last executing test programs: 8m33.146491034s ago: executing program 32 (id=96): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 5m56.218124074s ago: executing program 0 (id=2930): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000100)='aNh', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r1, &(0x7f0000000040)=""/141, 0x8d) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r2, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) futex(0x0, 0xb, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x2) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sendfile(r1, r1, 0x0, 0x7ffff000) 5m56.211005594s ago: executing program 0 (id=2931): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x5}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 5m56.208079414s ago: executing program 0 (id=2932): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) unshare(0x20000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') setns(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x3}) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x3}) 5m56.207422334s ago: executing program 0 (id=2933): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x20010, r0, 0x0) pwrite64(r0, &(0x7f0000000000)="7340b6ddb0172f02491d365719fbb7557758565640ed6da77c0c2fcab7a7304581b3fa37521684f04a134df14969de136ce55493e8c1dc1b7cd10b1b8412510e1e26e097dc676b2b", 0x48, 0x200) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="9a29cd1fb4ccd347afc934b1ef3922299c16637f5766dd4f2e5497f28b98b220ceaa8df22e1f4e2e83f31d76ecb812966cb2cc5590b2dbd9496a895f52df578a2b2897f00914e3bfa2b9ea55c39cd5b7"}) syz_clone(0x41020000, 0x0, 0x0, 0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) 5m56.123801425s ago: executing program 0 (id=2935): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='squashfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) rt_sigaction(0x2a, &(0x7f0000000480)={&(0x7f00000003c0)="262ef3460f1efac4615d5e32c4626db7fd676436460f948600000000c4e2d9920c808f4840ed25ce4b985dd1c442f91e3504000000c4c1f97e6100269b0f1c5a06", 0x0, &(0x7f0000000440)="c4617810aec3c62900c4c11de2aa01000000c4c19d681bc4e1116c12c4a27d19e0c422b945c8660fd53ac4e20db8ff66400f1aa70d000100640f38c94af2", {[0x95]}}, &(0x7f0000000640)={&(0x7f00000005c0)="d2e78fe840ef3b00c4c15d65cec441c9ef5e0045dcf0c4a2cd96208f4878c0943e740a14d1f0c4a32d5ee4008fa978e3163ef2ad", 0x0, &(0x7f0000000600)="c40178105e99f08385000000000bc482a5bb1342d27f0cc4e259ad73e16626660fc6c43a0f9f8cd8fcbd2881260f14444605c423b56800f1c4e209005f0d"}, 0x8, &(0x7f0000000680)) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2000, 0x0) shutdown(r2, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x16e) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8900, &(0x7f0000000000)={0x9, 0xc}, 0x20) r3 = add_key$user(&(0x7f0000000140), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000004c0)="0500000049626de531a96f3e4d419eb53dc7c70000000000000040000024e916e209000000000000002fbfb3c0b1c4e34c3eb87e69e3790e2c3109f2a9dc16dbb6aeee105ec886202fe432b27c504f23b5f113c4e9f44eb92a4cb37e4685f640b488c8f7e1bfe4107b307b4167bdd1439e3bdd36dbbd34bb6d2f6900602e4f4c325183922ad03facf345887c3f7ba6957ea74787bc7bdf6c93101548cf5663057a0301107b29c705000000fc10ae4798b7d23e95805960e5edc412d782ef091cbcae51f242d9a3a6e127fac78c843828657053d84b00000000000000000000000000007dfad088435647258982", 0xed, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200)=0x2, 0x4) read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder1\x00', 0x2, 0x0) 5m56.046731507s ago: executing program 0 (id=2938): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file2\x00', 0x16) (async) mkdir(&(0x7f00000000c0)='./file2\x00', 0x16) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) (async) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) chroot(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x50100, 0x21, 0x2}, 0x18) fchown(0xffffffffffffffff, 0x0, 0x0) (async) fchown(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f00000006c0)='./file2\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}], [], 0x6b}}) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x6}, [{0x2, 0x1}, {0x2, 0x2}, {}, {0x2, 0x5}, {0x2, 0x5}], {0x4, 0x1}, [{0x8, 0xddac1982f8d15004}, {0x8, 0x6, 0xee01}, {0x8, 0x5, r3}, {0x8, 0x2, r7}], {}, {0x20, 0x2}}, 0x6c, 0x4) open_tree(r2, &(0x7f00000002c0)='./file3\x00', 0x2001) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100ac14143208000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740000000001800068004000380060001004e"], 0x7c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100ac14143208000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740000000001800068004000380060001004e"], 0x7c}}, 0x0) syz_usb_connect$uac1(0x0, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902960003010600000904000000010100000a24010800000201020d240600000308000f000000000c24020601010608000004000c240208000103000000000009240605050108000009240300020000050009040100000102000009040101010102000009050109000040000007250100007a00090402000001020000090402010101022000090582094000"], 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f00000003c0)={0x0, 0x1, {0x33, 0x25, 0x2, 0xf, 0x6, 0x9, 0x6, 0x75, 0xffffffffffffffff}}) pivot_root(&(0x7f0000000180)='./file2\x00', &(0x7f0000000200)='./file2\x00') mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r10, &(0x7f0000000980)={0x2020}, 0x2020) 5m40.62369054s ago: executing program 33 (id=2938): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file2\x00', 0x16) (async) mkdir(&(0x7f00000000c0)='./file2\x00', 0x16) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) (async) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) chroot(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x50100, 0x21, 0x2}, 0x18) fchown(0xffffffffffffffff, 0x0, 0x0) (async) fchown(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f00000006c0)='./file2\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}], [], 0x6b}}) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x6}, [{0x2, 0x1}, {0x2, 0x2}, {}, {0x2, 0x5}, {0x2, 0x5}], {0x4, 0x1}, [{0x8, 0xddac1982f8d15004}, {0x8, 0x6, 0xee01}, {0x8, 0x5, r3}, {0x8, 0x2, r7}], {}, {0x20, 0x2}}, 0x6c, 0x4) open_tree(r2, &(0x7f00000002c0)='./file3\x00', 0x2001) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100ac14143208000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740000000001800068004000380060001004e"], 0x7c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100ac14143208000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740000000001800068004000380060001004e"], 0x7c}}, 0x0) syz_usb_connect$uac1(0x0, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902960003010600000904000000010100000a24010800000201020d240600000308000f000000000c24020601010608000004000c240208000103000000000009240605050108000009240300020000050009040100000102000009040101010102000009050109000040000007250100007a00090402000001020000090402010101022000090582094000"], 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f00000003c0)={0x0, 0x1, {0x33, 0x25, 0x2, 0xf, 0x6, 0x9, 0x6, 0x75, 0xffffffffffffffff}}) pivot_root(&(0x7f0000000180)='./file2\x00', &(0x7f0000000200)='./file2\x00') mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r10, &(0x7f0000000980)={0x2020}, 0x2020) 2m43.09450549s ago: executing program 3 (id=6815): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002c40)=[{{&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/56, 0x38}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000480)=""/19, 0x13}, {&(0x7f0000000580)=""/124, 0x7c}], 0x5, &(0x7f0000000680)=""/113, 0x71}, 0x8}, {{&(0x7f0000000700)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000780)=""/99, 0x63}, {&(0x7f0000000800)=""/175, 0xaf}, {&(0x7f00000008c0)=""/23, 0x17}, {&(0x7f0000000900)}, {&(0x7f0000002980)=""/29, 0x1d}, {&(0x7f00000029c0)=""/34, 0x22}, {&(0x7f0000002a00)=""/177, 0xb1}, {&(0x7f0000002ac0)=""/58, 0x3a}], 0x9, &(0x7f0000002bc0)=""/107, 0x6b}, 0x4}], 0x2, 0x21, &(0x7f0000002d00)={r1, r2+60000000}) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="847a98", 0x3}, {&(0x7f0000003300)="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", 0x1000}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000980)="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", 0x1000, 0x40, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0xae}, 0x1c) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)="b6600612b1220a3ea636be734133d2f1e02112a8869292ef63b800de2120f1f5bdf85aa7121c", 0x26}], 0x1}}], 0x1, 0x400c880) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0xd, 0x8, 0xc6, 0x0, 0xc87, 0x5, 0x2, 0x7, 0x0, 0x0, 0xf9, 0x1a, 0x0, 0x2, 0x7, 0x0, 0x2, 0x31, 0x8, '\x00', 0x7, 0x7}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000680)={[0xe6, 0x55e, 0x80ffffffff, 0x4, 0xffffffffffffffff, 0x2000000000000004, 0x20000000000009, 0x100000000000009, 0x4, 0x80, 0x1, 0x794, 0x6, 0x18a1, 0xc976, 0x6], 0xeeee0000, 0x20200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0x100}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x43b01, 0x0, 0x0) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) userfaultfd(0x80001) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000300)='rpc_pipefs\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 2m43.09136821s ago: executing program 3 (id=6816): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000074d564b0000000005000000000000003fa6737639224c1d6ba8fe2793d50be9d76bb8a872c1558681bc6bbbdd0bd656a4e6bea5b296bfdd6e3b38dca9b34b3f3efed0d68dfa48aa8432fa07eb26f4d2d8b9041fa1278ea4bfa30f5395fd1cf5b250355f1e38ccb20c360234919b022fe9906824f04c6d4dcf3214f16943b799537490fed306a64d891be3551e377afd9f93fff5948ca6ba82fe49f0326d9165000058d01eeee9930852dcd51653f67444613ce035bf0bc8a4835e633db2df9420780c09bfcdb5c031fb72f819f12506ddeabc0d5a7334bd0f17a1d2a71c478a2d8c"]) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x202, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) ioprio_set$uid(0x3, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x0, r6, 0x0, 0x0, 0x3}]) sendto$inet6(r1, &(0x7f0000000b80)="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", 0x587, 0x0, &(0x7f0000000180)={0xa, 0x5e64, 0x100000, @mcast2, 0x4}, 0x1c) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r8) recvmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000200)) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') rt_sigpending(0x0, 0xfffffffffffffe03) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 2m43.08910092s ago: executing program 3 (id=6817): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) io_setup(0x4, &(0x7f0000000100)) 2m43.052187761s ago: executing program 3 (id=6818): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x30}}}}], 0x20000}}], 0x1, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x2, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000240)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, &(0x7f00000001c0)={0x0, 0x9, 0x31, {0x31, 0x3, "282762779aae8a0d4e697f8d0c340fefdaeb1a201e0c611dfacbd24425bf416f4577261dfed38b78b49af5a52f11cc"}}, &(0x7f0000000600)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "b6c82021cf326a055c9282ef00d5549ca31712ab4cfb53f8fae8b13a8e64ade8930502bfcf0352d019a8b36c994e280354d88070ed1d5289abcb8928b919d896f050a8794a8c641f121eff648e9df77db559c1f55d9be8ff04fd2aa9c0086e763274b27c5024022131f2eaa89d9e0d8ac979fa16ca60cbd210879bd272f5beba5914f2cd4ba594ba740ef4a4c1763a4dd965bdc7839529aa34581689f5cb1d25169b346dd05dbc1ebe2a27352b72056a269c5f329e24b01159a96192dff0a16df4f5baec37b037591214235d524337e2c4af8e2280e6c114cc0eca25b2f8ac6a031d21224331f190bcf728412b75d0820e0786ddf5b7ccc4c9df87"}}, &(0x7f0000000540)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "46e8ad97"}, @local=@item_012={0x2, 0x2, 0x4, '\x00\x00'}, @main=@item_012={0x1, 0x0, 0x0, "ee"}, @main=@item_4={0x3, 0x0, 0x9, "981a7eae"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1a00, 0x3, 0x1, {0x22, 0x74e}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x0, 0x8, 0x75, "e199da0f0671a4d12f8e09e4215278bed38c06c51c58970a97a85fa19aa7a198dfe246cb802d5779712062cd3d0825392f35aaa9ea1478d4a9961d004f21ebb2ca86b0f1c617cb0d2730358c8ced5c2f51b59b0e0efe6a429a6270e57c0fdea8c0ea90843fe77a36343208adc63d90c88d943dba08"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xf0}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000440), &(0x7f0000000480)={0x20, 0x3, 0x1, 0x20}}) 2m42.539602608s ago: executing program 3 (id=6828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c000380"], 0x38}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40b42, 0x0) r3 = gettid() prlimit64(r3, 0x0, &(0x7f0000000000)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r4, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) 2m42.284634142s ago: executing program 3 (id=6835): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0xfffffffb, 0xb4, 0xffff, 0xfffffffd}, 0x1c) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = eventfd(0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) io_submit(r1, 0x2, &(0x7f0000003440)=[&(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x2, r4, 0x0, 0x0, 0x1, 0x0, 0x1, r5}, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0xd, r3, 0x0, 0x0, 0x7ff, 0x0, 0x3}]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) unlinkat(r4, &(0x7f0000000040)='./file0\x00', 0x200) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/180, 0xb4, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0x101, 0x3}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x10, 0x0, 0x34}}], 0x10}, 0xc804) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) 2m42.253995613s ago: executing program 34 (id=6835): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0xfffffffb, 0xb4, 0xffff, 0xfffffffd}, 0x1c) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = eventfd(0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) io_submit(r1, 0x2, &(0x7f0000003440)=[&(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x2, r4, 0x0, 0x0, 0x1, 0x0, 0x1, r5}, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0xd, r3, 0x0, 0x0, 0x7ff, 0x0, 0x3}]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) unlinkat(r4, &(0x7f0000000040)='./file0\x00', 0x200) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/180, 0xb4, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0x101, 0x3}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x10, 0x0, 0x34}}], 0x10}, 0xc804) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) 2m3.605829744s ago: executing program 6 (id=7365): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x7, 0x7, 0x3, 0x6, 0x1, 0x1, 0x84fa, 0x401, 0x7ff, 0x7, 0x1002, 0x201, 0x699, 0x401, 0xffffffffffffff01, 0x81, 0x100000003, 0x174, 0xffff, 0x5, 0x7, 0x8001, 0xda, 0xa60, 0x80000000, 0x5}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, 0x810, r0, 0x3ded5000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x0, 0xc, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) syz_usb_connect(0x5, 0x561, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0xe5, 0xb3, 0xea, 0x40, 0x3344, 0x1120, 0x3e3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54f, 0x1, 0x1, 0x0, 0x50, 0xd, [{{0x9, 0x4, 0x2c, 0x6, 0xc, 0x5d, 0xe4, 0xd9, 0xf7, [@generic={0x52, 0x7, "771534e33ec91b8c500813fe29054cb442b0bbe880cd6ff61d0e9eba354a0062086426145f2a896a979905c804dd5bd12c6c5bf8196dd6446cd1d84e7447ab6085e41d4a5162ac43725f92cbdf0ac686"}, @hid_hid={0x9, 0x21, 0x3, 0x5c, 0x1, {0x22, 0x9dc}}], [{{0x9, 0x5, 0x9, 0x1, 0x200, 0x9, 0x3, 0x2, [@generic={0xd1, 0x2, "7aa33604f4158263cc60cc012ea8e0d24f558a2f24fc8196e671afd8dfb5b83ad095b33888f41274b26a222fa056eac9d7ac551171607bd8f5ae9530897fc339b0ec38ce2ad8f498993c9de75ceca15ebc303e403822030f8fa74d12802cffa69da90c439237a49b3d239cd3e0fb749870bc92cd09c967cbd8ed39e45eb5eba561448152deb4d3be6d8d771b15b6a2436a51c12dda399eee1b54b4edf466dbaf9d520e8d5c1b11758cefae4ddf0c766a7514e156a52289b3a1f1d1e5269de34e822d48982a29fa52884ab9e5f7a0aa"}, @generic={0xc0, 0x9, "0973e72bade3a0865a1df9dfdb746942d448acd8c81fcd3645e39774a57f2ee0ab2ba4657b213d9725b5fb248f347a013b30f2281a6feb72297ac7e3fdcb4340443bc025c1aaeddb9dc467af42257237bc784c1064580409edee9c6fd694023f6280757539da09592479d933bf68455f7020278ae6cfbe0495159423bb7e76e318066339ae76564d8c62934dd424d02f68c6a9369799a291b39713fcd9b37ecc34d610acbe61ee5bf4e60ce783960565a1773385e2528831df75871cc204"}]}}, {{0x9, 0x5, 0xf, 0x6, 0x40, 0x5, 0x88, 0x9, [@generic={0xde, 0xa, "3fcd809c5c0cd48e56fb0c1273987e15337933dff0935c6fdaeb69d6f88307fc0993ac3bd183f34aa40d20df3c1834a8af09ff37a88e998f3f23d168fb05524fb0789e889f5409bc7bdd74266f2bd60c234687ab7188cb34c86a13e01028ed35dd7510fffae64cc18dda9d6736557bc9e5206093abee110e48ad9749a8ef863ef8a0d6314ff71e7f384b9917d100dab078d365675756289ce1ecc372d1a66716da7682154c52dd61484a4c84cdc6f37f9ef93f4d144cb733a13b1d58e412de5a500d630e6116c1e1ccae55479af89045c4f44319548361b62409f3ef"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x7, 0x3, 0x6}}, {{0x9, 0x5, 0x8, 0x5, 0x400, 0x5, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5}, @generic={0xcd, 0x21, "ecb8e08c4747ed685f8563c501c5ccd69a81ee26d48bdc1cbd88bbfc92f657db9a695d95284a6c3bad0100049185344af34ef36a4cf8e3e92ea845874952fd35e1b63d30cc302b2f59017f1c951600a76d4a9c82d14214c60a6c3dcbc3aa2bb73020ba451cc22199461b48655b124516709e950f5532f3ec03912ee9e40862df63eadada1a5540ccfdb821e0860d2974f4133319566d70310cd4fb859e4482ff81daf332cc65abd675ef69d4bd7e1197a9fda3ba6fa110c34a72de18bf802f08a5a137a3abe9255f005277"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x0, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x6c}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x40, 0xff, 0x8}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x6a, 0xcf, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x28, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x101}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x3, 0x97, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x81, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x4}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x9, 0x80, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x800}, @generic={0xbf, 0x3d, "1209b7280b4d91b059b8f23cb9da609f5f8524aa044f2b4f73af41a22aa64c5d714703e53cbfa81b3856a129da54a03fe28201a05a319f9356d1ec8690dba5d9682f29f193458d64d1a506612b9e76c0d43ec47b12b74f6297fe7b0995659c9ebb920f071ff592a4b606ec9570cf27b7b56e36a9445931d678201c2e86261d6fe14ea0dcb29b5a9e28054b852bff6a74634d19ae9f28ff1eba2d04844284dff6c9b82006faf35802d1da36544827cb2d5e52920c078a2292a0c6ea5185"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x0, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x5}, @generic={0x40, 0x0, "d0f25e4382af8365d754c230a2dc853feaac190115a05e1a0e5cf4c5f3c3ba1bdd21ca071a6c5c49a7ab0d2f4f204cb7175cfe3cf5630498082817487f1e"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x74, 0x8, 0x4, [@generic={0x3, 0x21, "c9"}]}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x300, 0x6, 0xa, 0x7, 0x20, 0x6}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x4, [{0xe9, &(0x7f0000000f80)=@string={0xe9, 0x3, "e3f36f1863fc5640f7477c0c8155b5374e84e9fce6412304956b82f6605b6edd2dc337f203fce44723626029a0a15b31109b0842a4302984b8e8bdd8c1d0dddd9e2a89f2005ff2771d7393ed61546b393b766f73289a92f7ca40a6ed2f53516d5d6fb2bd6d0000000000000002a1df1acefa31a1b7e3694dbccb08fccf807cdb6c903203b010effdd22942cfab43ac7daec45b9d01d8508d92c3b688c33115d6b7ff12ca9e78d75cde0f52c09b0532fdf41b025527712a82da60d44028ea4884590451c7c0f975eb339d56b46996a8f927086a8dba23331f854cdcd9ea529e28da1e9408ef4806"}}, {0x20, &(0x7f00000005c0)=ANY=[@ANYBLOB="20030e2a5fa4fff96338a3f8841370828ede7b6a8959e3a2e390df2a8b5522ad"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x43c}}, {0x90, &(0x7f0000000d00)=@string={0x90, 0x3, "73299365ef218819f9453147d36a834bbe3c65866ae8dbc299e5155b3eb0b08772a71561c9117e395afa090532e42b2677f7b1b018a21555ed129333afcd63d2239cfd92990a6dfad232aa21b737c9ca4e99650789998a5d2a7b05a4760e1effca67da6a8d418cbaf7e8fad3f2b396d54c54386add73a8de39816c116b82e906e6fb588433c3eaf46f4f6ccfe6d6"}}]}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000e80)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [{@smackfshat={'smackfshat', 0x3d, '\'.'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@pcr={'pcr', 0x3d, 0xd}}, {@context={'context', 0x3d, 'root'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x61, 0x33, 0x35, 0x36, 0x98c5876b238d5446, 0x63, 0x61], 0x2d, [0x30, 0x35, 0x33, 0x61], 0x2d, [0x66, 0x31, 0x37, 0x63], 0x2d, [0x62, 0x35, 0xe, 0x63], 0x2d, [0x38, 0x66, 0x64, 0x35, 0x32, 0x61, 0x61, 0x36]}}}, {@subj_role={'subj_role', 0x3d, '\x13'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ','}}]}}) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000000e40)=0x5, 0x2) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000240)={0x2c, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) pipe(0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000003c0)=[@increfs, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/198, 0x0, 0x1, 0x11}, @fda={0x66646185, 0x6, 0x1, 0x1e}, @flat=@handle={0x73682a85, 0x1001, 0x3}}, &(0x7f0000000040)}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1001, 0x3}}, &(0x7f0000000380)}}], 0x19, 0x700000000000000, 0x0}) 2m0.610895328s ago: executing program 6 (id=7397): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0xc98f, 0x3, 0x0, 0x0, 0xc07}}, 0x120) read$FUSE(r1, &(0x7f0000001040)={0x2020}, 0x2020) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x20, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="9343"], 0xfe33) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='@', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x58, 0x0, &(0x7f0000000240)=[@increfs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @register_looper, @decrefs], 0x0, 0x0, 0x0}) close(r0) r6 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000040)={0x2, 0xfffffdb2, 0x1, 0x9b06}, 0x10) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) 1m59.71819319s ago: executing program 6 (id=7403): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@local, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x5a80, 0x2, 0xfc, 0x3, 0x400, 0x536}, 0x20) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8cff7c2f3762c71cdb58eb5528f9080000005345204c696e7578a5199fcdafdf3bb7cc4c8bc74a5ec2b0d07a2123b1ffffc2b5877ed2"], 0x2c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000002f3144e90000000003000600eb1f00000200403fe0000001000000f5000000000800120002000100000000000000000030006c100201009f6eae02000000adb20200000000152c000000ffffffff00010a0014bb7acde1b8e96408d700000000030005000020000002"], 0x80}}, 0x1) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f00000000c0), 0x2c8, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvmmsg(r4, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/22, 0x16}], 0x1}, 0xfffffffb}], 0x1, 0x40000142, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) setuid(0xee00) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', 0x0}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0xfcf) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1m59.665505062s ago: executing program 6 (id=7405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0) pipe(&(0x7f0000001300)={0xffffffffffffffff}) fchown(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000180)={0x0, 'veth1_virt_wifi\x00', {0x2}, 0x2}) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000005362ffffffffffff"]) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x6, 0xa5, 0x0, 0x6}]}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x15, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 1m59.538188733s ago: executing program 6 (id=7406): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7fff}, 0xe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 1m59.536164363s ago: executing program 6 (id=7407): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="eb690000", @ANYRES16=r6, @ANYBLOB="57ee2dbd7000ffdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4044) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r7, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000023c0)={{0x1, 0x0, 0x80, {0xeeee0000, 0x5000}}, "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", "9986796767d9fd0fda908f894acb12cdce55740ac5c480c3a3291bc10f5ae80fc048fd49821940b8aab380c250e8b64e7629e1ea8236830b784a414ae62716bb5b957d61e75a09f18fad215aec29525458397e4c494bc6a2340c615f0e8c6dfd57d0bdb781f3062f58ddc25ca307e4a9816ee98a7ff97669e571bb3d047a785f93b2aec21f2173bf7eb483327c51f9a4f105000000c2bb59d4df7aa879bcb8f6c9f1cd59b6dd2b68a8dc427421a5312819800d471e8b2fd4eac6885cb5fec1504e1d5914850712a421e8c8b6573ef49802f6e0939cc69b8e512762759c8463c49bf0eede745a1c0a083c8901b41c0668f343247f2ffc215eb8b693f3f66619c23a7c6a2d8fcc09cb8f22e9a82c74b149374a4717ab6d1f5d2f03611e9dc5a2fa14e5ff5ebc62d433a8487c71be97deecc9abbec781147f0aef4a01e9a1776a0feb903a9a99b483858a1db2925a6e3319260302c77ac47e0f5645a22ae58ee9a30e5fb287d6dd37a2dc4b6ef5135dc116156028c050720216ba767992608333a67537ad40421161524ac1e1fecadf09a1e487a447554a4a630e597637f196bb0578efdefcd7c81531dc4829e936e775be839e847744ff3c2948455094497703e57d749156f7b2f5489a9a50c5a46febf1dc3e4de3fbc941e225d7086b87180dc37a8a131bc024481d9953731165f48e9c64f014b6c803bfbf694a585f627ae76106c73b6a4b75b0e69521d4a6afba4c7124dfa3bd7703209b183b5226da8f2d28a9bd698c56f27a65c4e99f13dfdab71f1eceaeee7dfc3cce8eb3e4da0f0ba0067382b76d81256332942332bcdb2549f73bae3cbde7afda7f55de4c66a5c735cca09f6a69a078d358a0e6cfecf5f75bb8f98269784b57a0dacbf70c7e50fb6d825e12aaaada902badc93a39c97b17d2aad056223076c61dda9c8b0bc725e19b643662e98ba15f3cd9112fb3626143eb133ff63b28479e6ac93e3da73775a4c5cd8e4056056b4b2e95071ba1f39b2e20845366ff10506e1cdab955d7553f1ccf7fa48b016d056f88c096a80a84bc80bcfeb2ae63d9de7b7d1dfc13fbedcd1dea588e314acb93f36b689cacbe7a0493a200e2140f5af57a4a9aac1d7e8aa4700a9b8e7df328c48aa74283e1f2aa65cf282f1e8a510652f181cb8d275e3b9c439f520f0cad22499907450b18b599f61573934a9702e669a2841ce927162823f5e78474a5dccc89f17b69a13f8678db56116d16e7b615d6c0d5035c01046db298f1709df8e026db208a49234869cb152fe8372d1dd92cbe5a9a1af7ca24da40e627bd3a0bf1bce4fa4ca7f84f1d653659fbc1673929644f206f921fb45998f14be6f973317d12057f404794ac33bb9537bbfa2db701a6786d61e80c80ae0277cfd596bc00a64122b2c0679c9b53a23448bdb30748d256b74fd397190de0fb1b788635ed90ab3ba1f3ad5a6626fd32d443dc6ef612a98fcad01dc4adec4008f107781f75736a060debc3e435fce322fa9062e7d9dc61eff2066ccd198c4c79c27293a3ba32a511250958708f63771713dd77795a85024d5c1988183dbecdc5e270660c6318633865aa8c94a5f4656008087eba2a80740c0751269aecfb19e44769b7103f4ce75e2217ef19fd082279d6b5365bb9e48a5a52228d2e3d2a8700008add626c77c8d86cbe79a18544b5c22d6c259b61d2a2cadc23790f78eea04f904d03e07bdc69c969a65a0c3fa12b84b603b9190dd861db36a31a2a23454a291a497aa5eddf301d08408c5cf2a7637983d0adf416f0d374b6f329e4c6cc70423e068bc52c29b9f3d90c3ceb980e5e72d6ba116bae4c1814daf96525df4edfdc36128ccb867484bb742ac67d390d51223ec9100672da49675e7bc60376231009fa7f7045521d0c848da8b90b2e1aed06e21b836e358def56699171f51c4edd7cabb5de5a8d69e0f8c8a6b43537bc487236ed0bf58a574028de77ec1075989eca2f30379c457c86c6fe881db3c14b37b528e6bbc71dec6e31f82a5dfa31b2a1d98e494880f3bbcbf3fdd63e76555453abf5e80f5108484352c9e7281be00cbc90193ed93c8318e8798bb226d5117d5b53e882bda1d85c0245eaf3f07e54a86d40b39f3ae637e6042036d0be12f547208b104107b4b0de9b141755e785ab100d99d27e92152d40542395258648982065618d2500ffb7aa3bbe721a54d198cbc9f3aa92b43f22aff291823be272a68d5157ab0ba948cc2cb6a66d359162188db0866bfb7d174f453101b63112df10561f2b8181b45ed6fd59ae773a021f312b4cc24abe897981de1dba2687551ee15d56cf8423d553cdf870eee38c8aea321ade420398d4e4d1ec47332e4b45059cc212613dc3d4f1cfeb8eb0620da33cb4fa1067e008e9ffebe062943a519aec5da9cab4f606c3a306f609270d85ef7c34231a361b5bf4736a6b9c14fc567bcd10466cc59897f904bcf724efcab14d13d02a61a3bc9f92fdedbfba255cd90ced87762143f6e9fbf3cbc1415742c3fefc3d7d472016eea3732c79b607d391f66dc961d33a06f81af3e8cf0a31470e35ff37396ff5af91057bdb2173a565cd269373c34f80f663abc217848b28359d6605b7f0b76ba125b19627fd4abee6fa91840a7b06345619f0930723bae7f5e016d9ac81995d320d47e1888ff033bab4269a2e8f9e237c5b2a37c59af2f7b48bac346dc1398de210ef5bc852b3e518a909c4f7843d1d0b139f47be1b53a6aff54ebb29adcc0ce1ae08260fdb6f1b591c18d256a201f28263771e8ddb36cc25ab46b63b3b26756ad560510ce6eed1cec2bb27387d95502327507fcaab937b8be866f165af119cf6cf333e8043be2378e8650f5f08e089897867b0e95cf0b24fb9d33ea0288fb08d3f69efaf96b53e2d813a545091283c082540abbc70cb80eefbadd77986f1ec79e0349e0bd04896e36de3467c938c57776c33ddd8de665e99554b7a3be004031f314ae2a91ca4c2f8f3b05c4dd77cc8aca8da6174c2116213ce7f3d941715d9b3e82f1dd35b464f0d7b28aff912e22783320cfe8bc44d634d0e86be66f78348b6319b4ce7b82b743396fd52c2be18e5998b58bb887ef8211aaa0c2251a80aa919882aee8cf01c0ad7c2d55f1249d84d8e960cde236989e6565b3b4afda3644cb10bddf9fdaa965c537bc92714920baa9940292e497dd4d25e59aced4117bf98e9f80b226b12dec2c6d1ee03b477114e5fcac102290ff321301c24190a6f6fc192007752904cf02b03eaa631e86add86b751e26fe5b9bec2c41dfe6f776bc74498fd98aa175884c7d66ac9be1ee54b8a8372e4f19530c013483181b471dd3649f70a69209d9204c337a543d2f15d24faec1b2515a4ea73e786f7efedd994f892b6501c07da2bc9e5f30a3b499f68521cd2cddc17ecde8d8d5d437a60e9680891b988aee820ff69b23073a2f981b6777aac61f3b2d073e060119a9cb5437a29b90b4b2280b8d33ddf1bac2e169d58dc61c3091b311146d711eaee9b81e0aba60a5bd577956d149c449a7cf669da9cc7e1a8dc43a293efa14ae800af36e84d1feeba889bf180fd62ed7b671da4727f35cbac893fca3ebfb88eb7148c18b08084f2fc67f0d1de982a4d3d49ee7bbb0b62f2240992042ec71816d649a1e16c0ee0485c18a2ef56d48b8c847f4437ec0dbceb6be97c6355aad410b03d5b2f6d2f82415ab7b16534545339fbad40e0bd5267bfc15eba537c8e44547d0ae4e3fb800db23a560ad4ac5929a168c04b407e02d100b7f6fcd877a6acb8e1a1e2b5cf9054ccfc066be7e7357471fb418af6f376c080feec6686c7865d02087beeddda86b997abf6449ccf7535d954c1f6e98cbf42d662eac32db3328f4af227ee8d5896e58d139d9494c3d3293d68d40259bb77e953203b5c615ee47d1243282b5abe64d5e1e65272f50132b97912442470791e7c9787896f4c7c284f53d677ccba5ac990508c749f6188ce13880946143a677f81a87994ec1f205814fe02028faec4236c91a071b57378b879888546eb6c2ba6e9e6316d854eaba6a5e4770ce875336c9ae19e400fa77f7ee20b1bbada742875845520c74a502d13f93338b14ba06db9483e233bcd4ed807c5031cc5f08e6b1ceebe672fc3ab464769fd4fa01331fc6d8322aa5f019a1b1bd83ee1f80117a749bca27df6fbd42abfb78b680c0418cc4a94a84b4edf3bff81a6b2d00ce987425dbbd043afcf7d8451f8267fed87c30cb0295ceae4cc1be6f428077486fd9c548cb2eb50f501c26ea75df51abd13d8d990df05f6f99e3b1f766f7d9b96ec1ebb3e049b93fdf7ad593a29c59d27c828deeb596f088913926cb37eeb0e544b089329e9ff9eb328d6ab19fe9fe36e88e70101f041a4967f500f0c6c41d65a02936673012477c7e9ce18225003d5df048476522f24414aa72dc223af6eb6f0902b717a49fcec98739f75b3ce449b8356b31f3803c53ddf12b9839092e005a8dc2e2163dda50c1bc419f8a16e029e1bd06731b2537ab2f5be050c1dc07edacd301d5d7590f0462c566be0456ae35eb34d3bea801645bb89935d20c79f8d2e496049b2bbfcbda5b943b0e4c57c1c842ed24f8509ef2257652d6fc491ca3e9fb41a7f4ccb0bc80ef049418ce235b2fe67fdbe1d53781871187b5ec576234cd2f443cc70848724a2c56fd4147338656628552ff41d24b132d5c82cfe08d51388cbdbfab729de805e96e1a977f9c71b80a2171e32d192bd02f76fa0c0ff3a39fb44cd6d651444196cff54e325f0f3bfb3cb5b354de0864648e741074bb0aada73215c2dd3ca29a6f0fba470bd12b0230d18795e3ffa8390102600f3201d2c6230bba3afc71d3a0554eba4362515300395782195a7a9e9249178466a02ded2db88edc7770d162a5f6227292aa0eebc018e814caeff69904bcbbb54ccf03665312daee061341db9c7915cf64da55feadb5a7d21680eb5d7c1ad33245f9ea22cabdf307419b883588f3689629bf2e73c293f3acf35588bac03ca269892fe2e5f2caed291bc76a8bb851d8ae4c6f26dc1712c0ef4c4722255940d2908cc90e5b7e735e4ada7271b9c1239f5e278555af2b99cb44caaff1450e7942ab1c89ea0003ba27e3f6caae4bce3b203badd471ef454f60e1da6fe44193b130b3b7459956d8e569fea1674517b19433f949b41747648013b493b192d393130048d11243bfebe7758200d8828fa214439fdac0c1fbd0fd1b8a2a5b0b75fdf9bd43cb3429256075d980c8708a9ce60eb7b465f8d53e2a8bb8d713ec93c3a6ba90a55eb4e4f5c72f11eacbd2949657de43f5bca7fbe7a01b48461009937e3f6a7a3157add383fef8336ab43cceb5be4dd714d1c010ca5cbc7b097a6cc0bfd0b85f48e6fb8b36516f670572dabe87cf330219279d76811bddffc0d7c3d8cee770eb0e7058d92faf0ba8c57a67f6fdffb4d51daec920c023b16073333b0173df4776665a7092099916db73499760bdd5ed8dd6c3daad452fea39f3c5cbf22fd2efb2e627f536b6ac7493adb8d2b8569bc0082df50e792fad4b7accfdf349803aeef0b6c92a31687ff14dc360164f7ad97c712ae050aec577f618e7652de1ae5fc19b3d9bdab4758b8549e2607b9f5d0ccdff0b762a4355209d3b9ce59678ef016482d82920f372d55c918bb4508f2e32a674e7a12feff736a8a6a7cebb8add976a4e4327ce8ac20aabc5834281ed43d37e14cda3a8f0d3bd568a5cb53ecb510ed5c2400"}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000440)={0x30, r8, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x52}, @void, @val={0xc, 0x99, {0x2, 0x73}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x0) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f0000000280)={{0x0, 0x0, 0x80}}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x4, 0x4) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={r1, r2+10000000}, 0x0) 1m44.017454079s ago: executing program 35 (id=7407): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="eb690000", @ANYRES16=r6, @ANYBLOB="57ee2dbd7000ffdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4044) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r7, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000023c0)={{0x1, 0x0, 0x80, {0xeeee0000, 0x5000}}, "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", "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"}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000440)={0x30, r8, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x52}, @void, @val={0xc, 0x99, {0x2, 0x73}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x0) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f0000000280)={{0x0, 0x0, 0x80}}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x4, 0x4) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={r1, r2+10000000}, 0x0) 1m4.884751497s ago: executing program 1 (id=7993): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000000c0)={0x100008, 0x100079, 0x80000}, 0x20) r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r0, r0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa41, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x40, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) creat(&(0x7f0000000300)='./file0\x00', 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fsetxattr$security_selinux(r6, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:crond_initrc_exec_t:s0\x00', 0x29, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m4.770871159s ago: executing program 1 (id=7995): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) clock_settime(0x300, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,uses_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r5, 0x4, 0x460c0) (async) openat$incfs(r5, &(0x7f00000002c0)='.pending_reads\x00', 0x0, 0x49) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3f) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x5}]}) (async) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r1) r7 = socket$packet(0x11, 0x2, 0x300) (async) r8 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, &(0x7f0000000180)={0x11, 0xf7, 0x0, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) (async) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) (async) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)={{}, {}, 0x0, 0x6}) (async) accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000180)=0x1c, 0x800) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) (async) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000240)={@remote, @loopback, @private1, 0xffff8001, 0x5, 0x0, 0x100, 0x401, 0x8400008a, r10}) gettid() (async) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) 1m4.641429911s ago: executing program 1 (id=7998): mount$bpf(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0xe065ca, &(0x7f00000003c0)=ANY=[@ANYBLOB="27ffbe25c7fa7569643d678f55ef651a3bdc105b99d56b8483b9ae51f53dda15d4fba7e0aab8220183f048d83f3194ec97d7bbd97540ff32d5df33", @ANYRESHEX=0xee00]) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0x17, 0x0, &(0x7f0000000300)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000380)) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="400d5d0000001a4657a75b9139ee170f4bb785474545af501e0c1356f824761a6b5d20e8a1f2b98e8c05382c35cdb32591169601d84eb1c1c3a6c1a84aee0594d949000000b36f683ab651373d92c3a2877bfeddf90ae6afa56dbadeb786c800000000877a42b65978e79dd93e3216e4b79e82c90d48bf20f36a69ab1216975f359eedc45c3267a31f150a9c26d33d705e7d6f7e05959c7f0b38a81c43945fddf4c2f3efd65bfb8ac298b50f64"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) lseek(r2, 0xfffe, 0x0) 1m4.532559933s ago: executing program 5 (id=8003): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wake_lock', 0x40802, 0x122) write$tcp_mem(r0, &(0x7f0000000200)={0x9ac, 0x20, 0xfffffffffffffffb, 0x20, 0x20000000000005}, 0x70) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) 1m4.426241744s ago: executing program 5 (id=8005): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_clone(0x2028411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) wait4(r3, 0x0, 0x80000000, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close(r1) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000001c0)=@filename='./file0\x00', 0x0, 0x0) 1m4.363796875s ago: executing program 5 (id=8006): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x4, 0x5, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x1200e0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="7bdaa9d8dfb6527c75997f6aeb38b1296b0a6b7411224edca3b5fc95b886221d25c895b3e84ede15e5878d91b862c36b479605d5a0fbe23b808fafcc51f7afecce352c54aa97c1ac970d4651e93d480fcbd19378edf8"]) 1m4.317202796s ago: executing program 5 (id=8007): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), 0x5b, 0x0, &(0x7f0000000400)="a09aff67520a7335b8e3f5e648a65b03000000e8a995d5135e161a783d3d01fddcbd838bac30837336c6c4f370e228566435a15e2aa88bee78f133e6e8505e4cf1982c991b516a9e26b6bb537c85f507ac77ad4600000002000000"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x1}, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@mcast1, @remote, @remote, 0x3, 0x8, 0x0, 0x400, 0xb7, 0xc20022, r5}) openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) 1m4.07297643s ago: executing program 1 (id=8022): prctl$PR_MCE_KILL(0x21, 0x0, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x70, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/206, 0xce, 0x2, 0x26}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x400}, @increfs_done={0x40106308, 0x2}, @clear_death], 0x85, 0x0, &(0x7f0000000480)="223a1dd7f11534b1b2490ca6ab2fd2a2352566a7b8154574564f0b49dfcd59f6f34f6e88e6125d94247aa296fe33701e25532374c845b892c5816a229a3ad1a4a26c92cdc56b5d3126e4e3a779fa1875392fe08b1d4bc36cece0cd5cc79f4f1c125d00d82cf5e5ae52eb5e99de2427c3aea6bbfb6270384cbb98d4f16324ec39ad17da35d0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 1m4.07270223s ago: executing program 1 (id=8023): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x543042, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m3.934007941s ago: executing program 1 (id=8025): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000001000)='\x00\x00\xff\x0f\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00n\xd5_\xeb\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9\xf8\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x17\x98\x93\x0e\x03\xd6\xf6\xa3\xe5\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,\xa8TM\xa5\xc8\xc6\xf1\xba\xe0\x95~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99\x00.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81Il\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff\x00)\xec\xbe\xf4h1\x1a\xf2\xc9>\x06\x91r4Z\x94\xa3uV\xb9\x1e(\x87.\xacDu\x99\xd4\xc4\x8e\xdb\x1a\xa7\b\xc3\x10T\xda\xff\xfd\xc2\xb2\x99\xb4\x05\xd1\x8c\b\xbf\x9ap\xb3(\xfa\xff\f\xd0\xd4\xb3\xa6\x01\xdbc\xa1\xc0\xab\xb9\xf3\x0fw\xf9\x8e\xd6\x8dR\xd7\x92\xe7\x04\xa4\x89\xc1\x9b\t=\xf9yI7P8\xf5\x16#\xc2\xe2l\xcc\x99\xa3\x17aj\xa9\xb4\xb6\xf4\x8d\x80\x99\x98\xd6W^\xa0\xddy;!8\xdc\x85W\xfe@\xbf|j\x01\x9c?u.G\xce\x00> \xad\xe3\xd2\xd0IL`\x87\xcb\xd2\xef^N\xf0\x98\xaf\x98\xe6t') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000001000)='\x00\x00\xff\x0f\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00n\xd5_\xeb\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9\xf8\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x17\x98\x93\x0e\x03\xd6\xf6\xa3\xe5\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,\xa8TM\xa5\xc8\xc6\xf1\xba\xe0\x95~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99\x00.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81Il\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff\x00)\xec\xbe\xf4h1\x1a\xf2\xc9>\x06\x91r4Z\x94\xa3uV\xb9\x1e(\x87.\xacDu\x99\xd4\xc4\x8e\xdb\x1a\xa7\b\xc3\x10T\xda\xff\xfd\xc2\xb2\x99\xb4\x05\xd1\x8c\b\xbf\x9ap\xb3(\xfa\xff\f\xd0\xd4\xb3\xa6\x01\xdbc\xa1\xc0\xab\xb9\xf3\x0fw\xf9\x8e\xd6\x8dR\xd7\x92\xe7\x04\xa4\x89\xc1\x9b\t=\xf9yI7P8\xf5\x16#\xc2\xe2l\xcc\x99\xa3\x17aj\xa9\xb4\xb6\xf4\x8d\x80\x99\x98\xd6W^\xa0\xddy;!8\xdc\x85W\xfe@\xbf|j\x01\x9c?u.G\xce\x00> \xad\xe3\xd2\xd0IL`\x87\xcb\xd2\xef^N\xf0\x98\xaf\x98\xe6t') (async) 1m3.874998713s ago: executing program 36 (id=8025): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000001000)='\x00\x00\xff\x0f\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00n\xd5_\xeb\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9\xf8\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x17\x98\x93\x0e\x03\xd6\xf6\xa3\xe5\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,\xa8TM\xa5\xc8\xc6\xf1\xba\xe0\x95~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99\x00.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81Il\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff\x00)\xec\xbe\xf4h1\x1a\xf2\xc9>\x06\x91r4Z\x94\xa3uV\xb9\x1e(\x87.\xacDu\x99\xd4\xc4\x8e\xdb\x1a\xa7\b\xc3\x10T\xda\xff\xfd\xc2\xb2\x99\xb4\x05\xd1\x8c\b\xbf\x9ap\xb3(\xfa\xff\f\xd0\xd4\xb3\xa6\x01\xdbc\xa1\xc0\xab\xb9\xf3\x0fw\xf9\x8e\xd6\x8dR\xd7\x92\xe7\x04\xa4\x89\xc1\x9b\t=\xf9yI7P8\xf5\x16#\xc2\xe2l\xcc\x99\xa3\x17aj\xa9\xb4\xb6\xf4\x8d\x80\x99\x98\xd6W^\xa0\xddy;!8\xdc\x85W\xfe@\xbf|j\x01\x9c?u.G\xce\x00> \xad\xe3\xd2\xd0IL`\x87\xcb\xd2\xef^N\xf0\x98\xaf\x98\xe6t') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000001000)='\x00\x00\xff\x0f\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00n\xd5_\xeb\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9\xf8\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x17\x98\x93\x0e\x03\xd6\xf6\xa3\xe5\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,\xa8TM\xa5\xc8\xc6\xf1\xba\xe0\x95~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99\x00.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81Il\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff\x00)\xec\xbe\xf4h1\x1a\xf2\xc9>\x06\x91r4Z\x94\xa3uV\xb9\x1e(\x87.\xacDu\x99\xd4\xc4\x8e\xdb\x1a\xa7\b\xc3\x10T\xda\xff\xfd\xc2\xb2\x99\xb4\x05\xd1\x8c\b\xbf\x9ap\xb3(\xfa\xff\f\xd0\xd4\xb3\xa6\x01\xdbc\xa1\xc0\xab\xb9\xf3\x0fw\xf9\x8e\xd6\x8dR\xd7\x92\xe7\x04\xa4\x89\xc1\x9b\t=\xf9yI7P8\xf5\x16#\xc2\xe2l\xcc\x99\xa3\x17aj\xa9\xb4\xb6\xf4\x8d\x80\x99\x98\xd6W^\xa0\xddy;!8\xdc\x85W\xfe@\xbf|j\x01\x9c?u.G\xce\x00> \xad\xe3\xd2\xd0IL`\x87\xcb\xd2\xef^N\xf0\x98\xaf\x98\xe6t') (async) 1m3.457916188s ago: executing program 5 (id=8027): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) 1m3.367773169s ago: executing program 5 (id=8028): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async, rerun: 64) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x10022, 0x0) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) pselect6(0x40, &(0x7f0000000000)={0x6, 0x4, 0x8e000000000000, 0x6, 0x6, 0x4, 0x9, 0x2e7d}, &(0x7f0000000040)={0xfffffffffffffffd, 0x6, 0xee6, 0x4, 0x7fffffff, 0x0, 0x8, 0x6}, &(0x7f0000000080)={0x400000000001f46, 0x0, 0x2, 0xacb7, 0x0, 0x7, 0x4, 0xffffffff}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3]}, 0x8}) (async, rerun: 32) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) (async, rerun: 32) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) (rerun: 32) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) (async) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async) recvmmsg(r5, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001d80)=""/158, 0x9e}], 0x1, &(0x7f0000000080)=""/72, 0x48}, 0x1}], 0x1, 0x40002002, 0x0) (async, rerun: 32) sendmsg$tipc(r5, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) (async, rerun: 32) syz_usb_control_io(r4, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x0, 0x14, 0x46, "201d06de24f1e2925002704abe421278c5a0a2fb85c4e4d4830765d98b7e10507368e1e35b6b913584448bea2bdc7987cd18a876d166ba39e2c71bd58480e97b544cb112d874"}, 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x140, 0x1}}, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x91bd}, &(0x7f0000000700)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$hid(r4, &(0x7f0000000380)={0x24, &(0x7f0000000200)={0x40, 0xb, 0xa4, {0xa4, 0x23, "9c59674b92f7f2c5632d15a0cb863e824f38ba20570ad78dd2515f9a74d923f5125ee689961e25a70b64658f7d35f94f0352c01ab9a85a05efb3844c69692aadcc6ebdf9c4ef53d7d18a808ad522aabe9f984f226e49fb295033cca19c647b6c241ba9ab3a074057ba9b0ce2ef0e58797696ef58b616fe30178129568216c39ae6c81e747eb7c2247dff905078f855a89bc5a3950d4049354f2ea5933fba27e87547"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}, &(0x7f0000000300)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xa, "d6d82e88"}, @local=@item_012={0x1, 0x2, 0xa, '\a'}, @global=@item_012={0x2, 0x1, 0x0, "dc9c"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x575}}}}, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x0, 0x17, 0xb4, "8a9e1c3092d0a195b82add5238f953dc2064f1cb62a0d7188d25d9230b4152f259d465f8b336820c7ccf59867188fd6011530512395d24b8325988bf84d43f28225debc3cb8831a1fe4e5fcd6364ca3418f1d3261fbb8dd3af44baa7834830840b0613ffe801ea559f9cb839d816f036cd6875b7f7a664e1424838b537175857d56c597db60d798e12c258ac26701dba0bb58ae592e35c9683d099b77788e33aa14b2f39747e95dbcdc9b00d7fdaddd5bef924ce"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000500)={0x20, 0x1, 0xf, "fba61997f2b00ac7cdc06eb69afec0"}, &(0x7f0000000540)={0x20, 0x3, 0x1}}) (async, rerun: 64) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000600), &(0x7f0000000640)=0x4) 1m3.308688281s ago: executing program 37 (id=8028): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async, rerun: 64) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x10022, 0x0) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) pselect6(0x40, &(0x7f0000000000)={0x6, 0x4, 0x8e000000000000, 0x6, 0x6, 0x4, 0x9, 0x2e7d}, &(0x7f0000000040)={0xfffffffffffffffd, 0x6, 0xee6, 0x4, 0x7fffffff, 0x0, 0x8, 0x6}, &(0x7f0000000080)={0x400000000001f46, 0x0, 0x2, 0xacb7, 0x0, 0x7, 0x4, 0xffffffff}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3]}, 0x8}) (async, rerun: 32) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) (async, rerun: 32) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) (rerun: 32) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) (async) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async) recvmmsg(r5, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001d80)=""/158, 0x9e}], 0x1, &(0x7f0000000080)=""/72, 0x48}, 0x1}], 0x1, 0x40002002, 0x0) (async, rerun: 32) sendmsg$tipc(r5, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) (async, rerun: 32) syz_usb_control_io(r4, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x0, 0x14, 0x46, "201d06de24f1e2925002704abe421278c5a0a2fb85c4e4d4830765d98b7e10507368e1e35b6b913584448bea2bdc7987cd18a876d166ba39e2c71bd58480e97b544cb112d874"}, 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x140, 0x1}}, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x91bd}, &(0x7f0000000700)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$hid(r4, &(0x7f0000000380)={0x24, &(0x7f0000000200)={0x40, 0xb, 0xa4, {0xa4, 0x23, "9c59674b92f7f2c5632d15a0cb863e824f38ba20570ad78dd2515f9a74d923f5125ee689961e25a70b64658f7d35f94f0352c01ab9a85a05efb3844c69692aadcc6ebdf9c4ef53d7d18a808ad522aabe9f984f226e49fb295033cca19c647b6c241ba9ab3a074057ba9b0ce2ef0e58797696ef58b616fe30178129568216c39ae6c81e747eb7c2247dff905078f855a89bc5a3950d4049354f2ea5933fba27e87547"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}, &(0x7f0000000300)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xa, "d6d82e88"}, @local=@item_012={0x1, 0x2, 0xa, '\a'}, @global=@item_012={0x2, 0x1, 0x0, "dc9c"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x575}}}}, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x0, 0x17, 0xb4, "8a9e1c3092d0a195b82add5238f953dc2064f1cb62a0d7188d25d9230b4152f259d465f8b336820c7ccf59867188fd6011530512395d24b8325988bf84d43f28225debc3cb8831a1fe4e5fcd6364ca3418f1d3261fbb8dd3af44baa7834830840b0613ffe801ea559f9cb839d816f036cd6875b7f7a664e1424838b537175857d56c597db60d798e12c258ac26701dba0bb58ae592e35c9683d099b77788e33aa14b2f39747e95dbcdc9b00d7fdaddd5bef924ce"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000500)={0x20, 0x1, 0xf, "fba61997f2b00ac7cdc06eb69afec0"}, &(0x7f0000000540)={0x20, 0x3, 0x1}}) (async, rerun: 64) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000600), &(0x7f0000000640)=0x4) 9.466084923s ago: executing program 9 (id=8904): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="08010000160001000000000000000000fe880000000000000000000000000101ffffffff00000000000000000000000000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000fbff0300ba66f10000000c000000000000e48859ad28f2a988dd98107b89c8ccc51e6be13dfb3f27056c2c3db082353b36d791485cbb208bed3eb0af8ca75ffe3747bdc7cd0725b0d41ee8d6dca34d0456e9a0ed105fd5ec71de"], 0x108}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000600)={"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"}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000740)=0x40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500), 0x52, 0x0, &(0x7f0000000000)="1920ff09471b1099c7961f08c405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 8.656786535s ago: executing program 9 (id=8918): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = userfaultfd(0x80801) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) bind$inet(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x20, r4, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f00000003c0)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500000000d512003552bde5c064073ea5c7", 0x13}, {&(0x7f0000000100)="17", 0x1}], 0x2}}], 0x1, 0x20000860) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_FPU(r7, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 8.378754919s ago: executing program 9 (id=8929): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000004100)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={@fda={0x66646185, 0x8, 0x1, 0x16}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @fda={0x66646185, 0x9, 0x1, 0x38}}, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffd98}}, 0x40}, @register_looper], 0x0, 0x0, 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000001380)={{0x1, 0x0, 0x80, {0xeeee0000, 0xf000, 0x2}}, "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", "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"}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x181003, 0x0) eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000004200)) getpid() r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, r4, 0x0) r5 = fsmount(r3, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') request_key(&(0x7f0000004140)='logon\x00', &(0x7f0000004180)={'syz', 0x1}, &(0x7f00000041c0)='/dev/ptp0\x00', 0xfffffffffffffffb) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000080)={'\x00', 0xf09, 0x2, 0x8000}) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/72, 0x48}, {&(0x7f0000000200)=""/155, 0x9b}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x4, 0x1, 0x53) 8.261980731s ago: executing program 9 (id=8931): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) accept(0xffffffffffffffff, &(0x7f0000000800)=@nfc, &(0x7f0000000040)=0x80) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) recvmmsg(r1, &(0x7f0000000000), 0x2, 0x40010020, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_rxfh={0xdbd4ab913653ae3f, 0x7, 0x8, 0x8, 0x1, "c146d7", 0xdb, [0x4]}}) sendmsg$can_raw(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0x40, 0x0, 0x0, 0x0, "786dacab1aecbae1027183177e6f3d9ed79a6f2aa1eb8249a6e0429c904b1506a2cb55fef9ef68781c27c78fd9a3ca6d227cd05f5ca427a9befd6c017b14dd7b"}, 0x48}}, 0x20000000) sendmsg$can_raw(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@canfd={{0x3, 0x0, 0x1}, 0x35, 0x1, 0x0, 0x0, "53c617c0df151160a2ca24c5ab0948fa660aa76da3137c8cd0e9b31671b8b934688057c43d8a64d5f0be0a006c0fa54a881325713f4e6ca69853e4c1493e855b"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40044) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000001c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000002a40)="c0f61a5fb77193bea0c6599de09cf570067192ff7d5bf191681878eb121895cd4c4052feb0a5196b61ab6e28d35aec54bb2aee6802a27f50c4e8f36a2b1bb12d93dbcd320ed338fd1a8ed43a2dcb2bf11c773ae982800321c7dcd67fa8930472eee2990090cc2a92f3373d898573a2cd1712c18ea624e82422c96f0d8895bfc4541911ff3662cd28fd55d795d1a5f31c92defbed88d48db688f899fe88997b057ce3e898eaf9eb2e76a59c1d2c10610768b3296595221c2b063ca2aa664fa0a5456c4e2bcddc7f856e2e29ce1b8852997a4d24f918408bfa9969074de495dd4cc9591e48287d78a2b3e0de09b48eb5b6bf78c6afd134b09770c164000d1f300c92877afe8be5d381c38da3b5fb9bd540c2f43c7dd2ec8dcff2af3517ba839c827866d10608964445bdead091df1264f5591e91d2f31b2015dff1b3b7ff0a5dc8b15748278849ddf4389ca7112ec1ca45957e2809b3d763e336f7051ac4e832ec61d1b95b9266565293806933dd8e3b65eaa1b4fe7946056703426674379ccec7abff1c459b91248f3a1d9e8103ae395aa86dd4235a5c16d9bd12dcb1ea9565a7c3d58d247a51db6d9077ecf47152d0733d79a5c449480c40b1cf8e115df4de3404b73ad06ac4c0d03f3b51d1b89b05ded082a5db1f5fbd8d351015b93862b2cc0995fb318609237e404e8d78d8982af761c27ad1fbc8f4693194c5e6b99edcb7a6e9dd261a386d8ed4420a7c12cbdcc86ab19f4e7a6c0c9b80fa3f0549ae57b38a93f669a87584b81e56211b34263db87c2d244e422878aa93e2c24260c71d06f75da33079b48b7072859669c128ba03d1487336a4a04167f2a3fa928d002c8b3cafdedf7a479604aa8f94e6b7ba58395df3d136b783f7be6b0b6b7b4b735c88a53da064a493b16713726b39ce23f08af19a671fe81be1e9772d87ca9cb5dccc35759fe3f7935a3167924d0a7d1586821ffebe0fa57e72a24967f7958875c4bf56d779369074db0077ee58138400c2f646c645e0f453e9e39aaf48da67775f59f8e282db3dec88bbe20ca6e65e2c7e44ab0583840513bfab76d94d1512549ea6db4a5a64cbe6f76b0ecdb2f1f71aa6446bcf4f7249366474cb77ed70ccb2702134b9dc6c2bfaf27ac9a9c85b8d9c48d100ae8c0eaa34701d2125a405b1117307119b754ccbbbcb2c8b71eb76d1157ddc7fbe0c75652a4cfc31d785a489f2344d8b4c47ff1b772104f49658f62d6241ef7f782db0cc071788b3dfa74e69533cd0a02ffadacdfbc8b5a83b9d4b8db068b5a7370f947fc4a99158c6296a442beba2e23ac1ef68c50f19851f3fb68b67fb714a5e7e53bb5a7690286cac12f2b002e854d8595075fbd00622b29bd423c3dbaf600ad6f37c96dcde43de6290b053c76df5620ce17118e2230039304c88a0d207c7cd05dd3854c545cdbebe907cc4d3411a382afed5e080502363cebe68e2c8dc1f800ea4add827a83a9cdf0fe6d54eabfca5a0ba370a06a4af1c49a60cd19141a4d994fbcce888278ade6300bd40685267fcdf1317cdb3b06cae9e7d9edb08d5c98b6d7115c025fcc05058a515adcc23c65ce526aed3b8203f3c54986f65ba9ffe2a9bc26b2813a1fe339ba2a58515cb8375e2d62550bf35dfd4fbdb75a70bb9fdc47d3d0346a65b986b7efd12aab760124b6888480b341b16ef2fea93fe2fbdeb55706690aa2c02bd80b1ccb7b8f23720283df89b515e2020bc5364cc4aea5fdc250f10d46db93c128e2de7477f4c80ec016f7a872efdef50ae1730b3a1deb8085d82f4fd53015a518803cd02646c087d67b0fd7092852dd81ac93ca60346f23fd847cf7c4883cab81af956342da21fb399b69e1988d89f9693b0630fa8cc95714285940d20eda153f8f7b01e6b2b892327b5d1e754a36a3430c5c22c3b841357eb80e526d7792a8ab9c4b1d23d82e31f23ef38580c2b33ca72424fbfbbf237f315cf2e5d134783982cad204be087ef58da96c6bc5da2dc4bc78f293eed56157a10848c0a956de15b83daacede9ae1c54731149f9ce7231cd84e14f128f87361e1fc0cdb2940766f39c93b9ddc74bba0a32548cddb1ae20981576de2ef8a772b04ed90900b2da11ffc70bbdb7091b8b8ed600dc0c9d236277afd9bb97b035f3b8fc95ef3f30c056b67a195c5c9f44c0f2ca4debba0d6d8779903e8e34fdd6b766fbba6b57e722ad9a852dbbeca8eb9acb9929bdcb4d4fa57d54ef1c1a0fdc032a898d3334f5671c7df82361b7d616c1f87e23f7adf043edda83458051f073f2562904ed25ad9a7129f3c14286007c9e4c81ea56c6a7289d8e58782d949a19a2642dc89d107fb465d0a98128250e66eedd93cf063963b7f7a0e1d3b9f1dd212cc9edd662af45852dbbaec84c69a640be115a239b5abd46d990fa007988f6be78a8c1e426091ecb33822529f7fddfb34d9304466ea06bb546a34735021e98674ae4a5f5c0b4f153ad5434b81c6343c42ae79224fe5abfe8b9e6fba38164c3c318500c130323b2f9bbcdf6aceb664e10483e2084defa744cd745e565ac5a8b5c30166330dd95e70f2a072a5cf5462635f7e0a4f455bcb607426aede9fa06d708c7c0daaafe2b84896134ab3b379c6690c9049903156232e5b7ca9529d602968f1e1f7a73214aaf4a9575dd5147e5bef8f05907267580abdb728cf32f6845cdf3bc779451669e4972e0b787afac5a36bacc3c1bcce125e91e4bf9810d91d1f1a3d8316328dd2626040af09892f1241c6645537ebfbeb752afba5e8171f487edba97aa92404973d4e8d09254abd2b70bdadd9b98fa3c33355295a5c474e9b2f017a6636233a382e8ef4e73506880e2a588bf257b6bb11e57cd9e75e45ef609ba583f3a6b1f2f94c7a0443dc0a8906a13e0188b61550cd296e4c63faf45bf7aed852f68ffed377302da3f73d89e4274a64667636bf00e8e4408a8407e098aeeed98e545b9aef40896c8070a76aaa0042162979ec0b7b69b4ee701100d66d3e7d25a48c59989424522889b32e4f18676475782e86d652d2eb836c326b46b8544bb755eeb14727e5ca25875f7b9ae1c113068be55a1521cb4edefef34a7a4cabc3639e456c94f01d78c059c441ce2c468e7b39b56555ad5cd6a14df8e3518e4e1970fbd6f586ce46c51c4d9ad20c3f7f5048c071994e807f19b7176290a82406dd0ad3f0b64350bbce79b223f27ed99f819def43a33696c0739e09030460a5a5d04d251adfbde1af7a485894d3d30c79d49796a9a5e077aeddba1303f3e3a3187298c88da70885e2a9dc966eb69a6439e2d3b1934ae6e8ea328497d87a9dbbddbdbf12b0c582ca4ffe1f25cdcf89a6ccdb31880776ab808b4f050ae02adf70f64c73ab2a3b1c4da69950ab4f7bcf9cc22f81b99694a7783b792facd8197904c12d3776de5184afa143ee23eee82aab2ac79b25503e0692f3463e5c363e0b4b5f31af82898009f7da13d4f249a70de40314c003e7e59dfb233bc44d0316df3e45af806d216ca76a58417ff8abcdf7cfea2da8868c496cdec8f47c451ccdc8908c5e8c1039b6bfa8751637c29fdd9b7dc76279dea5ad7455af4db3394a34cb9be8b9bf1105862108f920c44d029c3372e77c44a25d06cba956da65ee40abe32b8b557e123fddaa87b4ed5ab3485eb11f13c61072720d4adbb937c336f2b60525933b6d49e7c6751f0769377bdcef02abe63639b17a6780a4afccc8067403aeea42726f253ec97994dcf55358e6faa3e622344dfc613f8be96714d5c49633d7b74b9a72883985782ea8691d26da620d905f3583adbd9d527d93f1ce623bcf70d98a0455ff80fb1d472c6fc6bf0390e81b8d755b196e94fb73bcc883f5f310043c5138c95c5d7079c24d5bc5876b422f46a2bb17aee407bf7a55dbbdb253e2865c1b91839737c37142a8fe8bdbc0a7bf89a392da717a5ed87af754052b1d0a1a37313b00cf3b4aad91ce7fa7777b1851121a63e374865b238ddf9a7ebd20641a719c68682b97e3c5126e732800c04cdb627bd415efbb7e5e19917bf4bd53f072b7ec2eaa0128b56e069a32e9f729718fa4a7212ab0fd1e5d3582a5723a704d84a88c235b44812849301ee8155cea471028beea1918cb1f4118728718674cca9dcc58bafcdb9379c57e9333ab348b30a801aa2f5c05c3107e52613cf0f591781ddb5e1e4844633057a26bb3179c31b5664db4bb8c6d762c7b9886317ab6e9e301de67f12085547ad2a20d1d63d361c2bcd66be2e25fe104f8b53b7cf89d90d456f063da31f60078b760ce340f9c9a8e8da113b6c6e3c53e666488d75ab209dbe31ecb531553f17446a29edc465ed22aee2d4c013ee8a4d935c0cd92bcba9e5a56a6c19ac114d12db58bcf5f931a7b282404af34fee464f4c28e16dab834de98dd57b107e45fa66b26c32fd94e848aef6e4a2a65fd4fbead1b1d445d6c343bf50d785e664220371e27566646e284c6a3b07c14c0c5b84b5cd1a01a84d655f8dd72ab8e3d0c48e67596f605cd4a50b5fde9b182792d7ee8ee457eb6666aadea80563b4d176933cc482f75cb98a8dde4a414041187cfb2abe3e5077f23c98bafd0afb8b023e0cb26efc1488dd98a51a19dc93412b5fd91c4e06439b6d2d20a174989f860de6b1be55923a11e5893d30fae74a625f777ef9362e64b529c964b5c0b5817a579a647ded28582c45f965e52e1f76084267c73f8fce8037b22c2496ee6674f56056d9c691eab831c831a27fccd90f961e949a51c90a80b677d11e70d01744f9632cc26b7e6476b8c92a688ec8e1280ea8b795eae7ee61e2735045b9ea516af752b35388a6c3ed98cfbc4e74c8d0717dc31eac87b6a9c06f0d4f412e8e1155ce48cec6d9c106f3013329596a2d43ffe7f942cb7b7449f38620a8a9e5138b5d5d03c8a563446e4dfb1905d841f7a350d6c67d85652297db21b3dd3291b795c90276ccc50eaf513f3ff9480b3d2c0096e92c93cbbea680833cfa630d72c4f5a21ef0f81910b8a5ef77d62175d3abf5b3417cce43e3c53bb84ee1f5e354b2d79c2b46e3bdb2ffb15420e7a28c800c2591cd331d71c645a6b1bc43f06703164c05f61b4abc0fecbaee510def6340c2bbcc32248655e9161c3e6f01520bb0c53be04c3a3ef4a2dc401663f6719ac758aa297f65d1681652e4ad042d754b054df9cede3ffef7ad2f52184ea6d93d6867cc262b0a413da11c02d0c7c49a663319333d8b29d56cbf630e66b6683ff7f3b1ce5c481d37151626eae761adb77642f802bf0f663f3c322ee17cf01a09f058dbf82d04bdd7c48f34f54392d1dd489891ce28373ae980f74897fe3f90db2a9ccdbe56160fd2517adbc953e88c5fa8981456b87ab9f122321816e0df119f6f6c505f0dcab1c8e6a7f4109055dd80001dd90ea984b80f0b0766bd9772d96ed42d95f219b4a8420d7cf04f28475d7f5d8a8a07b0930c40d0dfc2592f8f54e90a80e0a98d3055f4660b1530565c7f2d91d7d96142da19d644aa7c512e24f83e8305970f9d3fc3b9382ad141f63f2d5b265b7cda258119ca4f553fab11f2fd925a7a24c4021045073d867bb089ca7bcb702bcedbc28781e408cf8bd43498f8661a320d28c95c1fc42635c9e4c4de8787afc70bf5c8bf75e0a2937a9ca2b08c15453f24211168c7fb2a24218fc3f04160c2daaa46ef7fb710606a53228e134f20511169034cec55e77037a108060b8fd10ab9ae228d9ee4d5ab1380cfcb8611e6c9d5dc143db2bc856d967b0b9d0187ba8483f7adbd1092562b2b16420baa5ab6c1f7c02ae56f013e752d9f41df4b4f0b008bc25ff58f816e50bdce308e219068bc898a21f1dd26d7fe7760459629f3615bcf7582c87d296f041fb005a72c7ef4013ccd8ca3bea85db90ae6349f101adb9235dd343be423816b37db2661dde2b9db33800da7599e8a9194fcf06755e2659670c62aba1d5a01172a416a0296bade0b32e69b0ee60dd6cd1eecca4335eb0416df6ded75049a14660276df47bb4f224e087235742e90ddf6f57827a0cf26d71b9338f2ff5166bea85a7639de6ac97ec829a7d071fac1f4b27c6c23e952adb5536b45a68e75c1c1a6d44508be6f4b87c5bb880a6baad5faecd1fd6730783d8729c2d89b23a3f2f9b79b78f7fcb70a7812607b25b17ae857e65f205ad5dd87a34e52c6e9611f588236bdc59d816f277aa8cd4a19750461d3e82c8621181b803900d1df439babcf4909168d4125a7c962ceac2f834d79460f17f92f415a85ad7e12da4b76105bceb4641fc87da7797fee092828f6e9e42631fd5c87046ebe5c4044663a31a1b39a6f6a53ee2b7fbc3eede57619535b1011c10d2d5a97c781c44bb6e493287528bc5281496f1aee3c746e09aeef0b2d38bdd33e37446c1f7516767ecbe298b78ef8e03336a08a1a9e62805140573b034459a445240aff04593539aa97056957f3dec9c43e50a1bce1b9c8e860940e03ae39e8f76fb80ae746f7fa4ed0b050c9e08a788e666e9f18bc8e83c64ee3ea04eb9f1c1dd92b3be73d18cc53bca76ba4688b48c13982ae6d25fdd9b5b85612d5b706c9b9d7c6cca91141313356f0d7b859da0de669fb52a829014a0fdde51df658303ce085222a42ad624ee6c659ec94e0d0713b2d3c3becb53c6f76d30530e6129943e20361a7c9f7847f79cb871d866b5277eecc8c1626fe2719c9cf872c0fc78a98e6ca998555721e9abd5bf9e2d1848016e0bd3202c44575c688837136e71e85765d677e0f2b081707a4e7e22bef50b9280a1a5ea549022ef2a9fed989f156198975302608dffd03f8f1186a12585d4670ce868f0c96be37416b9132144f65c9abe8b00894d7a7e6d0a8554e09139ec2a0eb6d4f00c637684602c106257f5abe816e068e0f6f3e94a916ff41e23b6baa4876931209a6b0bce1f6fa8d1965665d3dc42e5c6b011bdb5144fa5fe4879779ac9dffe0843cf49806ecbb615b818e54c6dfe4d12ccae5b12b0ce87909c1e852e8d7587d1ee24c2575af61eb0b667c37b6d15b88121974598ac23cbc66503f95cf01a7a1e217f0712c4cc4e5fc22e83e3aa375eda531a73828eba91223d7de1194af730bbf2c1ed5ec47ecdf465b1794971010ff8c8771c488a1d3f98292b5d2ea9625e52589aaf7212fcdddcc0f1681b785911fcc64a6427358e4307a3d8bc583dd635ba5c41eeae96e0b6bc5236a1f539d291e568d5a0aee25ffbaa73d0cb84bf558cbf6d04b16ef7e97617b42d07100d82fda6f75dcade611e459bdb4773bf2b70e90a8add2bfe6ea6d3a4427940fef6c81931762dbea6678fc63e50c4430227b15cf184dbae4c3b2d8096292c17f701c560ac7cb33efe7d79d0c2a3c0c06e22d4e84e9e959697879f0d27df460046fc20394655cfa19793256cd9074f1c5f8ef530af537164e0e43184f921d56094fa7c7744af35821a5833c9b9d56fcf525a39fc795cf33f14705d0c7087c081bf11ad29e4d6c8f6cbbb3a0d873262b89cfc54d4cec42c3e13a5ba604df942bf8b4eef7cdae1c0e2970edb7ea6437618e6f8312a745ca8bbf0c42df103f42c824ab4e77e8b118e2b9a84568ed3d4aa3800011d02be29c032192719635a1c6c28315b27368f6ffe852bbd661c351cbfbf97b1b36d52371a4ce57e5eb6e4b13cd01b022de1770a5b1cab0fe548092a16e04de76fb8d29d69a1c55f8aa11b34bd6f018d283a9a7c0338b8c1900e21c0054616ade6b56d0fe3379f1a8dec38b85fa8e74e9bb5df4287d037f77bad30de89ea87b03d40c3a1618db1073c07032f6d22f8a264cbf0c1113689308a2fcd7299603a64f884cb03f8c5f0e61e4981d2baac3d50975cb917b815efe2f7eda88f1cef1f34997f0819a92051c1d9eac3ef05de25a2b4d5f65619b4ea377180c541f2afbfa5c8fdae59f8e3a7635d2b30c4c759c32e570b8d9ec03b4aab65503e81e545dd41f593615cfedcf009424ae4854de3a9111115cb254608bc2666b18c85698ac193a9799f1a1f6098288b42dd2684db37e0d3b023ac9b417263b1566acd6d951df147e83db8e909b39bb6a1aa3fcc1c1a20795521b84e0884254b2524ebf0321e5709e7a79f2d62309247b7b24ec71553a9ab9daccacac1a8bd6019b7703c0ed468379640ac6e764ededb2fefaa2f88e15fc97ec6f16007f540cd7a57c7726f4aa9ff6640cc7f5d71a6c12048f98a9071ffd594f17e42e7336ab6d0fd429328df1238e5eb4ebe4f9d8ef01fbcfe8f53eb3f6defd4c7cb40b3772ea2f2130b655d2ad3643977cafa991bbc6aa2aaa2879a3c2d1dace3ec034beb3d06f0a09429b3fd1ac06870dde4ab97b7d5d7ff1394577a6bea7a3a53ca883a16c98d574ddad00de5dfe9f75369be7686a4badf44f4d9b110846b6ffca67f63973186433f6bc3691b580cdc689c159064c55a974fb849f56fd2f9cbe4738e0a1a8a764467dc1d3723278ee1ea573fad98a5318104218d359d89579614592fa6ae7cc4720e6ed71706fdc4c707b03ff77454daf4505700f249aea0abc909763416d44a069a6d605118ac0c20a325577fe1d8af053673fc72e489d24405281f01b4e2e05e4fa14e68a53294e4b5d201c146ff994cfb7a776ad80828732ee647092c20fe46d917142880318136557c47ff7e31d26f35f407c1e6d4254aae442b233b89dd4c0adcfc92b0f821a5a9dce95a24bed9bb5cd17a5b59d3e82086cdd7a3755064e4de22d8f0f973f4235aa58c6214dab89325638d94d3dc25f3ac4d912ff74be6ad8ef49aa2becede5453a409cc8ed8065dacf28a1a7498f6dd07a3478af093574fdd2d0a4f98d12fe898e47cd0550f1fc42810ed2e4cfe5cc4faa67d965f252aab1bd5c536bf2c936706bc71aae98b93494d364faac72a9a60188a23f15ddf1238896e4848da876789b57ca53cd5b1041612a49de9a64a545a39375aa2a516c4af4744daf65a9c28ffb635ba56b96731b763934afa0651fd6fb65e9f71eb0e6fd54bcfd2bf0118b486e97db512290bdb1dcfca76ed974722e13e5acd0569d5f944de70adf728379094981ffaec43848367ec8cdcc227b266649ced47a03b22016ce42be3a33135229670244cc7b3325ee448c95236d0de4bbf641e1cbb0516edb3f8829e60f91d43f0fe45595d8a99e699252930c7b05ba2ba679f8f46c38f789a7750ffa4eaed19c4c1a33aff60c8926ae42497662a130b83b3211e9399e2565d9f082ec30e26e5b02ea91cf43b0a046f9fe596e5bb2a9c800d761008dc7fced2a510af6b02d3f702fc3e1a98c6a87661f0d353b81bc4435c0d4376cfc74c057bf23febb101252c4eb168d4e347e697c8d0c48a687fb2224d58e5dc68c38de930164aba51e7cb19051fe64603c6b602c02c5cc22c6da1c47d906fa1cbf67312658b201b8f89a377d61695daaeee18eb2fb8caf38280fa8b95cca721afdf33d2c3092af57204bca72c46aeae9e9fc46f0ce76b96bbbb59a8517cb72d68f8b189280b6ce1e2686204913bac1d9aecd77623b7f05475352e57f245197894d767e5f17611bbf1bfe2015c9750e9b3f5ad4ad57be1ac4988c30d90829946b05fc5bd709dbd2590da2e3666294f83336e52758bc12c9d02af342a91fdcfc9144021a783643a9845a4898ee03417329ee0e2dd7bd53f3b23f3f9a10ea643b91b3c2df8438efb22fc894bbcdc408a13dbded7002d9cef6e38bf6dfa16f52f0f24087281a3ae95fb4995131938f9ca80c5f466c7367665e5717c823b318f43e7a3e2e8fe9c2e74959ca3d53b79fa45ac778d0a99351a1919b1c9ddfda10d61487fc5a2b8227493b14e2ea9fa41db870deb1700eb46665424fbc3f21c5d7ad61089ad0f99aadcca2a97d46fd091cf21d95674c3cf48f2724a89299b5342ebf8b18770e61c449455f77cacc5b2e0123005cc296acfc28e42e3d3b426469e39def114d6071a3f015f94dd8eab597dc4cf6109f2aeba0639ffe3f66f15ddaa74460a884a5c067e1e6f8d961ff32518e7571d53ae36badcaca50258a15743e67fb35e062e697d44ccd4e416010dbe62a1d13319d3ce88dc7826514d0f84cf7ffd5f1dbdbe3534af35bba26c5f951e18b012234a3e1cd22199358ba66421a326af09d36d45c3497c4725c0e8557395376fa9dcbe4c595aef7f822cb160e72138cd610563c382769b64f5da2ae6f62cbf09d24490565d7b88f6fefc30f050e74327b7efc168f040f18110a61cc6ecf73c43c0e9e73fafcfc6079ee68839a8ed710160fdcfd987394a790e01c42c916169e8c6a7af905c15d51f87e88877386b8f8743efe4fffc2dc8fd73b4e8905b428d4cd87d90e93513f19a981b5037370cd634f23859cb7bd6b5632bd25c6873b7195691e0f76fb07fce6e72d4b2b467e57a325febf4bb842820fe6896b23aa2a3eb37697753a3693ee936692e6cd91eae410bf89192df913f2689adc73b7b35eaf8bf80928c0023b105cbd2be51a08a371be88926636bd590466c218b203fe311d73dd1a8b440133f1ebb8249b4e1f6723b7b18b508dc34acd9da927ea60d2dc361c2d14cd43ad3b0137ac32e8988d11d11de19065d02e8012a2ee24891541989d11da87de4383036b757769222af022e86803b64ccd03e4bfe3a9d3b8a5d6522d7b6ade88aca72bc436382cfcba22a426ecb21366d42588e9a68c0d61722617a4706852ef6e5eb42842d127f88dabcb8cd635d621a9082efe0cbb52fffb017c8cbf80e48ad1d8ac4c927bda50be7bbb6a302081951dd7c05142465ef8188774807ba482c155f7b56b663d24c4ad88140ddba388e4d6abda83048db46ad18328c63006d02844189a769167d94265148e06f3eca08dcd81691df655968de44c5931e62f5dcc4aa16b24ceb6e7a2c8783d9918a9be7c72dcd57fbf39f985ac29069241cbe3298d7651124f03bef8e2adcadb0c0e08efb096f72e5df2d3f8e2ea6f9cd2401533469e5099a6faa98acc2f73028eae115b3a771bc7ddd186ee7a634398e206ce9b1262b1dbb80575eac718eade048bc01ac1d410e21393dada6c1ced94c411fc19ccacdd175996501d66819b491fef65697f736ecc3a4c32f3675d1f90c8e4d44a1ba6048e77fa24d6998ad88da3cf5de223446d53dd72981c19d5915af69b9a7b9bdf35114ac1cee66b9f3f6df4b9a2d2c017d44443a28badca61b1e8db627d967827ebf32c8642b7de41508c15538b6cdf0284f1a94e8d9fcaa086236f11fb1689d57d500423a0c1d362a4fd57e5efa8858c237a0b58210b4df2b6f10fb01ff8b305cb69e65120c716970e1752cae51022a068b9ac2b7775ac415c56d31536c9f1eca654ec89d7ed00855b2d2564a74bf1a0a3b75cbeadad89fd4ce7e0a83a565c6d69077f026dd40ee186fb496d575c5f5d2f4f84e0efd6bca34f070b185903c7fcd6478f467b73687dee0b765477cc474cbe7f067d1f655efe1fac24a6cda9ed82dee343a36f5ce3894587937f31a14dff66e8384bb3c9adebb753f782570a894e09a38c096f523fbdfb7e0c09026fa023c8dc9e5822410d8343afd647a91130744017166a9b195996ee871eb284279fa725f7af7f853eb85bce100cfade5d458c4e166c839e4c1a86", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x7ffffffffffffffd, {0x3, 0x6, 0x0, {0x0, 0x1000000000, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x7ff, 0x8000, 0x0, 0xffffffffffffffff, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 8.259359941s ago: executing program 9 (id=8934): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) write$binfmt_elf64(r3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003"], 0x5b0) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) syz_io_uring_setup(0x356, &(0x7f0000000180)={0x0, 0x2b65, 0x800, 0x2, 0x56}, &(0x7f0000000200), &(0x7f0000000240)) shutdown(r1, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x8002, 0x10) 8.173404902s ago: executing program 9 (id=8939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x22, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) close(r0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0xff08, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000001000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) tee(r3, r3, 0x6, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000340)={0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="6004c7000000c7321f0fbdce56a9412e51aa217dab1d2468ed6e408f8efd4fbf88e7a5cd017a25ffe449f936f452bd7dc9903dea886ea52a79a9475007a6ad0703f5bd544d6a35c46e664e30cf4d70da5bef49d4db74170adf3461806af8b421f9d3719b29061d22e690fa1469c324eb7e5349f27022634089ac1598422ae242949da61e7de54840215c3b27c4721b7a5517a6e6824cb106fa453e19d427d3cf1707d458e8a37d0cf5f5ac7b8c77790bf1384027e0a215c5caf3e615b4fdfd5d7a4c1223c6daefaf208753e391"], &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f0000000500)={0x20, 0x10, 0xfc, "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"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0xb998, 0x0, 0x8, 0x7fff, 0x100, 0x1000, 0x9, 0x8, 0xfff9, 0xc, 0x0, 0x7ff}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x7f}, &(0x7f0000000740)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000780)={0x20, 0x87, 0x2, 0x1ff}, &(0x7f00000007c0)={0x20, 0x89, 0x2, 0x1}}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='cpuset\x00') r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000080), 0x4) read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xfffffffffffffffc) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000240)={0x2, 0x0, [{0x204, 0x0, 0x80000000}, {0xbb6, 0x0, 0x8}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r9 = socket(0x1d, 0x3, 0x1) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGWINSZ(r10, 0x5413, &(0x7f0000000140)) ioctl$SIOCSIFMTU(r9, 0x8931, &(0x7f0000000080)={'wg2\x00', 0x9}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x100a}, @ptr={0x70742a85, 0x0, &(0x7f0000002680)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x50, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405427941a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f61"}) 8.092861923s ago: executing program 38 (id=8939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x22, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) close(r0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0xff08, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000001000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) tee(r3, r3, 0x6, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000340)={0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="6004c7000000c7321f0fbdce56a9412e51aa217dab1d2468ed6e408f8efd4fbf88e7a5cd017a25ffe449f936f452bd7dc9903dea886ea52a79a9475007a6ad0703f5bd544d6a35c46e664e30cf4d70da5bef49d4db74170adf3461806af8b421f9d3719b29061d22e690fa1469c324eb7e5349f27022634089ac1598422ae242949da61e7de54840215c3b27c4721b7a5517a6e6824cb106fa453e19d427d3cf1707d458e8a37d0cf5f5ac7b8c77790bf1384027e0a215c5caf3e615b4fdfd5d7a4c1223c6daefaf208753e391"], &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f0000000500)={0x20, 0x10, 0xfc, "98cc2d24c4566f52c8be54a7eefcb4dbc66b368ddf0145d147c10d54b780443d1b5c5fa1f13b207d12d4de750106980de1e00ae38a46b1d33783e08f91bbf9b0500765ff381d517bfe43a2b4cb1ed506a67542173880f159176938ace96b836c310bbd4efdde3e41ec75207efb401efac71ce9e98a18a1564c115074bd2595136af6be58babfd64231eee5e91f1f6e264c73920a9f2b6bd644eae632b3186a984ca1acca0d5b25881aa12e7b09e84efbbb16f2cdbaa3ae3cbeba1563a2ee36e8e3570cfe57b5a96c40a995c37104125be15666081268ec41ccf3502d28622a6252941c4e8c2fe8beae26c186001f4457e105d1e9e5975edd87b6490c"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0xb998, 0x0, 0x8, 0x7fff, 0x100, 0x1000, 0x9, 0x8, 0xfff9, 0xc, 0x0, 0x7ff}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x7f}, &(0x7f0000000740)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000780)={0x20, 0x87, 0x2, 0x1ff}, &(0x7f00000007c0)={0x20, 0x89, 0x2, 0x1}}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='cpuset\x00') r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000080), 0x4) read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xfffffffffffffffc) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000240)={0x2, 0x0, [{0x204, 0x0, 0x80000000}, {0xbb6, 0x0, 0x8}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r9 = socket(0x1d, 0x3, 0x1) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGWINSZ(r10, 0x5413, &(0x7f0000000140)) ioctl$SIOCSIFMTU(r9, 0x8931, &(0x7f0000000080)={'wg2\x00', 0x9}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x100a}, @ptr={0x70742a85, 0x0, &(0x7f0000002680)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x50, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405427941a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f61"}) 7.844721956s ago: executing program 8 (id=8945): write$vga_arbiter(0xffffffffffffffff, &(0x7f0000002240)=ANY=[@ANYBLOB="7472796c6f636b20696f2b6d65dc53f2161d006d0000000000002316e783ac0c614fb8faf83038ddc6c198a84b6d705f5ac01d35481d4c825c5909f31b14f9c1fda96480a9bba037cbe2b0cb17bec17fc6916284e7ff81e3a94d0cbc04dab1bd12e2a0f0ee943a68e6150a7e67315884c048497e9d98fd8d5b6d069653d4cacc4ffcd76c1d729b2b90f9d55947dca82d3770"], 0xf) 7.844217247s ago: executing program 8 (id=8946): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0xfffffd98}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e2b, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 7.671396809s ago: executing program 4 (id=8951): mount$bpf(0x0, 0x0, 0x0, 0xe065ca, &(0x7f00000003c0)=ANY=[@ANYBLOB="27ffbe25c7fa"]) socket$packet(0x11, 0x3, 0x300) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="400d5d0000001a4657a75b9139ee170f4bb785474545af501e0c1356f824761a6b5d20e8a1f2b98e8c05382c35cdb32591169601d84eb1c1c3a6c1a84aee0594d949000000b36f683ab651373d92c3a2877bfeddf90ae6afa56dbadeb786c800000000877a42b65978e79dd93e3216e4b79e82c90d48bf20f36a69ab1216975f359eedc45c3267a31f150a9c26d33d705e7d6f7e05959c7f0b38a81c43945fddf4c2f3efd65bfb8ac298b50f64"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) lseek(r0, 0xfffe, 0x0) 6.557705585s ago: executing program 4 (id=8963): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x6, 0x0) poll(&(0x7f0000000040)=[{r0, 0xbc46}, {r1, 0x1}, {r2, 0x2}], 0x3, 0x7fff) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) syz_clone3(&(0x7f00000003c0)={0x4000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0x16}, &(0x7f0000000180)=""/248, 0xf8, &(0x7f0000000280)=""/232, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0) kcmp(r3, r4, 0x2, r1, r5) tee(0xffffffffffffffff, r1, 0x5, 0x0) ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f0000000480)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0x3, &(0x7f00000004c0)=[{0x9, 0xdc, 0x0, 0x6}, {0x6, 0x93, 0x4, 0x6}, {0x1000, 0x1, 0x81, 0x7cfe}]}) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f0000000540)={0x7bd, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r7 = socket$xdp(0x2c, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f000000bf40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f000000bf80)=0x14) sendmsg$xdp(r7, &(0x7f000000c240)={&(0x7f000000bfc0)={0x2c, 0x4, r8, 0x29}, 0x10, &(0x7f000000c200)=[{&(0x7f000000c000)="32ca00aeb7c052c3e6b054e2e932573ae9640991656f083399405514785ff19895b05daed5076d079a259e70a4014b52d005dc22d080042fe9139379060ae2c48978d570bfbaa625da4713604ed11d16fff17705d3f9548ced408f675f00a037e88dce04fb271661eca51a907a2632f55b616cc59ae33e8898766f475635b17ac1f1399516e9109200314932ef9e52b45104af1f00b4536123266fb8b69219be37b04da137adcb0d33bb0ab921253263072881fc75acc07b6f4fe7e22c2366572d02e3006ceb3582cdd27cb6b56455cc9b12ac0bc8231a6f91110f3afc3d50b7626dbcf8b649638c5b46", 0xea}, {&(0x7f000000c100)="310bf5fbea59e5ed89b2a0cdcdd30334348608043f310103147e96d80308d26ad91ec91a126d15ec2aa7aa4eaabc7a03b39b624eec90844b59e7e0d45ed5983a73167c7f4c7e7ce07df30a6c1f9c002b66d45043153ea14f9c34d2562513c91c81723537134b7d1b506038bf23d47f2fa671bcd58065229435648a60f948b0d664f835edcd94c39863b254d9cbb2ba281b45edd3ae09f5debe7fa2907f14a00b6b05dc83d11b0e84c6e26e6155f6bb58a72aa440397ef420ecffcecc9bb696741ddca1a67c396107208c7a58c9ede5ab3e55d5aab08526cbd8ae6342edcebfb669dbfaa3", 0xe4}], 0x2, 0x0, 0x0, 0x40000}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f000000c280)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f000000c680), 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f000000c780)={'tunl0\x00', &(0x7f000000c6c0)={'gretap0\x00', r8, 0x7800, 0x1, 0x7, 0x4, {{0x20, 0x4, 0x1, 0x3, 0x80, 0x64, 0x0, 0x1, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@generic={0xa, 0x8, "dda8a36ba400"}, @generic={0x89, 0xf, "1306bdb186e15b20de11ca929d"}, @noop, @noop, @rr={0x7, 0xf, 0xdc, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x43, 0xffffffffffffffff, [{0x0, 0xa, "5b0216961555c52e"}, {0x6, 0x6, ' sZg'}, {0x0, 0xa, "17751f0a096046d9"}, {0x7, 0x5, "ebddd0"}, {0x2, 0x8, "7e2d68b70ebe"}, {0x6, 0x7, "d2e8c6f5b9"}, {0x5, 0xf, "7373c2ff3a146d032ba927a3a7"}]}]}}}}}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f000000c7c0)={@local, @remote, r8}, 0xc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f000000c800)={'raw\x00', 0x2, [{}, {}]}, 0x48) pipe2$watch_queue(&(0x7f000000c880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r9, &(0x7f000000c8c0)=""/128, 0x80) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f000000c940)={0x6, 'wg1\x00', {0x5}, 0xfff}) sendto$unix(r9, &(0x7f000000c980)="4e483426457cda65c75ce7be10d76b167866bd90c4b12b31522075aab5458ec9ed169b1d2368a2a0d75d2a2963acdf89f4e5ecff3292aafadad38752ffd9e6570bd97b8f4a4292c33819993a725b44d22d828350cb075f400d53de89abf1c6ee533f91fa44676e07eb5576da1103819e93d6d4935b4ef73d6048963dc31a6d9f5c6ad71da381c6cd4be693003d57040252ae6afefd4e575be39f3a021b810307", 0xa0, 0x4000001, &(0x7f000000ca40)=@file={0x1, './file0\x00'}, 0x6e) r10 = syz_usb_connect$cdc_ncm(0x1, 0x114, &(0x7f000000cac0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x102, 0x2, 0x1, 0x99, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "a13da2e2"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x800, 0x5, 0x9}, {0x6, 0x24, 0x1a, 0x6, 0x4d5c825d375e5038}, [@mdlm_detail={0xa2, 0x24, 0x13, 0x0, "5ff7c157b27e70923fed4b315c37d67105fd7aaacf715a295eb4e6386b043b0921de882fa696ba07c223a064a215cc3e704cbfe647a56bcd5a5271bcc56c70ef4fca90f5171ca2791d318c0f2d031f0487edd37f29e9f6f166bfb82f198336ccf26115c009fe2dc18999c1b1e1b47f6397c67836e3204c91bdf106368f4ebd0f2ad27670b6f37f2ce2d2f54703d40514795dcb5e6a5e8c9eaf3465cd7aed"}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x3, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x60, 0x7, 0x7, 0x91}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x8, 0xe5}}}}}}}]}}, &(0x7f000000ce80)={0xa, &(0x7f000000cc00)={0xa, 0x6, 0x110, 0x8, 0x81, 0x9c, 0x10, 0xf}, 0x102, &(0x7f000000cc40)={0x5, 0xf, 0x102, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x6, 0x9, 0x72}, @generic={0x2e, 0x10, 0x3, "d519e8e5ed2cab6ade3d4b42e7f5f796536b14c230dbf2034be5e679bba392f00a508f2dec11812b03d6a4"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0xc1, 0x1000}, @generic={0xb8, 0x10, 0x2, "6f75952e609c0f786fbd2ff8e0edaf58a60e7472205977548c0fe38677bd26227fedecf3833743932b4308688d422e44ddabcf029ad1596adb26539a8031562715f96624ffa328c96ea44facbecd098c11e419f8a68bfe80c7404c5769ae86345361804ae612a55c6b94a536828fd4c566840f4b53679f10f981ac95e1ea0280e8403fbca5f28cf8cc58c3359a58dba2e71f3197ae7e05689affc9605dc09fe8d05583786848279689f8866478f398f73d1aeb122b"}, @ptm_cap={0x3}]}, 0x1, [{0xee, &(0x7f000000cd80)=@string={0xee, 0x3, "32ab96c3336f0558cab5727345e4ed031d5daede82d44129f38b4186c72d569dd3bd3f0fd87089cb5b0f8b984fca9ab1d19991acde75ca90dcadda4b4f2fcf5d9711879c7ad09624b04c7906f0867906419eebaba0fbfb84c23180a09665433c59e2d7df16175f3e8df5572569b6a2d0ec85a47fb0bc409ecda8039ada59a37aeb89d9d3eb35e3e15e5057e0833d51970a8dff5e39f90b4069f904b8a2273903b90a4b6bb8c076b194e54e264876fa77798347c604195c8f41b3673a68c6404b13d26b1e885608d54967fb2758c4379805cd667f3518c25850e432092d4626682640291c6761fb26829413c5"}}]}) syz_usb_ep_write(r10, 0x8, 0x81, &(0x7f000000cec0)="5c108602b683fa8d4995426a24f377aabae1cb71f6af78d6c3264b288fcad677e134f17553c0d2b9203b14173ccbc4c3429fd1e73250dfec76bb90af96a94446a5151544770eebd939ec2ef7b8395706b9a4aba9c0ecb1211d4e5004dc991cd46b3d993267329bf158448de0d3a197924ff0d7f3b07c89688f223f5b9283a8086a") ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f000000cf80)={r2, 0x2, 0x64, 0x7}) ioctl$VT_GETSTATE(r11, 0x5603, &(0x7f000000cfc0)={0x3, 0x3ff, 0x8}) fsetxattr$security_ima(r2, &(0x7f000000d000), &(0x7f000000d040)=@md5={0x1, "5a81ee37aa6a45f106501278f6fb65ac"}, 0x11, 0x1) 4.630342113s ago: executing program 8 (id=8982): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040010}, 0x4) keyctl$set_reqkey_keyring(0xe, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB]) r2 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x98) read$FUSE(r5, &(0x7f00000011c0)={0x2020}, 0x2020) request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000002340)='\\\x00', 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r6, 0x400, 0x1) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00') r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x26}, 0x800, 0x0, 0xff, 0x0, 0x0, 0x98}, 0x20) fadvise64(r0, 0x1003, 0x9, 0x5) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a13, 0x202812, r0, 0x7dfff000) 4.568433204s ago: executing program 8 (id=8983): mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, &(0x7f0000000300), 0x0, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000001240)={0x0, r4, 0x1}) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) splice(r4, 0x0, r6, 0x0, 0xb, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000001200), r4) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCNXCL(r7, 0x540d) syz_usb_connect(0x2, 0xc8a, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0xae, 0x87, 0x31, 0x8, 0x763, 0x1011, 0xaa91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc78, 0x4, 0x7, 0x8, 0x0, 0x3, [{{0x9, 0x4, 0x8a, 0x62, 0x3, 0xff, 0x30, 0xc7, 0x2, [@uac_as], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x4, 0x75, 0xf8, [@generic={0xa6, 0xd, "92709809ec7af827177fc30f075faed1b068ba0c02b348db4ba1d0aea8d7b71872fd64759d156ee815b0e0a7ec8a278c81ed6d6e1f747d3b604687e313904a58f81f5977c361e93a3e6b8078d8615403f5b2935eda10c2b59754b9b3971a2f01f4efd3cfd0252d6987ae62ebb39498a41b07b0ed6ce13f44b404bb6fbe9d16b6353c6b7dcd9b952d9e2b131069f7eeb143abb76f464077993ab825ad9a00c6ac5f354d9f"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x3, 0x0, 0x8}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xa, 0x6, 0x67, [@generic={0x5c, 0xc, "a3e14e1f7333abea138b68bf4462054031f5f94a7018f5ff06035195e045d4b0f674a92ca920be881d0fde3ba1e95d899c9be338a31bf0d762e6eb140c0625cc9f6261881fd94bfbf8d9bfafd953a7d0e86919398c69649ffa61"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x4}]}}]}}, {{0x9, 0x4, 0x3, 0xfa, 0xe, 0x91, 0x92, 0xb4, 0x7, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "0adc44"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0xf0, 0xa, 0x9}, {0x6, 0x24, 0x1a, 0xa6d, 0x38}, [@mdlm={0x15, 0x24, 0x12, 0xff}]}], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0xc4, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x3, 0x9, 0xed, [@generic={0x86, 0xb, "6630b64838d6c9acf1f5d85687fa9967a84dd50aca1503963bf7bc4a8be0437c86d25c9e9bbc55b798dd718a2db7ecb7d6d5f68c701833d6d70210b0f3f1feb4cb574d9a4916a52eede2bb26fc333b6e3cbd9453229225490890e7f5d2c10eeff78dd2a9c7e0bb36dcc70bee7e8cb05a05abd781549bc0f3132faed24ffbc71475a69ee9"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x20, 0x0, 0xd, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x9}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0xc9, 0x5e}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x0, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0xf000}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x1, 0x6, 0x6}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x6, 0x6, 0x3, [@generic={0x65, 0x30, "d3563e01db570dc8c014f34922b2ee9c90b2ab86f3b40e3c14cd6ae3e6786bb1255c8ff76751ed40d329fb60bbabef8d9dd6b2bf0821c6fec5c7c8a936d25ec7a7e1f988119df90f94e43525934721b03c6383141a557f4377512be2f1d5fdb19d1d1a"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xe}]}}, {{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0x2, 0x1, [@generic={0xfb, 0x23, "f7283e5ac278c57189df751e47bb07b25d479e047a0f5041a2615656487f4fedfef376299f164be692c26270494425d1d30697b3bbe364da7d05cf13adf2cf66866e31acc81c304c16bcb438d00c634778518d8f6c0449be332ea03ee9928929f30fc79ccfaf47eebabe0e4efb4b6738514446e74fe7be6f4354298f1d11216cfbf4eba3617057919f88fc5e9fa75b43ecf59f8149fb04c195bc8ab96de50555016c01845dfc58658410af72e17ee45e08ff8b7207cf5b27dce7192b8f0298e2309e7cfc02644671bda5b04cc8fabe41ba5ebaf0de5559745eb2066bdeb3c1c725617bc383eef191b3e8dccbb38af5b087ee297b81167a3ff6"}, @generic={0x6d, 0x24, "f126eb90f0377db00cd1639af9287b18960f3dccc6faf7f31698793f59663ae9da8cc007ae5489bc7b53d8318c0fa8b6f7a2821d9028eedb2205a0fa1011175fa0a820410896a03987b2d255b47a139b5ffff611dd47bf45c253afc1e08609df80464513130efc48b4edff"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0xf, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x3}]}}, {{0x9, 0x5, 0xc, 0x1, 0x40, 0x40, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0x6, 0x9}, @generic={0x56, 0x11, "e35a1bab8944e7113565c573ff7abf8cec2a24f9564db83895e265dd518404446c234f0fc9382a7c5a9c50271b9f36b0641c09dc65eee91acd26f8d1e0ed71c161d57b2f70ed5d9fdff25e883eb0d9ca25637093"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0xbe, 0xde, 0x7b, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x9}, @generic={0x6f, 0x9, "5e9f0b357e4397ae773f8dc95e5f43dcb7143c9edb1009138320d524cabbe450b644e2cc3384b60b196826be982ab8e9350cbdaf729091969df7da175edaf098b4111db65744c632bc3aed345648246c3e48294bfbb471ddf1650442bd5329024ce11dafb140b00ccae2a16acf"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x0, 0x5, 0x40, 0x8}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x9, 0xf7, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x2}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0xa, 0x9b, 0x7, [@generic={0x99, 0x22, "c9627c49dd17ef28df37488c86998ad72fa11e32c9a23763cf084b17868869cf42e7363420f4d2037cbedd3e8c6fa8ed112cb1773dc28eeb4ea51ac1aa59874d1efebdb437aeec2868b42b41162d605c1dd768173781ae98516a185f379cdfe9feab88bc7e90f9997116e33cee2b6dd7384da110116007c88f97e68301919f3dd53993de15823c31fbff5b4c5b4c90049ed06c22d3ff35"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x6}]}}]}}, {{0x9, 0x4, 0xde, 0x3, 0xf, 0x1, 0x1, 0x23, 0xff, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "cc"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x81, 0x7fff, 0x9}, {0x6, 0x24, 0x1a, 0x7fff, 0x2}, [@acm={0x4, 0x24, 0x2, 0xb}, @acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x5a, 0x2, 0x4}, @dmm={0x7, 0x24, 0x14, 0x1, 0xf}]}, @uac_control={{0xa, 0x24, 0x1, 0x8000, 0x86}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x0, 0x2, 0x4, 0xe}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x4, 0x3, [0x4, 0x4, 0xa]}, @processing_unit={0xd, 0x24, 0x7, 0x3, 0x1, 0x8, "dace0febb187"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x5, 0x6, 0x6, 0xd2, 0xa6}, @mixer_unit={0x8, 0x24, 0x4, 0x1, 0x6, "c68f8c"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x305, 0x4, 0x1, 0x5b}]}], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0x3, 0xd, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xfd55}, @generic={0xfb, 0x22, "ed8c33f97d0774ba391b1ad3e821b3fd665554603c4028a92b2030f686fa05a474c08cc33404bc16b60995cc3778a1829298d0dbc1d6146eaba707637be6148a09ac57a3f5e9b53d1cd7b2c89fd08e8570e24f97f6340aa5f3cba04f5a6a9396306e1e47da96c720d0b45d8307292043ac6237de2e98beecac17fa4ba09cc72d2814393f914ce64f959a1d3f475a5a8fcf096aaef47ab19eade0a64ef404e15eeaad77734fb823faeabb04f006ab1dafe31ad6af8d38722f2e9e66cf2119dcfbe9e1dba7fe618bdde688bfb7c5b5c886bb582af8b77aa31cebe7d03c6a4cbb810886f3cbadb01dad94531dd007f51f350b1efe330ea1f8fbe6"}]}}, {{0x9, 0x5, 0x1c, 0x10, 0x200, 0x2, 0x2, 0x8}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x51, 0x5, 0x7, [@generic={0x2d, 0x2, "a75fec963f33cfabbe0cc46edf0b7e291a33d715eb81c6279ebfe5001cf69238d75ede257a4405a83808e7"}, @generic={0x4a, 0x24, "a90bbca51942be15ff78ed8d225397e5eac087d6e8f3244ddb50363b3c50906550d45cd999feaeb5f25a586d1d3cbf352009f325c432d1f77df205883745c4955776c143ba10b580"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x0, 0x0, 0x7, [@generic={0x80, 0x21, "8690635703ec095ed557a19d2cd1ad8b1c815106681c683030efc9d76bb6673ecd117dadaa08ee2040f08f8dde628da1152d0086a01ca5d9e8d63e51bd385a126994a1384633baf423c3c420ed68b7ac41323c61efc22793a6f2b16fe62d599c5661b1939865a03c461572390ba041d59da5629908b0121bf05fbc721ac2"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0xed, 0xd1, 0x9}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0xff, 0x6, 0x6, [@generic={0x41, 0x8, "f58330f023b7442c95de2311a13304e45c90e97d8dfb4ee5757d5ab5d03420f53271ac52c162df823ede95c57bf447c32550fc8a7ac8cf5223a881d2cb2321"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x8}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x81, 0xd5, 0x5, [@generic={0x71, 0x10, "d609764ae6095b451bb949eb6d70590f25a45847d8b00407c28742368c6304c2ea43f9d03eec9bc64d3a2d23191cfa5662c7ef971110119e44dc53ca4b9bc48e110d6919e56ba631ffbfb173cf9439b5ad08b92dbe4c7b4928a3b112f97b0ace5d98bf2b43a43410265f23d1d4ccde"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4c, 0x5}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x3, 0xd5, 0x50}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x3, 0xa, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}, @generic={0x97, 0x21, "dbe98576be8bb880872408f76611a69a008d77ef1b423a3b5bbc5b9fb6dfb747af81df6714b048e60b8e20fde0924b9646dfef678f848b9826de462395c2d9198be026a1ec77b8479f40953f814d2b462c9f5a4d784edfb0c289fed33abc057ea19a487b720cbb5e00455190756d228cec5a7666195fe4decadbf745b4702e9221b8ac93fb51764263c01294fb60843fee8f6869c5"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x3ef, 0xff, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x6, 0x3}, @generic={0xeb, 0x6, "5a957364ca76d89266ab9aab06d9338ad02ae0e47e4f6935368195c99b25fab3ace807758095a0dcc92ae5017b87b758443a46f2acaeb3f8d15ab8c9f129d9df233d6b0f89fe60abb9e51a7faf0a6a5802b23337d1e826a9449d5c47b81e7b52c8fffa9611362473f04d00a5cccb2110992923273a47f71fe5632c0a973831df58a1abdeef389e26bf6893ee920ef5ec8151d6b72875a7ebb3c2e98492c6e43332276b21216c2100685b49765b718bf1f7992fc19eb06f86da2f8e52c34b2e85a1787b640fcf0557fe1616c97e15e301f6238183f049a3603f6010bbb9654ed0e4a224feab0c151cfa"}]}}, {{0x9, 0x5, 0x0, 0xac085537c30f97c0, 0x3ff, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0xd1, 0x4, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x5}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x2, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x7f}, @generic={0xa, 0x9, "f7b9474a6723fd1d"}]}}, {{0x9, 0x5, 0x6, 0x1a, 0x200, 0x2, 0x9, 0x1}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0xfe, 0xdc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xc}]}}]}}, {{0x9, 0x4, 0x5, 0x9, 0x7, 0x73, 0x9f, 0xb8, 0x8, [@hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x556}}], [{{0x9, 0x5, 0x3, 0xc, 0x8, 0x0, 0x9}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0xfa, 0x81, 0x7a}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x7, 0x1, 0x6}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x8, 0x1, 0x2}}, {{0x9, 0x5, 0x5, 0xc, 0x8, 0xf9, 0x6, 0x1, [@generic={0x50, 0x21, "f8b692b3f7186cbd27652a3d0b317d532058b289dc41b8da3960f92cd9f3eda31e2375fe765068ac255dfd3e2cc07e87374d7f9d543434ed999dea0e5a53e3118854bda68d57f59850606caf0161"}, @generic={0x5c, 0x10, "67e7491ddab305c30ee6b23a4a6c521d152318bdc0917b514f0b757660a344a57c79da86d29e52231d0c09ec1a48ea3db46cb3f42f528d6d91306bf9fdb930806632287b066c872d856925c960f98a5e0c70923e2db437f019c8"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x8, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3c, 0x4}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x9, 0x4, 0x7}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x201, 0x5, 0x1, 0x0, 0x10, 0x4}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x406}}, {0x3a, &(0x7f00000001c0)=@string={0x3a, 0x3, "d5972e6eab6c9c2516a9b890c8b498801cda7dcac0472d47e34c2d05351a91c39b793dc00fef90af3379b4cc18aecbf78875d3c7fedaa345"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40d}}, {0x72, &(0x7f0000000f80)=@string={0x72, 0x3, "4763f9aa2273276cc496c37ef39bbf1536f73c1fd50dc1070ecaa78db0e5d74ae114a77cff847d5055b020ebf504a6eb7a248f52783a9bfb5b795867548d226994b544177b94c0079256820063eed944599ad4c30cd09b030bd471b39dc9799f1fec874d8e0f18b4abbfe8172edb4d26"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x448}}, {0x6f, &(0x7f0000001000)=@string={0x6f, 0x3, "f229929d394b8df31c0fc9da5b443946c28a23a45ad93c7d498bf7348b9d84ab5efd414d9ae695527a846bfeb60baf1a62eb650ed3081058c8b627fa1bbef170be663c3bcb76b0db9e3fe9480c0df6c59cfd5d19c3ac6661ff4f1d2f1575b72dded58b4d57d1ea19f9b6242505"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x41a}}]}) 3.534997599s ago: executing program 4 (id=8994): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x657e, @dev={0xfe, 0x80, '\x00', 0x14}, 0x2}, 0x1c) recvfrom$inet6(r1, 0x0, 0x0, 0x8040, 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x201) io_setup(0xe4, &(0x7f0000000000)=0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f00000047c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xfc, r3, &(0x7f0000000040), 0x0, 0xc00000}]) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioprio_set$uid(0x3, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) setns(0xffffffffffffffff, 0x2000000) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x14d142, 0x0) sendfile(r6, r6, 0x0, 0x7ffff000) 2.641307032s ago: executing program 4 (id=9001): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setreuid(0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x2) shutdown(r1, 0x0) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = accept(r2, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000)='g=', 0x2, 0x400440e9, 0x0, 0x0) r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011b0000f300402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000000), 0xa81, 0x0) 1.744376715s ago: executing program 2 (id=9010): r0 = syz_clone(0xf41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x32) prlimit64(r0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x8, 0x460201) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)={[0x0]}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x5) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x0) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) connect$unix(r4, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x201) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x5b, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b418709844294623"}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x4, 0x0) mmap$binder(&(0x7f0000988000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1.510208779s ago: executing program 8 (id=9011): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = userfaultfd(0x80801) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) bind$inet(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x20, r4, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f00000003c0)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500000000d512003552bde5c064073ea5c7", 0x13}, {&(0x7f0000000100)="17", 0x1}], 0x2}}], 0x1, 0x20000860) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_FPU(r7, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.39591603s ago: executing program 8 (id=9012): mount$bpf(0x0, 0x0, 0x0, 0xe065ca, &(0x7f00000003c0)=ANY=[@ANYBLOB="27ffbe25c7fa7569"]) socket$packet(0x11, 0x3, 0x300) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="400d5d0000001a4657a75b9139ee170f4bb785474545af501e0c1356f824761a6b5d20e8a1f2b98e8c05382c35cdb32591169601d84eb1c1c3a6c1a84aee0594d949000000b36f683ab651373d92c3a2877bfeddf90ae6afa56dbadeb786c800000000877a42b65978e79dd93e3216e4b79e82c90d48bf20f36a69ab1216975f359eedc45c3267a31f150a9c26d33d705e7d6f7e05959c7f0b38a81c43945fddf4c2f3efd65bfb8ac298b50f64"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) lseek(r0, 0xfffe, 0x0) 1.332515391s ago: executing program 7 (id=9014): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) write$vga_arbiter(r0, &(0x7f0000002240)=ANY=[], 0xf) 1.331823911s ago: executing program 7 (id=9015): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1a9) syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090265000101"], 0x0) (async) syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090265000101"], 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) (async) r2 = openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x80106725, &(0x7f00000000c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0x2}}, 0x14, &(0x7f0000000080)={&(0x7f0000000040)}, 0x1, 0x0, 0x0, 0x20048000}, 0x8008000) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x10000000000001f7, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x154) (async) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x154) flock(r4, 0x5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000140)=""/137, 0x89, 0x41) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r6, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x4}}, 0xfd47) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000000)={0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000380)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) (async) fcntl$lock(r9, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) fsetxattr$security_selinux(r6, &(0x7f00000002c0), &(0x7f0000000300)='system_u:object_r:logrotate_var_lib_t:s0\x00', 0x29, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x78, 0x10}) (async) fcntl$lock(r10, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x78, 0x10}) 1.186581153s ago: executing program 7 (id=9016): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) (async) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r2, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r2) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x480b5b90d835e45c}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0xfffffffffffffc96, 0x2, 0x2}, @fd, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x8) (async) socket$netlink(0x10, 0x3, 0x8) 1.185474373s ago: executing program 7 (id=9017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0xb, 0x81, 0x14, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x31}, 0x8000, 0x700, 0x1c, 0x7}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffe}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffc0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x167}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x4}) r3 = socket(0x1, 0x2, 0x1) ioctl$SIOCGETLINKNAME(r3, 0x89e0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000340)={&(0x7f0000000380)={0xa, 0x4e23, 0x800ff, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0}, 0x24000800) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x84f00, 0x0) gettid() fcntl$setlease(r5, 0x400, 0x0) setxattr$security_evm(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="150764772b8dff3f70b7186de0"], 0xd, 0x3) open$dir(&(0x7f0000000080)='./file0\x00', 0x280001, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000100)=0x1, 0x8, 0x1, 0x0, 0x0, 0xfffffffd) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f0000002380)={0x2020}, 0x2020) 1.178525684s ago: executing program 7 (id=9018): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "33ee92486ed88bd0"}, 0x28) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6546c8b54cb3991596dfcd1abdb72276d5f80b1d3a5b6e6e704de6ec72fa6961cd700b4f8c0f594861c0296ca92cb6c2ef9", 0x3c}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6", 0x46}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85bdb074a519c5cc9c02289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9c98f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282", 0xd7}, {&(0x7f0000001040)="d21e96a9f6be3d72e3f91fa2db455d6b88df49377d7988389bd1ecc97042b565d013ec3fcee93a43afdf71b3751d0f53e4ca87fd4b71713fcc3b729c601778385e68ae4e55370c965ca8189dcf4f4e8c70fc343965f9c540163a19215f1d988f1bf6b6f57ce74575d0a1223da74c72adeed27d968bfdcd14597ebe90fc5167cbc1f5856d6b387bc5c419db52f682bcf13ce9e1d6110291bce66848b7392445ffb232c6b70bff2783564b2a62fa6cf3783f6cf6e84c90162b7cbf0192971f05c597dc20b3c879bd342e9e29e93c8240e8dbb137d3d8fcc8f49b37938a52ef12f7d963ff76b91f1473369d06d500d9b88c4f0e0b0ca9049d6b2f3c1886ff41404fab2855eaf1310fa65425a3e9513e33cee970a08de795368e9fe8055fdc5786010c764b3d3ccebec687d242267e932df33cf50c665ea82f1dcf1af952b0e4bf2e35d3c1bdead12e22b371543769fc19a0d893ebb9d71c4da000e2d18a572fdf7c23d921d959caebfbe3ab9157fc9ab6e3dcb88eaa5a5a8af223d7a25a8f198b10dedf68b6d2759a806b6a5bcf3693734ceebeea16b995304511db8d97b62f548213c614bc2dd9b843450eb575c8a8f290af70331a269f1cab6fd6e1f9ef687d80952ba7f14da8cf892d0a5b16dd181d8a7b780055d3b79782a2f4c29c6b9c64bdcde1175ef26c75d0bca19e2be27acb3fdf22a7cff8a659899de59fb2d3e4920881a0900958685263b3fb8dafa6402f5812f16de9e53eda3c86520d5267df729d2add8724d7541b60a3e9a4b70b5f1af83e81071d7e3eb6a9817383632008fbfff89f1c1ab39d9d898d555a0190fa11c8bdfd2d1b49d06fc56acdc426568ccbebbf6f3ce278148f319a1f84adcfb49a675c6d119f52e10386cdd0740199b20087f7c8f75d93959e39d2948a17789f6c6fda65dcb42743b466bcdd06bbe7afccd2b59c0c3f4dc62b8cee2a785ce704bbc47f480079b5f21ace7e5f2f149360370e866565af026b14ec4d9214884661156b5313c233ef1abd2807eb9b586845e3df8001e56b8d4f7c5c9b7e46b81e278ea0a7afb8286183285c390558d750277a7d72a6dab2cf1f29b0d4c847991ec65dd1757889dc9a6e94ce22b58e25cfac06c73532a53663a27208daaf3b4ad5a8c74e4e62b160219f49b6983674f7a71e56f45c3df8c13c93b2ed468749843dd8954a0d03acc61e5008ccc5a5db5a42d04abdf112e71e4d5876c3ea0db715648a5bb55b5ffd2377aea32f19a07e610456b5a6dda7ab4e6d11a88a5910f7f394c7a53d7c032e5506c3b26d54cbe73bfb37cda2439b23c785566668d8111570b7004fa565a156e45c9b672c6ebfb4d08bc681de9ea0215a43a1eefe7a0fb72caf494414c61510c00a8c5e37c4efeca3a1d171f44abbca94a9899b299363bbd1ecdc91d19d6a179f00bd958e372916fde873aaa167bb6be50219c76e6bee7a207f43b729eea5c00052eccb9986b6c137019c47f3fc1d69d68569f8c1d97ecc6b3dec37813f358778edfa2515fd9c4ca7e73966942f65c1a3cc9770065836625671725e3617030df067961c50d2e53a1c69d0e116eb9e0c052e71b3bcc85354829b71295cae5ffbcd5c2794fd16f8601ff5d7278693e384d477920e4619be578ac11f4ef327e5c5298d24ba29fddc7317fc90c69ddc991ee2f3a34c40c2afcd77350c008b9f70b76c97f51bd1359d376cfc83ec0f14a183cef8eccc014bf36d8384262edd4bb03f743c4628bccfef1050deafd13bdcbd73a356a8c630cc4f0665420d414c59276ff1d85ef058069a1ea280b9ae476ea9aa64652c4a83b9b086fd02a3372ae9683521d81ce846ce9b030e81b7523e8f5355c26c66d9182b9b3e089917089a07bf5159f1439200ad74d735b020ccb78225a015c76a57c19344556bce75da0d44e88e2227f5f4a90bb00eb27decf0d0dcf1b6dd0f9146f0191a7f58e3c6a1568e747ba674c33fd6715678232ea1385e8e54955e70ce306fad514235c8bc2576e84444a674c149a67d8db5fea81813aa311fa701bc401101b14661b0f091dad3a1895f3d32fc7012e59e090f487fc9f19e878e04c40eb906deedb29cf65839486f11c4fb7d9c1be6a1c95471d939cc0c85f6fead85e4d081ccc6e2a51784ec4d3f0b13796609161bfcb38a029c10b084e87ceff5483ec6c9691b0ad6a3d05e13e8c48d0700cc58b9436d8011c48381d6ca0ac279c3c71a625585c8b257c5cb18539f14604fcb9e9d07183ee0d90b0b5255d153fae38c6c25636846c31142f269229ac4a1d35df88eeaa9413dde791642c9b0ce903cef64609886d18df63515de769df208c9db2acda7db5181f52bb99e74f84b01106c8419543ec2b5106623789316cd825995e42d0cf9f8296f2e5155dbaae8113de5c7a1dddfe42770064e2aae3f100f97d890e3e7eb63ca80d1a8c672ae8e8eaee5b838653a20a58171dc78509a55ea2c590bcffe3f0ca7731edecc2cf3e63c8e8ce335a4f9541691282df4f24a208cd1400dce5e40ddde35dd22c9e75ded061cb349d8cbc92bc00f9c9c4ff49fe887ea630ffc66a087065a90e072b56c9386f3cccda4acb0f10538f361cd860a7efec0eb83ea5165d6a6612800a8d6c7426b0916fc6aec0e7d81ee1a57657ac5c32b58d4e573bf820bc67cc0896012ccff2ace1de0b13f70a744e116a300aaffd1a6ad243532fb9b9452454874a432cb5f5f6fa2f35668e6e3eb98fdc5c15dc5513c44a26d318d2b7372d6dc1da69d342b95ecb05777716264c79f4a3b953d6acc1006318fd352eb92621360d62b1c651c1fa0dec9a9fe674347902228373bed540251eebb2a8ede5e4f47bacf6acde6f8c5b95dc8b8214175d5649994c710709a5bfdd73360c35af7fc2ea4d35f14994bdccce242be14bff1ce7010b1c353479a1f038dc52e76d5d97340d98e3ad783a4ad95a469eee9193c7e5f93d84f847a6710230fb26f6e0122cb3f0400e7c485b704e3916c4fb0340bed2b4e7640b3ea40a9741f32f81e761119919e9e3fe16aba0b691e9d4e8fc959ae97dad37225a0d3fff627d6241fc0826cc863ec6e0a6c78956dc8878bb8c34dec171161c844462baf2a0d40fb6ea7c6bcf6a4501b92b1bf35c9b1c7d09ad3ee84b5c846404062d6fef2e53f4121b3a04341b58c05460bfa09ff6b92275923798897293e4cc80e6ee6facbab718550e838724ac19c2f86ee656fd607106951936eb56a3263819a69525b9d8bd4b1196ae503b6ee7071f881d740c5781040a78168037ccf819e24a9e3b55dc629aa788972a018d72371e2d64905bcc52b68977a5be41c52dfd42c6dd106a073682ef6c1b09c3d6004436bb6f59c06445768c217b3f36cf8f231e5128944f15fca908e1340cb4d175e9da1f15d5cbdf8fdc2493620b62dee93dfcaf1a56f781b04ef16d0b33e774d89deb827c6ccc4cb83d510c5ba6029317379896b3880f1b2d9f08e6aaf1518b9378f87b135c526782c09eb28b5d74d09cae156dc1809ae258753a59a6b453f28580c3f8ca41cd2977fb2c8f78159e5b5360417b2a72e359e8dc3ee76bed00cce7018286ddd88ee211457683b8136380c1f6281c23308dc08943bdcc36a4bd310d097ac2f5603b214fc3616e1092f3f4c2cda3e098709cf98cbfbd20995c8daa7ece6bb4349c17f07c591eebf1a94c94f1211c6e52837c1e75409c7e7c115b3871fc5cdf1262ece5894a9a4cb264931047074ddc6b4cccf6707b160be4558c6cc0d8c7dc2de6b86af7489815c84517d106ba538c1f4ea22ec6fd29cbc76f94467c51684778649d867041e2c952f4717c6d20345c94ad67f343985f7db04bf6010f6f9308d4ec9ed41620efc7c95fd8c596d22d0302654f81f96a31a05b954768deb359c624537a6fdb450ad54324618b14df9e03f82cbf3f7b73f3535bfe44553c0a37dad2070b5c0565111da8ecf31d412b744d897ebc8e98fbb1e25312686539fd021b68ce5cfada2682a617932911350326eab213b43f436b0d65922bfbc459238d54708f39bf7f1ee745aa1bf072670fa55a13e146df08c157927326556667f98002b54fe3ed150a59d359c2b481708b92e204dc3b9a30aae1489cfdc37a17669f5b5077945e0a8ae33c8c1c228486a313560773b32b05aec13f3fd9c28a1824d7c82c7b0b04d55064cf7a0924b243cf184567d26bd4095fbe0dc326ca71b0a3dba3b66511ad69cfb9dabcf71b85342db0bb9d23f29b7d1f1213d48e215eaf70e132e8ce34cf5e2dfd93bbbe7420a6db52641d1be52abeccb216193a993a18f0620a70b479776ccc705f095e915b9cc4a0fb62d11228fb1e5bcc0efa78969639969799dbe63f5f27be3d3fd7f2f5134f5ac3abf3a0a5601480296a6b85bea2090bf13c8f3d3c3a7ffa858b20775f249aaea7d753e9129bae065332bad8d783f9967322a2c358147f450fb5d6a7176c8015b33333106d30d2c690781703c18afb5e88423ffd8b6da20901db90e28647cb4727dbed71210db7ab7c9909b6a142e26757f22f742f84148ac2d88c6ec3bb24832a4b9889705571ced0e0d541a6ae909e3aa854c7f52e939c7062563711890e7046f0736b92188fdbae304953dc5e0bf9de92558ef9d41524ea68ec5f380902fd00719afd0bbc77e9b5034004f0820f22cac8ba92557c9186050a8aa7065a5d5d06b7d8b7bd0fcc4a30aaff5fa0bb2fdd85e801b53859dad6151be7c00f68c34ca8fcd96ddf9980d809d28730d1a86d057f2716637bea7ae9c34dcbf69a9e400cf42dfbbea8b03dc34683df85b3696c7570bed2bfee77bcbbaf3035d81a0308371ff1df315c53c66198221e3be1046eab7e71903dea93c388de23a13848d4b1d6109c067f40f67b17ab3dd7554ba9c51fc7b715acf04ff50d5588898c2db0f83c7b3948fe7ce0dbb6fde", 0xd9b}], 0x10000014) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r2, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/240, 0xf0}], 0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setresuid(0x0, 0xee00, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000f300004000000000060100000000000089f83f0cc8e5a7e14d4ce96b38e9aee492cd43495accd720cfeaa825303336c8be1674a84ee04c03d2a03e8a23bf3539705e1f646c6f42f37c3695a1df9b477034378df6f878d3"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r6 = socket$igmp6(0xa, 0x3, 0x3a) dup2(r6, r6) getsockopt$MRT6(r6, 0x3a, 0x1, 0x0, &(0x7f0000000100)) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 1.177190714s ago: executing program 4 (id=9019): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x13b001, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000001600)=ANY=[@ANYRESHEX], 0x7) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='-+\x00') r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r2, 0x29, 0x24, 0x0, 0x0) close(0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x28) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='!{[\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYRES8=r4], 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{0x0, 0xffffffff, 0x7f, 0x10, 0xa, 0xffffffff, 0x3ff, 0x8, 0x2, 0x0, 0x9, 0x3ff, 0x7ff, 0x4, 0x6}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000140)={{r6, 0x3, 0xffff, 0x2, 0x1d71000000000, 0x401, 0xffffffffffff7fff, 0x2, 0x5, 0x101, 0x10001, 0x5, 0xb3d, 0x6, 0x3}, 0x10, [0x0, 0x0]}) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) 818.210059ms ago: executing program 2 (id=9020): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x4) r1 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 817.607269ms ago: executing program 2 (id=9021): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000000000000a004e23000071fc0000000000000000000000000000000800000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000040"], 0x90) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gretap0\x00', &(0x7f0000000000)=@ethtool_cmd={0x49, 0x3, 0x2, 0x37f, 0x40, 0x7, 0x1, 0x6, 0x6, 0x7, 0x1, 0x142f, 0x1, 0x1, 0xfe, 0xa, [0x4000000, 0x5]}}) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) (async) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8032, r3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @local, 0x8}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) 795.605259ms ago: executing program 2 (id=9022): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a, 0x1}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x200}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x58, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x2, 0x1, 0xb}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x24}, @fda={0x66646185, 0x3, 0x2, 0x7}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @dead_binder_done, @decrefs], 0x0, 0x0, 0x0}) 746.15538ms ago: executing program 2 (id=9023): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) write$vga_arbiter(r0, &(0x7f0000002240)=ANY=[], 0xf) 698.208681ms ago: executing program 2 (id=9024): r0 = getpgrp(0xffffffffffffffff) tkill(r0, 0x11) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) (async) r2 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="401912"], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="401912"], 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, 0x0) mmap(&(0x7f000084b000/0x2000)=nil, 0x2000, 0x1, 0x22052, r1, 0xfffff000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) tkill(r3, 0x3a) 348.272606ms ago: executing program 7 (id=9025): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000009f00), 0x1, 0xb01) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x12c002, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x4}, 0x4) ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}, 0xc804) (async) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}, 0xc804) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (async) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x8b}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x6a) (async) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46"], 0x69) close(r3) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', './file0/file0', [{0x20, '\xaa\xaa\xaa\xaa\xaa\xa7\xd2\xc2\xb4\xa5:\x89<\xce\xb7\xbf\xf6\x16\xe3\xaa\xf4\xc6\xe8\xebzu\x90^\xfe\x031\xc4\x8fB\xcd?\xabaO3\x16\f\xa6{Km\x19\xd3\x1e\xad<\xe3r\x9aH\x15\xfd\xc3\x19\x9cQ}\\\xe5\x96\xb0_\x90\xe1n^6s\x8b\x9a(\xd2\'!\xe3,\xd3\x03\xe1\xa6\xba\xb8j\xb9\x91H\xc0\xe1\xe8\xdb\x84\xc2c\xb1\xeaA\xb7\xdb=o\xc7\x16D\xc1\xff\x83\f\xc3\x98 }2\x91\xde\xeeb\b\x0eB\x14p*\xa3\x145>\xe5\x14\xc4`Q\xa9\x1f@\x83VY\xb4q\xaf]Y\x05\xa5~\xde\xa3\xa9\xa5=\\\xbdLysy\x88h\xdd\xa6V\xabJ\xff\x9a\xb8\xa1Ejl\xe7e\xa0\x9eV\xd4f\xe2\xb8\xee\xf0=\xcdb\xdd[\xe5\xab\\Zp\x8f\xe9YZ~\xb8r\x11\xeb\x87cZI\xa4p\xe0\xb1\x1c\xd0C\x95\x95^K~3\xd9=G\xeb\xb3\xfe'}]}, 0xf6) (async) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', './file0/file0', [{0x20, '\xaa\xaa\xaa\xaa\xaa\xa7\xd2\xc2\xb4\xa5:\x89<\xce\xb7\xbf\xf6\x16\xe3\xaa\xf4\xc6\xe8\xebzu\x90^\xfe\x031\xc4\x8fB\xcd?\xabaO3\x16\f\xa6{Km\x19\xd3\x1e\xad<\xe3r\x9aH\x15\xfd\xc3\x19\x9cQ}\\\xe5\x96\xb0_\x90\xe1n^6s\x8b\x9a(\xd2\'!\xe3,\xd3\x03\xe1\xa6\xba\xb8j\xb9\x91H\xc0\xe1\xe8\xdb\x84\xc2c\xb1\xeaA\xb7\xdb=o\xc7\x16D\xc1\xff\x83\f\xc3\x98 }2\x91\xde\xeeb\b\x0eB\x14p*\xa3\x145>\xe5\x14\xc4`Q\xa9\x1f@\x83VY\xb4q\xaf]Y\x05\xa5~\xde\xa3\xa9\xa5=\\\xbdLysy\x88h\xdd\xa6V\xabJ\xff\x9a\xb8\xa1Ejl\xe7e\xa0\x9eV\xd4f\xe2\xb8\xee\xf0=\xcdb\xdd[\xe5\xab\\Zp\x8f\xe9YZ~\xb8r\x11\xeb\x87cZI\xa4p\xe0\xb1\x1c\xd0C\x95\x95^K~3\xd9=G\xeb\xb3\xfe'}]}, 0xf6) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x28, 0x0, 0x0, &(0x7f0000000000)) close(r5) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550d, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x200002, 0x8, "ff00054fa93e008000295894c900ffff00"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x200002, 0x8, "ff00054fa93e008000295894c900ffff00"}) syz_open_pts(r4, 0x1) (async) r8 = syz_open_pts(r4, 0x1) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000940)=0x8f) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010240000102030109022d000101fb000b0904000402030101010921ff03020122ff0609058103100007095c090502030002060503"], &(0x7f0000000240)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x7, 0xd, 0x95, 0x10, 0x1}, 0x195, &(0x7f00000003c0)={0x5, 0xf, 0x1bf, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x1, 0x8001}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x32, 0x4, 0x4, 0x5}, @generic={0xc5, 0x10, 0x2, "0ed02adbac4a28aea297d907f334f49f0a315f8ac4edc1e30babd2bb3440c84d213364886c213807dd9b297eecb18a740c67d384eb934ea8853874c4ce2112ba403591aff1b282f7a15d937d92b9308435b639fad37957f8952805079c8e3612adfef7f3cd8cf69cf68d8fbdfe72ba4f17bad9ec487b12193a0a62535689362798229d48006e815f7093ef6f5276a09bed22795e6438cace1725e5eb7939ac31da17a657e9be4da7bd8126641e86d96ac9620d710575132a866f9a15482933620000"}, @generic={0xaf, 0x10, 0x3, "31a8aef9248efa8525b89d98373f3c1047f37be92ec2ca920f76e45c69fac3b88859dc17ddf0b91a2396085a52fc98fdd72dc8f07884a8cdcbe6badda627cd7cb1db683fe9149250315535a71b35ec04b7d46be77ff9d7969ef1d2b9d94ef1b14b96abb665c506fc0be64bd7a534c28e8eb8d12e3fdd38893d83f0cabbac6ac014b6209a4b8d522f664b1c41907659a21b6ec91130a37eafd717504d9a964fa88a7e2445faf14a9bb15bcee0"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4e, 0x7, 0x7}]}, 0x2, [{0x1, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44e}}, {0xd2, &(0x7f00000006c0)=ANY=[@ANYBLOB="d20376f9c68ffe88dcc312dca26936f61a75b1d71bdebea21098a95dda7064339b572caaf31144f67b96e74f5dce5eecf058e97e3dd7253fea29d062b4d666ebaacee018a6fd5c1cbc42f96045c9177f38b05b02d8fd8a4d264ac3ac607ffa81f4cd5e181f432014e2be32ee659395ec307223a46285a0df53e035f4c18eb8af0aaa47be0d9831c608c1bf000000008df00e5b540521193b825bb50e647453d29807c5ff89ab57381b79491fc6744045daf5cc3047d429cda6f007eed2ea902f3202aa9ee8dcb7ae2afb835eab49232c0ec5"]}]}) (async) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010240000102030109022d000101fb000b0904000402030101010921ff03020122ff0609058103100007095c090502030002060503"], &(0x7f0000000240)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x7, 0xd, 0x95, 0x10, 0x1}, 0x195, &(0x7f00000003c0)={0x5, 0xf, 0x1bf, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x1, 0x8001}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x32, 0x4, 0x4, 0x5}, @generic={0xc5, 0x10, 0x2, "0ed02adbac4a28aea297d907f334f49f0a315f8ac4edc1e30babd2bb3440c84d213364886c213807dd9b297eecb18a740c67d384eb934ea8853874c4ce2112ba403591aff1b282f7a15d937d92b9308435b639fad37957f8952805079c8e3612adfef7f3cd8cf69cf68d8fbdfe72ba4f17bad9ec487b12193a0a62535689362798229d48006e815f7093ef6f5276a09bed22795e6438cace1725e5eb7939ac31da17a657e9be4da7bd8126641e86d96ac9620d710575132a866f9a15482933620000"}, @generic={0xaf, 0x10, 0x3, "31a8aef9248efa8525b89d98373f3c1047f37be92ec2ca920f76e45c69fac3b88859dc17ddf0b91a2396085a52fc98fdd72dc8f07884a8cdcbe6badda627cd7cb1db683fe9149250315535a71b35ec04b7d46be77ff9d7969ef1d2b9d94ef1b14b96abb665c506fc0be64bd7a534c28e8eb8d12e3fdd38893d83f0cabbac6ac014b6209a4b8d522f664b1c41907659a21b6ec91130a37eafd717504d9a964fa88a7e2445faf14a9bb15bcee0"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4e, 0x7, 0x7}]}, 0x2, [{0x1, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44e}}, {0xd2, &(0x7f00000006c0)=ANY=[@ANYBLOB="d20376f9c68ffe88dcc312dca26936f61a75b1d71bdebea21098a95dda7064339b572caaf31144f67b96e74f5dce5eecf058e97e3dd7253fea29d062b4d666ebaacee018a6fd5c1cbc42f96045c9177f38b05b02d8fd8a4d264ac3ac607ffa81f4cd5e181f432014e2be32ee659395ec307223a46285a0df53e035f4c18eb8af0aaa47be0d9831c608c1bf000000008df00e5b540521193b825bb50e647453d29807c5ff89ab57381b79491fc6744045daf5cc3047d429cda6f007eed2ea902f3202aa9ee8dcb7ae2afb835eab49232c0ec5"]}]}) ioctl$TCSETA(r4, 0x5406, &(0x7f00000001c0)={0xffff, 0x4, 0x4, 0x1, 0x0, "a0590469a322d928"}) 0s ago: executing program 4 (id=9026): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x4030582b, &(0x7f0000000300)={0x1100, 0x2, 0x0, 0x6}) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x78, 0x0, 0x9, {0xff00000000000002, 0x0, 0x0, {0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x1, 0x7, 0x1, 0x8000, 0x0, r3, r4, 0x2003, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = open(&(0x7f0000000380)='./bus\x00', 0x48141, 0x0) fcntl$setlease(r6, 0x400, 0x1) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000000)='+[&^]\x00', 0x0, r0) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_LSEEK(r7, &(0x7f0000000400)={0x18, 0x0, r2, {0x91b}}, 0x18) dup2(r7, r1) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) r10 = fcntl$dupfd(r8, 0x406, r9) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000200)={0xf0000011}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r13, &(0x7f0000000000)={0x1f, 0x3ff, @any, 0x7, 0x1}, 0xe) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r13]) kernel console output (not intermixed with test programs): erialNumber: syz [ 471.897284][ T64] usb 5-1: config 0 descriptor?? [ 471.983108][T22726] tipc: Started in network mode [ 471.988099][T22726] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 471.997155][T22726] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 472.005633][T22726] tipc: Enabled bearer , priority 10 [ 472.015072][T22726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.025546][T22726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.036363][ T31] usb 8-1: USB disconnect, device number 2 [ 472.043735][ T31] usblp0: removed [ 472.103482][T22738] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 472.103908][T22738] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 472.112723][ T64] ipheth 5-1:0.196: Unable to find endpoints [ 472.127962][ T64] usb 5-1: USB disconnect, device number 66 [ 472.643542][ T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 472.807339][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 472.822028][ T10] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 472.841740][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.855030][ T10] usb 2-1: Product: syz [ 472.859305][ T10] usb 2-1: Manufacturer: syz [ 472.865074][ T10] usb 2-1: SerialNumber: syz [ 472.873879][ T10] usb 2-1: config 0 descriptor?? [ 472.884589][ T10] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 472.892575][ T10] usb 2-1: Detected FT4233HP [ 472.943513][ T31] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 473.073774][ T31] usb 5-1: device descriptor read/64, error -71 [ 473.092676][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 473.100684][ T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 473.133542][ T64] tipc: Node number set to 1 [ 473.302116][ T64] usb 2-1: USB disconnect, device number 61 [ 473.308689][ T64] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 473.318948][ T31] usb 5-1: device descriptor read/64, error -71 [ 473.325484][ T64] ftdi_sio 2-1:0.0: device disconnected [ 473.509928][T22815] overlayfs: failed to resolve './file0': -2 [ 473.537312][T22815] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 473.573577][ T31] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 473.655072][T22821] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 473.655130][T22821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:202 [ 473.733509][ T31] usb 5-1: device descriptor read/64, error -71 [ 473.849366][T22826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 473.913468][ T64] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 473.993489][ T31] usb 5-1: device descriptor read/64, error -71 [ 474.073716][ T64] usb 8-1: device descriptor read/64, error -71 [ 474.103604][ T31] usb usb5-port1: attempt power cycle [ 474.313467][ T64] usb 8-1: device descriptor read/64, error -71 [ 474.443478][ T31] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 474.464552][ T31] usb 5-1: device descriptor read/8, error -71 [ 474.553571][ T64] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 474.605222][ T31] usb 5-1: device descriptor read/8, error -71 [ 474.683467][ T64] usb 8-1: device descriptor read/64, error -71 [ 474.788329][T22845] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 474.795541][T22845] rust_binder: Write failure EINVAL in pid:402 [ 474.813270][T22847] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 474.819771][T22847] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 474.826563][T22847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:404 [ 474.862584][ T36] audit: type=1400 audit(2000000305.124:4098): avc: denied { setattr } for pid=22852 comm="syz.1.7633" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 474.863645][ T31] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 474.914515][ T31] usb 5-1: device descriptor read/8, error -71 [ 474.923421][ T64] usb 8-1: device descriptor read/64, error -71 [ 474.931489][T22860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 474.932080][T22860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 474.938764][T22860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:412 [ 474.963071][T22862] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 474.991441][T22862] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 475.033525][ T64] usb usb8-port1: attempt power cycle [ 475.046409][ T31] usb 5-1: device descriptor read/8, error -71 [ 475.106586][T22867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7639'. [ 475.153674][ T31] usb usb5-port1: unable to enumerate USB device [ 475.237662][T19299] bridge_slave_1: left allmulticast mode [ 475.243388][T19299] bridge_slave_1: left promiscuous mode [ 475.249064][T19299] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.256946][T19299] bridge_slave_0: left allmulticast mode [ 475.262664][T19299] bridge_slave_0: left promiscuous mode [ 475.268428][T19299] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.374527][T19299] tipc: Left network mode [ 475.379697][T19299] veth1_macvtap: left promiscuous mode [ 475.383424][ T64] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 475.385485][T19299] veth0_vlan: left promiscuous mode [ 475.404514][ T64] usb 8-1: device descriptor read/8, error -71 [ 475.413436][ T31] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 475.441735][T19299] vcan0 (unregistering): left allmulticast mode [ 475.534508][ T64] usb 8-1: device descriptor read/8, error -71 [ 475.563983][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 475.570301][ T31] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.581905][ T31] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.593221][ T31] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 475.606598][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 475.613625][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 475.620521][T22881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7645'. [ 475.622822][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.646862][ T31] usb 2-1: config 0 descriptor?? [ 475.670674][T22885] overlayfs: failed to clone upperpath [ 475.783379][ T64] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 475.800572][T22894] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 475.816811][ T64] usb 8-1: device descriptor read/8, error -71 [ 475.825773][T22894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.836778][T22894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.964506][ T64] usb 8-1: device descriptor read/8, error -71 [ 476.062056][ T31] hid (null): invalid report_size 27418 [ 476.067962][ T31] hid (null): report_id 1505116794 is invalid [ 476.074314][ T31] hid (null): unknown global tag 0xe [ 476.080028][ T64] usb usb8-port1: unable to enumerate USB device [ 476.086488][ T31] hid (null): unknown global tag 0xd [ 476.113371][ T350] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 476.263148][ T31] usb 2-1: USB disconnect, device number 62 [ 476.272245][ T350] usb 5-1: Using ep0 maxpacket: 32 [ 476.285465][ T350] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 476.295952][ T350] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 476.306712][ T350] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a [ 476.316282][ T350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.324466][ T350] usb 5-1: Product: syz [ 476.328760][ T350] usb 5-1: Manufacturer: syz [ 476.333615][ T350] usb 5-1: SerialNumber: syz [ 476.549037][T22894] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 476.549810][ T350] usb 5-1: USB disconnect, device number 71 [ 476.880588][T22898] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 476.940425][T22910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 476.950161][T22911] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 477.021054][T22917] rust_binder: Write failure EINVAL in pid:441 [ 477.028605][T22919] rust_binder: Write failure EINVAL in pid:441 [ 477.089225][T22926] binder: Bad value for 'stats' [ 477.194399][T22932] fuse: Bad value for 'fd' [ 477.354212][T22940] overlayfs: failed to clone upperpath [ 477.495861][T22947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:210 [ 477.672972][T22966] can: request_module (can-proto-0) failed. [ 477.711836][T22970] rust_binder: Write failure EINVAL in pid:219 [ 477.768551][T22976] devtmpfs: Unknown parameter '^ *([%' [ 477.916051][T22987] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7683'. [ 477.943201][T22987] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 477.943734][T22987] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 477.969503][T22987] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 478.001640][T22991] rust_binder: Write failure EFAULT in pid:231 [ 478.056050][ T350] hid-generic C98F:0003:01FF.0024: unknown main item tag 0x0 [ 478.071843][ T350] hid-generic C98F:0003:01FF.0024: unknown main item tag 0x0 [ 478.079598][ T350] hid-generic C98F:0003:01FF.0024: unknown main item tag 0x0 [ 478.087293][ T350] hid-generic C98F:0003:01FF.0024: unknown main item tag 0x0 [ 478.094871][ T350] hid-generic C98F:0003:01FF.0024: unknown main item tag 0x0 [ 478.102384][ T350] hid-generic C98F:0003:01FF.0024: unknown main item tag 0x0 [ 478.118539][ T350] hid-generic C98F:0003:01FF.0024: unknown main item tag 0x0 [ 478.127283][ T350] hid-generic C98F:0003:01FF.0024: unknown main item tag 0x0 [ 478.134967][ T350] hid-generic C98F:0003:01FF.0024: unknown main item tag 0x0 [ 478.142601][ T350] hid-generic C98F:0003:01FF.0024: unknown main item tag 0x0 [ 478.150281][ T350] hid-generic C98F:0003:01FF.0024: unknown main item tag 0x0 [ 478.157979][ T350] hid-generic C98F:0003:01FF.0024: unknown main item tag 0x0 [ 478.170877][ T350] hid-generic C98F:0003:01FF.0024: hidraw0: HID v0.00 Device [syz1] on syz1 [ 478.201951][T23001] fido_id[23001]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 478.406010][ T36] audit: type=1326 audit(2000000002.810:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23005 comm="syz.7.7690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 478.469974][ T36] audit: type=1326 audit(2000000002.810:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23005 comm="syz.7.7690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 478.537965][ T36] audit: type=1326 audit(2000000002.810:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23005 comm="syz.7.7690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 478.601903][ T36] audit: type=1326 audit(2000000002.810:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23005 comm="syz.7.7690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 478.652678][ T36] audit: type=1326 audit(2000000002.810:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23005 comm="syz.7.7690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 478.682676][ T36] audit: type=1326 audit(2000000002.810:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23005 comm="syz.7.7690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 478.717804][T23022] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 478.745778][ T36] audit: type=1326 audit(2000000002.810:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23005 comm="syz.7.7690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 478.798486][ T36] audit: type=1326 audit(2000000002.810:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23005 comm="syz.7.7690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 478.833086][T23034] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7700'. [ 478.834821][ T36] audit: type=1326 audit(2000000002.810:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23005 comm="syz.7.7690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 478.899390][T23051] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 478.899977][T23051] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 478.943684][T23059] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 478.970417][T23065] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 478.990066][T23065] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 479.018042][T23069] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 479.050424][T23073] overlayfs: failed to clone upperpath [ 479.097697][T23078] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7716'. [ 479.132574][T23084] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 479.136526][T23084] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 479.143784][T23084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:737 [ 479.172555][T23090] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 479.193150][T23090] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 479.332361][T23106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=23106 comm=syz.4.7727 [ 479.353192][T23106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=23106 comm=syz.4.7727 [ 479.365956][T23106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=23106 comm=syz.4.7727 [ 479.378780][T23106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=23106 comm=syz.4.7727 [ 479.404958][T23109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 479.407737][T23109] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 479.421358][T23109] rust_binder: Write failure EINVAL in pid:746 [ 480.518938][T23154] fuse: Bad value for 'fd' [ 480.831175][T23190] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 481.109419][T23209] /dev/rnullb0: Can't lookup blockdev [ 485.486498][ T1121] bridge_slave_1: left allmulticast mode [ 485.492171][ T1121] bridge_slave_1: left promiscuous mode [ 485.497881][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.505347][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.617162][ T1121] veth1_macvtap: left promiscuous mode [ 492.523377][ T456] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 492.673362][ T456] usb 5-1: Using ep0 maxpacket: 16 [ 492.679637][ T456] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.691015][ T456] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.701301][T23271] /dev/rnullb0: Can't lookup blockdev [ 492.706837][ T456] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 492.719985][ T456] usb 5-1: config 0 interface 0 has no altsetting 0 [ 492.726675][ T456] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 492.735801][ T456] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.744513][ T456] usb 5-1: config 0 descriptor?? [ 492.764903][T23273] netlink: 'syz.7.7783': attribute type 19 has an invalid length. [ 492.802208][T23277] overlayfs: failed to clone upperpath [ 492.820802][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 492.820822][ T36] audit: type=1326 audit(2000000017.220:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23278 comm="syz.7.7786" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f806778e929 code=0x0 [ 493.355497][ T456] usb 5-1: USB disconnect, device number 72 [ 493.975289][T23321] overlayfs: missing 'lowerdir' [ 494.018594][T23306] kvm: kvm [23303]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 494.479034][ T36] audit: type=1326 audit(2000000018.880:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23343 comm="syz.1.7810" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75bd38e929 code=0x0 [ 494.718527][T23347] /dev/rnullb0: Can't lookup blockdev [ 494.737803][T23349] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 494.746540][T23349] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 494.946598][T23367] cgroup: Invalid name [ 494.951198][T23367] overlayfs: failed to clone upperpath [ 494.991932][T23374] overlayfs: failed to clone upperpath [ 495.322136][ T36] audit: type=1400 audit(2000000019.720:4124): avc: denied { append } for pid=23389 comm="syz.4.7828" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 495.620034][T23421] overlayfs: failed to clone upperpath [ 495.668600][T23427] netlink: 124 bytes leftover after parsing attributes in process `syz.5.7842'. [ 495.706502][T23435] netlink: 288 bytes leftover after parsing attributes in process `syz.5.7844'. [ 495.721495][T23437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7845'. [ 495.736171][T23442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7845'. [ 495.945382][T23464] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7854'. [ 496.603436][ T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 496.696919][T23528] fuse: Unknown parameter '000000000000000000000030000000000000000000000000000000000000000' [ 496.764787][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 496.782196][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 496.796526][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 496.802167][T23549] overlayfs: failed to clone upperpath [ 496.815091][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.827577][ T10] usb 5-1: Product: syz [ 496.833384][T23551] netlink: 220 bytes leftover after parsing attributes in process `syz.7.7880'. [ 496.835742][ T36] audit: type=1400 audit(2000000021.240:4125): avc: denied { getopt } for pid=23552 comm="syz.1.7881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 496.842478][ T10] usb 5-1: Manufacturer: 䡢斠谦垽먂ៃ區얮︅ꏜꑂ™Ѽナ쟼₤ﭱ뤉淤蘴 ்ꧦ㭟롒䬱婟唋ᶻ됚晴涸♺❑﹚ﶷ蠈礧瓶롆븍甗蟋仆旄⊧頾넂﯅춳監欃䜕쯎⅔蝡伛꾻উ톅䀜⃧毥䗱恻䌜掏衑賖⮯肆Ȇ鸜ూ攮걎저 [ 496.882560][T23555] 9pnet_fd: Insufficient options for proto=fd [ 496.888633][ T10] usb 5-1: SerialNumber: syz [ 497.121499][ T10] usb 5-1: USB disconnect, device number 73 [ 497.181569][T23562] overlayfs: missing 'lowerdir' [ 497.371633][T16662] Bluetooth: hci0: Frame reassembly failed (-84) [ 497.385613][T23573] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7887'. [ 497.740323][T23587] overlayfs: missing 'lowerdir' [ 497.747916][ T36] audit: type=1326 audit(2000000022.150:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23588 comm="syz.1.7893" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75bd38e929 code=0x0 [ 499.191345][T23612] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.198799][T23612] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.206200][T23612] bridge_slave_0: entered allmulticast mode [ 499.212731][T23612] bridge_slave_0: entered promiscuous mode [ 499.219406][T23612] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.226521][T23612] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.233922][T23612] bridge_slave_1: entered allmulticast mode [ 499.240384][T23612] bridge_slave_1: entered promiscuous mode [ 499.296545][T23612] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.303646][T23612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.310931][T23612] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.317996][T23612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.340180][T16662] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.347691][T16662] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.358327][T19291] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.365431][T19291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.374704][T16662] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.381772][T16662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.393367][ T1127] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 499.393409][T11846] Bluetooth: hci0: command 0x1003 tx timeout [ 499.423471][T23612] veth0_vlan: entered promiscuous mode [ 499.434750][T23612] veth1_macvtap: entered promiscuous mode [ 499.654389][T23623] overlayfs: missing 'lowerdir' [ 499.725659][T23627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 499.740558][ T36] audit: type=1400 audit(2000000024.140:4127): avc: denied { execute } for pid=23637 comm="syz.5.7907" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 500.063418][ T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 500.213455][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 500.219868][ T10] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 500.233709][ T10] usb 6-1: config 0 has no interface number 0 [ 500.239914][ T10] usb 6-1: config 0 interface 184 has no altsetting 0 [ 500.248387][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 500.259934][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.268251][ T10] usb 6-1: Product: syz [ 500.271415][T23655] overlayfs: missing 'lowerdir' [ 500.272533][ T10] usb 6-1: Manufacturer: syz [ 500.283298][ T10] usb 6-1: SerialNumber: syz [ 500.297122][ T10] usb 6-1: config 0 descriptor?? [ 500.302878][ T10] smsc75xx v1.0.0 [ 500.365089][T23659] syz.4.7914: attempt to access beyond end of device [ 500.365089][T23659] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 500.378136][T23659] exFAT-fs (loop4): unable to read boot sector [ 500.384517][T23659] exFAT-fs (loop4): failed to read boot sector [ 500.390755][T23659] exFAT-fs (loop4): failed to recognize exfat type [ 500.468561][ T36] audit: type=1400 audit(2000000024.870:4128): avc: denied { lock } for pid=23668 comm="syz.4.7918" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 500.561285][T23676] overlayfs: missing 'workdir' [ 500.813390][ T325] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 500.909655][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 500.920904][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 500.963374][ T325] usb 5-1: Using ep0 maxpacket: 8 [ 500.969585][ T325] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 500.978697][ T325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.987765][ T325] usb 5-1: config 0 descriptor?? [ 501.045630][ T36] audit: type=1326 audit(2000000025.450:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23694 comm="syz.1.7929" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75bd38e929 code=0x0 [ 501.163976][T23700] overlayfs: missing 'workdir' [ 501.478118][T23723] overlayfs: missing 'workdir' [ 501.543380][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 501.557010][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 501.566675][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 501.576206][ T10] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 501.585941][ T10] usb 6-1: USB disconnect, device number 41 [ 501.796387][T23678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.805053][T23678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.877118][ T325] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 501.887335][ T325] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 501.913418][ T325] asix 5-1:0.0: probe with driver asix failed with error -71 [ 501.922679][ T325] usb 5-1: USB disconnect, device number 74 [ 501.961396][T23745] overlayfs: missing 'lowerdir' [ 501.981716][T23747] binder: Unknown parameter '%[I^1(ت.RNL 7ѷu|s$|3VW'kZ' [ 502.043689][T23759] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ [ 502.067088][T23759] overlayfs: failed to clone upperpath [ 502.102603][T23767] overlayfs: missing 'lowerdir' [ 502.230075][T23779] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 502.230115][T23779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:16 [ 502.265174][T23783] rust_binder: Write failure EFAULT in pid:18 [ 502.317958][T23789] overlayfs: missing 'lowerdir' [ 502.968587][T23822] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 502.988298][T23822] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 502.989174][T23821] rust_binder: Error while translating object. [ 502.997090][T23821] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 503.003372][T23821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31 [ 503.092660][ T36] audit: type=1400 audit(2000000027.490:4130): avc: denied { lock } for pid=23831 comm="syz.7.7981" path="socket:[93722]" dev="sockfs" ino=93722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 503.200679][T23845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 503.254739][T23850] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 503.264339][T23850] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:38 [ 503.352979][T23854] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 503.371680][T23854] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 503.523089][T23865] fuse: Bad value for 'user_id' [ 503.528157][T23865] fuse: Bad value for 'user_id' [ 503.565841][T23861] rust_binder: Error while translating object. [ 503.565891][T23861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 503.572131][T23861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 503.581909][T23859] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 503.607005][T23874] SELinux: Context system_u:object_r:crond_initrc_exec_t:s0 is not valid (left unmapped). [ 503.624309][ T36] audit: type=1400 audit(2000000028.030:4131): avc: denied { relabelto } for pid=23868 comm="syz.1.7993" name="fuse" dev="tmpfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 503.652763][ T36] audit: type=1400 audit(2000000028.030:4132): avc: denied { associate } for pid=23868 comm="syz.1.7993" name="fuse" dev="tmpfs" ino=1088 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 503.663940][T23875] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 503.704032][ T36] audit: type=1400 audit(2000000028.110:4133): avc: denied { read write } for pid=23877 comm="syz.1.7995" name="fuse" dev="tmpfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 503.725117][T23878] fuse: Unknown parameter 'uses_id' [ 503.746371][ T36] audit: type=1400 audit(2000000028.110:4134): avc: denied { open } for pid=23877 comm="syz.1.7995" path="/dev/fuse" dev="tmpfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 503.786540][ T36] audit: type=1400 audit(2000000028.170:4135): avc: denied { ioctl } for pid=23877 comm="syz.1.7995" path="/dev/fuse" dev="tmpfs" ino=1088 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crond_initrc_exec_t:s0" [ 503.801611][T23888] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 503.825632][T23888] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 503.857796][ T1121] tipc: Subscription rejected, illegal request [ 503.865232][T23892] netlink: 'syz.5.8000': attribute type 29 has an invalid length. [ 503.877553][ T36] audit: type=1326 audit(2000000028.280:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23825 comm="syz.4.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f38e929 code=0x7fc00000 [ 503.886757][T23892] input: syz0 as /devices/virtual/input/input31 [ 503.942332][T23899] rust_binder: Error in use_page_slow: ESRCH [ 503.942354][T23899] rust_binder: use_range failure ESRCH [ 503.948819][T23899] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 503.954541][T23899] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 503.975006][T23899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:63 [ 504.116914][T23910] binder: Unknown parameter '0000000000000000000300000000000000000000003{ک߶R|uj8)k [ 504.116914][T23910] kt"Nܣ"%ȕN凍bkGՠ;Q5' [ 504.174715][T23914] overlayfs: failed to clone upperpath [ 504.205092][T23920] fuse: Bad value for 'user_id' [ 504.209993][T23920] fuse: Bad value for 'user_id' [ 504.226567][T23923] netlink: 'syz.7.8011': attribute type 12 has an invalid length. [ 504.234616][ T45] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 504.314555][T23942] overlayfs: failed to clone upperpath [ 504.355738][T23948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=23948 comm=syz.7.8021 [ 504.368647][T23948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=23948 comm=syz.7.8021 [ 504.382673][T23948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=23948 comm=syz.7.8021 [ 504.395498][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 504.401030][T23948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=23948 comm=syz.7.8021 [ 504.415301][ T45] usb 5-1: config 1 interface 0 altsetting 14 bulk endpoint 0x3 has invalid maxpacket 8 [ 504.425855][ T45] usb 5-1: config 1 interface 0 has no altsetting 0 [ 504.436937][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 504.446160][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.454202][ T45] usb 5-1: Product: 鰰憚㳞畏唒蹎譇זּ뛉컼ꡧ妤ᓀ絜亳훓塚扻գ荄䲊萟비쏩ٗ砩◦⡃탆郿 [ 504.466468][ T45] usb 5-1: Manufacturer: 㐊 [ 504.471065][ T45] usb 5-1: SerialNumber: 糄恦䬄뷡瀦祑ꞗ뜈擀ᒦ뎧䀝㕃앢ﭽⱛऎć刪驶ᾰ뽂랅䇦畷롢쨼畋﫥按ౝ蹣鵱⻭㛲㤠頨౸ർ恢 [ 504.496851][T23902] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 504.739433][T23955] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.746647][T23955] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.754388][T23955] bridge_slave_0: entered allmulticast mode [ 504.760984][T23955] bridge_slave_0: entered promiscuous mode [ 504.768213][T23955] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.775346][T23955] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.782497][T23955] bridge_slave_1: entered allmulticast mode [ 504.789344][T23955] bridge_slave_1: entered promiscuous mode [ 504.874982][T23955] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.882101][T23955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.889434][T23955] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.896506][T23955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.910754][ T45] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 504.924013][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.931418][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.948584][ T45] usb 5-1: USB disconnect, device number 75 [ 504.964814][T19291] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.971952][T19291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.984891][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.992003][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.056936][T23955] veth0_vlan: entered promiscuous mode [ 505.071731][T23955] veth1_macvtap: entered promiscuous mode [ 505.323624][T23964] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.330801][T23964] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.339981][T23964] bridge_slave_0: entered allmulticast mode [ 505.346582][T23964] bridge_slave_0: entered promiscuous mode [ 505.353224][T23964] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.361322][T23964] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.368617][T23964] bridge_slave_1: entered allmulticast mode [ 505.375734][T23964] bridge_slave_1: entered promiscuous mode [ 505.397374][T19291] bridge_slave_1: left allmulticast mode [ 505.403060][T19291] bridge_slave_1: left promiscuous mode [ 505.409121][T19291] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.417032][T19291] bridge_slave_0: left allmulticast mode [ 505.429363][T19291] bridge_slave_0: left promiscuous mode [ 505.439551][T19291] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.513377][ T45] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 505.559509][T23964] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.566633][T23964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.573966][T23964] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.581006][T23964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.608439][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.617181][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.626913][T19291] veth1_macvtap: left promiscuous mode [ 505.632420][T19291] veth0_vlan: left promiscuous mode [ 505.683351][ T45] usb 9-1: Using ep0 maxpacket: 16 [ 505.692138][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.692491][ T45] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.699263][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.717592][ T45] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.729605][T19299] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.733711][ T45] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 505.736706][T19299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.749668][ T45] usb 9-1: config 0 interface 0 has no altsetting 0 [ 505.777664][ T45] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 505.788811][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.801185][ T45] usb 9-1: config 0 descriptor?? [ 505.816518][T23964] veth0_vlan: entered promiscuous mode [ 505.832165][T23964] veth1_macvtap: entered promiscuous mode [ 505.849420][T24005] overlayfs: failed to clone upperpath [ 505.897174][T24011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 505.935762][T24017] tipc: Started in network mode [ 505.967821][T24017] tipc: Node identity 7f000001, cluster identity 4711 [ 505.983733][T24017] tipc: Enabled bearer , priority 10 [ 506.055776][T19291] bridge_slave_1: left allmulticast mode [ 506.065820][T19291] bridge_slave_1: left promiscuous mode [ 506.071504][T19291] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.104757][T19291] bridge_slave_0: left allmulticast mode [ 506.120694][T19291] bridge_slave_0: left promiscuous mode [ 506.130892][T19291] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.211271][ T45] hid (null): invalid report_size 27418 [ 506.225710][ T45] hid (null): report_id 1505116794 is invalid [ 506.243363][ T45] hid (null): unknown global tag 0xe [ 506.249111][ T45] hid (null): unknown global tag 0xd [ 506.254496][T19291] tipc: Disabling bearer [ 506.272389][T19291] tipc: Left network mode [ 506.291080][T19291] veth1_macvtap: left promiscuous mode [ 506.303890][T19291] veth0_vlan: left promiscuous mode [ 506.313909][T24024] overlayfs: failed to clone upperpath [ 506.421928][ T45] usb 9-1: USB disconnect, device number 2 [ 506.528766][T24045] x_tables: duplicate underflow at hook 1 [ 506.535322][T24025] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.542380][T24025] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.567811][T24025] bridge_slave_0: entered allmulticast mode [ 506.588837][T24025] bridge_slave_0: entered promiscuous mode [ 506.599100][T24025] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.608651][T24051] overlayfs: failed to clone upperpath [ 506.623268][T24025] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.638002][T24025] bridge_slave_1: entered allmulticast mode [ 506.648591][T24025] bridge_slave_1: entered promiscuous mode [ 506.686972][T24058] overlayfs: failed to resolve './file1': -2 [ 506.762940][T24025] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.770067][T24025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.777426][T24025] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.784493][T24025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.812668][T19291] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.823612][T19291] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.834285][T19299] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.841541][T19299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.865160][T19299] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.872240][T19299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.891086][T24025] veth0_vlan: entered promiscuous mode [ 506.909138][T24025] veth1_macvtap: entered promiscuous mode [ 506.986225][T24069] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 506.986240][T24070] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 507.075740][T24078] overlay: filesystem on ./bus not supported as upperdir [ 507.094048][T24077] 9pnet_fd: Insufficient options for proto=fd [ 507.333368][ T617] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 507.463381][ T617] usb 9-1: device descriptor read/64, error -71 [ 507.483480][ T45] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 507.633665][ T45] usb 10-1: Using ep0 maxpacket: 16 [ 507.639964][ T45] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 507.648323][ T45] usb 10-1: config 0 has no interface number 0 [ 507.654598][ T45] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 507.664698][ T45] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 507.676257][ T45] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 507.685459][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.693620][ T45] usb 10-1: Product: syz [ 507.697892][ T45] usb 10-1: Manufacturer: syz [ 507.702572][ T45] usb 10-1: SerialNumber: syz [ 507.708021][ T45] usb 10-1: config 0 descriptor?? [ 507.713675][ T617] usb 9-1: device descriptor read/64, error -71 [ 507.713986][T24085] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 507.727586][T24085] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 507.839967][T24105] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8079'. [ 507.926019][T24123] overlayfs: failed to clone upperpath [ 507.935147][T24085] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 507.942608][T24085] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 507.963425][ T617] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 508.093379][ T617] usb 9-1: device descriptor read/64, error -71 [ 508.323106][ T45] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 508.333380][ T45] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 508.333397][ T617] usb 9-1: device descriptor read/64, error -71 [ 508.351697][ T45] asix 10-1:0.251: probe with driver asix failed with error -71 [ 508.360720][ T45] usb 10-1: USB disconnect, device number 2 [ 508.443516][ T617] usb usb9-port1: attempt power cycle [ 508.598460][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 508.598479][ T36] audit: type=1326 audit(2000000033.000:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24133 comm="syz.7.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 508.628939][ T36] audit: type=1326 audit(2000000033.000:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24133 comm="syz.7.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 508.652835][ T36] audit: type=1326 audit(2000000033.000:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24133 comm="syz.7.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 508.665280][T24141] bpf: Bad value for 'mode' [ 508.676688][ T36] audit: type=1326 audit(2000000033.010:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24133 comm="syz.7.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 508.704850][ T36] audit: type=1326 audit(2000000033.010:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24133 comm="syz.7.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 508.728748][ T36] audit: type=1326 audit(2000000033.010:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24133 comm="syz.7.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 508.752436][ T36] audit: type=1326 audit(2000000033.010:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24133 comm="syz.7.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 508.761131][T24143] overlayfs: failed to resolve './file0': -2 [ 508.776219][ T36] audit: type=1326 audit(2000000033.010:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24133 comm="syz.7.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 508.805797][ T617] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 508.809140][ T36] audit: type=1326 audit(2000000033.010:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24133 comm="syz.7.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f806778e963 code=0x7ffc0000 [ 508.834624][ T617] usb 9-1: device descriptor read/8, error -71 [ 508.837557][ T36] audit: type=1326 audit(2000000033.010:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24133 comm="syz.7.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 508.843573][T24147] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8092'. [ 508.891779][T24149] overlayfs: failed to clone upperpath [ 508.970273][T24156] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=52 sclass=netlink_audit_socket pid=24156 comm=syz.9.8095 [ 508.983064][T24156] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=54 sclass=netlink_audit_socket pid=24156 comm=syz.9.8095 [ 508.996704][T24156] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=27 sclass=netlink_audit_socket pid=24156 comm=syz.9.8095 [ 509.009687][T24156] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pid=24156 comm=syz.9.8095 [ 509.023682][ T617] usb 9-1: device descriptor read/8, error -71 [ 509.273387][ T617] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 509.294383][ T617] usb 9-1: device descriptor read/8, error -71 [ 509.424389][ T617] usb 9-1: device descriptor read/8, error -71 [ 509.533527][ T617] usb usb9-port1: unable to enumerate USB device [ 510.062020][T24213] overlayfs: failed to clone upperpath [ 510.087870][T24215] overlayfs: failed to clone upperpath [ 510.104860][T24218] fuse: Invalid rootmode [ 510.268534][T24238] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=24238 comm=syz.4.8123 [ 510.598248][T24255] rust_binder: Write failure EINVAL in pid:46 [ 511.265819][T24311] cgroup2: Unknown parameter 'memory߹ents' [ 511.762313][T24325] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 255) [ 511.762341][T24325] rust_binder: Error while translating object. [ 511.773026][T24325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 511.779304][T24325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45 [ 511.801637][T24327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:49 [ 511.812293][T24327] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 511.923183][T24334] fuse: Unknown parameter 'group_iD' [ 512.045934][T24311] overlayfs: statfs failed on './file0' [ 512.085686][T24344] netlink: 'syz.9.8156': attribute type 8 has an invalid length. [ 512.383366][T19269] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 512.490272][T24354] fuse: Bad value for 'user_id' [ 512.495238][T24354] fuse: Bad value for 'user_id' [ 512.534627][T19269] usb 10-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 512.543883][T19269] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.553452][T19269] usb 10-1: config 0 descriptor?? [ 512.760878][T24348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.769482][T24348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.777633][T24348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.786220][T24348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.794412][T24348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.802936][T24348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.811085][T24348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.819638][T24348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.827834][T24348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.836495][T24348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.866074][T19269] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 512.876281][T24381] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 512.876461][T24381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 512.884495][T24382] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 512.889679][T19269] asix 10-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 512.915137][T19269] asix 10-1:0.0: probe with driver asix failed with error -71 [ 512.924592][T19269] usb 10-1: USB disconnect, device number 3 [ 512.998281][T24397] x_tables: duplicate underflow at hook 1 [ 513.004883][T24397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 513.363388][ T325] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 513.503358][ T325] usb 10-1: device descriptor read/64, error -71 [ 513.743402][ T325] usb 10-1: device descriptor read/64, error -71 [ 513.983381][ T325] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 514.113383][ T325] usb 10-1: device descriptor read/64, error -71 [ 514.353416][ T325] usb 10-1: device descriptor read/64, error -71 [ 514.463437][ T325] usb usb10-port1: attempt power cycle [ 514.803400][ T325] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 514.824564][ T325] usb 10-1: device descriptor read/8, error -71 [ 514.954444][ T325] usb 10-1: device descriptor read/8, error -71 [ 515.193359][ T325] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 515.214390][ T325] usb 10-1: device descriptor read/8, error -71 [ 515.345307][ T325] usb 10-1: device descriptor read/8, error -71 [ 515.463467][ T325] usb usb10-port1: unable to enumerate USB device [ 515.630127][T24440] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8190'. [ 516.452079][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 516.452098][ T36] audit: type=1326 audit(2000000040.850:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24461 comm="syz.7.8199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f806778e929 code=0x0 [ 516.602676][T24473] overlayfs: failed to clone upperpath [ 516.609456][ T36] audit: type=1400 audit(2000000041.010:4191): avc: denied { add_name } for pid=24472 comm="syz.4.8203" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 516.643399][ T36] audit: type=1400 audit(2000000041.010:4192): avc: denied { create } for pid=24472 comm="syz.4.8203" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 517.213358][ T325] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 517.308185][T24514] overlayfs: failed to clone upperpath [ 517.383375][ T325] usb 9-1: Using ep0 maxpacket: 8 [ 517.389646][ T325] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 517.403856][ T325] usb 9-1: config 179 has no interface number 0 [ 517.411221][ T325] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 517.424097][T24522] overlayfs: failed to clone upperpath [ 517.429757][ T325] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 517.441464][ T325] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 517.459804][ T325] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 517.487101][ T325] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 517.500426][ T325] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 517.509592][ T325] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.532793][T24531] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 517.548186][T24505] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 517.582684][T24536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 517.583590][T24537] rust_binder: Error in use_page_slow: ESRCH [ 517.590587][T24537] rust_binder: use_range failure ESRCH [ 517.609317][T24537] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 517.616172][T24537] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 517.624695][T24537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:100 [ 517.758443][T24553] overlayfs: failed to resolve './file1': -2 [ 517.777797][ T325] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input34 [ 517.844688][T24555] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 517.845088][T24555] rust_binder: Error in use_page_slow: ESRCH [ 517.851653][T24555] rust_binder: use_range failure ESRCH [ 517.858116][T24555] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 517.863863][T24555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 517.873634][T24555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:113 [ 517.977865][T24505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.002274][T24505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.054894][T24567] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 518.556159][T24593] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 518.809509][T24608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.855448][T24608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.048753][T19269] usb 9-1: USB disconnect, device number 7 [ 519.048801][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 519.063135][T19269] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 519.063212][ C1] dummy_hcd dummy_hcd.8: timer fired with no URBs pending? [ 519.503578][T24633] rust_binder: Write failure EINVAL in pid:96 [ 519.503743][T24633] rust_binder: Read failure Err(EAGAIN) in pid:96 [ 519.524251][T24637] binder: Bad value for 'stats' [ 519.524464][ T36] audit: type=1326 audit(2000000043.930:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24635 comm="syz.8.8258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2598e929 code=0x7ffc0000 [ 519.559382][ T36] audit: type=1326 audit(2000000043.930:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24635 comm="syz.8.8258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2598e929 code=0x7ffc0000 [ 519.583134][ T36] audit: type=1326 audit(2000000043.930:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24635 comm="syz.8.8258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4a2598e929 code=0x7ffc0000 [ 519.606705][ T36] audit: type=1326 audit(2000000043.930:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24635 comm="syz.8.8258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2598e929 code=0x7ffc0000 [ 519.630240][ T36] audit: type=1326 audit(2000000043.930:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24635 comm="syz.8.8258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2598e929 code=0x7ffc0000 [ 520.370766][T24658] overlayfs: conflicting lowerdir path [ 520.439880][T24666] 9pnet_fd: Insufficient options for proto=fd [ 520.523387][T19269] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 520.535003][T24687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=24687 comm=syz.7.8274 [ 520.547757][T24687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=24687 comm=syz.7.8274 [ 520.560919][T24687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=24687 comm=syz.7.8274 [ 520.574078][T24687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=24687 comm=syz.7.8274 [ 520.652731][T24710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24710 comm=syz.8.8281 [ 520.685705][T19269] usb 10-1: config index 0 descriptor too short (expected 65069, got 45) [ 520.698880][T19269] usb 10-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 520.717369][T24717] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 520.724847][T19269] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.736127][T24718] tipc: Started in network mode [ 520.741015][T24718] tipc: Node identity 4, cluster identity 4711 [ 520.744221][T19269] usb 10-1: config 0 has no interfaces? [ 520.755645][T19269] usb 10-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 520.770118][T19269] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.783466][T19269] usb 10-1: config 0 descriptor?? [ 520.797686][T24718] tipc: Node number set to 4 [ 520.953331][ T36] audit: type=1326 audit(2000000045.350:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24736 comm="syz.7.8290" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x0 [ 521.163081][T19269] usb 10-1: USB disconnect, device number 8 [ 521.249617][T24754] fuse: Bad value for 'fd' [ 521.254915][T24754] SELinux: security_context_str_to_sid () failed with errno=-22 [ 521.643382][T19269] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 521.794914][T19269] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.801221][T24774] overlayfs: failed to clone upperpath [ 521.805288][T19269] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 521.820397][T19269] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 521.829757][T19269] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 521.838279][T19269] usb 10-1: SerialNumber: syz [ 522.046931][T24764] 9pnet_fd: Insufficient options for proto=fd [ 522.050264][T24786] can: request_module (can-proto-0) failed. [ 522.064619][T19269] usb 10-1: 0:2 : does not exist [ 522.072587][T19269] usb 10-1: unit 5 not found! [ 522.089262][T19269] usb 10-1: USB disconnect, device number 9 [ 522.148659][T24805] overlayfs: failed to clone upperpath [ 522.333401][ T45] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 522.463362][ T45] usb 9-1: device descriptor read/64, error -71 [ 522.703350][ T45] usb 9-1: device descriptor read/64, error -71 [ 522.799273][T24814] overlayfs: failed to clone lowerpath [ 522.813502][T19269] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 522.943392][ T45] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 522.963356][T19269] usb 10-1: Using ep0 maxpacket: 8 [ 522.969655][T19269] usb 10-1: config 4 has an invalid interface number: 244 but max is 0 [ 522.978115][T19269] usb 10-1: config 4 has no interface number 0 [ 522.984422][T19269] usb 10-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7 [ 522.995954][T19269] usb 10-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 523.006224][T19269] usb 10-1: config 4 interface 244 has no altsetting 0 [ 523.015216][T19269] usb 10-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 523.024441][T19269] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.032531][T19269] usb 10-1: Product: syz [ 523.036829][T19269] usb 10-1: Manufacturer: syz [ 523.041529][T19269] usb 10-1: SerialNumber: syz [ 523.073430][ T45] usb 9-1: device descriptor read/64, error -71 [ 523.313394][ T45] usb 9-1: device descriptor read/64, error -71 [ 523.410693][T19269] ipheth 10-1:4.244: Unable to find endpoints [ 523.418681][T19269] usb 10-1: USB disconnect, device number 10 [ 523.433963][ T45] usb usb9-port1: attempt power cycle [ 523.783375][ T45] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 523.814393][ T45] usb 9-1: device descriptor read/8, error -71 [ 523.911905][T24858] overlayfs: failed to clone upperpath [ 523.930113][T24860] tipc: Failed to remove unknown binding: 66,1,1/1:718355282/718355284 [ 523.938423][T24860] tipc: Failed to remove unknown binding: 66,1,1/1:718355282/718355284 [ 523.947975][ T45] usb 9-1: device descriptor read/8, error -71 [ 524.043367][ T617] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 524.183368][ T617] usb 10-1: device descriptor read/64, error -71 [ 524.203396][ T45] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 524.224407][ T45] usb 9-1: device descriptor read/8, error -71 [ 524.354808][ T45] usb 9-1: device descriptor read/8, error -71 [ 524.423363][ T617] usb 10-1: device descriptor read/64, error -71 [ 524.463458][ T45] usb usb9-port1: unable to enumerate USB device [ 524.673365][ T617] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 524.803518][ T617] usb 10-1: device descriptor read/64, error -71 [ 525.043369][ T617] usb 10-1: device descriptor read/64, error -71 [ 525.153526][ T617] usb usb10-port1: attempt power cycle [ 525.246507][ T36] audit: type=1326 audit(2000000049.650:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24947 comm="syz.4.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f38e929 code=0x7ffc0000 [ 525.251648][T24948] overlayfs: failed to clone upperpath [ 525.270188][ T36] audit: type=1326 audit(2000000049.650:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24947 comm="syz.4.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f38e929 code=0x7ffc0000 [ 525.299203][ T36] audit: type=1326 audit(2000000049.650:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24947 comm="syz.4.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f303f38e929 code=0x7ffc0000 [ 525.322779][ T36] audit: type=1326 audit(2000000049.650:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24947 comm="syz.4.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f38e929 code=0x7ffc0000 [ 525.346399][ T36] audit: type=1326 audit(2000000049.650:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24947 comm="syz.4.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f303f390847 code=0x7ffc0000 [ 525.369834][ T36] audit: type=1326 audit(2000000049.650:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24947 comm="syz.4.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f303f3907bc code=0x7ffc0000 [ 525.393366][ T36] audit: type=1326 audit(2000000049.650:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24947 comm="syz.4.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f303f3906f4 code=0x7ffc0000 [ 525.416791][ T36] audit: type=1326 audit(2000000049.650:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24947 comm="syz.4.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f303f3906f4 code=0x7ffc0000 [ 525.440212][ T36] audit: type=1326 audit(2000000049.650:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24947 comm="syz.4.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f303f38d58a code=0x7ffc0000 [ 525.463580][ T36] audit: type=1326 audit(2000000049.650:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24947 comm="syz.4.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f38e929 code=0x7ffc0000 [ 525.503363][ T617] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 525.524421][ T617] usb 10-1: device descriptor read/8, error -71 [ 525.640999][T24957] overlayfs: failed to clone upperpath [ 525.654519][ T617] usb 10-1: device descriptor read/8, error -71 [ 525.672315][T24961] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8375'. [ 525.893419][ T617] usb 10-1: new low-speed USB device number 14 using dummy_hcd [ 525.914416][ T617] usb 10-1: device descriptor read/8, error -71 [ 526.044410][ T617] usb 10-1: device descriptor read/8, error -71 [ 526.153433][ T617] usb usb10-port1: unable to enumerate USB device [ 526.253386][T24980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=24980 comm=syz.4.8384 [ 526.412365][T25007] macsec0: mtu less than device minimum [ 526.418471][T25007] can: request_module (can-proto-0) failed. [ 526.717156][T25029] can: request_module (can-proto-0) failed. [ 526.943009][T25035] syzkaller0: entered promiscuous mode [ 526.948544][T25035] syzkaller0: entered allmulticast mode [ 527.036733][T25040] netlink: 9 bytes leftover after parsing attributes in process `syz.9.8406'. [ 527.045904][T25040] gretap0: entered promiscuous mode [ 527.051241][T25041] netlink: 9 bytes leftover after parsing attributes in process `syz.9.8406'. [ 527.060494][T25040] netlink: 5 bytes leftover after parsing attributes in process `syz.9.8406'. [ 527.069426][T25040] 0{X: renamed from gretap0 [ 527.075855][T25040] 0{X: left promiscuous mode [ 527.080953][T25040] 0{X: entered allmulticast mode [ 527.086756][T25040] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 527.120243][T25040] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 527.380074][T25071] fuse: Bad value for 'user_id' [ 527.391445][T25071] fuse: Bad value for 'user_id' [ 527.645439][ T45] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 527.795693][ T45] usb 10-1: Using ep0 maxpacket: 16 [ 527.801956][ T45] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.813108][ T45] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.823169][ T45] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 527.836263][ T45] usb 10-1: config 0 interface 0 has no altsetting 0 [ 527.843007][ T45] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 527.845694][T25086] overlayfs: failed to clone lowerpath [ 527.852180][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.853056][ T45] usb 10-1: config 0 descriptor?? [ 528.276198][ T45] hid (null): invalid report_size 27418 [ 528.282041][ T45] hid (null): report_id 1505116794 is invalid [ 528.288159][ T45] hid (null): unknown global tag 0xe [ 528.293532][ T45] hid (null): unknown global tag 0xd [ 528.451208][T25227] rust_binder: Error while translating object. [ 528.451247][T25227] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 528.457781][T25227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:144 [ 528.483568][ T617] usb 10-1: USB disconnect, device number 15 [ 528.504982][T25233] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 528.505022][T25233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:146 [ 528.988038][ T306] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 529.018439][T25272] fuse: Unknown parameter 'roo' [ 529.025966][T25272] binder: Unknown parameter 'fqcontext' [ 529.066863][T25282] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 529.067237][T25282] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 529.148318][ T306] usb 9-1: Using ep0 maxpacket: 16 [ 529.161005][ T306] usb 9-1: config 4 has an invalid interface number: 15 but max is 0 [ 529.169285][ T306] usb 9-1: config 4 has no interface number 0 [ 529.175492][ T306] usb 9-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 529.185363][ T306] usb 9-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 529.195305][ T306] usb 9-1: config 4 interface 15 has no altsetting 0 [ 529.203409][ T306] usb 9-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 529.212510][ T306] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.220529][ T306] usb 9-1: Product: syz [ 529.224702][ T306] usb 9-1: Manufacturer: syz [ 529.229579][ T306] usb 9-1: SerialNumber: syz [ 529.235122][T25249] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 529.242585][T25249] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 529.363163][T25296] overlayfs: failed to clone upperpath [ 529.450455][T25249] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 529.457745][T25249] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 529.924311][T25310] can: request_module (can-proto-0) failed. [ 529.987518][T25323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=25323 comm=syz.4.8458 [ 530.043282][T25335] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 530.087539][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.125155][T25355] netlink: 72 bytes leftover after parsing attributes in process `syz.7.8468'. [ 530.125660][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.160382][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.170640][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 530.173546][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.202934][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.219120][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.236856][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.245815][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.256635][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.265693][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.275622][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.289642][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.299062][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.317482][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.326387][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.337020][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.348538][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.361603][T25384] SELinux: security_context_str_to_sid () failed with errno=-22 [ 530.370018][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.387134][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.395981][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.404898][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.411095][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 530.413743][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.432024][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 530.433459][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.445182][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 530.454850][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.463538][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 530.472213][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.491016][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.499714][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.510445][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.511869][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 530.519402][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.538525][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 530.538787][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 530.561117][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.569988][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 530.581339][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.590284][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 530.591389][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.601831][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 530.609961][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.621341][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 530.629355][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.640799][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 530.648855][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.660246][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 530.668399][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.679557][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 530.687625][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.698780][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 530.707004][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.718431][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 530.726550][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.737749][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 530.745911][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.757224][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 530.765420][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.777734][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 530.791667][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.796643][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 530.804406][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.815966][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 530.835552][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.845154][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 530.849121][T25393] fuse: Unknown parameter 'grou00000000000000000000' [ 530.856238][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.871863][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 530.883002][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.891859][T25344] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.891944][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 530.913868][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 530.927496][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 530.963598][ T306] ax88179_178a 9-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 530.992665][ T306] ax88179_178a 9-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.8-1, Toshiba USB Ethernet Adapter, ee:71:1d:73:6b:0a [ 531.026738][ T306] usb 9-1: USB disconnect, device number 12 [ 531.037847][ T306] ax88179_178a 9-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.8-1, Toshiba USB Ethernet Adapter [ 531.062853][T25416] netlink: 'syz.9.8488': attribute type 4 has an invalid length. [ 531.080880][T25416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 531.081739][T25416] rust_binder: Error while translating object. [ 531.088613][T25416] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 531.095199][T25416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:200 [ 531.147918][T25429] fuse: Unknown parameter '0x000000000000000d' [ 531.566567][T16662] bridge_slave_1: left allmulticast mode [ 531.572254][T16662] bridge_slave_1: left promiscuous mode [ 531.577930][T16662] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.585515][T16662] bridge_slave_0: left allmulticast mode [ 531.591236][T16662] bridge_slave_0: left promiscuous mode [ 531.596981][T16662] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.724551][T16662] tipc: Left network mode [ 531.730071][T16662] veth1_macvtap: left promiscuous mode [ 531.735726][T16662] veth0_vlan: left promiscuous mode [ 531.776010][T25438] overlay: Unknown parameter 'mounts' [ 531.867587][T25445] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 531.868930][T25445] rust_binder: Error in use_page_slow: ESRCH [ 531.876845][T25445] rust_binder: use_range failure ESRCH [ 531.883259][T25445] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 531.889467][T25445] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 531.897890][T25445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:203 [ 531.929795][T25447] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 531.939335][T25447] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 531.965358][T25449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 532.031203][T25460] overlayfs: failed to clone upperpath [ 532.195064][T25471] overlayfs: failed to resolve './file0': -2 [ 532.236060][ T45] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 532.394576][ T45] usb 10-1: Using ep0 maxpacket: 16 [ 532.400865][ T45] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.411968][ T45] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.421934][ T45] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 532.435022][ T45] usb 10-1: config 0 interface 0 has no altsetting 0 [ 532.441725][ T45] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 532.451065][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.459892][ T45] usb 10-1: config 0 descriptor?? [ 532.474747][ T617] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 532.625052][ T617] usb 9-1: Using ep0 maxpacket: 16 [ 532.631798][ T617] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 532.640591][ T617] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 532.650778][ T617] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.661580][ T617] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 532.670928][ T617] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.679038][ T617] usb 9-1: Product: syz [ 532.683308][ T617] usb 9-1: Manufacturer: syz [ 532.687969][ T617] usb 9-1: SerialNumber: syz [ 532.710620][T25484] netlink: 'syz.4.8517': attribute type 15 has an invalid length. [ 532.718606][T25484] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8517'. [ 532.807014][T25488] overlayfs: failed to clone upperpath [ 532.874011][ T45] hid (null): invalid report_size 27418 [ 532.879867][ T45] hid (null): report_id 1505116794 is invalid [ 532.886009][ T45] hid (null): unknown global tag 0xe [ 532.891434][ T45] hid (null): unknown global tag 0xd [ 533.074319][ T306] usb 10-1: USB disconnect, device number 16 [ 533.099352][ T617] usb 9-1: 0:2 : does not exist [ 533.106091][ T617] usb 9-1: USB disconnect, device number 13 [ 533.688931][T25507] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 533.777800][T25513] overlayfs: failed to clone upperpath [ 533.813394][T25519] /dev/sg0: Can't lookup blockdev [ 533.934257][T25539] overlayfs: failed to clone upperpath [ 534.087852][ T45] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 534.238214][ T45] usb 10-1: Using ep0 maxpacket: 16 [ 534.244638][ T45] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.256019][ T45] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.266011][ T45] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 534.279570][ T45] usb 10-1: config 0 interface 0 has no altsetting 0 [ 534.286283][ T45] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 534.295674][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.304952][ T45] usb 10-1: config 0 descriptor?? [ 534.457903][T25570] overlayfs: failed to clone upperpath [ 534.713920][ T45] hid (null): invalid report_size 27418 [ 534.719725][ T45] hid (null): report_id 1505116794 is invalid [ 534.725818][ T45] hid (null): unknown global tag 0xe [ 534.731235][ T45] hid (null): unknown global tag 0xd [ 534.914323][ T306] usb 10-1: USB disconnect, device number 17 [ 535.162751][T25589] /dev/rnullb0: Can't lookup blockdev [ 535.181787][T25591] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8557'. [ 535.448889][T25603] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 536.510735][T25614] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8565'. [ 536.526655][T25614] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 536.526676][T25614] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 536.535481][T25614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:234 [ 536.558780][T25616] FAT-fs (rnullb0): bogus number of reserved sectors [ 536.574704][T25616] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 536.596309][T25618] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 536.626002][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 536.626022][ T36] audit: type=1326 audit(2000000061.010:4255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25622 comm="syz.7.8569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x0 [ 536.696907][T19299] vlan0: left allmulticast mode [ 536.701822][T19299] vlan0: left promiscuous mode [ 536.707626][T19299] bridge0: port 4(vlan0) entered disabled state [ 536.714678][T19299] veth0_vlan: left allmulticast mode [ 536.720137][T19299] bridge0: port 3(veth0_vlan) entered disabled state [ 536.727698][T19299] bridge_slave_1: left allmulticast mode [ 536.729898][ T36] audit: type=1326 audit(2000000061.110:4256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25622 comm="syz.7.8569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x0 [ 536.733542][T19299] bridge_slave_1: left promiscuous mode [ 536.762266][T19299] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.770461][T19299] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.843051][ T45] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 536.895678][T19299] veth1_macvtap: left promiscuous mode [ 536.901210][T19299] veth0_vlan: left promiscuous mode [ 536.995161][ T45] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.005540][ T45] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.016170][ T45] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 537.025398][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.033584][ T45] usb 10-1: Product: syz [ 537.037900][ T45] usb 10-1: Manufacturer: syz [ 537.042623][ T45] usb 10-1: SerialNumber: syz [ 537.254465][ T45] usb 10-1: 0:2 : does not exist [ 537.264338][ T45] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 537.278239][ T45] usb 10-1: USB disconnect, device number 18 [ 537.740042][T25651] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 537.781055][T25655] binder: Unknown parameter './binderfs' [ 537.829629][T25659] =: renamed from lo (while UP) [ 538.686042][T25677] rust_binder: Write failure EINVAL in pid:246 [ 538.971396][T25710] binder: Unknown parameter 's cM櫮R6㊷ B]3p|;6' [ 538.998409][T25712] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 539.157479][ T45] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 539.328655][ T45] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 539.337860][ T45] usb 9-1: config 1 has no interface number 1 [ 539.343965][ T45] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 539.356946][ T45] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 539.369451][ T45] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 539.378597][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.386619][ T45] usb 9-1: Product: syz [ 539.390994][ T45] usb 9-1: Manufacturer: syz [ 539.395644][ T45] usb 9-1: SerialNumber: syz [ 539.435186][T25727] @: renamed from vlan0 (while UP) [ 539.604179][T25708] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 539.605344][ T45] usb 9-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 539.621874][ T45] usb 9-1: 2:1 : sample bitwidth 189 in over sample bytes 3 [ 539.629220][ T45] usb 9-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 539.637662][ T45] usb 9-1: USB disconnect, device number 14 [ 539.647620][T23238] udevd[23238]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 539.788220][ T325] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 539.938302][ T325] usb 10-1: Using ep0 maxpacket: 16 [ 539.945391][ T325] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.956601][ T325] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.966572][ T325] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 539.979715][ T325] usb 10-1: config 0 interface 0 has no altsetting 0 [ 539.986431][ T325] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 539.995595][ T325] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.004272][ T325] usb 10-1: config 0 descriptor?? [ 540.093362][T25756] cgroup: Invalid name [ 540.098597][T25756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=25756 comm=syz.7.8617 [ 540.118188][T25756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=25756 comm=syz.7.8617 [ 540.132774][T25756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=25756 comm=syz.7.8617 [ 540.145631][T25756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=25756 comm=syz.7.8617 [ 540.178543][T25783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25783 comm=syz.7.8621 [ 540.195836][T25783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25783 comm=syz.7.8621 [ 540.245590][T25805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8627'. [ 540.412791][ T325] hid (null): invalid report_size 27418 [ 540.422463][T25823] overlayfs: missing 'lowerdir' [ 540.427682][ T325] hid (null): report_id 1505116794 is invalid [ 540.435185][ T325] hid (null): unknown global tag 0xe [ 540.444186][ T325] hid (null): unknown global tag 0xd [ 540.548629][T25830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.558025][T25830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.606602][T25839] fuse: Bad value for 'max_read' [ 540.621216][ T45] usb 10-1: USB disconnect, device number 19 [ 540.640759][T25846] fuse: Bad value for 'user_id' [ 540.640759][T25847] fuse: Bad value for 'user_id' [ 540.640782][T25847] fuse: Bad value for 'user_id' [ 540.645693][T25846] fuse: Bad value for 'user_id' [ 540.788280][ T325] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 541.144348][T25864] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 541.255246][T25883] netlink: 'syz.7.8650': attribute type 4 has an invalid length. [ 541.273163][T25884] netlink: 'syz.7.8650': attribute type 4 has an invalid length. [ 541.338193][ T325] usb 9-1: device not accepting address 15, error -71 [ 541.338976][T25901] tipc: Enabling of bearer rejected, failed to enable media [ 541.523407][T25917] tmpfs: Unknown parameter 'usrquota' [ 541.538806][T25917] kvm: pic: non byte write [ 541.543889][T25917] random: crng reseeded on system resumption [ 541.927874][T25930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8663'. [ 542.405505][T25939] netlink: 'syz.4.8666': attribute type 1 has an invalid length. [ 542.933048][T25964] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8677'. [ 542.943487][T25962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:279 [ 542.978386][T25972] overlayfs: failed to clone lowerpath [ 542.995667][T25974] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 543.198941][T25998] rust_binder: Write failure EINVAL in pid:286 [ 543.488198][ T325] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 543.649243][ T325] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 543.658484][ T325] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.667083][ T325] usb 9-1: config 0 descriptor?? [ 543.879566][ T325] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 543.893381][ T325] asix 9-1:0.0: probe with driver asix failed with error -71 [ 543.904590][ T325] usb 9-1: USB disconnect, device number 17 [ 543.918080][ T36] audit: type=1400 audit(2000000004.309:4257): avc: denied { append } for pid=26030 comm="syz.8.8700" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 544.368327][ T325] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 544.539473][T26069] overlayfs: failed to clone upperpath [ 544.560395][ T325] usb 9-1: Invalid ep0 maxpacket: 32 [ 544.728180][ T325] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 544.908357][ T325] usb 9-1: Invalid ep0 maxpacket: 32 [ 544.935022][ T325] usb usb9-port1: attempt power cycle [ 545.298188][ T325] usb 9-1: new low-speed USB device number 20 using dummy_hcd [ 545.308200][ T10] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 545.318520][ T325] usb 9-1: Invalid ep0 maxpacket: 32 [ 545.325876][T26091] overlayfs: failed to clone upperpath [ 545.448188][ T325] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 545.469641][ T325] usb 9-1: Invalid ep0 maxpacket: 32 [ 545.475947][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 545.480909][ T325] usb usb9-port1: unable to enumerate USB device [ 545.493197][ T10] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 545.501112][ T10] usb 10-1: can't read configurations, error -71 [ 546.086889][T26110] netlink: 68 bytes leftover after parsing attributes in process `syz.7.8727'. [ 546.109712][T26111] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 546.117137][T26111] rust_binder: Write failure EINVAL in pid:310 [ 546.199281][T26117] fuse: blksize only supported for fuseblk [ 546.211986][T26117] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 546.212376][T26117] rust_binder: Error while translating object. [ 546.219269][T26117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 546.225618][T26117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:312 [ 546.267581][T26121] netlink: 'syz.4.8731': attribute type 32 has an invalid length. [ 546.398255][T26135] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8734'. [ 546.531683][T26140] overlayfs: failed to clone upperpath [ 546.838198][ T325] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 546.988173][ T325] usb 10-1: Using ep0 maxpacket: 16 [ 546.994716][ T325] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.005884][ T325] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.015910][ T325] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 547.029054][ T325] usb 10-1: config 0 interface 0 has no altsetting 0 [ 547.035778][ T325] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 547.045705][ T325] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.054826][ T325] usb 10-1: config 0 descriptor?? [ 547.438222][ T350] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 547.462574][ T325] hid (null): invalid report_size 27418 [ 547.468389][ T325] hid (null): report_id 1505116794 is invalid [ 547.474464][ T325] hid (null): unknown global tag 0xe [ 547.479880][ T325] hid (null): unknown global tag 0xd [ 547.590198][ T350] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.600473][ T350] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 547.610170][ T350] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 547.624405][ T350] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 547.633500][ T350] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.641533][ T350] usb 9-1: Product: syz [ 547.645689][ T350] usb 9-1: Manufacturer: syz [ 547.650320][ T350] usb 9-1: SerialNumber: syz [ 547.655530][ T350] usb 9-1: config 0 descriptor?? [ 547.663520][ T10] usb 10-1: USB disconnect, device number 22 [ 547.861995][T26158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:282 [ 547.862715][T26158] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 547.862805][T26195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.887547][T26195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.918815][ T350] usb 9-1: USB disconnect, device number 22 [ 548.088359][T26218] overlayfs: failed to resolve './file0': -2 [ 548.101749][T26221] rust_binder: Write failure EFAULT in pid:296 [ 548.102007][T26221] rust_binder: Write failure EINVAL in pid:296 [ 548.198653][T26236] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26236 comm=syz.4.8767 [ 548.218388][T26232] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 548.239236][T26238] serio: Serial port ttynull [ 548.503923][T26253] netlink: 'syz.4.8774': attribute type 4 has an invalid length. [ 548.547929][T26253] netlink: 'syz.4.8774': attribute type 4 has an invalid length. [ 548.653721][ T36] audit: type=1326 audit(2000000009.049:4258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26259 comm="syz.7.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 548.679390][ T36] audit: type=1326 audit(2000000009.049:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26259 comm="syz.7.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 548.703382][ T36] audit: type=1326 audit(2000000009.049:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26259 comm="syz.7.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 548.726839][ T36] audit: type=1326 audit(2000000009.049:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26259 comm="syz.7.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 548.750455][ T36] audit: type=1326 audit(2000000009.049:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26259 comm="syz.7.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 548.774091][ T36] audit: type=1326 audit(2000000009.049:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26259 comm="syz.7.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 548.797710][ T36] audit: type=1326 audit(2000000009.049:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26259 comm="syz.7.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 548.821345][ T36] audit: type=1326 audit(2000000009.049:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26259 comm="syz.7.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 548.844989][ T36] audit: type=1326 audit(2000000009.049:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26259 comm="syz.7.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x7ffc0000 [ 549.262319][T26293] overlayfs: failed to clone upperpath [ 549.334510][T26309] batadv_slave_1: entered promiscuous mode [ 549.341793][T26309] overlayfs: failed to clone upperpath [ 549.348367][T26309] batadv_slave_1: left promiscuous mode [ 549.518192][ T10] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 549.648194][ T10] usb 9-1: device descriptor read/64, error -71 [ 549.838339][ T350] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 549.888214][ T10] usb 9-1: device descriptor read/64, error -71 [ 549.988192][ T350] usb 10-1: Using ep0 maxpacket: 16 [ 549.994432][ T350] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.005529][ T350] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.015479][ T350] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 550.028550][ T350] usb 10-1: config 0 interface 0 has no altsetting 0 [ 550.035258][ T350] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 550.044400][ T350] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.053284][ T350] usb 10-1: config 0 descriptor?? [ 550.128212][ T10] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 550.258221][ T10] usb 9-1: device descriptor read/64, error -71 [ 550.466895][ T350] hid (null): invalid report_size 27418 [ 550.472699][ T350] hid (null): report_id 1505116794 is invalid [ 550.478828][ T350] hid (null): unknown global tag 0xe [ 550.484167][ T350] hid (null): unknown global tag 0xd [ 550.508315][ T10] usb 9-1: device descriptor read/64, error -71 [ 550.618322][ T10] usb usb9-port1: attempt power cycle [ 550.667504][ T350] usb 10-1: USB disconnect, device number 23 [ 550.958239][ T10] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 550.989889][ T10] usb 9-1: device descriptor read/8, error -71 [ 551.119251][ T10] usb 9-1: device descriptor read/8, error -71 [ 551.606584][T26371] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8815'. [ 551.616437][T26372] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8815'. [ 551.698874][ T10] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 551.739483][ T10] usb 9-1: device descriptor read/8, error -71 [ 551.869290][ T10] usb 9-1: device descriptor read/8, error -71 [ 551.978293][ T10] usb usb9-port1: unable to enumerate USB device [ 552.061970][ T1121] vlan0: left allmulticast mode [ 552.066883][ T1121] veth0_vlan: left allmulticast mode [ 552.073778][ T1121] vlan0: left promiscuous mode [ 552.078799][ T1121] bridge0: port 3(vlan0) entered disabled state [ 552.085657][ T1121] bridge_slave_1: left allmulticast mode [ 552.091371][ T1121] bridge_slave_1: left promiscuous mode [ 552.097002][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.104797][ T1121] bridge_slave_0: left allmulticast mode [ 552.110530][ T1121] bridge_slave_0: left promiscuous mode [ 552.116167][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.206344][T26374] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 552.206392][T26374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:359 [ 552.215977][T19291] Bluetooth: hci0: Frame reassembly failed (-84) [ 552.233322][T26374] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 552.233346][T26374] rust_binder: Read failure Err(EFAULT) in pid:359 [ 552.243633][ T1121] tipc: Left network mode [ 552.255464][ T1121] veth1_macvtap: left promiscuous mode [ 552.261056][ T1121] veth0_vlan: left promiscuous mode [ 552.988240][T26401] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 552.997297][T26401] overlayfs: missing 'lowerdir' [ 553.003487][T26402] tc_dump_action: action bad kind [ 553.008715][T26401] tc_dump_action: action bad kind [ 553.358211][ T617] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 553.509245][ T617] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.519491][ T617] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 553.529858][ T617] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 553.541836][ T617] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 553.553163][ T617] usb 9-1: SerialNumber: syz [ 553.563251][T26406] overlayfs: failed to clone upperpath [ 553.585715][T26408] overlayfs: failed to clone upperpath [ 554.213985][T26436] netlink: 140 bytes leftover after parsing attributes in process `syz.7.8836'. [ 554.223310][ T1127] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 554.225073][T26436] tipc: Enabled bearer , priority 10 [ 554.229458][T11846] Bluetooth: hci0: command 0x1003 tx timeout [ 554.728182][ T306] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 554.774036][T26459] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 554.782955][T26459] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 554.863057][T26472] netlink: 'syz.7.8847': attribute type 4 has an invalid length. [ 554.871111][T26472] lo: entered promiscuous mode [ 554.876928][T26471] lo: left promiscuous mode [ 554.888224][ T306] usb 10-1: Using ep0 maxpacket: 16 [ 554.894961][ T306] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.906273][ T306] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.922478][ T306] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 554.935892][ T306] usb 10-1: config 0 interface 0 has no altsetting 0 [ 554.943555][ T306] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 554.960013][ T306] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.970677][ T306] usb 10-1: config 0 descriptor?? [ 555.024515][T26477] 9pnet_fd: Insufficient options for proto=fd [ 555.378865][ T306] hid (null): invalid report_size 27418 [ 555.384696][ T306] hid (null): report_id 1505116794 is invalid [ 555.391245][ T306] hid (null): unknown global tag 0xe [ 555.396812][ T306] hid (null): unknown global tag 0xd [ 555.579893][ T306] usb 10-1: USB disconnect, device number 24 [ 556.122259][ T617] usb 9-1: USB disconnect, device number 27 [ 556.172216][T26504] input: syz0 as /devices/virtual/input/input37 [ 556.569148][T26508] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 556.569891][T26507] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 556.576599][T26508] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 556.592341][T26508] rust_binder: Write failure EINVAL in pid:329 [ 556.738324][T26517] rust_binder: Write failure EFAULT in pid:337 [ 556.819653][T26520] 9pnet_fd: Insufficient options for proto=fd [ 557.528235][ T325] usb 10-1: new low-speed USB device number 25 using dummy_hcd [ 557.681422][ T325] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 557.690654][ T325] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.704089][ T325] usb 10-1: config 0 descriptor?? [ 557.715705][T26551] rust_binder: Write failure EFAULT in pid:346 [ 557.723198][T26553] overlayfs: failed to resolve './file2': -2 [ 557.797525][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 557.797545][ T36] audit: type=1400 audit(2000000018.189:4305): avc: denied { ioctl } for pid=26564 comm="syz.4.8879" path="/" dev="tracefs" ino=1 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 557.919692][T26581] netlink: 'syz.4.8886': attribute type 46 has an invalid length. [ 557.944958][T26586] overlayfs: missing 'workdir' [ 558.038180][ T617] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 558.087818][T26615] overlayfs: cannot append lower layer [ 558.087818][T26616] overlayfs: cannot append lower layer [ 558.188181][ T617] usb 9-1: Using ep0 maxpacket: 16 [ 558.194568][ T617] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.205792][ T617] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.215679][ T617] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 558.228738][ T617] usb 9-1: config 0 interface 0 has no altsetting 0 [ 558.235376][ T617] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 558.244454][ T617] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.253567][ T617] usb 9-1: config 0 descriptor?? [ 558.662359][ T617] hid (null): invalid report_size 27418 [ 558.668337][ T617] hid (null): report_id 1505116794 is invalid [ 558.674525][ T617] hid (null): unknown global tag 0xe [ 558.680081][ T617] hid (null): unknown global tag 0xd [ 558.728426][ T325] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 558.745097][ T617] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 558.758173][ T325] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 558.768775][ T325] asix 10-1:0.0: probe with driver asix failed with error -71 [ 558.772945][ T617] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 558.789320][ T325] usb 10-1: USB disconnect, device number 25 [ 558.865291][ T617] usb 9-1: USB disconnect, device number 28 [ 558.968981][T26642] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8904'. [ 558.978810][T26642] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 558.978899][T26642] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 559.000630][ T36] audit: type=1326 audit(2000000019.399:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26647 comm="syz.4.8907" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f303f38e929 code=0x0 [ 559.953590][T26697] rust_binder: Write failure EINVAL in pid:358 [ 559.997258][T26710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 560.010558][T26710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 560.017102][T26710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:367 [ 560.090428][T26713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=26713 comm=syz.8.8928 [ 560.130374][ T36] audit: type=1400 audit(2000000020.529:4307): avc: denied { write } for pid=26715 comm="syz.9.8929" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 560.154497][T26718] overlay: ./file1 is not a directory [ 560.180071][T26724] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 560.188817][T26721] fuse: Bad value for 'fd' [ 560.206307][T26726] rust_binder: Write failure EINVAL in pid:376 [ 560.206432][T26726] rust_binder: Read failure Err(EAGAIN) in pid:376 [ 560.236809][T26730] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:380 [ 560.252035][T19291] bridge_slave_1: left allmulticast mode [ 560.272444][T19291] bridge_slave_1: left promiscuous mode [ 560.282978][T19291] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.292385][T19291] bridge_slave_0: left allmulticast mode [ 560.298913][T19291] bridge_slave_0: left promiscuous mode [ 560.304633][T19291] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.448229][T19291] veth1_macvtap: left promiscuous mode [ 560.453956][T19291] veth0_vlan: left promiscuous mode [ 560.570156][T26738] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.583295][T26738] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.590680][T26738] bridge_slave_0: entered allmulticast mode [ 560.597069][T26738] bridge_slave_0: entered promiscuous mode [ 560.604508][T26738] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.611605][T26738] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.618792][T26738] bridge_slave_1: entered allmulticast mode [ 560.625122][T26738] bridge_slave_1: entered promiscuous mode [ 560.674414][T26738] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.681517][T26738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.688846][T26738] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.695908][T26738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.725318][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.732956][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.746703][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.753845][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.764342][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.765130][T26763] fuse: Bad value for 'fd' [ 560.771422][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.802589][T26738] veth0_vlan: entered promiscuous mode [ 560.814199][T26738] veth1_macvtap: entered promiscuous mode [ 560.833964][ T36] audit: type=1400 audit(2000000021.229:4308): avc: denied { mounton } for pid=26738 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 560.858253][ T350] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 561.021559][ T350] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.032013][ T350] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 561.041340][ T350] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 561.051220][ T350] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.060180][ T350] usb 9-1: config 0 descriptor?? [ 561.105369][T26777] =: entered promiscuous mode [ 561.112763][T26776] =: left promiscuous mode [ 561.205070][T26789] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8957'. [ 561.388161][T26806] overlayfs: failed to clone upperpath [ 561.466240][ T36] audit: type=1326 audit(2000000021.859:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26810 comm="syz.7.8965" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f806778e929 code=0x0 [ 561.542529][T26809] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.549697][T26809] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.556858][T26809] bridge_slave_0: entered allmulticast mode [ 561.568556][T26809] bridge_slave_0: entered promiscuous mode [ 561.578914][T26809] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.590234][T26809] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.597504][T26809] bridge_slave_1: entered allmulticast mode [ 561.604262][T26809] bridge_slave_1: entered promiscuous mode [ 561.722298][T26809] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.729410][T26809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.736747][T26809] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.743833][T26809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.771604][T16662] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.779219][T16662] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.789553][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.796649][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.808942][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.816050][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.855569][T26809] veth0_vlan: entered promiscuous mode [ 561.869697][T26809] veth1_macvtap: entered promiscuous mode [ 562.158189][T19269] usb 5-1: new low-speed USB device number 76 using dummy_hcd [ 562.192813][T26827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 562.192854][T26827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 562.302597][T16662] bridge_slave_1: left allmulticast mode [ 562.317739][T19269] usb 5-1: Invalid ep0 maxpacket: 16 [ 562.323207][T16662] bridge_slave_1: left promiscuous mode [ 562.329853][T16662] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.337398][T16662] bridge_slave_0: left allmulticast mode [ 562.343106][T16662] bridge_slave_0: left promiscuous mode [ 562.348888][T16662] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.378067][T26830] overlayfs: failed to clone upperpath [ 562.468292][T19269] usb 5-1: new low-speed USB device number 77 using dummy_hcd [ 562.550961][T16662] veth1_macvtap: left promiscuous mode [ 562.556561][T16662] veth0_vlan: left promiscuous mode [ 562.638187][T19269] usb 5-1: Invalid ep0 maxpacket: 16 [ 562.643702][T19269] usb usb5-port1: attempt power cycle [ 562.988184][T19269] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 563.008547][T19269] usb 5-1: Invalid ep0 maxpacket: 16 [ 563.138197][T19269] usb 5-1: new low-speed USB device number 79 using dummy_hcd [ 563.158552][T19269] usb 5-1: Invalid ep0 maxpacket: 16 [ 563.164075][T19269] usb usb5-port1: unable to enumerate USB device [ 563.605186][T19269] usb 9-1: USB disconnect, device number 29 [ 563.899903][T26869] binder: Bad value for 'max' [ 563.906911][T26869] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 564.041583][T26877] rust_binder: Write failure EINVAL in pid:30 [ 564.045742][T26877] rust_binder: Read failure Err(EAGAIN) in pid:30 [ 564.258186][ T10] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 564.332774][ T36] audit: type=1326 audit(2000000024.729:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26892 comm="syz.7.8990" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f806778e929 code=0x0 [ 564.419503][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 564.428352][ T10] usb 9-1: config 7 has an invalid interface number: 138 but max is 3 [ 564.436550][ T10] usb 9-1: config 7 has an invalid interface number: 222 but max is 3 [ 564.444793][ T10] usb 9-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 564.453516][ T10] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 564.463842][ T10] usb 9-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 564.472817][ T10] usb 9-1: config 7 has no interface number 0 [ 564.478937][ T10] usb 9-1: config 7 has no interface number 1 [ 564.485057][ T10] usb 9-1: config 7 has no interface number 2 [ 564.491179][ T10] usb 9-1: config 7 interface 138 altsetting 98 has an invalid descriptor for endpoint zero, skipping [ 564.502161][ T10] usb 9-1: config 7 interface 138 altsetting 98 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 564.513242][ T10] usb 9-1: config 7 interface 3 altsetting 250 has a duplicate endpoint with address 0x7, skipping [ 564.524000][ T10] usb 9-1: config 7 interface 3 altsetting 250 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 564.535005][ T10] usb 9-1: config 7 interface 3 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 564.546346][ T10] usb 9-1: config 7 interface 3 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 564.557101][ T10] usb 9-1: config 7 interface 3 altsetting 250 has a duplicate endpoint with address 0x9, skipping [ 564.567859][ T10] usb 9-1: config 7 interface 3 altsetting 250 has a duplicate endpoint with address 0xC, skipping [ 564.578664][ T10] usb 9-1: config 7 interface 3 altsetting 250 has a duplicate endpoint with address 0x9, skipping [ 564.589696][ T10] usb 9-1: config 7 interface 3 altsetting 250 has a duplicate endpoint with address 0xE, skipping [ 564.600739][ T10] usb 9-1: config 7 interface 3 altsetting 250 has a duplicate endpoint with address 0xE, skipping [ 564.612266][ T10] usb 9-1: config 7 interface 222 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 564.625955][ T10] usb 9-1: config 7 interface 138 has no altsetting 0 [ 564.632906][ T10] usb 9-1: config 7 interface 3 has no altsetting 0 [ 564.639663][ T10] usb 9-1: config 7 interface 222 has no altsetting 0 [ 564.649015][ T10] usb 9-1: Dual-Role OTG device on HNP port [ 564.657127][ T10] usb 9-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=aa.91 [ 564.666473][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.674672][ T10] usb 9-1: Product: І [ 564.678902][ T10] usb 9-1: Manufacturer: В [ 564.683442][ T10] usb 9-1: SerialNumber: 韕渮沫▜ꤖ邸듈肘쩽䟀䜭䳣ԭᨵ쎑禛쀽꾐礳체긘疈쟓䖣 [ 564.940820][T26909] No source specified [ 566.118196][ T306] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 566.279458][ T306] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 566.289447][ T306] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 566.299883][ T306] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 566.314521][ T306] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 566.323803][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 566.331985][ T306] usb 5-1: Product: syz [ 566.336184][ T306] usb 5-1: Manufacturer: syz [ 566.341182][ T306] usb 5-1: SerialNumber: syz [ 566.550700][ T306] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 80 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 566.712852][T26953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 566.751980][ T325] usb 5-1: USB disconnect, device number 80 [ 566.777452][ T325] usblp0: removed [ 566.852588][T26956] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 566.908616][ T10] snd-usb-audio 9-1:7.138: probe with driver snd-usb-audio failed with error -2 [ 566.940851][ T10] usb 9-1: unknown interface protocol 0x23, assuming v1 [ 566.947855][ T10] usb 9-1: 222:2 : does not exist [ 566.959712][ T10] usb 9-1: USB disconnect, device number 30 [ 566.973705][T23257] udevd[23257]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.222/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 567.398190][ T10] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 567.518184][ T306] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 567.548170][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 567.554453][ T10] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.565719][ T10] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.575756][ T10] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 567.589221][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 567.595866][ T10] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 567.605124][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.614304][ T10] usb 9-1: config 0 descriptor?? [ 567.620999][T26983] rust_binder: Error while translating object. [ 567.621039][T26983] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 567.627312][T26983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 567.669361][ T306] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.682262][ T306] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 567.683612][T26990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:75 [ 567.699047][ T306] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 567.717535][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.725984][ T306] usb 5-1: Product: syz [ 567.730316][ T306] usb 5-1: Manufacturer: syz [ 567.735001][ T306] usb 5-1: SerialNumber: syz [ 567.741007][T26995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.749691][T26995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.956243][ T306] usb 5-1: 0:2 : does not exist [ 567.963125][ T306] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 567.975743][ T306] usb 5-1: USB disconnect, device number 81 [ 567.980108][ T325] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 567.988111][T23238] udevd[23238]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 568.022450][ T10] hid (null): invalid report_size 27418 [ 568.028201][ T10] hid (null): report_id 1505116794 is invalid [ 568.034316][ T10] hid (null): unknown global tag 0xe [ 568.039696][ T10] hid (null): unknown global tag 0xd [ 568.139334][ T325] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 568.148623][ T325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.157578][ T325] usb 3-1: config 0 descriptor?? [ 568.223462][ T306] usb 9-1: USB disconnect, device number 31 [ 568.364978][ T325] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 568.375008][ T325] asix 3-1:0.0: probe with driver asix failed with error -71 [ 568.383812][ T325] usb 3-1: USB disconnect, device number 5 [ 568.625955][T27002] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 568.625955][T27002] null pointer dereference occurred [ 568.638494][T27002] ------------[ cut here ]------------ [ 568.643975][T27002] kernel BUG at rust/helpers/bug.c:7! [ 568.649862][T27002] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 568.650870][ T36] audit: type=1400 audit(2000000029.049:4311): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 568.656854][T27002] CPU: 0 UID: 0 PID: 27002 Comm: syz.4.9026 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 568.678854][ T36] audit: type=1400 audit(2000000029.049:4312): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.692171][T27002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 568.692191][T27002] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 568.692225][T27002] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 7b d7 5e d3 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 31 13 17 5f 90 90 90 90 90 90 90 90 90 [ 568.713793][ T36] audit: type=1400 audit(2000000029.049:4313): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.723628][T27002] RSP: 0018:ffffc90008bdf1b0 EFLAGS: 00010246 [ 568.723654][T27002] RAX: 000000000000005a RBX: 1ffff9200117be38 RCX: 68558d74c9938100 [ 568.729030][ T36] audit: type=1400 audit(2000000029.049:4314): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.748541][T27002] RDX: ffffc9001446e000 RSI: 000000000000332e RDI: 000000000000332f [ 568.748567][T27002] RBP: ffffc90008bdf1b0 R08: ffffc90008bdeea7 R09: 1ffff9200117bdd4 [ 568.748585][T27002] R10: dffffc0000000000 R11: fffff5200117bdd5 R12: 0000000000000000 [ 568.777513][ T36] audit: type=1400 audit(2000000029.049:4315): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 568.783879][T27002] R13: dffffc0000000000 R14: ffffc90008bdf1e0 R15: ffffc90008bdf210 [ 568.783900][T27002] FS: 00007fee46a5e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 568.783923][T27002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.783938][T27002] CR2: 0000200000001000 CR3: 000000011f534000 CR4: 00000000003526b0 [ 568.783959][T27002] Call Trace: [ 568.783967][T27002] [ 568.783976][T27002] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 568.784014][T27002] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 568.784048][T27002] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 568.804737][ T36] audit: type=1400 audit(2000000029.049:4316): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 568.812580][T27002] ? p9pdu_vwritef+0x2720/0x2720 [ 568.812616][T27002] ? radix_tree_node_alloc+0x1af/0x400 [ 568.812641][T27002] ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0 [ 568.825775][ T36] audit: type=1400 audit(2000000029.049:4317): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 568.828589][T27002] ? __asan_memcpy+0x5a/0x80 [ 568.828624][T27002] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 568.992746][T27002] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 569.001557][T27002] ? p9pdu_writef+0xdb/0x130 [ 569.006171][T27002] ? p9pdu_vwritef+0x2720/0x2720 [ 569.011128][T27002] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 569.020275][T27002] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 569.029154][T27002] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 569.036995][T27002] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 569.037047][ T36] audit: type=1400 audit(2000000029.429:4318): avc: denied { watch watch_reads } for pid=27012 comm="syz.2.9029" path="/25/file0" dev="tmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 569.044657][T27002] ? p9_client_prepare_req+0x732/0xa10 [ 569.044693][T27002] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 569.082263][T27002] ? __kasan_check_write+0x18/0x20 [ 569.087397][T27002] ? _raw_spin_lock+0x8c/0x120 [ 569.092173][T27002] ? __cfi__raw_spin_lock+0x10/0x10 [ 569.097390][T27002] ? __kasan_check_write+0x18/0x20 [ 569.102507][T27002] ? _raw_spin_lock+0x8c/0x120 [ 569.107279][T27002] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 569.115548][T27002] p9_fd_request+0x38d/0x500 [ 569.120157][T27002] p9_client_rpc+0x2f9/0xb40 [ 569.124788][T27002] ? bt_sock_poll+0x477/0x7b0 [ 569.129486][T27002] ? p9_fid_create+0x3d0/0x3d0 [ 569.134262][T27002] ? __cfi_sock_poll+0x10/0x10 [ 569.139042][T27002] ? p9_conn_create+0x4c9/0x570 [ 569.143915][T27002] ? p9_fd_create+0x2f3/0x4c0 [ 569.148601][T27002] p9_client_create+0x96a/0x1190 [ 569.153552][T27002] ? __cfi_p9_client_create+0x10/0x10 [ 569.158941][T27002] ? kasan_save_alloc_info+0x40/0x50 [ 569.164242][T27002] ? __kasan_kmalloc+0x96/0xb0 [ 569.169022][T27002] ? kstrdup+0x7b/0x140 [ 569.173196][T27002] ? __kasan_check_write+0x18/0x20 [ 569.178317][T27002] v9fs_session_init+0x1e1/0x1820 [ 569.183351][T27002] ? __cfi_v9fs_session_init+0x10/0x10 [ 569.188823][T27002] ? kasan_save_alloc_info+0x40/0x50 [ 569.194132][T27002] ? __kasan_kmalloc+0x96/0xb0 [ 569.198916][T27002] ? v9fs_mount+0xbd/0xa00 [ 569.203342][T27002] v9fs_mount+0xd7/0xa00 [ 569.207594][T27002] ? __cfi_v9fs_mount+0x10/0x10 [ 569.212458][T27002] ? selinux_capable+0x38/0x50 [ 569.217235][T27002] legacy_get_tree+0x103/0x1b0 [ 569.222003][T27002] ? __cfi_v9fs_mount+0x10/0x10 [ 569.226871][T27002] vfs_get_tree+0xa1/0x290 [ 569.231312][T27002] do_new_mount+0x251/0xb40 [ 569.235827][T27002] ? security_capable+0xcf/0xf0 [ 569.240683][T27002] path_mount+0x688/0x1050 [ 569.245109][T27002] ? putname+0x113/0x150 [ 569.249364][T27002] __se_sys_mount+0x2bd/0x480 [ 569.254048][T27002] ? __x64_sys_mount+0xf0/0xf0 [ 569.258820][T27002] ? __kasan_check_write+0x18/0x20 [ 569.263940][T27002] ? fpregs_restore_userregs+0x11d/0x260 [ 569.269574][T27002] __x64_sys_mount+0xc3/0xf0 [ 569.274170][T27002] x64_sys_call+0x2021/0x2ee0 [ 569.278863][T27002] do_syscall_64+0x58/0xf0 [ 569.283292][T27002] ? clear_bhb_loop+0x50/0xa0 [ 569.287983][T27002] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 569.293902][T27002] RIP: 0033:0x7fee45b8e929 [ 569.298320][T27002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.317933][T27002] RSP: 002b:00007fee46a5e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 569.326360][T27002] RAX: ffffffffffffffda RBX: 00007fee45db5fa0 RCX: 00007fee45b8e929 [ 569.334336][T27002] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 569.342309][T27002] RBP: 00007fee45c10b39 R08: 0000200000000340 R09: 0000000000000000 [ 569.350419][T27002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.358409][T27002] R13: 0000000000000000 R14: 00007fee45db5fa0 R15: 00007ffeeef0cbd8 [ 569.366399][T27002] [ 569.369422][T27002] Modules linked in: [ 569.373369][ T325] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 569.373855][T27002] ---[ end trace 0000000000000000 ]--- [ 569.396989][T27002] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 569.402498][T27002] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 7b d7 5e d3 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 31 13 17 5f 90 90 90 90 90 90 90 90 90 [ 569.422948][T27002] RSP: 0018:ffffc90008bdf1b0 EFLAGS: 00010246 [ 569.429196][T27002] RAX: 000000000000005a RBX: 1ffff9200117be38 RCX: 68558d74c9938100 [ 569.437321][T27002] RDX: ffffc9001446e000 RSI: 000000000000332e RDI: 000000000000332f [ 569.445363][T27002] RBP: ffffc90008bdf1b0 R08: ffffc90008bdeea7 R09: 1ffff9200117bdd4 [ 569.453442][T27002] R10: dffffc0000000000 R11: fffff5200117bdd5 R12: 0000000000000000 [ 569.461488][T27002] R13: dffffc0000000000 R14: ffffc90008bdf1e0 R15: ffffc90008bdf210 [ 569.469530][T27002] FS: 00007fee46a5e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 569.478519][T27002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 569.485123][T27002] CR2: 00007f55613d2d58 CR3: 000000011f534000 CR4: 00000000003526b0 [ 569.493167][T27002] Kernel panic - not syncing: Fatal exception [ 569.499694][T27002] Kernel Offset: disabled [ 569.504130][T27002] Rebooting in 86400 seconds..