T6227] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 145.341595][ T6227] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 145.341735][ T6206] bridge_slave_0: entered allmulticast mode [ 145.366186][ T6206] bridge_slave_0: entered promiscuous mode [ 145.372824][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.373336][ T6227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1058 [ 145.379983][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.396927][ T6206] bridge_slave_1: entered allmulticast mode [ 145.403297][ T6206] bridge_slave_1: entered promiscuous mode [ 145.474366][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.481459][ T6206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.488780][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.495825][ T6206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.518258][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.525657][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.537731][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.544841][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.554091][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.561160][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.588573][ T6206] veth0_vlan: entered promiscuous mode [ 145.600802][ T6206] veth1_macvtap: entered promiscuous mode [ 145.866330][ T332] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 145.909083][ T36] audit: type=1400 audit(2000000813.455:27519): avc: denied { write } for pid=6253 comm="syz.4.2036" name="/" dev="configfs" ino=2407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 145.931424][ T36] audit: type=1400 audit(2000000813.455:27520): avc: denied { add_name } for pid=6253 comm="syz.4.2036" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 145.952647][ T36] audit: type=1400 audit(2000000813.455:27521): avc: denied { create } for pid=6253 comm="syz.4.2036" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 146.048462][ T332] usb 7-1: config 1 has an invalid interface number: 6 but max is 2 [ 146.076106][ T332] usb 7-1: config 1 has no interface number 1 [ 146.087270][ T332] usb 7-1: too many endpoints for config 1 interface 6 altsetting 8: 71, using maximum allowed: 30 [ 146.108342][ T332] usb 7-1: config 1 interface 6 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 146.151193][ T332] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 146.173685][ T332] usb 7-1: config 1 interface 6 has no altsetting 0 [ 146.206163][ T332] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.227119][ T332] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.236068][ T332] usb 7-1: Product: syz [ 146.240288][ T332] usb 7-1: Manufacturer: ю [ 146.256187][ T332] usb 7-1: SerialNumber: syz [ 146.370050][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.377341][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.384740][ T6275] bridge_slave_0: entered allmulticast mode [ 146.392041][ T6275] bridge_slave_0: entered promiscuous mode [ 146.399115][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.406389][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.413600][ T6275] bridge_slave_1: entered allmulticast mode [ 146.420472][ T6275] bridge_slave_1: entered promiscuous mode [ 146.501551][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.508698][ T6275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.516033][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.523084][ T6275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.549871][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.557379][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.568010][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.575086][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.586456][ T2088] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 146.594717][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.601804][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.630572][ T6275] veth0_vlan: entered promiscuous mode [ 146.643757][ T6275] veth1_macvtap: entered promiscuous mode [ 146.683035][ T332] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 146.693520][ T332] hub 7-1:1.6: Invalid hub with more than one config or interface [ 146.704801][ T332] hub 7-1:1.6: probe with driver hub failed with error -22 [ 146.721452][ T332] usb 7-1: USB disconnect, device number 2 [ 146.737402][ T2088] usb 3-1: config 1 has an invalid interface number: 146 but max is 0 [ 146.745615][ T2088] usb 3-1: config 1 has no interface number 0 [ 146.752306][ T6296] udevd[6296]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.753068][ T2088] usb 3-1: config 1 interface 146 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 146.787141][ T2088] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 146.797143][ T2088] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.805210][ T2088] usb 3-1: Product: syz [ 146.809854][ T2088] usb 3-1: Manufacturer: syz [ 146.814511][ T2088] usb 3-1: SerialNumber: syz [ 146.821998][ T2088] usbserial_generic 3-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 146.834831][ T2088] usbserial_generic 3-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 146.846482][ T2088] usbserial_generic 3-1:1.146: generic converter detected [ 146.855303][ T2088] usb 3-1: generic converter now attached to ttyUSB0 [ 147.024267][ T31] usb 3-1: USB disconnect, device number 44 [ 147.031136][ T31] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 147.039931][ T31] usbserial_generic 3-1:1.146: device disconnected [ 147.206364][ T332] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 147.218542][ T6311] rust_binder: Error while translating object. [ 147.218582][ T6311] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.224786][ T6311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 147.310756][ T6317] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2054'. [ 147.377702][ T332] usb 1-1: unable to get BOS descriptor or descriptor too short [ 147.386086][ T332] usb 1-1: not running at top speed; connect to a high speed hub [ 147.394539][ T332] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.404714][ T332] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.415840][ T332] usb 1-1: string descriptor 0 read error: -22 [ 147.422170][ T332] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.431393][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.441622][ T332] usb 1-1: 0:2 : does not exist [ 147.786094][ T31] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 147.937331][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.948498][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.958316][ T31] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 147.967403][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.976301][ T31] usb 3-1: config 0 descriptor?? [ 148.247141][ T36] audit: type=1400 audit(2000000815.795:27522): avc: denied { read } for pid=6303 comm="syz.0.2049" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 148.277615][ T36] audit: type=1400 audit(2000000815.795:27523): avc: denied { write } for pid=6303 comm="syz.0.2049" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 148.305053][ T36] audit: type=1400 audit(2000000815.815:27524): avc: denied { ioctl } for pid=6322 comm="syz.6.2056" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.330780][ T36] audit: type=1400 audit(2000000815.845:27525): avc: denied { create } for pid=6303 comm="syz.0.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.350621][ T36] audit: type=1400 audit(2000000815.845:27526): avc: denied { setopt } for pid=6303 comm="syz.0.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.387326][ T31] arvo 0003:1E7D:30D4.0007: item fetching failed at offset 5/7 [ 148.395143][ T31] arvo 0003:1E7D:30D4.0007: parse failed [ 148.406085][ T363] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 148.413688][ T31] arvo 0003:1E7D:30D4.0007: probe with driver arvo failed with error -22 [ 148.566086][ T363] usb 7-1: Using ep0 maxpacket: 32 [ 148.579911][ T363] usb 7-1: unable to get BOS descriptor or descriptor too short [ 148.586430][ T36] audit: type=1400 audit(2000000816.125:27527): avc: denied { read } for pid=6320 comm="syz.2.2055" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 148.615379][ T2088] usb 3-1: USB disconnect, device number 45 [ 148.616394][ T363] usb 7-1: config 7 has an invalid interface number: 103 but max is 2 [ 148.624299][ T36] audit: type=1400 audit(2000000816.125:27528): avc: denied { open } for pid=6320 comm="syz.2.2055" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 148.646329][ T363] usb 7-1: config 7 has an invalid interface number: 3 but max is 2 [ 148.657520][ T36] audit: type=1400 audit(2000000816.155:27529): avc: denied { create } for pid=6320 comm="syz.2.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.676251][ T363] usb 7-1: config 7 has an invalid interface number: 134 but max is 2 [ 148.682386][ T36] audit: type=1400 audit(2000000816.155:27530): avc: denied { write } for pid=6320 comm="syz.2.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.696093][ T363] usb 7-1: config 7 has no interface number 0 [ 148.712496][ T36] audit: type=1400 audit(2000000816.155:27531): avc: denied { read } for pid=6320 comm="syz.2.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.736125][ T363] usb 7-1: config 7 has no interface number 1 [ 148.743268][ T363] usb 7-1: config 7 has no interface number 2 [ 148.749628][ T363] usb 7-1: config 7 interface 3 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 148.760532][ T363] usb 7-1: config 7 interface 103 has no altsetting 0 [ 148.767514][ T363] usb 7-1: config 7 interface 3 has no altsetting 0 [ 148.774149][ T363] usb 7-1: config 7 interface 134 has no altsetting 0 [ 148.786836][ T363] usb 7-1: New USB device found, idVendor=4971, idProduct=1012, bcdDevice=36.82 [ 148.795905][ T363] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.804205][ T363] usb 7-1: Product: syz [ 148.808570][ T363] usb 7-1: Manufacturer: syz [ 148.813181][ T363] usb 7-1: SerialNumber: syz [ 148.824744][ T363] usb 7-1: Interface #103 referenced by multiple IADs [ 148.831798][ T363] usb 7-1: Interface #134 referenced by multiple IADs [ 149.050318][ T363] usb-storage 7-1:7.103: USB Mass Storage device detected [ 149.058759][ T363] usb-storage 7-1:7.103: Quirks match for vid 4971 pid 1012: 800000 [ 149.098058][ T363] usb-storage 7-1:7.3: USB Mass Storage device detected [ 149.109174][ T363] usb-storage 7-1:7.3: Quirks match for vid 4971 pid 1012: 800000 [ 149.158219][ T6330] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 149.169420][ T6331] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 149.179051][ T363] usb-storage 7-1:7.134: USB Mass Storage device detected [ 149.190433][ T363] usb-storage 7-1:7.134: Quirks match for vid 4971 pid 1012: 800000 [ 149.276188][ T363] usb 7-1: USB disconnect, device number 3 [ 149.372669][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2060'. [ 149.599138][ T6347] rust_binder: 1083: no such ref 2 [ 149.836067][ T363] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 149.856830][ T6356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12592 sclass=netlink_route_socket pid=6356 comm=syz.4.2065 [ 149.940435][ T332] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 149.950147][ T332] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 149.968447][ T332] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 149.981134][ T332] usb 1-1: USB disconnect, device number 9 [ 149.996065][ T363] usb 7-1: Using ep0 maxpacket: 16 [ 150.023404][ T363] usb 7-1: unable to get BOS descriptor or descriptor too short [ 150.048381][ T363] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.063827][ T363] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 150.083220][ T363] usb 7-1: config 1 has no interface number 1 [ 150.093328][ T363] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 150.113478][ T363] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.122676][ T363] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.139843][ T363] usb 7-1: Product: syz [ 150.144083][ T363] usb 7-1: Manufacturer: syz [ 150.150549][ T363] usb 7-1: SerialNumber: syz [ 150.262861][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 150.308476][ T6372] FAT-fs (rnullb0): bogus number of reserved sectors [ 150.315370][ T6372] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 150.341462][ T6383] binder: Unknown parameter 'coext' [ 150.367040][ T6349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.375779][ T6349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.387070][ T363] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 150.399856][ T363] usb 7-1: USB disconnect, device number 4 [ 150.410943][ T6139] udevd[6139]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 151.511599][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2083'. [ 151.520657][ T6408] bridge_slave_1: left allmulticast mode [ 151.527044][ T6408] bridge_slave_1: left promiscuous mode [ 151.533379][ T6408] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.541373][ T6408] bridge_slave_0: left allmulticast mode [ 151.547398][ T6408] bridge_slave_0: left promiscuous mode [ 151.553203][ T6408] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.578091][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 152.306190][ T751] Bluetooth: hci0: command 0x1003 tx timeout [ 152.306280][ T752] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 152.404039][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2098'. [ 153.318072][ T36] kauditd_printk_skb: 87 callbacks suppressed [ 153.318094][ T36] audit: type=1400 audit(2000000820.865:27619): avc: denied { read write } for pid=6457 comm="syz.2.2102" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 153.348173][ T36] audit: type=1400 audit(2000000820.865:27620): avc: denied { ioctl open } for pid=6457 comm="syz.2.2102" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 153.372374][ T36] audit: type=1400 audit(2000000820.865:27621): avc: denied { read write } for pid=6457 comm="syz.2.2102" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 153.396595][ T36] audit: type=1400 audit(2000000820.865:27622): avc: denied { open } for pid=6457 comm="syz.2.2102" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 153.420704][ T36] audit: type=1400 audit(2000000820.865:27623): avc: denied { ioctl } for pid=6457 comm="syz.2.2102" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 153.514734][ T36] audit: type=1400 audit(2000000821.055:27624): avc: denied { ioctl } for pid=6466 comm="syz.6.2105" path="socket:[31454]" dev="sockfs" ino=31454 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.620737][ T752] Bluetooth: hci1: command 0x1003 tx timeout [ 153.620751][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 154.149732][ T36] audit: type=1400 audit(2000000821.695:27625): avc: denied { call } for pid=6496 comm="syz.0.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 154.149883][ T6498] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 154.168986][ T36] audit: type=1400 audit(2000000821.695:27626): avc: denied { transfer } for pid=6496 comm="syz.0.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 154.169030][ T6498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 154.403126][ T36] audit: type=1400 audit(2000000821.945:27627): avc: denied { getopt } for pid=6510 comm="syz.6.2121" laddr=172.20.20.10 lport=255 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.860026][ T36] audit: type=1400 audit(2000000822.405:27628): avc: denied { setattr } for pid=6512 comm="syz.0.2122" name="secretmem" dev="secretmem" ino=31511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 154.864246][ T6513] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 154.883487][ T6513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:36 [ 155.104080][ T6528] rust_binder: Error while translating object. [ 155.113333][ T6528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 155.119540][ T6528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:38 [ 155.151365][ T6542] rust_binder: Error while translating object. [ 155.160699][ T6542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 155.166945][ T6542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:42 [ 155.242128][ T6548] input: syz0 as /devices/virtual/input/input16 [ 155.259965][ T6548] rust_binder: Error while translating object. [ 155.260015][ T6548] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 155.266271][ T6548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:44 [ 156.438692][ T6576] sock: sock_set_timeout: `syz.6.2143' (pid 6576) tries to set negative timeout [ 156.988021][ T6580] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 156.988154][ T6580] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 156.996150][ T6580] rust_binder: Read failure Err(EFAULT) in pid:52 [ 165.014530][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 165.014550][ T36] audit: type=1400 audit(2000000832.555:27648): avc: denied { bind } for pid=6586 comm="syz.4.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.080151][ T36] audit: type=1400 audit(2000000832.595:27649): avc: denied { setopt } for pid=6586 comm="syz.4.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.101597][ T36] audit: type=1400 audit(2000000832.605:27650): avc: denied { read } for pid=6595 comm="syz.6.2152" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.129097][ T36] audit: type=1400 audit(2000000832.605:27651): avc: denied { execute } for pid=6587 comm="syz.0.2147" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 165.156190][ T36] audit: type=1400 audit(2000000832.615:27652): avc: denied { read } for pid=6586 comm="syz.4.2148" path="socket:[32128]" dev="sockfs" ino=32128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.180790][ T36] audit: type=1400 audit(2000000832.615:27653): avc: denied { map } for pid=6589 comm="syz.2.2149" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 165.205455][ T36] audit: type=1400 audit(2000000832.615:27654): avc: denied { write } for pid=6589 comm="syz.2.2149" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 165.230075][ T36] audit: type=1400 audit(2000000832.615:27655): avc: denied { ioctl } for pid=6587 comm="syz.0.2147" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 165.258388][ T36] audit: type=1326 audit(2000000832.645:27656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.4.2153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8de78eec9 code=0x0 [ 165.281544][ T36] audit: type=1400 audit(2000000832.675:27657): avc: denied { map } for pid=6589 comm="syz.2.2149" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.889518][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 165.897404][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 165.900704][ T6612] rust_binder: Write failure EFAULT in pid:1116 [ 165.905174][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 165.919585][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 165.927390][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 165.935612][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 165.943375][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 165.951162][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 165.958941][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 165.966716][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 165.974459][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 165.982316][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 165.990333][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 165.998307][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.006121][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.013888][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.021695][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.029502][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.037297][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.045057][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.052844][ T332] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 166.060528][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.068566][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.076428][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.084400][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.092247][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.100176][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.107963][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.115723][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.123495][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.131264][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.139025][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.146816][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.154584][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.162353][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.170306][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.178102][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.185855][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.193624][ T2088] hid-generic 0004:0400:80000001.0008: unknown main item tag 0x0 [ 166.201835][ T2088] hid-generic 0004:0400:80000001.0008: hidraw0: HID v0.66 Device [syz1] on syz1 [ 166.224799][ T6622] fido_id[6622]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 166.246108][ T332] usb 1-1: device descriptor read/64, error -71 [ 166.257228][ T6626] input: syz0 as /devices/virtual/input/input17 [ 166.429322][ T6631] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.480889][ T6632] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 166.486102][ T332] usb 1-1: device descriptor read/64, error -71 [ 166.487436][ T6632] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 166.501700][ T6632] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1125 [ 166.736057][ T332] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 167.116103][ T332] usb 1-1: device descriptor read/64, error -71 [ 167.277272][ T6652] can0: slcan on ptm0. [ 167.356085][ T332] usb 1-1: device descriptor read/64, error -71 [ 167.366475][ T6652] can0 (unregistered): slcan off ptm0. [ 167.398485][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.476446][ T332] usb usb1-port1: attempt power cycle [ 167.816064][ T332] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 167.837031][ T332] usb 1-1: device descriptor read/8, error -71 [ 167.967109][ T332] usb 1-1: device descriptor read/8, error -71 [ 168.123694][ T6677] sit0: entered promiscuous mode [ 168.128779][ T6677] netlink: 'syz.4.2179': attribute type 1 has an invalid length. [ 168.136592][ T6677] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2179'. [ 168.216128][ T332] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 168.237183][ T332] usb 1-1: device descriptor read/8, error -71 [ 168.367170][ T332] usb 1-1: device descriptor read/8, error -71 [ 168.476179][ T332] usb usb1-port1: unable to enumerate USB device [ 168.596189][ T6688] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 168.667739][ T6701] 9pnet_fd: p9_fd_create_unix (6701): problem connecting socket: ./file0: -111 [ 168.678146][ T6701] overlayfs: failed to resolve '/epEЙ|Ydz&>ǀK#gT_2"뎀&g8CjG|Xv&V': -2 [ 168.750025][ T6711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6711 comm=syz.6.2192 [ 169.196127][ T332] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 169.326073][ T332] usb 1-1: device descriptor read/64, error -71 [ 169.426121][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.444165][ T6748] netlink: 'syz.6.2205': attribute type 29 has an invalid length. [ 169.483231][ T6756] /dev/loop0: Can't lookup blockdev [ 169.566073][ T332] usb 1-1: device descriptor read/64, error -71 [ 169.816054][ T332] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 169.946107][ T332] usb 1-1: device descriptor read/64, error -71 [ 170.069085][ T6792] overlayfs: missing 'lowerdir' [ 170.186075][ T332] usb 1-1: device descriptor read/64, error -71 [ 170.306155][ T332] usb usb1-port1: attempt power cycle [ 170.507149][ T6823] 9pnet_fd: Insufficient options for proto=fd [ 170.514553][ T6823] __vm_enough_memory: pid: 6823, comm: syz.2.2231, bytes: 18014402804453376 not enough memory for the allocation [ 170.567866][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 170.567885][ T36] audit: type=1400 audit(2000000839.116:27689): avc: denied { mount } for pid=6826 comm="syz.4.2233" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 170.666096][ T332] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 170.677705][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2237'. [ 170.688259][ T6839] overlayfs: failed to clone upperpath [ 170.693079][ T36] audit: type=1400 audit(2000000839.236:27690): avc: denied { listen } for pid=6840 comm="syz.2.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.715160][ T332] usb 1-1: device descriptor read/8, error -71 [ 170.732861][ T36] audit: type=1400 audit(2000000839.276:27691): avc: denied { execute } for pid=6844 comm="syz.2.2239" name="file0" dev="ramfs" ino=33114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 170.762170][ T36] audit: type=1400 audit(2000000839.276:27692): avc: denied { execute_no_trans } for pid=6844 comm="syz.2.2239" path="/file0" dev="ramfs" ino=33114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 170.773350][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2243'. [ 170.805369][ T6862] fuseblk: Unknown parameter 'de' [ 170.811845][ T6862] fuseblk: Unknown parameter 'de' [ 170.831576][ T36] audit: type=1400 audit(2000000839.376:27693): avc: denied { bind } for pid=6866 comm="syz.2.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 170.857036][ T332] usb 1-1: device descriptor read/8, error -71 [ 170.903058][ T6879] overlayfs: failed to clone lowerpath [ 170.925056][ T36] audit: type=1400 audit(2000000839.466:27694): avc: denied { read } for pid=6880 comm="syz.4.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 170.944661][ T36] audit: type=1400 audit(2000000839.466:27695): avc: denied { setopt } for pid=6880 comm="syz.4.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 170.972544][ T36] audit: type=1400 audit(2000000839.516:27696): avc: denied { write } for pid=6885 comm="syz.4.2251" name="file2" dev="tmpfs" ino=3138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 171.004080][ T36] audit: type=1400 audit(2000000839.516:27697): avc: denied { open } for pid=6885 comm="syz.4.2251" path="/584/file2" dev="tmpfs" ino=3138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 171.030285][ T36] audit: type=1400 audit(2000000839.546:27698): avc: denied { ioctl } for pid=6885 comm="syz.4.2251" path="/584/file2" dev="tmpfs" ino=3138 ioctlcmd=0x1272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 171.106057][ T332] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 171.127025][ T332] usb 1-1: device descriptor read/8, error -71 [ 171.136089][ T31] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 171.270483][ T332] usb 1-1: device descriptor read/8, error -71 [ 171.296052][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 171.302752][ T6917] lo: entered allmulticast mode [ 171.308213][ T6917] lo: left allmulticast mode [ 171.313307][ T31] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 171.326610][ T31] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 171.337619][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.346953][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 171.354969][ T31] usb 3-1: SerialNumber: syz [ 171.370581][ T6877] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 171.377966][ T6877] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 171.386144][ T332] usb usb1-port1: unable to enumerate USB device [ 171.595219][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 171.601719][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 171.728960][ T6922] overlayfs: failed to clone upperpath [ 171.789569][ T6931] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 171.862252][ T6938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:63 [ 171.862476][ T6938] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 171.871644][ T6938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:63 [ 172.118283][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.134505][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.141641][ T6958] bridge_slave_0: entered allmulticast mode [ 172.148038][ T6958] bridge_slave_0: entered promiscuous mode [ 172.154595][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.161741][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.168931][ T6958] bridge_slave_1: entered allmulticast mode [ 172.175250][ T6958] bridge_slave_1: entered promiscuous mode [ 172.233484][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.240612][ T6958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.247922][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.254974][ T6958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.278192][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.285588][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.296632][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.303714][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.312910][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.320024][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.348600][ T6958] veth0_vlan: entered promiscuous mode [ 172.360535][ T6958] veth1_macvtap: entered promiscuous mode [ 172.432430][ T6975] binder: Unknown parameter 'context[7' [ 172.636087][ T332] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 172.696059][ T65] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 172.787792][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 172.798842][ T332] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 172.811893][ T332] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 172.821001][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.829902][ T332] usb 5-1: config 0 descriptor?? [ 172.839148][ T6970] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.847753][ T332] usbhid 5-1:0.0: can't add hid device: -22 [ 172.853803][ T332] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 172.876030][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 172.882609][ T65] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 172.890276][ T65] usb 1-1: can't read configurations, error -61 [ 173.026103][ T65] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 173.051191][ T332] usb 5-1: USB disconnect, device number 17 [ 173.176063][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 173.182580][ T65] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 173.191436][ T65] usb 1-1: can't read configurations, error -61 [ 173.197905][ T65] usb usb1-port1: attempt power cycle [ 173.536051][ T65] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 173.556552][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 173.563214][ T65] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 173.571286][ T65] usb 1-1: can't read configurations, error -61 [ 173.666091][ T752] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 173.666103][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 173.679841][ T31] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 173.688893][ T31] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 173.696107][ T31] usb 3-1: USB disconnect, device number 46 [ 173.706167][ T65] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 173.726452][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 173.733046][ T65] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 173.740749][ T65] usb 1-1: can't read configurations, error -61 [ 173.747779][ T65] usb usb1-port1: unable to enumerate USB device [ 174.101230][ T7002] cgroup: Name too long [ 174.131929][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 174.656082][ T2088] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 174.778968][ T7022] No source specified [ 174.817143][ T2088] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.830710][ T2088] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.839833][ T2088] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.847907][ T2088] usb 3-1: Product: syz [ 174.852096][ T2088] usb 3-1: Manufacturer: syz [ 174.857086][ T2088] usb 3-1: SerialNumber: syz [ 174.908783][ T13] bridge_slave_1: left allmulticast mode [ 174.914551][ T13] bridge_slave_1: left promiscuous mode [ 174.920438][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.928333][ T13] bridge_slave_0: left allmulticast mode [ 174.933991][ T13] bridge_slave_0: left promiscuous mode [ 174.940439][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.110221][ T13] veth1_macvtap: left promiscuous mode [ 175.115910][ T13] veth0_vlan: left promiscuous mode [ 175.172011][ T7026] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.179177][ T7026] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.186568][ T7026] bridge_slave_0: entered allmulticast mode [ 175.192953][ T7026] bridge_slave_0: entered promiscuous mode [ 175.199574][ T7026] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.206684][ T7026] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.213780][ T7026] bridge_slave_1: entered allmulticast mode [ 175.220148][ T7026] bridge_slave_1: entered promiscuous mode [ 175.269412][ T2088] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 175.278308][ T2088] cdc_ncm 3-1:1.0: bind() failure [ 175.284829][ T2088] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 175.291678][ T2088] cdc_ncm 3-1:1.1: bind() failure [ 175.301338][ T2088] usb 3-1: USB disconnect, device number 47 [ 175.333498][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.340593][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.350643][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.357726][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.386255][ T7026] veth0_vlan: entered promiscuous mode [ 175.397610][ T7026] veth1_macvtap: entered promiscuous mode [ 175.483178][ T7040] netlink: 'syz.7.2302': attribute type 4 has an invalid length. [ 175.586955][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 175.586976][ T36] audit: type=1400 audit(2000000844.136:27747): avc: denied { remove_name } for pid=7062 comm="rm" name="resolv.conf.erspan0.1.link" dev="tmpfs" ino=2496 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.618176][ T36] audit: type=1400 audit(2000000844.136:27748): avc: denied { unlink } for pid=7062 comm="rm" name="resolv.conf.erspan0.1.link" dev="tmpfs" ino=2496 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.730961][ T36] audit: type=1400 audit(2000000844.276:27749): avc: denied { ioctl } for pid=7070 comm="syz.7.2307" path="socket:[34174]" dev="sockfs" ino=34174 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.845972][ T36] audit: type=1400 audit(2000000844.386:27750): avc: denied { append } for pid=7066 comm="syz.0.2306" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 175.869281][ T36] audit: type=1400 audit(2000000844.396:27751): avc: denied { unmount } for pid=7066 comm="syz.0.2306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 175.914222][ T36] audit: type=1400 audit(2000000844.456:27752): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 176.146083][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 176.146792][ T752] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 176.206046][ T31] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 176.356782][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 176.365343][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 176.377980][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.387764][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.395927][ T31] usb 3-1: Product: syz [ 176.400396][ T31] usb 3-1: Manufacturer: ࠖ [ 176.405066][ T31] usb 3-1: SerialNumber: syz [ 176.496087][ T332] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 176.508068][ T7099] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 176.515874][ T7099] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 176.524206][ T7099] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 176.531994][ T7099] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 176.542012][ T7099] rust_binder: Write failure EFAULT in pid:100 [ 176.621578][ T7106] rust_binder: 7106 RLIMIT_NICE not set [ 176.635731][ T2086] rust_binder: 7105: removing orphan mapping 0:1048 [ 176.651761][ T332] usb 5-1: Using ep0 maxpacket: 32 [ 176.660975][ T332] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 176.669600][ T332] usb 5-1: config 0 has no interface number 0 [ 176.675801][ T332] usb 5-1: config 0 interface 184 has no altsetting 0 [ 176.684487][ T332] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 176.693787][ T332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.702018][ T332] usb 5-1: Product: syz [ 176.711790][ T332] usb 5-1: Manufacturer: syz [ 176.716792][ T332] usb 5-1: SerialNumber: syz [ 176.724813][ T332] usb 5-1: config 0 descriptor?? [ 176.733157][ T7113] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 176.737101][ T332] smsc75xx v1.0.0 [ 176.741286][ T7113] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 176.753368][ T7113] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 176.761343][ T7113] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 176.937718][ T36] audit: type=1400 audit(2000000845.486:27753): avc: denied { setopt } for pid=7116 comm="syz.0.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.967868][ T36] audit: type=1400 audit(2000000845.516:27754): avc: denied { mounton } for pid=7118 comm="syz.0.2322" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.991086][ T7119] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.991115][ T7119] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 177.123804][ T36] audit: type=1400 audit(2000000845.666:27755): avc: denied { create } for pid=7130 comm="syz.0.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 177.152440][ T36] audit: type=1400 audit(2000000845.666:27756): avc: denied { write } for pid=7130 comm="syz.0.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 177.163795][ T7133] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 177.180589][ T7133] rust_binder: Write failure EINVAL in pid:133 [ 177.198902][ T7136] rust_binder: Read failure Err(EFAULT) in pid:136 [ 177.227872][ T7139] binder: Unknown parameter 'maxi(xY~$a$BhA2(XbUs'vGM+Àb9 1.X)jىO ' [ 177.227872][ T7140] binder: Unknown parameter 'maxi(xY~$a$BhA2(XbUs'vGM+Àb9 1.X)jىO ' [ 177.293723][ T7147] rust_binder: Write failure EINVAL in pid:147 [ 177.330917][ T7154] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 177.351781][ T7154] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 177.366595][ T332] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 177.373076][ T7084] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 177.377771][ T332] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 177.392236][ T7084] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 177.401423][ T332] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 177.427259][ T332] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 177.437639][ T332] usb 5-1: USB disconnect, device number 18 [ 177.442322][ T7154] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 177.453907][ T7154] SELinux: failed to load policy [ 177.459194][ T7153] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 177.469510][ T7153] SELinux: failed to load policy [ 177.510118][ T7158] netlink: 'syz.0.2334': attribute type 4 has an invalid length. [ 177.701984][ T46] veth1_macvtap: left promiscuous mode [ 177.707665][ T46] veth0_vlan: left promiscuous mode [ 177.824000][ T7161] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.831207][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.838405][ T7161] bridge_slave_0: entered allmulticast mode [ 177.844889][ T7161] bridge_slave_0: entered promiscuous mode [ 177.851588][ T7161] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.858745][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.865823][ T7161] bridge_slave_1: entered allmulticast mode [ 177.872313][ T7161] bridge_slave_1: entered promiscuous mode [ 177.935449][ T7161] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.942536][ T7161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.949893][ T7161] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.956990][ T7161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.994583][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.002019][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.012818][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.019892][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.029346][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.036428][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.070843][ T7161] veth0_vlan: entered promiscuous mode [ 178.083323][ T7161] veth1_macvtap: entered promiscuous mode [ 178.117631][ T7174] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 178.213645][ T7183] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.236494][ T45] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 178.395007][ T7192] rust_binder: 7189 RLIMIT_NICE not set [ 178.407169][ T45] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.436692][ T45] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 178.440953][ T7197] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2344'. [ 178.450083][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.459548][ T7197] z00X: renamed from gretap0 (while UP) [ 178.466169][ T45] usb 5-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 178.480613][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.480934][ T7197] z00X: entered allmulticast mode [ 178.494780][ T45] usb 5-1: config 0 descriptor?? [ 178.553065][ T7198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7198 comm=syz.7.2344 [ 178.911188][ T45] a4tech 0003:09DA:000A.0009: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.4-1/input0 [ 178.936104][ T65] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 178.948790][ T31] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 178.962422][ T31] usb 3-1: USB disconnect, device number 48 [ 179.097192][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 179.108398][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 179.114317][ T7172] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 179.121254][ T65] usb 1-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 179.129310][ T7172] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 179.138183][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.150662][ T2087] usb 5-1: USB disconnect, device number 19 [ 179.156899][ T65] usb 1-1: config 0 descriptor?? [ 179.166713][ T7206] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 179.175280][ T65] usbhid 1-1:0.0: can't add hid device: -22 [ 179.182043][ T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 179.286132][ T7214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 179.298441][ T7214] overlayfs: conflicting lowerdir path [ 179.726269][ T7238] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.754946][ T7232] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2355'. [ 179.772205][ T7232] binder: Binderfs stats mode cannot be changed during a remount [ 179.881471][ T7245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2358'. [ 179.901863][ T7245] FAT-fs (rnullb0): bogus number of reserved sectors [ 179.916049][ T7245] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 179.964603][ T7250] input: syz0 as /devices/virtual/input/input18 [ 180.107521][ T7269] rust_binder: Error in use_page_slow: ESRCH [ 180.107550][ T7269] rust_binder: use_range failure ESRCH [ 180.113724][ T7269] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 180.119435][ T7269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 180.127772][ T7269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:49 [ 180.298603][ T7275] rust_binder: Error while translating object. [ 180.308243][ T7275] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 180.314854][ T7275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:32 [ 180.378643][ T7279] rust_binder: 36: no such ref 3 [ 180.409417][ T2087] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 180.542131][ T7286] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2373'. [ 180.586044][ T2087] usb 8-1: Using ep0 maxpacket: 16 [ 180.592409][ T2087] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.603906][ T2087] usb 8-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 180.613066][ T2087] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.626644][ T2087] usb 8-1: config 0 descriptor?? [ 181.038702][ T2087] uclogic 0003:28BD:0042.000A: interface is invalid, ignoring [ 181.237258][ T7273] rust_binder: Error while translating object. [ 181.237311][ T7273] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 181.243697][ T7273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 181.254040][ T332] usb 8-1: USB disconnect, device number 2 [ 181.428172][ T2088] usb 1-1: USB disconnect, device number 22 [ 181.709853][ T7297] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 181.718135][ T7297] rust_binder: Write failure EINVAL in pid:53 [ 181.791716][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 181.791736][ T36] audit: type=1400 audit(2000000850.336:27782): avc: denied { setopt } for pid=7298 comm="syz.7.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 181.838509][ T36] audit: type=1400 audit(2000000850.376:27783): avc: denied { bind } for pid=7298 comm="syz.7.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 181.956454][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2378'. [ 182.056498][ T7307] bpf: Bad value for 'gid' [ 182.079168][ T2088] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 182.237074][ T2088] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 182.256052][ T2088] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.276059][ T2088] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 182.285025][ T2088] usb 8-1: config 1 has no interface number 0 [ 182.291328][ T2088] usb 8-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 182.305058][ T2088] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 182.336404][ T2088] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.345519][ T2088] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.361321][ T2088] usb 8-1: Product: syz [ 182.365607][ T2088] usb 8-1: Manufacturer: syz [ 182.370455][ T2088] usb 8-1: SerialNumber: syz [ 182.490539][ T36] audit: type=1400 audit(2000000851.036:27784): avc: denied { mount } for pid=7316 comm="syz.0.2382" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 182.522005][ T36] audit: type=1400 audit(2000000851.036:27785): avc: denied { connect } for pid=7316 comm="syz.0.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 182.550173][ T36] audit: type=1400 audit(2000000851.036:27786): avc: denied { accept } for pid=7316 comm="syz.0.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 182.612270][ T36] audit: type=1400 audit(2000000851.156:27787): avc: denied { wake_alarm } for pid=7318 comm="syz.4.2383" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 182.702841][ T36] audit: type=1400 audit(2000000851.246:27788): avc: denied { nlmsg_write } for pid=7323 comm="syz.4.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 182.778801][ T36] audit: type=1400 audit(2000000851.326:27789): avc: denied { mount } for pid=7333 comm="syz.4.2388" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 182.803360][ T36] audit: type=1400 audit(2000000851.346:27790): avc: denied { remount } for pid=7333 comm="syz.4.2388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 182.832554][ T36] audit: type=1400 audit(2000000851.376:27791): avc: denied { unmount } for pid=6958 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 182.847069][ T7336] netlink: 'syz.4.2389': attribute type 1 has an invalid length. [ 182.967009][ T7343] rust_binder: Write failure EFAULT in pid:75 [ 183.053459][ T7345] kvm: pic: non byte write [ 183.177952][ T7348] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.269735][ T7350] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=7350 comm=syz.0.2394 [ 183.377069][ T7350] input: syz1 as /devices/virtual/input/input20 [ 183.426363][ T2087] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 183.444574][ T7353] rust_binder: Write failure EFAULT in pid:51 [ 183.518074][ T7359] rust_binder: Error while translating object. [ 183.524316][ T7359] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 183.530586][ T7359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:57 [ 183.586284][ T2087] usb 5-1: Using ep0 maxpacket: 8 [ 183.602513][ T2087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.618707][ T2087] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.631716][ T2087] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 183.640820][ T2087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.654716][ T2087] usb 5-1: config 0 descriptor?? [ 184.069564][ T2087] hid-rmi 0003:06CB:81A7.000B: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 184.296058][ T332] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 184.323760][ T7371] 9pnet_fd: Insufficient options for proto=fd [ 184.367798][ T2087] usb 5-1: USB disconnect, device number 20 [ 184.456043][ T332] usb 1-1: Using ep0 maxpacket: 16 [ 184.462564][ T332] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.473007][ T332] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 184.483363][ T332] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.496664][ T332] usb 1-1: config 1 interface 0 has no altsetting 0 [ 184.505012][ T332] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 184.515581][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.523977][ T332] usb 1-1: Product: syz [ 184.528458][ T332] usb 1-1: Manufacturer: syz [ 184.533133][ T332] usb 1-1: SerialNumber: syz [ 184.742305][ T332] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 184.803413][ T2088] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 184.824783][ T2088] usb 8-1: USB disconnect, device number 3 [ 184.847503][ T363] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 184.866162][ T363] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.963424][ T332] usb 1-1: USB disconnect, device number 23 [ 185.166157][ T7369] usblp0: removed [ 185.586916][ T7390] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2407'. [ 185.711519][ T7392] rust_binder: Write failure EINVAL in pid:69 [ 185.790144][ T7399] /dev/md0: Can't lookup blockdev [ 185.801610][ T7401] rust_binder: 70: no such ref 2 [ 185.811293][ T7401] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 185.859177][ T7405] /dev/nullb0: Can't lookup blockdev [ 186.215305][ T7422] 9pnet_fd: Insufficient options for proto=fd [ 186.277596][ T7426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 186.766053][ T7438] tipc: Started in network mode [ 186.780174][ T7438] tipc: Node identity 163d3cb97a8a, cluster identity 4711 [ 186.787890][ T7438] tipc: Enabled bearer , priority 0 [ 186.796841][ T7438] tipc: Disabling bearer [ 186.866468][ T7440] binder: Unknown parameter 'conte' [ 187.294872][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 187.301380][ T363] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 187.377912][ T7451] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.405460][ T7454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 187.405495][ T7454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:105 [ 187.435440][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 187.435462][ T36] audit: type=1400 audit(2000000855.976:27812): avc: denied { bind } for pid=7455 comm="syz.7.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 187.481705][ T363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.501765][ T363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.522325][ T363] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.555620][ T363] usb 1-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 187.575793][ T363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.596453][ T363] usb 1-1: config 0 descriptor?? [ 187.870737][ T36] audit: type=1400 audit(2000000856.416:27813): avc: denied { setopt } for pid=7459 comm="syz.4.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 187.890970][ T7460] devpts: called with bogus options [ 187.960132][ T7462] rust_binder: Write failure EFAULT in pid:102 [ 188.029880][ T363] wacom 0003:056A:0309.000D: hidraw0: USB HID v0.00 Device [HID 056a:0309] on usb-dummy_hcd.0-1/input0 [ 188.230037][ T7444] rust_binder: Error in use_page_slow: ESRCH [ 188.230068][ T7444] rust_binder: use_range failure ESRCH [ 188.236416][ T7444] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 188.242023][ T7444] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 188.256039][ T7444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:82 [ 188.276952][ T363] usb 1-1: USB disconnect, device number 24 [ 188.572161][ T7474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 188.573438][ T36] audit: type=1400 audit(2000000857.116:27814): avc: denied { connect } for pid=7473 comm="syz.7.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 188.634558][ T36] audit: type=1400 audit(2000000857.116:27815): avc: denied { mount } for pid=7473 comm="syz.7.2437" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 188.727985][ T36] audit: type=1400 audit(2000000857.276:27816): avc: denied { setattr } for pid=293 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.775385][ T36] audit: type=1400 audit(2000000857.306:27817): avc: denied { create } for pid=7483 comm="syz.4.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.799053][ T36] audit: type=1400 audit(2000000857.306:27818): avc: denied { write } for pid=7483 comm="syz.4.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.827028][ T7489] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 188.846231][ T36] audit: type=1400 audit(2000000857.306:27819): avc: denied { read } for pid=7483 comm="syz.4.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.879910][ T36] audit: type=1400 audit(2000000857.306:27820): avc: denied { read } for pid=7483 comm="syz.4.2440" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.905739][ T36] audit: type=1400 audit(2000000857.306:27821): avc: denied { open } for pid=7483 comm="syz.4.2440" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.952452][ T7499] rust_binder: Error while translating object. [ 188.952510][ T7499] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 188.974005][ T7499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 189.006034][ T65] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 189.104760][ T7509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 189.104802][ T7509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:95 [ 189.197255][ T65] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 189.205362][ T7514] __vm_enough_memory: pid: 7514, comm: syz.7.2450, bytes: 18014402804453376 not enough memory for the allocation [ 189.226098][ T65] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 189.246043][ T65] usb 5-1: config 179 has no interface number 0 [ 189.256032][ T65] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 189.273979][ T65] usb 5-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 189.287583][ T65] usb 5-1: config 179 interface 65 has no altsetting 0 [ 189.294743][ T65] usb 5-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 189.303861][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.346525][ T752] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 189.507796][ T7530] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2456'. [ 189.534592][ T363] usb 5-1: USB disconnect, device number 21 [ 189.685841][ T7538] rust_binder: 110: no such ref 1 [ 189.691092][ T7538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:110 [ 189.736045][ T65] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 189.862679][ T7545] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2461'. [ 189.926069][ T65] usb 8-1: Using ep0 maxpacket: 32 [ 189.937046][ T65] usb 8-1: config 0 has an invalid interface number: 72 but max is 0 [ 189.945189][ T65] usb 8-1: config 0 has no interface number 0 [ 189.956978][ T65] usb 8-1: config 0 interface 72 has no altsetting 0 [ 189.977168][ T65] usb 8-1: New USB device found, idVendor=6069, idProduct=0f39, bcdDevice=e8.f9 [ 189.986384][ T65] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.994418][ T65] usb 8-1: Product: syz [ 190.006297][ T65] usb 8-1: Manufacturer: syz [ 190.013931][ T65] usb 8-1: SerialNumber: syz [ 190.022260][ T65] usb 8-1: config 0 descriptor?? [ 190.279946][ T7556] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2466'. [ 190.291010][ T7557] rust_binder: 7554 RLIMIT_NICE not set [ 190.372543][ T7563] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 190.378224][ T7563] rust_binder: Error while translating object. [ 190.409675][ T7563] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 190.415912][ T7563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 190.465537][ T7567] netlink: 'syz.4.2470': attribute type 32 has an invalid length. [ 190.466936][ T65] usb 8-1: MIDIStreaming interface descriptor not found [ 190.476437][ T7567] netlink: 'syz.4.2470': attribute type 32 has an invalid length. [ 190.501587][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 190.506376][ T65] usb 8-1: USB disconnect, device number 4 [ 190.696039][ T45] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 190.847189][ T45] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 190.855460][ T45] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 190.868049][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 190.879075][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 190.890373][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.903398][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.912522][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.921766][ T45] usb 1-1: config 0 descriptor?? [ 190.927109][ T7565] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 191.339409][ T45] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 191.348779][ T45] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 191.361365][ T45] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 191.607583][ T31] usb 1-1: USB disconnect, device number 25 [ 191.715364][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2474'. [ 191.847814][ T7579] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.847854][ T7579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 191.974421][ T7586] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.983792][ T7586] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 192.000266][ T31] rust_binder: 7584: removing orphan mapping 0:8 [ 192.070235][ T7594] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 192.142905][ T7598] overlayfs: statfs failed on './file0' [ 192.459828][ T36] kauditd_printk_skb: 89 callbacks suppressed [ 192.459849][ T36] audit: type=1400 audit(2000000861.006:27911): avc: denied { ioctl } for pid=7604 comm="syz.0.2485" path="socket:[39373]" dev="sockfs" ino=39373 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.546047][ T752] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 192.546634][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 192.619493][ T36] audit: type=1400 audit(2000000861.166:27912): avc: denied { bind } for pid=7609 comm="syz.0.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.621793][ T7610] rust_binder: inc_ref_done called when no active inc_refs [ 192.649096][ T36] audit: type=1400 audit(2000000861.166:27913): avc: denied { setopt } for pid=7609 comm="syz.0.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.713879][ T7614] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.714797][ T7614] rust_binder: 144: no such ref 0 [ 192.726601][ T7614] rust_binder: 144: no such ref 2 [ 193.022547][ T36] audit: type=1400 audit(2000000861.566:27914): avc: denied { create } for pid=7618 comm="syz.7.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 193.023568][ T7619] rust_binder: Write failure EINVAL in pid:181 [ 193.062688][ T36] audit: type=1400 audit(2000000861.566:27915): avc: denied { setopt } for pid=7618 comm="syz.7.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 193.077093][ T7619] Invalid ELF header magic: != ELF [ 193.088907][ T36] audit: type=1400 audit(2000000861.596:27916): avc: denied { module_load } for pid=7618 comm="syz.7.2490" path="/sys/kernel/kheaders.tar.xz" dev="sysfs" ino=4570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 193.149785][ T36] audit: type=1400 audit(2000000861.676:27917): avc: denied { read } for pid=7620 comm="syz.4.2491" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 193.173000][ T7626] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2492'. [ 193.200370][ T36] audit: type=1400 audit(2000000861.676:27918): avc: denied { open } for pid=7620 comm="syz.4.2491" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 193.224640][ T36] audit: type=1400 audit(2000000861.686:27919): avc: denied { ioctl } for pid=7620 comm="syz.4.2491" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 193.263130][ T36] audit: type=1400 audit(2000000861.736:27920): avc: denied { mounton } for pid=7623 comm="syz.7.2492" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 193.296919][ T7630] input: syz0 as /devices/virtual/input/input27 [ 193.362836][ T7643] rust_binder: Write failure EFAULT in pid:187 [ 193.380496][ T7640] SELinux: ebitmap: start bit 64 comes after start bit 1152 [ 193.397127][ T7640] SELinux: failed to load policy [ 193.407900][ T7646] can0: slcan on ptm0. [ 193.488640][ T7645] can0 (unregistered): slcan off ptm0. [ 193.613034][ T7668] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 193.769634][ T7684] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.837061][ T7688] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (80 ns). Using initial count to start timer. [ 193.866360][ T7688] netlink: 'syz.7.2506': attribute type 16 has an invalid length. [ 193.906051][ T7688] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.2506'. [ 194.187128][ T7702] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 194.218630][ T7702] netlink: 'syz.7.2507': attribute type 5 has an invalid length. [ 194.236296][ T7702] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 194.236333][ T7702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:200 [ 194.379712][ T7709] sock: sock_set_timeout: `syz.4.2509' (pid 7709) tries to set negative timeout [ 194.408237][ T7711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:206 [ 194.527102][ T7715] rust_binder: 208: no such ref 3 [ 194.892445][ T7723] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=7723 comm=syz.0.2514 [ 194.931402][ T7723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155 [ 194.990604][ T7725] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2516'. [ 195.011271][ T7725] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 195.011309][ T7725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159 [ 195.261525][ T7738] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.284689][ T7738] rust_binder: 162: no such ref 0 [ 195.468955][ T7759] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2528'. [ 195.479174][ T7759] rust_binder: Write failure EINVAL in pid:216 [ 195.495041][ T7755] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.510126][ T7755] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.517307][ T7755] bridge_slave_0: entered allmulticast mode [ 195.523663][ T7755] bridge_slave_0: entered promiscuous mode [ 195.530770][ T7755] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.537929][ T7755] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.546728][ T7755] bridge_slave_1: entered allmulticast mode [ 195.553346][ T7755] bridge_slave_1: entered promiscuous mode [ 195.613199][ T7773] tmpfs: Unknown parameter 'nr_i' [ 195.649428][ T331] tipc: Disabling bearer [ 195.659286][ T331] tipc: Left network mode [ 195.744913][ T7755] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.752036][ T7755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.759314][ T7755] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.766401][ T7755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.787990][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.802313][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.813091][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.820189][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.829613][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.836668][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.862878][ T7755] veth0_vlan: entered promiscuous mode [ 195.874718][ T7755] veth1_macvtap: entered promiscuous mode [ 195.907487][ T7789] netlink: 'syz.8.2522': attribute type 27 has an invalid length. [ 195.922292][ T7790] netlink: 'syz.8.2522': attribute type 27 has an invalid length. [ 196.102477][ T7794] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.102982][ T7794] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 196.110067][ T7794] rust_binder: Error while translating object. [ 196.117994][ T7794] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 196.124236][ T7794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165 [ 196.326258][ T7809] netlink: 'syz.4.2538': attribute type 12 has an invalid length. [ 196.344596][ T7809] fuse: Bad value for 'fd' [ 196.445850][ T7818] netlink: 'syz.8.2541': attribute type 27 has an invalid length. [ 196.575603][ T7822] rust_binder: Write failure EFAULT in pid:224 [ 196.594052][ T7826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.611564][ T7820] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 196.668617][ T7831] rust_binder: Error while translating object. [ 196.668650][ T7831] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 196.674945][ T7831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20 [ 196.922849][ T7848] netlink: 'syz.4.2551': attribute type 27 has an invalid length. [ 196.954234][ T7850] fuse: Unknown parameter 'jke\-' [ 196.979494][ T7854] netlink: 'syz.8.2554': attribute type 4 has an invalid length. [ 196.990131][ T7855] netlink: 'syz.8.2554': attribute type 4 has an invalid length. [ 197.121229][ T7871] tipc: Enabling of bearer rejected, failed to enable media [ 197.276618][ T363] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 197.371646][ T45] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 197.435586][ T363] usb 9-1: Using ep0 maxpacket: 16 [ 197.447282][ T363] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 197.456686][ T363] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.465047][ T363] usb 9-1: Product: syz [ 197.465153][ T7899] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2571'. [ 197.469799][ T363] usb 9-1: Manufacturer: syz [ 197.484435][ T363] usb 9-1: SerialNumber: syz [ 197.492304][ T363] r8152-cfgselector 9-1: Unknown version 0x0000 [ 197.498923][ T363] r8152-cfgselector 9-1: config 0 descriptor?? [ 197.523023][ T7901] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2572'. [ 197.544953][ T45] usb 1-1: config 7 has an invalid interface number: 9 but max is 2 [ 197.560354][ T45] usb 1-1: config 7 has an invalid interface number: 185 but max is 2 [ 197.569704][ T45] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 197.579916][ T45] usb 1-1: config 7 has 2 interfaces, different from the descriptor's value: 3 [ 197.589040][ T45] usb 1-1: config 7 has no interface number 0 [ 197.595232][ T45] usb 1-1: config 7 has no interface number 1 [ 197.601434][ T45] usb 1-1: config 7 interface 9 altsetting 147 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 197.612513][ T45] usb 1-1: config 7 interface 9 altsetting 147 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 197.623783][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2575'. [ 197.623804][ T45] usb 1-1: config 7 interface 9 altsetting 147 has a duplicate endpoint with address 0x1, skipping [ 197.643670][ T45] usb 1-1: config 7 interface 9 altsetting 147 endpoint 0xB has an invalid bInterval 125, changing to 4 [ 197.654934][ T45] usb 1-1: config 7 interface 9 altsetting 147 has 5 endpoint descriptors, different from the interface descriptor's value: 12 [ 197.668416][ T45] usb 1-1: too many endpoints for config 7 interface 185 altsetting 135: 49, using maximum allowed: 30 [ 197.679610][ T45] usb 1-1: config 7 interface 185 altsetting 135 has an invalid descriptor for endpoint zero, skipping [ 197.700384][ T45] usb 1-1: config 7 interface 185 altsetting 135 endpoint 0x3 has invalid wMaxPacketSize 0 [ 197.717430][ T45] usb 1-1: config 7 interface 185 altsetting 135 has a duplicate endpoint with address 0x1, skipping [ 197.728759][ T45] usb 1-1: config 7 interface 185 altsetting 135 has 4 endpoint descriptors, different from the interface descriptor's value: 49 [ 197.742762][ T45] usb 1-1: config 7 interface 9 has no altsetting 0 [ 197.750558][ T45] usb 1-1: config 7 interface 185 has no altsetting 0 [ 197.759289][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=a2.ff [ 197.768594][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.777122][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 197.777143][ T36] audit: type=1400 audit(2000000866.125:27984): avc: denied { checkpoint_restore } for pid=7916 comm="syz.7.2578" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 197.785910][ T45] usb 1-1: Product: syz [ 197.810815][ T45] usb 1-1: Manufacturer: syz [ 197.812389][ T7917] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2578'. [ 197.815533][ T45] usb 1-1: SerialNumber: syz [ 197.957024][ T7862] !@aaaaaaaaa: renamed from xfrm0 (while UP) [ 197.964897][ T363] r8152-cfgselector 9-1: Needed 1 retries to read version [ 197.972208][ T363] r8152-cfgselector 9-1: Unknown version 0x64d0 [ 197.978705][ T363] r8152-cfgselector 9-1: bad CDC descriptors [ 198.045055][ T7873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.053722][ T7873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.062250][ T7873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.071314][ T7873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.079825][ T7873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.085708][ T2088] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 198.089030][ T7873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.224216][ T2088] usb 8-1: device descriptor read/64, error -71 [ 198.237703][ T363] r8152-cfgselector 9-1: USB disconnect, device number 2 [ 198.253464][ T7919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7919 comm=syz.4.2579 [ 198.320772][ T45] asix 1-1:7.9 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 198.330907][ T45] asix 1-1:7.9: probe with driver asix failed with error -71 [ 198.339939][ T45] asix 1-1:7.185 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 198.350181][ T45] asix 1-1:7.185: probe with driver asix failed with error -71 [ 198.360081][ T45] usb 1-1: USB disconnect, device number 26 [ 198.490648][ T2088] usb 8-1: device descriptor read/64, error -71 [ 198.746426][ T2088] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 198.791747][ T7921] netlink: 324 bytes leftover after parsing attributes in process `syz.8.2580'. [ 198.817772][ T36] audit: type=1326 audit(2000000867.092:27985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7922 comm="syz.4.2581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1385b8eec9 code=0x0 [ 198.818838][ T7925] rust_binder: Write failure EFAULT in pid:47 [ 198.855715][ T7927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:49 [ 198.895936][ T2088] usb 8-1: device descriptor read/64, error -71 [ 198.919172][ T36] audit: type=1400 audit(2000000867.186:27986): avc: denied { mounton } for pid=7939 comm="syz.8.2587" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.949548][ T7945] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 198.949575][ T7945] rust_binder: Error while translating object. [ 198.961531][ T7945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 198.963142][ T7947] fuse: Bad value for 'group_id' [ 198.968115][ T7945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:184 [ 198.978692][ T7949] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2591'. [ 199.000872][ T7947] fuse: Bad value for 'group_id' [ 199.002449][ T7951] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 199.038187][ T7953] incfs: Options parsing error. -22 [ 199.044554][ T7953] incfs: mount failed -22 [ 199.058143][ T7951] 9pnet: Could not find request transport: fm [ 199.123669][ T36] audit: type=1400 audit(2000000867.383:27987): avc: denied { write } for pid=7971 comm="syz.4.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 199.168616][ T7978] netlink: 57 bytes leftover after parsing attributes in process `syz.4.2602'. [ 199.202858][ T7981] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2603'. [ 199.212014][ T2088] usb 8-1: device descriptor read/64, error -71 [ 199.242408][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2604'. [ 199.251957][ T36] audit: type=1400 audit(2000000867.505:27988): avc: denied { setattr } for pid=7982 comm="syz.8.2604" path="/dev/binderfs/binder1" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 199.252526][ T7983] rust_binder: 64: no such ref 2 [ 199.332672][ T2088] usb usb8-port1: attempt power cycle [ 199.492543][ T10] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 199.653591][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 199.661606][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 199.670410][ T10] usb 1-1: config 12 has an invalid interface number: 184 but max is 0 [ 199.678716][ T10] usb 1-1: config 12 has no interface number 0 [ 199.685032][ T10] usb 1-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 199.696453][ T2088] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 199.705374][ T10] usb 1-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 199.714503][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.722601][ T10] usb 1-1: Product: syz [ 199.726788][ T10] usb 1-1: Manufacturer: syz [ 199.731530][ T10] usb 1-1: SerialNumber: syz [ 199.736782][ T2088] usb 8-1: device descriptor read/8, error -71 [ 199.745429][ T36] audit: type=1400 audit(2000000867.974:27989): avc: denied { create } for pid=7996 comm="syz.4.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 199.837170][ T36] audit: type=1400 audit(2000000868.058:27990): avc: denied { ioctl } for pid=8002 comm="syz.4.2613" path="socket:[42062]" dev="sockfs" ino=42062 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 199.871307][ T36] audit: type=1400 audit(2000000868.058:27991): avc: denied { setopt } for pid=8002 comm="syz.4.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 199.892614][ T8005] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2614'. [ 199.910606][ T2088] usb 8-1: device descriptor read/8, error -71 [ 199.937969][ T8009] tc_dump_action: action bad kind [ 199.959530][ T36] audit: type=1400 audit(2000000868.171:27992): avc: denied { bind } for pid=8011 comm="syz.4.2617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 200.007752][ T36] audit: type=1400 audit(2000000868.209:27993): avc: denied { create } for pid=8016 comm="syz.4.2619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 200.036521][ T8024] rust_binder: Read failure Err(EAGAIN) in pid:191 [ 200.046970][ T8026] rust_binder: 79: no such ref 3 [ 200.163841][ T2088] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 200.186130][ T2088] usb 8-1: device descriptor read/8, error -71 [ 200.325046][ T2088] usb 8-1: device descriptor read/8, error -71 [ 200.355750][ T580] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 200.441049][ T2088] usb usb8-port1: unable to enumerate USB device [ 200.494327][ T580] usb 9-1: device descriptor read/64, error -71 [ 200.749983][ T580] usb 9-1: device descriptor read/64, error -71 [ 201.016427][ T580] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 201.154963][ T580] usb 9-1: device descriptor read/64, error -71 [ 201.410784][ T580] usb 9-1: device descriptor read/64, error -71 [ 201.528075][ T580] usb usb9-port1: attempt power cycle [ 201.890322][ T580] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 201.916281][ T580] usb 9-1: device descriptor read/8, error -71 [ 201.937539][ T8077] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 201.937566][ T8077] rust_binder: Error while translating object. [ 201.946388][ T8077] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.952613][ T8077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:253 [ 202.061894][ T580] usb 9-1: device descriptor read/8, error -71 [ 202.231358][ T45] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 202.327324][ T580] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 202.349654][ T580] usb 9-1: device descriptor read/8, error -71 [ 202.392722][ T45] usb 8-1: config 8 has an invalid interface number: 223 but max is 0 [ 202.401005][ T45] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 202.411140][ T45] usb 8-1: config 8 has no interface number 0 [ 202.417306][ T45] usb 8-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 202.427172][ T45] usb 8-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.441766][ T45] usb 8-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 202.450901][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.459113][ T45] usb 8-1: Product: syz [ 202.463429][ T45] usb 8-1: Manufacturer: syz [ 202.469736][ T10] usb 1-1: USB disconnect, device number 27 [ 202.469873][ T45] usb 8-1: SerialNumber: syz [ 202.492238][ T580] usb 9-1: device descriptor read/8, error -71 [ 202.610243][ T8085] netlink: 'syz.4.2646': attribute type 6 has an invalid length. [ 202.615235][ T580] usb usb9-port1: unable to enumerate USB device [ 202.618481][ T8085] netlink: 'syz.4.2646': attribute type 5 has an invalid length. [ 202.632805][ T8086] netlink: 'syz.4.2646': attribute type 6 has an invalid length. [ 202.640646][ T8086] netlink: 'syz.4.2646': attribute type 5 has an invalid length. [ 202.721004][ T45] usb 8-1: USB disconnect, device number 9 [ 202.795471][ T8114] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 202.795498][ T8114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:208 [ 202.818464][ T8117] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 202.835682][ T8117] rust_binder: Write failure EINVAL in pid:211 [ 202.863558][ T8122] __vm_enough_memory: pid: 8122, comm: syz.0.2659, bytes: 18014402804453376 not enough memory for the allocation [ 203.158560][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 203.267789][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 203.267804][ T36] audit: type=1400 audit(2000000871.277:28011): avc: denied { wake_alarm } for pid=8129 comm="syz.7.2662" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 203.311317][ T8135] __nla_validate_parse: 10 callbacks suppressed [ 203.311334][ T8135] netlink: 324 bytes leftover after parsing attributes in process `syz.8.2663'. [ 203.318410][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 203.337998][ T10] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 203.354725][ T10] usb 1-1: config 0 has no interface number 0 [ 203.361596][ T8139] fuse: Unknown parameter 'groep_id' [ 203.367325][ T10] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 203.377472][ T36] audit: type=1400 audit(2000000871.371:28012): avc: denied { ioctl } for pid=8138 comm="syz.8.2665" path="mnt:[4026532391]" dev="nsfs" ino=4026532391 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 203.399873][ T8141] rust_binder: Write failure EFAULT in pid:262 [ 203.402606][ T10] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 203.418821][ T10] usb 1-1: config 0 interface 196 has no altsetting 0 [ 203.427549][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 203.436658][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.444689][ T10] usb 1-1: Product: syz [ 203.449193][ T10] usb 1-1: Manufacturer: syz [ 203.453832][ T10] usb 1-1: SerialNumber: syz [ 203.459230][ T10] usb 1-1: config 0 descriptor?? [ 203.586219][ T36] audit: type=1400 audit(2000000871.577:28013): avc: denied { mounton } for pid=8144 comm="syz.7.2668" path="/93/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 203.676877][ T36] audit: type=1400 audit(2000000871.652:28014): avc: denied { unmount } for pid=7026 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 203.698687][ T8128] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 203.708751][ T10] ipheth 1-1:0.196: Unable to find endpoints [ 203.716200][ T10] usb 1-1: USB disconnect, device number 28 [ 203.735197][ T45] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 203.739076][ T36] audit: type=1400 audit(2000000871.718:28015): avc: denied { write } for pid=8148 comm="syz.7.2669" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 203.788516][ T36] audit: type=1400 audit(2000000871.765:28016): avc: denied { execute_no_trans } for pid=8151 comm="syz.7.2670" path="/95/file1" dev="tmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 203.831122][ T8156] netlink: 324 bytes leftover after parsing attributes in process `syz.7.2672'. [ 203.893893][ T45] usb 9-1: Using ep0 maxpacket: 16 [ 203.900085][ T45] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 203.908298][ T45] usb 9-1: config 0 has no interface number 0 [ 203.915796][ T45] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 203.924882][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.932998][ T45] usb 9-1: Product: syz [ 203.937883][ T45] usb 9-1: Manufacturer: syz [ 203.942495][ T45] usb 9-1: SerialNumber: syz [ 203.947877][ T45] usb 9-1: config 0 descriptor?? [ 204.107027][ T580] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 204.252719][ T36] audit: type=1400 audit(2000000872.196:28017): avc: denied { unmount } for pid=7161 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 204.276937][ T580] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 204.288426][ T580] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.298216][ T580] usb 8-1: config 0 interface 0 has no altsetting 0 [ 204.304939][ T580] usb 8-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 204.314120][ T580] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.327093][ T580] usb 8-1: config 0 descriptor?? [ 204.340039][ T45] usb 9-1: Found UVC 0.00 device syz (046d:08f3) [ 204.351901][ T45] usb 9-1: No valid video chain found. [ 204.358656][ T45] usb 9-1: USB disconnect, device number 7 [ 204.639930][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 204.775120][ T580] lenovo 0003:17EF:60A4.000F: hidraw0: USB HID v0.00 Device [HID 17ef:60a4] on usb-dummy_hcd.7-1/input0 [ 204.799761][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 204.806052][ T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.815990][ T10] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 204.828951][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 204.835609][ T10] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 204.844656][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.853336][ T10] usb 1-1: config 0 descriptor?? [ 205.030338][ T580] usb 8-1: USB disconnect, device number 10 [ 205.286663][ T10] hid-thrustmaster 0003:044F:B65D.0010: item fetching failed at offset 1/5 [ 205.296538][ T10] hid-thrustmaster 0003:044F:B65D.0010: parse failed with error -22 [ 205.304637][ T10] hid-thrustmaster 0003:044F:B65D.0010: probe with driver hid-thrustmaster failed with error -22 [ 205.500620][ T36] audit: type=1400 audit(2000000873.369:28018): avc: denied { mounton } for pid=8163 comm="syz.0.2675" path="/syzcgroup/unified/syz0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 205.500923][ T8164] exFAT-fs (rnullb0): invalid boot record signature [ 205.530677][ T8164] exFAT-fs (rnullb0): failed to read boot sector [ 205.537037][ T8164] exFAT-fs (rnullb0): failed to recognize exfat type [ 205.546010][ T10] usb 1-1: USB disconnect, device number 29 [ 205.644933][ T8172] rust_binder: Write failure EFAULT in pid:282 [ 205.647401][ T36] audit: type=1400 audit(2000000873.510:28019): avc: denied { ioctl } for pid=8171 comm="syz.7.2677" path="socket:[42440]" dev="sockfs" ino=42440 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.755298][ T8178] rust_binder: Write failure EFAULT in pid:284 [ 205.794963][ T8177] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 205.801190][ T8177] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 205.878402][ T8183] netlink: 324 bytes leftover after parsing attributes in process `syz.7.2681'. [ 205.910095][ T8185] rust_binder: Write failure EFAULT in pid:290 [ 205.924114][ T36] audit: type=1400 audit(2000005225.762:28020): avc: denied { getopt } for pid=8186 comm="syz.7.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.929224][ T8187] IPv6: NLM_F_CREATE should be specified when creating new route [ 205.958197][ T8187] IPv6: NLM_F_REPLACE set, but no existing node found! [ 205.966455][ T8187] veth1: entered allmulticast mode [ 206.026188][ T8193] veth1: left allmulticast mode [ 206.108316][ T8198] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 206.108342][ T8198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:230 [ 206.946164][ T8213] __vm_enough_memory: pid: 8213, comm: syz.8.2693, bytes: 18014402804453376 not enough memory for the allocation [ 206.984248][ T8165] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 207.006619][ T8165] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 207.085642][ T8222] SELinux: Context unconfined is not valid (left unmapped). [ 207.101925][ T363] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 207.163740][ T8228] loop2: detected capacity change from 0 to 7 [ 207.284272][ T363] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 207.297507][ T363] usb 8-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 207.312886][ T363] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.328972][ T363] usb 8-1: config 0 descriptor?? [ 207.605035][ T8241] rust_binder: 122: no such ref 3 [ 207.610315][ T8241] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 207.617558][ T8241] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 207.624806][ T8241] rust_binder: Write failure EFAULT in pid:122 [ 207.768347][ T363] dragonrise 0003:0079:0006.0012: unknown main item tag 0x0 [ 207.782062][ T363] dragonrise 0003:0079:0006.0012: unknown main item tag 0x0 [ 207.789417][ T363] dragonrise 0003:0079:0006.0012: unknown main item tag 0x0 [ 207.796815][ T363] dragonrise 0003:0079:0006.0012: unknown main item tag 0x0 [ 207.804156][ T363] dragonrise 0003:0079:0006.0012: unknown main item tag 0x0 [ 207.812455][ T363] dragonrise 0003:0079:0006.0012: hidraw0: USB HID v1.02 Device [HID 0079:0006] on usb-dummy_hcd.7-1/input0 [ 207.826380][ T363] dragonrise 0003:0079:0006.0012: no inputs found [ 207.848554][ T363] dragonrise 0003:0079:0006.0012: force feedback init failed [ 207.982196][ T2088] usb 8-1: USB disconnect, device number 11 [ 208.392476][ T8248] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 208.392513][ T8248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:126 [ 208.437322][ T8250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128 [ 208.520245][ T8256] rust_binder: Got transaction with invalid offset. [ 208.529532][ T8256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 208.536510][ T8256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 208.592562][ T8265] tipc: Enabling of bearer rejected, failed to enable media [ 208.766819][ T8269] rust_binder: 8269 RLIMIT_NICE not set [ 208.786889][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 208.786912][ T36] audit: type=1400 audit(2000005228.455:28034): avc: denied { setopt } for pid=8274 comm="syz.0.2714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.844128][ T8275] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2714'. [ 208.845725][ T36] audit: type=1400 audit(2000005228.511:28035): avc: denied { lock } for pid=8277 comm="syz.8.2715" path="socket:[44207]" dev="sockfs" ino=44207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 208.853419][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 208.889090][ T8275] binder: Bad value for 'stats' [ 208.990728][ T36] audit: type=1400 audit(2000005228.643:28036): avc: denied { mount } for pid=8279 comm="syz.0.2716" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 209.103878][ T8282] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 209.107107][ T8282] input: syz1 as /devices/virtual/input/input30 [ 209.123072][ T8282] rust_binder: Error while translating object. [ 209.123091][ T8282] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 209.131697][ T8282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:254 [ 209.196340][ T36] audit: type=1326 audit(2000005228.840:28037): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8191 comm="syz.4.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1385b8eec9 code=0x7fc00000 [ 209.327247][ T8302] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2723'. [ 209.367086][ T8308] rust_binder: Write failure EINVAL in pid:270 [ 209.377941][ T36] audit: type=1400 audit(2000005229.008:28038): avc: denied { read } for pid=8310 comm="syz.4.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.415342][ T8313] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 209.422598][ T8313] rust_binder: Write failure EINVAL in pid:275 [ 209.423765][ T36] audit: type=1400 audit(2000005229.046:28039): avc: denied { setopt } for pid=8312 comm="syz.0.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.559862][ T2087] rust_binder: 8263: removing orphan mapping 0:1048 [ 209.589286][ T36] audit: type=1400 audit(2000005229.205:28040): avc: denied { mounton } for pid=8317 comm="syz.0.2729" path="/95/file0" dev="tmpfs" ino=524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 209.617468][ T8320] tipc: Started in network mode [ 209.622378][ T8320] tipc: Node identity 4, cluster identity 4711 [ 209.628613][ T8320] tipc: Node number set to 4 [ 209.689547][ T36] audit: type=1400 audit(2000005229.299:28041): avc: denied { read write } for pid=7161 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.704960][ T8326] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 209.714304][ T36] audit: type=1400 audit(2000005229.299:28042): avc: denied { open } for pid=7161 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.725886][ T8326] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 209.747103][ T36] audit: type=1400 audit(2000005229.299:28043): avc: denied { ioctl } for pid=7161 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.809882][ T8332] __vm_enough_memory: pid: 8332, comm: syz.7.2734, bytes: 18014402804453376 not enough memory for the allocation [ 210.019905][ T8344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 210.019943][ T8344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:317 [ 210.096995][ T363] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 210.170503][ T8350] rust_binder: Error while translating object. [ 210.170539][ T8350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 210.176821][ T8350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:324 [ 210.199948][ T8352] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 210.223388][ T8352] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 210.256429][ T8358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.266509][ T8358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.275198][ T8358] netlink: 188 bytes leftover after parsing attributes in process `syz.7.2743'. [ 210.283714][ T8361] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2744'. [ 210.284324][ T363] usb 1-1: Using ep0 maxpacket: 16 [ 210.297956][ T8359] netlink: 188 bytes leftover after parsing attributes in process `syz.7.2743'. [ 210.299743][ T363] usb 1-1: too many configurations: 233, using maximum allowed: 8 [ 210.321754][ T363] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 210.329605][ T363] usb 1-1: can't read configurations, error -61 [ 210.470100][ T363] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 210.502032][ T2087] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 210.629930][ T363] usb 1-1: Using ep0 maxpacket: 16 [ 210.635521][ T363] usb 1-1: too many configurations: 233, using maximum allowed: 8 [ 210.644509][ T363] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 210.651286][ T2087] usb 8-1: device descriptor read/64, error -71 [ 210.652593][ T363] usb 1-1: can't read configurations, error -61 [ 210.666287][ T363] usb usb1-port1: attempt power cycle [ 210.895666][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2747'. [ 210.904644][ T8369] bridge_slave_1: left allmulticast mode [ 210.910428][ T2087] usb 8-1: device descriptor read/64, error -71 [ 210.910734][ T8369] bridge_slave_1: left promiscuous mode [ 210.922507][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.930243][ T8369] bridge_slave_0: left allmulticast mode [ 210.935941][ T8369] bridge_slave_0: left promiscuous mode [ 210.941788][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.952980][ T8370] fuse: Bad value for 'fd' [ 211.002979][ T752] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 211.024326][ T363] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 211.045964][ T363] usb 1-1: Using ep0 maxpacket: 16 [ 211.051543][ T363] usb 1-1: too many configurations: 233, using maximum allowed: 8 [ 211.060616][ T363] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 211.068233][ T363] usb 1-1: can't read configurations, error -61 [ 211.173529][ T2087] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 211.205497][ T363] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 211.227159][ T363] usb 1-1: Using ep0 maxpacket: 16 [ 211.232783][ T363] usb 1-1: too many configurations: 233, using maximum allowed: 8 [ 211.241768][ T363] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 211.249468][ T363] usb 1-1: can't read configurations, error -61 [ 211.255842][ T363] usb usb1-port1: unable to enumerate USB device [ 211.312105][ T2087] usb 8-1: device descriptor read/64, error -71 [ 211.567946][ T2087] usb 8-1: device descriptor read/64, error -71 [ 211.685285][ T2087] usb usb8-port1: attempt power cycle [ 211.907588][ T8418] rust_binder: Error while translating object. [ 211.907637][ T8418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 211.913967][ T8418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:192 [ 212.047529][ T2087] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 212.080527][ T2087] usb 8-1: device descriptor read/8, error -71 [ 212.219096][ T2087] usb 8-1: device descriptor read/8, error -71 [ 212.473888][ T2087] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 212.496760][ T2087] usb 8-1: device descriptor read/8, error -71 [ 212.634852][ T2087] usb 8-1: device descriptor read/8, error -71 [ 212.649569][ T8438] fuse: Bad value for 'user_id' [ 212.654612][ T8438] fuse: Bad value for 'user_id' [ 212.701350][ T8441] rust_binder: Write failure EFAULT in pid:196 [ 212.719844][ T8449] cgroup: Unknown subsys name 'smackfshat' [ 212.751120][ T2087] usb usb8-port1: unable to enumerate USB device [ 213.029780][ T2087] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 213.045945][ T8468] tipc: Enabling of bearer rejected, failed to enable media [ 213.054770][ T8468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 213.054794][ T8468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:288 [ 213.066957][ T8468] rust_binder: 288: no such ref 0 [ 213.199668][ T2087] usb 9-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 213.208906][ T2087] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.218134][ T2087] usb 9-1: config 0 descriptor?? [ 213.224307][ T2087] usb-storage 9-1:0.0: USB Mass Storage device detected [ 213.232552][ T2087] usb-storage 9-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 213.232552][ T2087] Please send a copy of this message to and [ 213.465162][ T363] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 213.481458][ T8475] input: syz0 as /devices/virtual/input/input31 [ 213.521710][ T8480] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.532263][ T8479] rust_binder: Error in use_page_slow: ESRCH [ 213.538715][ T8479] rust_binder: use_range failure ESRCH [ 213.544945][ T8479] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 213.550546][ T8479] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 213.558627][ T8479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:340 [ 213.568456][ T8479] rust_binder: Read failure Err(EAGAIN) in pid:340 [ 213.578042][ T8480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:340 [ 213.578042][ T8479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:340 [ 213.622098][ T8482] rust_binder: Error while translating object. [ 213.627061][ T363] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 213.631499][ T8482] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 213.637561][ T363] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 213.648914][ T8482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:343 [ 213.657519][ T363] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 213.689314][ T363] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.698418][ T363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.706529][ T363] usb 1-1: Product: ꝗꭋ渆퇆樍唖婆ᐘ蔙ㅂ諂꿤יִ埊᳏൒ꎖ뙆䖴౺⒬챴俻썳沵㔔汳咫ᱣ끟鬺┶诱ᘵ銼뵑긶齁⇭댵儒稽㐂关鴜飧㥎돃ꜳ됂ස걤븡끒ʹ⏑珎杦傾Ġ [ 213.728570][ T363] usb 1-1: Manufacturer: ᰊ [ 213.733245][ T363] usb 1-1: SerialNumber: Ⰱ [ 213.739001][ T8470] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 213.767474][ T8495] netlink: 'syz.4.2783': attribute type 4 has an invalid length. [ 213.777141][ T8495] netlink: 'syz.4.2783': attribute type 4 has an invalid length. [ 213.798034][ T8500] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2784'. [ 213.807438][ T8501] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2784'. [ 213.944817][ T2087] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 213.963807][ T363] cdc_ncm 1-1:1.0: bind() failure [ 213.969705][ T363] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 213.976563][ T363] cdc_ncm 1-1:1.1: bind() failure [ 213.983662][ T363] usb 1-1: USB disconnect, device number 34 [ 213.999515][ T8165] usb 9-1: USB disconnect, device number 8 [ 214.127047][ T2087] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 214.135902][ T2087] usb 8-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 214.146228][ T2087] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 214.158824][ T2087] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.167882][ T2087] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.175984][ T2087] usb 8-1: Product: syz [ 214.180196][ T2087] usb 8-1: Manufacturer: syz [ 214.184797][ T2087] usb 8-1: SerialNumber: syz [ 214.301097][ T36] kauditd_printk_skb: 89 callbacks suppressed [ 214.301132][ T36] audit: type=1400 audit(2000005233.624:28133): avc: denied { sys_module } for pid=8517 comm="syz.8.2791" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 214.328700][ T36] audit: type=1400 audit(2000005233.634:28134): avc: denied { read } for pid=8517 comm="syz.8.2791" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.352457][ T36] audit: type=1400 audit(2000005233.634:28135): avc: denied { open } for pid=8517 comm="syz.8.2791" path="/63/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.377128][ T36] audit: type=1400 audit(2000005233.634:28136): avc: denied { ioctl } for pid=8517 comm="syz.8.2791" path="/63/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.416755][ T36] audit: type=1400 audit(2000005233.737:28137): avc: denied { read write } for pid=8483 comm="syz.7.2779" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 214.440600][ T8165] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 214.441103][ T36] audit: type=1400 audit(2000005233.737:28138): avc: denied { open } for pid=8483 comm="syz.7.2779" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 214.478575][ T8165] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 214.497916][ T36] audit: type=1400 audit(2000005233.803:28139): avc: denied { ioctl } for pid=8521 comm="syz.4.2792" path="socket:[45320]" dev="sockfs" ino=45320 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 214.562702][ T36] audit: type=1400 audit(2000005233.868:28140): avc: denied { mounton } for pid=8526 comm="syz.0.2794" path="/100/file0" dev="tmpfs" ino=550 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 214.568651][ T8529] 9pnet_fd: Insufficient options for proto=fd [ 214.591999][ T36] audit: type=1400 audit(2000005233.868:28141): avc: denied { setattr } for pid=8526 comm="syz.0.2794" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.615638][ T36] audit: type=1400 audit(2000005233.868:28142): avc: denied { write } for pid=8526 comm="syz.0.2794" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.840459][ T332] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 214.893413][ T45] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 214.978669][ T332] usb 1-1: device descriptor read/64, error -71 [ 215.054438][ T45] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.064734][ T45] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 215.073622][ T45] usb 9-1: config 1 has no interface number 0 [ 215.079805][ T45] usb 9-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.094170][ T45] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.103315][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.112215][ T45] usb 9-1: Product: syz [ 215.116404][ T45] usb 9-1: Manufacturer: syz [ 215.121042][ T45] usb 9-1: SerialNumber: syz [ 215.128272][ T45] usb 9-1: selecting invalid altsetting 1 [ 215.245164][ T332] usb 1-1: device descriptor read/64, error -71 [ 215.255553][ T8540] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2799'. [ 215.265357][ T8542] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 215.340997][ T45] cdc_ncm 9-1:1.1: bind() failure [ 215.348336][ T45] usb 9-1: USB disconnect, device number 9 [ 215.465430][ T8567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.474093][ T8567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.501981][ T332] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 215.650161][ T332] usb 1-1: device descriptor read/64, error -71 [ 215.788572][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2806'. [ 215.905995][ T332] usb 1-1: device descriptor read/64, error -71 [ 215.921647][ T8582] fuse: Invalid gid '00000000000037777777777' [ 215.977402][ T8589] rust_binder: Error while translating object. [ 215.977439][ T8589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 215.983929][ T8589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:219 [ 216.023350][ T332] usb usb1-port1: attempt power cycle [ 216.066632][ T8593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.075169][ T8593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.211279][ T8596] rust_binder: 223: no such ref 0 [ 216.216516][ T8596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:223 [ 216.366440][ T8600] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2816'. [ 216.396317][ T332] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 216.418608][ T332] usb 1-1: device descriptor read/8, error -71 [ 216.557134][ T332] usb 1-1: device descriptor read/8, error -71 [ 216.630984][ T8610] rust_binder: Error while translating object. [ 216.631020][ T8610] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 216.637242][ T8610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:380 [ 216.811971][ T332] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 216.844955][ T332] usb 1-1: device descriptor read/8, error -71 [ 216.983556][ T332] usb 1-1: device descriptor read/8, error -71 [ 217.099851][ T332] usb usb1-port1: unable to enumerate USB device [ 217.139294][ T8622] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 217.152006][ T8622] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 217.160419][ T8622] CPU: 1 UID: 0 PID: 8622 Comm: syz.8.2824 Not tainted syzkaller #0 ebd888673537e6d433689cc680383d43a5383a5c [ 217.171968][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 217.182037][ T8622] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 217.188326][ T8622] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 97 d3 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 73 d3 e6 ff 4c 8b 1b 48 8b 3c 24 [ 217.207960][ T8622] RSP: 0018:ffffc90000fbf820 EFLAGS: 00010202 [ 217.214068][ T8622] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff8881194da600 [ 217.222065][ T8622] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffeffff [ 217.230047][ T8622] RBP: ffffc90000fbfa40 R08: ffff8881f6f72240 R09: 1ffff1103edee448 [ 217.238039][ T8622] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 217.246023][ T8622] R13: 7ffffffffffeffff R14: ffff888100f38810 R15: ffff888100f38800 [ 217.254307][ T8622] FS: 00007f87f4e3f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 217.263255][ T8622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.269846][ T8622] CR2: 0000200000001900 CR3: 00000001219dc000 CR4: 00000000003526b0 [ 217.277843][ T8622] Call Trace: [ 217.281130][ T8622] [ 217.284084][ T8622] ? __cfi_iter_file_splice_write+0x10/0x10 [ 217.290007][ T8622] ? __kasan_kmalloc+0x96/0xb0 [ 217.294793][ T8622] ? __kasan_check_write+0x18/0x20 [ 217.299942][ T8622] ? __cfi_iter_file_splice_write+0x10/0x10 [ 217.305868][ T8622] direct_splice_actor+0x279/0x4b0 [ 217.311022][ T8622] splice_direct_to_actor+0x4fe/0xbc0 [ 217.316424][ T8622] ? __cfi_direct_splice_actor+0x10/0x10 [ 217.322087][ T8622] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 217.328006][ T8622] do_splice_direct+0x182/0x270 [ 217.332880][ T8622] ? __cfi_do_splice_direct+0x10/0x10 [ 217.338274][ T8622] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 217.344184][ T8622] ? security_file_permission+0x2e/0xc0 [ 217.349746][ T8622] ? rw_verify_area+0xac/0x230 [ 217.354543][ T8622] do_sendfile+0x5c8/0xfb0 [ 217.358978][ T8622] ? vfs_writev+0xcf0/0xcf0 [ 217.363500][ T8622] ? __se_sys_futex+0x28f/0x300 [ 217.368364][ T8622] __x64_sys_sendfile64+0x193/0x1f0 [ 217.373577][ T8622] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 217.379339][ T8622] ? switch_fpu_return+0x12/0x20 [ 217.384294][ T8622] x64_sys_call+0xa26/0x2ee0 [ 217.388901][ T8622] do_syscall_64+0x58/0xf0 [ 217.393325][ T8622] ? clear_bhb_loop+0x50/0xa0 [ 217.398006][ T8622] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 217.403910][ T8622] RIP: 0033:0x7f87f3f8eec9 [ 217.408345][ T8622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.427958][ T8622] RSP: 002b:00007f87f4e3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 217.436375][ T8622] RAX: ffffffffffffffda RBX: 00007f87f41e5fa0 RCX: 00007f87f3f8eec9 [ 217.444364][ T8622] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 217.452360][ T8622] RBP: 00007f87f4011f91 R08: 0000000000000000 R09: 0000000000000000 [ 217.460345][ T8622] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000 [ 217.468327][ T8622] R13: 00007f87f41e6038 R14: 00007f87f41e5fa0 R15: 00007ffd469d6fb8 [ 217.476318][ T8622] [ 217.479339][ T8622] Modules linked in: [ 217.483503][ T8622] ---[ end trace 0000000000000000 ]--- [ 217.494259][ T8622] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 217.500579][ T8622] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 97 d3 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 73 d3 e6 ff 4c 8b 1b 48 8b 3c 24 [ 217.520292][ T8622] RSP: 0018:ffffc90000fbf820 EFLAGS: 00010202 [ 217.526573][ T8622] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff8881194da600 [ 217.534592][ T8622] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffeffff [ 217.542632][ T8622] RBP: ffffc90000fbfa40 R08: ffff8881f6f72240 R09: 1ffff1103edee448 [ 217.550659][ T8622] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 217.558678][ T8622] R13: 7ffffffffffeffff R14: ffff888100f38810 R15: ffff888100f38800 [ 217.566677][ T8622] FS: 00007f87f4e3f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 217.575705][ T8622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.582339][ T8622] CR2: 0000200000001900 CR3: 00000001219dc000 CR4: 00000000003526b0 [ 217.590360][ T8622] Kernel panic - not syncing: Fatal exception [ 217.596715][ T8622] Kernel Offset: disabled [ 217.601047][ T8622] Rebooting in 86400 seconds..