last executing test programs: 3m19.713245863s ago: executing program 2 (id=1034): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000ed060001c0"]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x586, 0x0, 0xfffffffffffff10f}]}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a, 0x1}) r8 = socket$inet(0x2, 0x3, 0x6) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x72, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(r8, 0x0, 0x0, 0x8000, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x20000800, &(0x7f0000001080)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@increfs={0x40046305}, @increfs, @decrefs], 0x0, 0x0, 0x0}) 3m19.621762824s ago: executing program 2 (id=1035): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000110001000000002b000000fc00000000000000000000000000000f0000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a170000000000000000000a000200700000000000000014000e00fe80b7bddbf9a965fb4b0000000000bbfc744ce7613d85cc6fb92b55bef479"], 0x104}}, 0x0) 3m19.551656915s ago: executing program 2 (id=1036): clock_nanosleep(0x1, 0xfcfd, &(0x7f0000000000), 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x480b5b90d835e45c}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="2ba52ebd7000fddbdf251b0000000600210061"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8004802}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r5, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x7a4, 0x2a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x20000080) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 3m19.549288086s ago: executing program 2 (id=1037): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000540)=[@acquire, @release], 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000030000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000280)={[{@uid={'uid', 0x3d, r6}}]}) sendmsg$nl_generic(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x1c4, 0x33, 0x1, 0x70bd2c, 0x25dfdbfc, {0x17}, [@generic="ab573b4cfdaa8ccb076758", @nested={0x2f, 0xe1, 0x0, 0x1, [@typed={0x4, 0x73}, @generic="1b542a744dac7810d0083415f25a0f62ca070a59151394c169bdf3f93272dcf4feb75a", @nested={0x4, 0xe5}]}, @nested={0x26, 0x1, 0x0, 0x1, [@generic="39181f01049cd339dd168db7b1ce46480295cabbd3c75e2bb261a4ae479600f8348e"]}, @typed={0x8, 0xcd, 0x0, 0x0, @uid=r3}, @generic="d047663158f876dea191e82a8532eb5559eea60b2af76c6159ad22302d31506f34234f0052766e83e6be673eed4b4be3901b8ce5a4fb6627a670951786fc5bce7bae", @generic="41c9eb639f1a6344730fe414b1957bfb1c6114a3299a41e02a928d9444d60800b245e0271b941df789aefa4461bbd90cc668970ef2e89f18578408ec5ecae7abc0fb50f6ff0b37e5edf14ec5cf69010e6fb079210c05ab164ae0dd2fee1020e139b9069e97df9923649c31776a60ca", @nested={0x24, 0x3f, 0x0, 0x1, [@nested={0x4, 0x5d}, @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x4, 0x46}, @typed={0x8, 0x2f, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x150, 0x0, 0x0, @u32=0x9}]}, @generic="c0d6f50b7b86bd933d88f46b4e707453dff7a0969aa3a15c0b7912673321060386df642ea6b1d8d56c9bcf094e0e2e7bbe69a029", @generic="b1365a5c2ea28ba53f6020f116842cad020e4c0e0509323e034df43fc1ce19b48d5f5b7ae43ae45f27b298dcb69cc7aed95424c24d5c6c531af144"]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4}, 0x900) 3m19.530811295s ago: executing program 2 (id=1038): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x4, 0x50, 0x1, 0x1, 0x10000}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x9, 0x200, 0xa, 0x8, 0x130f, r1}) ioprio_set$pid(0x2, r2, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x4) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4ca00, 0x0) read(r3, &(0x7f0000000080)=""/93, 0xffffff6c) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x4, 0x50, 0x1, 0x1, 0x10000}) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x9, 0x200, 0xa, 0x8, 0x130f, r1}) (async) ioprio_set$pid(0x2, r2, 0x0) (async) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x4) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4ca00, 0x0) (async) read(r3, &(0x7f0000000080)=""/93, 0xffffff6c) (async) 3m19.496021666s ago: executing program 2 (id=1039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2bc67b5dc0ef3785}) read(r0, 0x0, 0x0) (async) read(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) cachestat(r1, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a}) mknod$loop(0x0, 0xfff, 0x1) (async) mknod$loop(0x0, 0xfff, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x701900, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x3}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) chroot(&(0x7f0000000000)='./cgroup\x00') (async) chroot(&(0x7f0000000000)='./cgroup\x00') syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x604a80, 0x0) symlinkat(&(0x7f0000000140)='./cgroup\x00', r10, &(0x7f00000001c0)='./cgroup\x00') ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m4.387427985s ago: executing program 32 (id=1039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2bc67b5dc0ef3785}) read(r0, 0x0, 0x0) (async) read(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) cachestat(r1, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a}) mknod$loop(0x0, 0xfff, 0x1) (async) mknod$loop(0x0, 0xfff, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x701900, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x3}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) chroot(&(0x7f0000000000)='./cgroup\x00') (async) chroot(&(0x7f0000000000)='./cgroup\x00') syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x604a80, 0x0) symlinkat(&(0x7f0000000140)='./cgroup\x00', r10, &(0x7f00000001c0)='./cgroup\x00') ioctl$KVM_RUN(r5, 0xae80, 0x0) 20.686532421s ago: executing program 4 (id=4115): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) r1 = fsopen(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008d03000000000000fcffffffffffffffeb8c30"]) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='-8'], 0x27) r7 = socket(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty, 0x2}, 0x1c) getsockopt$MRT6(r8, 0x29, 0x1, 0x0, &(0x7f0000002040)) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r9, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2}) fsmount(r1, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x50, r5, 0x3000) rt_sigtimedwait(&(0x7f0000000040)={[0x3cd8]}, 0x0, 0x0, 0x8) copy_file_range(r0, 0x0, r0, &(0x7f0000000100)=0x97, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = open(&(0x7f00000000c0)='./file1\x00', 0xc002, 0x0) r11 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r11, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r11, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r10, &(0x7f0000000180)='./file1\x00', 0x4) 19.781246624s ago: executing program 4 (id=4120): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r2) ptrace$poke(0x5, r2, &(0x7f0000000000), 0x2) sendto$inet(r1, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) accept$inet(r1, 0x0, &(0x7f0000000080)) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x43, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 19.682661885s ago: executing program 4 (id=4124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x12, r0, 0x2b09d000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) syz_init_net_socket$nfc_llcp(0x27, 0x8328aba8c86b60ff, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f00000000c0)={0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 19.651690406s ago: executing program 4 (id=4125): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000580)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000600)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setresgid(0x0, 0x0, r5) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x1, r6, &(0x7f00000004c0), 0x7fff) r7 = geteuid() r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setgroups(0x1, &(0x7f00000001c0)=[r9]) r10 = socket(0x10, 0x3, 0x0) r11 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8d04"]) bind$netlink(r10, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r10, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(r10, &(0x7f0000000000)='\"', 0xfdef) sendmsg$unix(r1, &(0x7f0000000740)={&(0x7f00000000c0)=@file={0x1, './file0/../file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f00000001c0)="c5a5efe2641431ec2d83bdc256371097a3d9518c940585e7974b712c3078667fee43a26d33dbb771fc131cfabec65e57d15dcc78446c075cc07ad13eb36df7f5c44bd0f9f73e815d466dd5f730ebb7fc0acb57b8f0b0fade5e90a85b73", 0x5d}, {&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000000240)="a7a4f50de886b8ff06c5544855af214262a486145bd1c2e968b2973be7b1560538c51aca042334c13ee6dd06d3eded0ed6540a42f45baa9be2b5919134846ea051e8efbebf2aafc90d832cd06ec2de65381dcc4a7141a005a6243bff6fbaf58f255acd07ea443dd93892247e48e2915914fbcb878eb5eaed84844d19a20ab2797a5fd2851dd5909fbec71754", 0x8c}, {&(0x7f0000000480)="183ae23114b30ae8f96e587d6152899b0a59d9f21ab91289ee0a89189c99478e5454d139e305e57753d7319759352a38a8224405b4fe3d2887c5111de8c42d1bca8ee5d5b6fdbf54989acfacbaa4baaa22eafe302989a4aeea2f0bc8d383989f46e4abdc0a9ba0ed11902afa3727b37c652da79aa46d0094a705e860a1314ab3f13080f682a2ed0ca09652378178cd15a131a646f447368833e57bcf92f9ae10aed69692920e712a9181b9b71cb941e5e3d32224043932dd07e2", 0xba}], 0x4, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r9}}}, @rights={{0x1c, 0x1, 0x1, [r2, r10, r2]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x98, 0x41}, 0x40000) userfaultfd(0x80000) 19.588059047s ago: executing program 4 (id=4126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) (async) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x104, 0x0}) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x45809000) (async) close_range(r2, 0xffffffffffffffff, 0x0) 19.463603869s ago: executing program 4 (id=4131): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000080)='C', 0x1}], 0x1}}], 0x1, 0x0) (async) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000016c0)=""/126, 0x7e}], 0x1, &(0x7f0000001880)=""/35, 0x23}, 0x7}], 0x1, 0x22, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c040e610012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) (async) creat(&(0x7f0000000000)='./file0\x00', 0x1) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4000) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{0x400, 0x1, 0x7, 0xfc}, {0x8000, 0x8, 0x8, 0x3a}, {0x2d70, 0x0, 0x9f, 0x4}, {0x90b, 0x5, 0xff, 0xfffffffa}, {0x8, 0x4, 0x2, 0x9}, {0x6, 0x6, 0x2, 0x5}, {0xb, 0x3, 0x3, 0x9}, {0x0, 0x5e, 0x6, 0xe731}]}) (async, rerun: 64) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) (async) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="08020000000000000000006c01070000000000c79ac204000000040001000000"], 0x20) 19.431865619s ago: executing program 33 (id=4131): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000080)='C', 0x1}], 0x1}}], 0x1, 0x0) (async) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000016c0)=""/126, 0x7e}], 0x1, &(0x7f0000001880)=""/35, 0x23}, 0x7}], 0x1, 0x22, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c040e610012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) (async) creat(&(0x7f0000000000)='./file0\x00', 0x1) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4000) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{0x400, 0x1, 0x7, 0xfc}, {0x8000, 0x8, 0x8, 0x3a}, {0x2d70, 0x0, 0x9f, 0x4}, {0x90b, 0x5, 0xff, 0xfffffffa}, {0x8, 0x4, 0x2, 0x9}, {0x6, 0x6, 0x2, 0x5}, {0xb, 0x3, 0x3, 0x9}, {0x0, 0x5e, 0x6, 0xe731}]}) (async, rerun: 64) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) (async) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="08020000000000000000006c01070000000000c79ac204000000040001000000"], 0x20) 4.393589156s ago: executing program 1 (id=4329): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x7, @any, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x7, @any, 0x0, 0x1}, 0xe) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r1, &(0x7f0000000080)=""/93, 0xffffff6c) 4.232765029s ago: executing program 1 (id=4334): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)) fsync(r0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3154020, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_off}, {@redirect_dir_off}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_off}, {@uuid_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}], [{@dont_appraise}]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x80000001) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000340)=[@increfs, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) 4.17489914s ago: executing program 1 (id=4335): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x103f80, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0xc82480, 0x0, 0x3, 0xd, 0x3, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004200)="793ee8124cae238514b8c25ae999ed25fc14bf8b7b98a25a245fcba38072b1fedc29513a368f3753c8cd311777db79f9a772985bc9efa1243c41f1eeb4e1a07e2b57a390d4913acd4034182074ab783d616673714d72e8a273101c78ddc61411334318894a156cd2cc34f3f42052dd7e79c5c9c1ca3f59ee651bd294bf4d262b31cbe8f8f23a5504a804a083084d5519637e97e94880f549394676c0edec1af036823ea8c423a7792330b8491a5a4a01deb4660d6b420b1e394fb1cb9cde473f2000fe3c4acd591851c258cf231df8c46dd18cc78dbb72189af635ce08b35374c567aebce0303b716c9cacffb6f60e102f9172e0e1a91760c558b580a3c56b5682ade32ad42e7df55faa4e056f3568abf5dea4415018c211637c362ec3c40afa47a2960a2bb4b6936a83223898564e2667bbc1fb774199c99701a726073070c0e19f57a63f4a38d1b03a0c98f8fd20666abd5e66768182c4df12343bce3e617f62d29f2faa1d5fa831a0a582f4708b547aac5129985fa32b345a82aa89958370c1d331935b304a8ad2eeff24f520e667a37b7c0d8f93d35546b8300ec3dfebb32933938e32bfa54d563ef22bfeb6aa8f16765a3f4788e03477fe9236e3d5869335ec18058779c5e63ff5877369898fab14e58cd0608f6f4d423eb1bf09a6eff87d999fc9e7be28390d471acde8543d571246138da540956867a32f3bb1d2d91931dbcfb8ade5cc313dc54f64ad96b7ada7ff63ba1702576d2bc48a1c6cc4cec815e0b8aee9c31d5c5cb119952b8d321181c1a14793266df2cab56d161111caf86d4a7eafd42c2622a63862533d1ddbec5fdaa888d0a03240bb08476198ba789aa552d0ab149a07977da16d1ed4bc635d94225d1ac84c788407fd4425f5a56f687dcbe688b9d0b26cf86671f985028e2ae3592ffb82fd5587ccc3dcb406969e11be470b519eca6114895fd8a4b93b1c4d1a9ca4e0001a62185e72b6cff213c7ded22effa555b45aad686bf2b388c0530058feade244e0672b02128946c190b4c076fcde7e0bb6941852e2c2b90d5ebf53771583e749dc07627f840808ba034474da51eed8b04cbab8981fed4a96fbd4b7ce98e93afab9040581ee91eb42f5d5d8ada63cae87711aa82f8493ae3a64883b99a1a8466a5bdcb753927f22487f01f7782f7e8278ce98da8e76b5230d1f21fa89e02a5f59ec8ceb7b5bb90518a8745d9a43047cb74e9591ea0a0db79601656e784a9321c3d7ab6a14b3d030e3deb7aaff2a2c89cf7ee0e2072936dc7b43ccd6233fc75eca52994a6e9f8c7929f6c370c93aff6f46bbcf05c1d85cd5b126fc08cf1cad82d3218f4127be9aa6e21bba7f1fb9cc4ffe5fc293b903f5ab407d67418a24579704f9df8e08ea157c480b3115d48a9109138f6b391901367e66a7f7573bf20a6d12de0bdad082f08599f912e8860aa4b6a6ef2a5ea071af07be64925bea34913660918032b72b55d01f1d8e09a4e79d70b4bf9f43fa0862fa75d1a0eabe3a769d3df7bf5ce7e0449d54295c06d5396a8f049294e9ff6d60687786d7143e8cbd23c30e36ff7dbeb266f6e63952d65998d844251dcab1cac0669bd0561b5dfefd1c7e0ebbc1567526797b64c97a4f31f87de4e034071b2d48fcbd15ef386ca172c0af3d71aa98744047ee463b3a20a1ef9b8bf1753f83d0f3ca9604e2234a71c3d00f78fb8a0d093af48f2ac0a15ba0c7c21ddab80ce394dc6e6245784ea17dd3949b76e3ca91fd29ea51afe5e50d71ac1067b665d8f57ae49a7fd635146e04861406681637fcf6b53c1404b9b69f4743a93874f2953aa827aac1b5462c852beba5d1080889d05741a11b86436589e9d9e6ebbb3fe89da9dede91731ee70851c9e1501beaa155844f238b299216e69cb88153d20f113faa9a51fc147dd31c5820b46c0cf5136d08761a6cbbfab1652c656d6f7dc7ce1e6a084962ca9e07ebbf949392482b9fb942b6025b71a903c199ac858d99b7eb46e92360de03a0631bf77763d8c098879a9b50907bbf0d6868ea23eb8e471700214d984d661040c51a4b01488718dcf09b3cd50c720b627d664fee7a1ea50ae6951bc0d0f6f59839ebefc18b99c844ccbfb3c4c04d19f07879ce06a3137b59ebf4c7daa52e1d850924d4cf76630101d37881f30e914346ff4f6e73cdcfd56dd81058cb6763110d88d34cca16cbc7b51953d44e09c57b3565e6527aea04949cc28dc502811e82c8cd8ae181dedfca4a47d3b22626eac388f272995add71bb5504a38c03b5ca8381ce09f10acb5f5fade0942f30334a0ffd03dec00fc7a4976a95851d0f347fff16e5e6f663c5feefaf7efa743b2766f1d442ef882f4852318c25a81b3d2bd4fb5b683e3837ea7d4df69fcb8a87788a3a0a759c86877cf56caa98f5fa04c71652d44bf5250ee6f9c54794bed3b48e33a063161eb324456da5e28ebb5ba271dcc826bf7b646b6c89da67605cbb953c35c070e76be46ca66ccdd060fa07af82d53c525c19eb8eb6e08426f160340ec8ec6a57a5aa146f5b67d84184a46b4b8a1373669070123f8346cb607be14a4d5b9124b369289b0ee7f184d498ae3043b14f3ecad6e2b9e71661e85e2dc0b6b053300468d53e36f1e99545a33fc1b84da6fc20d8f7f7f9ae614588f351fa59c818ba833920164d9b434052f4e788bbdaf1e9913c822fca65e0cfad203bedc6be2abac264a0cec0dd4e813dd84d28d853cd9b85d9dc94b96a80643dd3e2aaf73ec85566124204f7b98abc8c5e354a66dc838c080d26cebd3bf388eb8018a06b15708311043a785a937e63c09465ffc71d1658d2a84ed6b346b68e98459cd0725efde386cce85928eaf90641c5ad4a7f1c733fd5238bdfe348456704546afc4a982b42e3a5bb473cd71dfef785473ff88175d92d2f72f1ac5cf77344c8dcc07a78be9575f1cde05e8c5e2950b1f597a21b4351295e9f59e926a8b03551934c73f090ca3fb644a4e95dfa91bad452f59a5cde71b50e8da90ead55ea96181cc1b5c6deea431f27666bc67d36b26004aac6c02c29c80c0d6de163660bf56c48bbd7c5a06d1ef622d5aab46a746b6fad00ef47ddad8290ee81509ebc19cb85acff4ffe3d9123774b76ef96db3cb942776eadad084bd7351c340fc219ea696df3657a992792890bece7dd84e08af3800535b0a0946f9af6ea30dc20916e133f8eda3aef83082c1497d606fb99e81bbeedb70d9d32f93fee0a2090136746fde09038d1f8a7ae494ac012665f3db1119c49650012ae7e172f9be15622d0e2458c431bf386b5163c444e2515f1c99d56d2843863eb5487bb346d324bcb163891b10db02cde5003c111c984c690927580964b9afcf6c6cd1d9ccf30339f3d7fb8ac348604634848c85bb9a11969152d2b1bbd870c3fd95251d38f39a5ee0d48962e414ef7225150dd3134a87cc954eadf8e1a78ff8914de38f4d9dbbcc01553d2992f64b14377e21658cf2573393301bd0a46654cf5fb5d6a1a6f452450db63300b3dd037c5678c85f84b69cf52036bde51f6af406b82b8ce0c3bb64dbd538dab2e6ecbf4da5a57d43ac5aa0e2aa1cf466167662d088a09e109a95040865fd6bcfd68e5f6d6f3990c82f201da1bd0f4a5332bf6155584afbb70197d4e59e829312a3db47a7095c08251a7f574d4869177ab8c0a380adf87be8a1a016bcb8061e3f2a3f69661cfdb54a48e951c45d257fd3efb8dcda01d25274df0adcc0bf797caeb9296322738a972d8e40b07509e3505ffeb2c08793c75783a4c65fd11dc5af607dc3700cbd44f431eb4eec603185dfa8cc5e4693b737bae7c8b1ecf24798a3c72da8d688f5454947c99c339b752d027248ec9c08fb42df0a302ddd3c823ca1ad9cbfc2b2bdf3e7c9181da0ba1878ec434b5049163ef309892652ccd365df8d8260dce74e0d9a0aff0e1e56ab831bffc582f5d13d288dde7c3bc1548cb446d54f360b6656b99ad812d7f98e71cc21918336b1592ff22cacf28b602c4f3053a619899a5903ce80dbba757f6012ee4dbaa375fed540fe02fb66c82841606429ad00685c6fabc130b9b556020fd04b39b1fd0aab194c85a0fc95fc51ea8838ccf388e77cc85744e6770e75f570c0abd0834135192a9e1a54fd90db93b2ed733e3c2491adfb3bd9078b9c75f6157c7af332d7a3f3f2354539083b05100b9dd3ca90e073df2c2ba3f348c780151ae629afa20870dd7842f5c71f163accc6376370a7c5cab922d09d87d89aa451c47e8f54ee5d761d83b057d31120ccb26c818ea1ebc0683ad26e3b3cc62cd3be1f622203c87f39f0c5789be119589cc9ea57f0b04592bbde0a18bb59e36b6e92f4f7ccd01789b58adac60c803c8f072a4e9c280f3245604a2dbfa8ba7c21a918654c75fe48b5748d91112f5b61af65da4b355bb8f0a180254c7af66b56a7b1790afb8d589fb386db3cf84c5f41545a6a1a65ddb6f9888b5a08787626792bc609f397978310263858c2209230ad88965aeb1f533ee3271c8cc033ea128a181032e0fb469ab8e4e5453ea92444e02d4c8cb2dd7289225d070d6a0f22fa73512466d458b343ae80a950a92e0df66817d25ce5ca5fa64e5b31e3ffebdd8ce49d66fb31d01ac3d096889b30c6a7f50b7d50f422d2442ec56c10e61a41054c150c6fa922ae176e4aa82eaede99a5e6249edec0b066fac5caf6280079babdd528d2f4c0556f74f3329e7f57e6f56b8a5423894bcf87246e7db449784d88c9e459549ca7e4670504427d95a9505ca2a243a28475ebcb2c0380b9825bcb9eab3a4a7fbdcc85ce514b8e839761526508d4d782691605bf326297d5ceed21e6832462194dd8dbe6976f4a3049e48a0aa52318f49be25933eb3d9ca9b0916c90a17dfb22f8066dc95d0dd25925e1ddbe46e589523051a34514f3ab114154e0ffd9ee0a463f4c6d0e0734863d081049ffb02f906fa30eef1d15b6dc95fd71a7fe148504ee1d532d81aae2e783746c821a40db2dc03119d8b51e56e8624473c709ce339171737660add577066960031b6f7a1d871a1c6b46f678a85ece774aca728ceebdb4a3f9b6ea169cde4bc390536f71ccfb63afcaf7c8e02cc90d47a238747d341508754dba5eec12cbf3c1dd38a56bdb15161709297308f0d4aaa878078b9978cf1760a3d81ddef482baaa47d4578fb492d749a824868ea6de3a51a17a0dbefc4046156e0dd28f59ec4d5099b33e66cfa369438c7503e5c9a4aa7a779422c51154c21cf12ecf3233e3112751a29bec131d50fd434bc9825dbf528e725cd4299d9d3adb3b4d20adb4a721ec7e4d2d4f1b3254a059b24ac500cd11871098c016394b5679a696869035dd14fecf924a2eb20dab48f86270c08e19f41034a07c3cdae33e0322052f5fc74bcda7731ceb5eae50de0e3643e326f7d40d76ca124e59fd6eab80e0c40a4a1729081f2078c878f506800189b4068064f8003fc38c20fc666a525ee19b128cb0b341988868d07988b175fca82ffe8da18edce9dc1e3df170d774cf39b740d153a903497701bd71be079dd8211ad2d3a9eaaabb2402823cb8979797af079979c1355d923896e598132fc991e4e532310d0e25c5ae227d22c014400127f37a1828474a53dac446c508c3e94808cc5ad2b2ed756cf2f04dd62692db1d83019d1500d146c3e0d765b8f12ff650d0fa8f83358a761f1e54c041b134703d8c3059aa1f3106f6011b4df33f2dd738c2da81b43cdf9da65b5033c829d4f5a1a6c1cf8ea2e74fd5fdf2e751b62d138fa6672a12fad88d128872e6c958f4902a6b444b17bd24dc2dc0b9d27dfa5d11ba700de9b116ad2679c71e8d4d7de323e33f1b5ef967e87c7cb1ddccfc1a36ab7c27a6b969751307b55f9237040afa34ec6d45f575841afee0053b985b889ae3e016202fe93012104e13e99e9c2f62bb978f0b217fb1f5ae4b1e93845f381c47529f77f7b642ce8cffdabd1429bd1b95174c33c144fd00cff2fe538e5837d62b593a9afc7aecd2efc25b565dbf9420348d20169b4f556d87cd415a7002690ddc8332099043f34b32e83dfe9651f94745645ea379d97f82eb1fc24ccb9ff51a880ca28016235ec9ab7e9a23d05f48013ad867920cb5974e06ef48e73c46e57ad248ed70442d3e0575b232c21c84eef0f84edcc714deca1cc4fb6fb5b201fbbd94e9dcb6094bd4cebbecc690d00bb940c6c840f69e1f9e2babe60c014d3f5b292c2c45bfdbed136c08a11d2e1aa7df5839cd7156f670a542ca8ad23ae0e564e8f87b30407cfd498191b902539585ca241bd4a4106a4712383140c6ec6283a2bf74454b959b8677c23561c73f9feac98a7b28fda204a87984570558ab269cdb23184d374ab172d3d9faac113c450f2faca565007b7c5013f02c66c408c81bc731f8559802fa452a0028bbcfc387389a00958b9adb83517940dd6b8f1386b971b2d92a4980e486d7954889323f6f8ba4452ba0002c984e6aa91d7642e0f8e92321494394b264cfa30cbaf9df96bd62d9b098554a8a8554fe84c95699a87b0da4e541d9395c5a4a69302bd3503ff763467beb111a3650287cebc4cd0804841f3990899992d2aacaff2bc1f7464fd9670450cad2ee153e8ed45331f694048fc0c4e2e7d034ab69e159226542fdb90449da050363bf7b683a2215bf5272d4c18fd2ebee8bd29dc180f448b1f85f4429d066c692a350aa9f036ee43ee74f942bba2164f692cfa70b79cb8149a6a79fbf3197101f75933cb0458dc2b9ffd7a987cd9a139cbb853064bc62343e305052a4f77e72c98760b972ac3ac84b374f4422bf44d15334f38291c61ff630a818a34d33d516da256e1ad5e187a79846dcc087a761df9e664afc9785115a6b78dca0908d0957be795a3001ca2d3ad9fc544f992660b643da5edade7890217d07452ffa7454fa59907cb325c9dd445fee201bcffc8dce888da13059bee2286a5ef0e863dc107478f12baf983209060b1aee7286bee1e699b84332327c845a1574b8a0897eb1cd31b4a7498a33fe1e2dc4f8afcafff76eeee019c8c73cf8de0285e342e08ad0a9a43f7260bd5fbc903ebe099c73850982e2e8533c97a26f67855c155a3bfb025b2277e9b627a0bc860c1be18875241a9f8b4fc61039f9d71f7bbc537d2f51f1a5e840dbff7786f4a374f51cb2e657a6f2c8052cfc3ffa7e603a1266df3eec49c00a40d6f82b1b4a670b99534f401866ed6401602f8da9bb7243a97321cfb7540734aee1b75cab753db13f81a4bc67bf01bd467c44852bca45e699bfeb783326f631deb5d22c47b97d9d0c2adbe97c373e149321613a0d6f25dd822d8fa76431b97e88aa397eb467ffaead4fe9c196fd69b81db3906f3b4eb40fdaa19bd5607f7a3bd442c88731014da0af1d33be3e63f3967b00f193e37419f18df4f013017bd280091679e14428cdab0a8a77522a2b6a3337021d3bbc8b7e8774fdd2f387d5d455d10d91bb7c05a15e2950a51b00edea2b5723539770d321c8f9d4e5d24f291e033acb2e4a5c1f8671fe91150d023dd031cadead806bcfa69bc44946935d1e49a628bfcbffaedebd5789a6828950414052d9f7d261e69c841da3291270d7387662f74e20651b6c75722b530aef69cae0c2c9ef5663bedfa37e0192369c3aea78991e0ffef0bff4157d25edd29acd148a3b255157a84c4dfa25b5af681fbe93015382bdf742c1a5076caa52b5370943d02fb98531be900ed3687b4dd076daeebbd3025db56a8c7628a0542a4ac23626b3549abf114127627e44f5df17a81328bd84132e36cb6127c4081199b4fca0dff46021396038c37c832c9bf2fe43729ea45b6ee6aa5f34b2869965f78481d56e6f8ca913301e4fc61b2616c9ea23dcce1f9ec2a0ad97959f00e6c1a99fe5c9be180e1d03826b433a120c654171afedabd20fa42b8bfd3d0bfe64a560cccb9cd001220965576e6f1664097cd3e28d9bbb63c84c801f832e7ca8afff3bae368b66b3b62907881a3c3ae821d5a8725cd11fb3219eb956dd586254a88ab4788e432da28db60a4fe97f203e27d4052cbee48d2edb022d8c72e2a3499378f4ef7076abf712c3a24ba10e43f8b0efdc226c8b10788f0160d1ed23ddc002ea200a4825dc9bf25f56d2d134d25cb2603fa28df93c58820a7ceb690a950f7a6fd1b893ef414d50b57468343a96f55625a141293e6a4e8d0a6aa824a0c31b206c75b48540dc46b20f0f55e5adf8c2514b01ccf4f15faa43df71aa711f8d76ba335a881887c0648aafc434810bbf808eebc1cc9161ac4e111496e4d68400d52c96dc93abdb47ef1901b1674888bb836362786444916135e22f9b10d37400748d6a11fee36b75e6caeba02790665045a274e50ded6fa969fe715751d429c2ace6c2faa5848ab1417e003c49c29d0efe18f1d157c5ac8cd3db4d7209fec82c77b7de669e8d0034eff8c2e49f731f76b0fccc9b65b6a8ed1efe50e407570d73c61403eabb8c376bd3326e57d490bcd74bc1a520cc4522ae65aa025e4782d54a4f82a042da6f9273678de3621527a6f4bab529c7e17726e094d00eacb739e931f3afa8dad84a6d1e89f8024c194833742b967e4cfc8f63fcbf591fb469e25bc6a9267b85d4031bb4b434f2f0b2c1e38dd27c894b029b41455477b8d69f95b8dfb7a22890ce7d71660c6f4a84dfb843172d711f9520063a7f935dffbc10abfb0f44f95af6fa49b2f0fdeef56fa960a98f369b574435cbb18b14b96b8937cd2f6737075c04dad79b77b786f203b2951e4bdf1228449a83306cb0e5a98c3976ce8b63a389be9ce4a5adaedd30a4e069152c35e49bb0e42a3873fd3c88e277cdefb816b0286ad1f12d6ca33805e90e4391f5a59bbc86479c9bea9d71fbc5253cf3017fd6862daf0f72d52c2bb44247b6a303722387cd01cefcb14e79bb6fd507daf09833aa094868132df358725a4db57dd1e2e37bcb37536ad59d8b68e4293d15f38715c68885126c0fff1eafe295aeb4a88919561e03cd4f7436cea1ee69bd66e308425e41eee1dc9e9609ec211aca2cae25ed4369c9fcd7bfe316c9f2b9707b6e3789f6c41a70e28121a26d5591ce94cd60900b27ebfb995d34cd509fd0c8fe204969e5ef6ccd9c1605c47da01a437cbfe612d928a63c83d998dc2de6ea4695f36865febbe065db2f75c2a700c4b23251fec61bedf33e45eb8fde785178647999b9a0069aa45fa01f4ed8ecb072de1e256a8b95365831aa975b249f57bd38064edc6886620ad24ddd589dbe3587c23bf12a71a7edf34b8c46a079adbe410fe32abb408a264a01f3ecaa115e4ad2e47e9bed54df1fcff145222c544c89b15b2943e5e6ce37477ecf4e17fbe33d74e60461c52c3682cdb7b0d1ba016cf7756ae9042b296c308da630b7021a20c71600b21198221a3fb905c2716ea4b6a35af3fc204dceb81bb4270b51a7f552e33aecf4a704b5c6e3538e7d91da4166d747ed854de3dc15ef3b07a04d9237ce0351b446c09cd2b4e87aae02e08dceab1d35c31334520eb3979617928048d3510d9f3d5db36477fb1ec21ad57e7d757eb7accfb1875b59bd1627b62f33ca853e11b211f3a02500e43c5655dac4c8ba62247da245453cb690700de3b9521e5d2841fcdb73d550f4ad20f53b3f0ec2f229e7bc564daf94a42044c2a8f93b13d11e9e27562c290f47017e507275f12932f3c608b2ac955c15cfa100fd5df86a223d4acd4350dedfa26d15c3e3595cb003b1187a77f784385b59e582308cecfd6e53a4be286e6b27b2e66dff8a578f30bd89f5cee1014a55423b5297dc23c5d9e0fef458d8c5df03c989ff7f1f0ca8ed10e97c1040e07bcccb3e4bf5cf8e6ca08a23fc75fc861e6749fa29ac8a8be70c341627b0b8a75f02eb1493ca574c98fa69efb5d76261391195687d947dc785a712d61a7e1a9b954d5b4c159fb4ac0710eacb0086419d12176681a911c10364011b151edaa0323d1a1ae040f9f26be099465a8c67fa522b6805df36ac81cd422e4c34028882ceec4b4fb08d86c05aa4c16a02fe99eea84c75a0821373188489198c2296f290efd5c905e1a5ce0091b4da05e376a416d80720e14c17d2bb84b91cf989fa72c3822d37661467e811b0b1fa6e4948dab66911f5e0394d211e773d66ab2c94a4a14329abb1e9307ff36701908ef85cea4d8ceeaf24520b53ed0e401a166aa05f821cbbc5d1f0d16e4e5d14a4d04e5e5224a2b5a7f34dfc03b691487e1d7199675f00b137c37a87cfed418e013d0b3c3862da3f812d2adda99cc8ab4da10d3ab9d392bef7c9b11ca49fcf7f7af9f6010772b1a04b143eaf940d56865887b202fe0b8f70fe2d45bcb0c20e95abdf2e76d32160df1fcef36aff0ce2e9af3453904f7b2eb43a1bad754e3f1216258f49d34fe6462354366e82a86c4ed81a4021afce5b66039622c6b9c9a24c5f0e57ade4b8e64104e6bd4237fb98c55a6f3c2a5128e96c14bdb1615a0b9c0da306454b76d5f698e321d48719a3171083b41455f59f28560dc616250be61a598b1e753943ead0ca5270bd2039b2f5e480349455011f86d2d8f46ec562f8b1e57872576127f3a050fc6e32e7c4c4c7ab1d2855e8c8d649b8eb00f1d8d02c80a39eb6c1b23fb1d5ba28742e217a02276c724b8b32ca2d39bd3f71cc7fc2a9dd52a28c4ca566038fa2967881c9303ba138bc8054761651e7ee7e6b8960346f227a07007c74280f8419e6baf856e2473cb91ad9c206df2f7a8073ca3462cdb23ba5dd538efa2af2b0b43049a29931e315c4c9290b99c7edeb7b938ea05bfe3744735fb2e550a7e15b7d7d6a17dbd87add165d7a13668884fb235b1fd70e4c3a67895ea0c9b8824b8b14d41a9ce80debc8ee3bef4a57d40994d2d422e2621dd9fdcbe1edb712ffe43774cbbe5839a8146a936317310c3be4daa693685262ee3a44aabe86281b0927e78df3ca4086a81e8d7af261fc51d3eb75cd8852729adfd68579958b61aec37f4f6bbecb4a3f09eea3ce0a49d35666d1050f65da5d5e917d79390d0133e81d07aa285c53d3c7d3bfb82d7cb8e6ecf4f8203b78787963277e98c5dd8cdeb2d83b049d9671b98563eb006ae8148215eb87004551aa357016cf88caba47d4fe3f4209ba0190f5020c5a8ae6e37e60c9a3fe856fbbfa0acf3dd1a2953fb31f0c913a9f8bc6a7bd4feffb8dcacbd764f84eb370cc7baaafd48c9a8972b22c989a49b9f5ca332a1331fd591d412892f45a080d6a3f5effc802364d0ddf03cb391d97ba4fc8371a91650a8a28c5e6221f66d15b4a4b0afe7502034a60c9a1bab525b51225ef9d40ba9a5e870faf19fab07933f2840c4ba52b9a82442c207147bd7327da8468ff6ce98c3de6f7092db9e1673dfbd54d31c4f0462524483edc8f73274137ab5770230a87118751f97d915644f793da732cbb2936c08595209fc42a1ee095591ca9ab503e27ff19b5ee3375a79921f3ffae984a89b1e49eaf21a9d6c1d7c14138b97fdbbf824e3bfb06457aaf1b78ff393bde10b7bbd9bd2d632013d6dd33a12be84dc33afaef1a6f259439356e89290de74007e1bf127594db485b9d07c2dd67876401922bc943a45c743377c", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0x0, 0x1, {0x7, 0x29, 0x1, 0x10010840, 0xbe2, 0x1ff, 0xffff, 0x12810, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d01090050001180"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_driver={0x0, 0x9, &(0x7f00000000c0)="bd7f67ac64ca70a753bf5828dad09fed06881b5ce67b82bab62cee8535112fb68b586ea789d98483735e85e42216693a49ebf0ef4154b11cc7d39d12429c3c30991cbef5a0044cdacda28a6f7ee48dafd4a46f16a7def0bf15475c0dd32c670d4ccf320a60aa1a0386731fc9096781d6e9e4f90d69df3ec088a166c7b29e702344694aa6c7752bfed4ac07da01ba069a19782eec"}) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x103f80, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) (async) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0xc82480, 0x0, 0x3, 0xd, 0x3, 0x0, 0x0, 0x10, 0x5}}, 0x50) (async) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) (async) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0x0, 0x1, {0x7, 0x29, 0x1, 0x10010840, 0xbe2, 0x1ff, 0xffff, 0x12810, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) (async) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d01090050001180"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_driver={0x0, 0x9, &(0x7f00000000c0)="bd7f67ac64ca70a753bf5828dad09fed06881b5ce67b82bab62cee8535112fb68b586ea789d98483735e85e42216693a49ebf0ef4154b11cc7d39d12429c3c30991cbef5a0044cdacda28a6f7ee48dafd4a46f16a7def0bf15475c0dd32c670d4ccf320a60aa1a0386731fc9096781d6e9e4f90d69df3ec088a166c7b29e702344694aa6c7752bfed4ac07da01ba069a19782eec"}) (async) 3.42361231s ago: executing program 5 (id=4357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121600, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x10000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000500)=0xeeee0000) ioctl$KVM_RUN(r2, 0xae80, 0x0) fstat(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r2) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000740)={'vlan0\x00', 0x1000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x480, 0x0) pread64(r2, &(0x7f00000007c0)=""/71, 0x47, 0x1000) r6 = syz_usb_connect$uac1(0x5, 0xfc, &(0x7f0000000840)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x3, 0x1, 0x1, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb3b, 0x2}, [@mixer_unit={0xb, 0x24, 0x4, 0x3, 0x4, "e24eedd480b5"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x5, 0x8, 0x0, 0x9, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5c, 0xc, 0x1002}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x3, 0xd, "cfe863999c96f24aed"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1000, 0x1, 0x4, "9c7a"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x45, 0xf8, 0xb, "14f017d913fd"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1ff, 0x1, 0x7, "060d108a75743bf1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x2, 0x4, {0x7, 0x25, 0x1, 0x82, 0x7, 0xfffc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x7, 0x1002}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5b, 0x4, 0x6, 0x5, "02a4ab3e16"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x6, 0x1003}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xf9, 0x1, 0x6, 0x8, "722f59e1d4645c"}, @as_header={0x7, 0x24, 0x1, 0xd, 0x9, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xc, 0x8, 0xe, {0x7, 0x25, 0x1, 0x82, 0x8, 0x75}}}}}}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x110, 0x8, 0xe8, 0xf, 0x8, 0xfc}, 0x9a, &(0x7f0000000980)={0x5, 0xf, 0x9a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x9, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0xd, 0x2, 0x9, 0x1}, @generic={0x83, 0x10, 0x4, "f5fd303799c6298127efc6a29a7a2c617b3f2c444cee8fd324627dcf40efc67284e84d949174a48bc146ec7695f2579bf736bbe28c1d4fcc1e373dae15123d5b213c55a470edf0d64c21752c4d8863441d3647bd4c110613f0d90be0489a6e9d937523e6f9c544e71199ba91ba62ac5cfd0f60489680f813e877d5ab98bbbc2b"}]}, 0x7, [{0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x44a}}, {0x3, &(0x7f0000000ac0)=@string={0x3, 0x3, "83"}}, {0x4b, &(0x7f0000000b00)=@string={0x4b, 0x3, "dc593dc2ed638cb19a0dee9e1c9d4b30f4e9495c145c7579335afbbcafb37d5d21b9941beb61d9a9f8a2a6669a8f21939a51f28a8e0aa708409f74f56b629a03620dee927360f2703b"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x280a}}, {0xa7, &(0x7f0000000bc0)=@string={0xa7, 0x3, "b2020e9ec50dd602ef953a3847d51c713db9a86e890b5ac3a80cae7ee6844e25d85e2f1e761758a842ea3d7f72a4738add853c132697ad72d78a0180b1fd0ddb77aa56e33e429cba7f11e52f5a0101ba296530d69ff697912328330dc0564ee98e79e84380a469a87ce9d27b965f27f473728d1274d94408aae971bbd4b0328f67956ff37eb61f5fb669f0d70d79dcead2dd7a1e20650a138c96a2e5b722579ceb9f87d5bc"}}, {0x4d, &(0x7f0000000c80)=@string={0x4d, 0x3, "8a56251219f748160fb7f0197d97b956ef3b5a7f8d89363a11264a9366c29c25817315c28fbf289e7bcaefcbf6ee0ea58de1bb142710757bc7739302612dc7d911e623420caacc332fd7a5"}}]}) syz_usb_control_io$uac1(r6, &(0x7f0000000f00)={0x14, &(0x7f0000000d80)={0x20, 0x4, 0xae, {0xae, 0x24, "e2d137df8e41e8e7f311c64e11174ab6e9c9deb77f988271873b15cfaaeecd901cce134ab61d09bfc5d82d01dd6d25ba771a5c8bbb7b4605a858b842e3da3e14edace25429aae7e1adb7339828a0513a6ea6b74037f5af8f2bca4bbfdc3ea067231115fc4986c3e63864266b5df6f4aee046d571e603b32f2650759b6154b40f54706a26289dff209fc1628bf7ecc2bfa6e5d23a523e6c9eed817694246695b65761ae84cc5dc84340a66909"}}, &(0x7f0000000e40)={0x0, 0x3, 0x84, @string={0x84, 0x3, "a8a772c7acca8306e71f63302d1d6705fbfd73258218cb9f8f4a2aeb312adc003139b8f796fcbc55040faf14848185599b6ba39d4104aaa80888643e493e9b1deaf23d0eabc0f83ab4deba66a3dd160ac5f9dc1f46e203779e6fb4f97a3a4489d070547cda71ddd13c6ddbab87907d11e4858e6afdf5a32b1b5600308497c632c334"}}}, &(0x7f0000001140)={0x44, &(0x7f0000000f40)={0x20, 0x15, 0x1e, "5aec0fc7ee557fa81296eb2ba2d64a796e0d363524692b73325fb94237ee"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001000)={0x20, 0x81, 0x2, "4afa"}, &(0x7f0000001040)={0x20, 0x82, 0x1, '{'}, &(0x7f0000001080)={0x20, 0x83, 0x2, "11c3"}, &(0x7f00000010c0)={0x20, 0x84, 0x2, 'LV'}, &(0x7f0000001100)={0x20, 0x85, 0x3, "58a726"}}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001200)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000011c0)="d8a728e28ace35e98b98e6320d895464", 0x10, r7}, 0x68) preadv(r1, &(0x7f0000001480)=[{&(0x7f0000001280)=""/171, 0xab}, {&(0x7f0000001340)=""/116, 0x74}, {&(0x7f00000013c0)=""/180, 0xb4}], 0x3, 0x0, 0x7) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000014c0)={[0x2e65, 0x3, 0x1, 0xa5, 0x9, 0xb305c54, 0xf, 0x1, 0x1, 0x7, 0x3cc, 0x6, 0x100, 0x7fffffff, 0x7, 0x8], 0x80a0000, 0x40080}) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r3, 0x4068aea3, &(0x7f0000001580)) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001600), 0x440400, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001680), r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000016c0)={'vxcan1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f0000001840)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001800)={&(0x7f0000001700)={0xcc, r9, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4d}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x48885}, 0x48804) fcntl$setflags(r0, 0x2, 0x1) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000001880)={'\x00', 0x7adc, 0x2, 0x1}) 1.948083682s ago: executing program 5 (id=4384): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_rxfh_indir={0x38}}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)={0x2, 0x0, [{0xa29ce647c3f73f8e, 0x1000, &(0x7f0000001600)=""/4096}, {0x0, 0x0, 0x0}]}) (async) clock_nanosleep(0x9, 0xfcfd, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) (async) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@subsystem='cpu'}]}) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)=0x8000000) (async) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffb, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) keyctl$get_keyring_id(0x0, 0x0, 0x7) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x2004800, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0]) 1.947820782s ago: executing program 5 (id=4385): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) syz_pidfd_open(r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}]}}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) 1.467284749s ago: executing program 0 (id=4390): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9250) (async) mmap(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x0) 1.460025719s ago: executing program 0 (id=4391): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0xe, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0xffff0000, 0xeeee8000, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x5002, 0x8080000, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x100000}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0xf}, {0x6000, 0x0, 0x0, 0x82}, {0x6000}, {0x1, 0xfffe}, 0x10d, 0x0, 0xf000, 0x90, 0x0, 0x100, 0x900, [0x0, 0x0, 0x0, 0x4]}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 1.39852004s ago: executing program 0 (id=4392): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x12, r0, 0x4d75d000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000a, 0x60010, r0, 0x6000) 1.33965409s ago: executing program 0 (id=4393): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r1, 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae01, 0x1f) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x6c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, r3, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x24a}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x410, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x4, 0xb12e, 0x3ff, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xcd4]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1e60}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}], @NL80211_ATTR_CSA_IES={0x354, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x31c, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0xff}, @device_a, @device_a, @random="cd29b928196b", {0x3, 0x2}, @value=@ver_80211n={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x4, @random=0x7, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x2, 0x8, 0x0, 0x9}}, @val={0x6, 0x2, 0x7f}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x8, 0xb9, 0x5}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x5, 0x4, 0x7, 0x4}}, [{0xdd, 0xd4, "972d67c52f092788a9f05df6ea1559a72262ff170004c7cee37868b100fc1c077190d6129e62f558073485abc45ec0de914caf9a523662edf0eff364e8aa262c40194c91994dc29e1682a4b46f7a665a8f9948bb0c60c70af46207e09558ddb828960a967920a511447742bc50caa7d5508bdf8f92f8a3b350b1f5f85bf6a30f0f1e58c965c11bc74bf211b2bc834157cebe8c919d6a77d999849a5c6565fc7fcb23dab1f7ce3c993f810a420a00369762e30c8d8993b687d1d90345868b63a25afbb99979b1d94e07414f03783c13f461199bbf"}, {0xdd, 0x99, "7e33f3313f5699bb506f6189e8a434626405c5d167b2fa97a27af16729e72ecfeff84529a7dbd1f8c0598dd38c71abda487f49660b5df9946a801a28083dbba109b73c0ab1be6af243782ae5e29d6e505bb81a7ee2110c31662f5d0f2090f790c7a06f6d14172d624f9cde0fc92663826db3647841bb64c6c5a92641c1d60e14b2b1999b51655d44f7033bb22b0badeef4ae20a9175403d548"}, {0xdd, 0x8e, "da3a41e47c689af9355b331384962920892cce1e78a561a357c346a0016fb0a85208b9788ce0e2b8e666d2f834383c0b16b9d7e2968580b65f7e99884f18d1924e6ff08c6e3c7dad39de817b552b5389ee410aab65df81d23b3953598d5c831524f47776fb5861e806e868e7e7fd247d3315ff35a3e1def788320c42b6d3b393f7d1d97d08609084c634cb257865"}, {0xdd, 0xc0, "15d237aa565b418ad4a46d0f6ca0b2f18629b20953b87ba58162a791a58d64b5c88a55c9704f04a74c4cefe5c33e07ac03f7bff6db95a203cd7eab2aac9d560ec99c5982d50c6bca859bfa53f9a3c8d3f6025777fe79bf432a381a5ef211ec71cbfe97bda20e8f8566be04675a0352b330d37cd26d17d2a914710b46d84de71e3c3099ebb0ee46be931b11a4d146c372bf8fbc0f6798c68b01e973e11abb42419fca578f0f84962760cd2c87ce81f7187680e1d6f88c614cb85c52b1e623670c"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x31, 0x7f, [@dsss={0x3, 0x1, 0x78}, @dsss={0x3, 0x1, 0x68}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0xfc, @device_a, 0x7, @value, 0x4, 0x4, @device_a, 0x5}}]}]]}]}, 0x410}, 0x1, 0x0, 0x0, 0x844}, 0x44044) ptrace(0x10, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000180)=0xa, 0x4) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x1c, "ffffffff00000004ddb49a000000000000000000f8e500080000010000000000000000040000ff000000000000ffffffff00000000000000299b00", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}}) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 1.116727734s ago: executing program 5 (id=4394): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) rt_sigprocmask(0x1, &(0x7f0000000140)={[0x1000]}, 0x0, 0x8) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000980)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000005c0), 0x4) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1.094532224s ago: executing program 5 (id=4395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000001c0)) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getrusage(0x1, &(0x7f0000000880)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r3) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040044) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100, 0xa0) r5 = openat$incfs(r4, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x110) ioctl$KVM_GET_IRQCHIP(r5, 0x40306727, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_int(r6, &(0x7f0000001500)=0xffffffffffffffff, 0x12) lremovexattr(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00') ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000180)={r8, 0x1, r2}) ptrace(0x10, 0x0) 1.047599135s ago: executing program 1 (id=4396): ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000000c0)=""/85) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x12) write(r0, &(0x7f0000000280)="59898001d1571c66d822289244a49866bf5fe4d6819f96b87aa6a78a2856", 0x1e) 833.185858ms ago: executing program 1 (id=4402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x200000}, 0xc) (async) r1 = dup3(r0, r0, 0x0) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0xc, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40081) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x4, 0x5, {{0x10, 0x4, 0x0, 0x1, 0x40, 0x65, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp={0x44, 0x1c, 0x14, 0x0, 0xb, [0x9, 0x3442, 0x2, 0x2, 0x8, 0x9]}, @generic={0x89, 0xe, "80bbb30cfd8b78202b674732"}]}}}}}) (async) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@mcast2, 0x4e22, 0x4, 0x4e21, 0x400, 0x8, 0x20, 0x80, 0x84, r2, r3}, {0x80000001, 0x15, 0x7, 0x9, 0x0, 0x5, 0x8, 0xa}, {0x200, 0xfffffffffffffffe, 0x1ff, 0x1}, 0xe76e, 0x6e6bb7, 0x0, 0x1, 0x2, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x32}, 0x2, @in=@private=0xa010101, 0x3504, 0x4, 0x0, 0x8, 0x0, 0x3, 0xe44}}, 0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x12000, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}], [{@measure}, {@subj_user={'subj_user', 0x3d, 'gretap0\x00'}}, {@pcr={'pcr', 0x3d, 0x6}}, {@obj_type={'obj_type', 0x3d, 'ip_vti0\x00'}}]}}) (async, rerun: 32) r5 = accept4$inet6(r1, &(0x7f0000000580)={0xa, 0x0, 0x0, @empty}, &(0x7f00000005c0)=0x1c, 0xc0800) (rerun: 32) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000600)={{{@in=@broadcast, @in=@multicast1, 0x4e24, 0x0, 0x4e21, 0x5, 0x2, 0xa0, 0x100, 0xd2, r2, r3}, {0xffffffffffffffff, 0x7, 0x734, 0x6, 0x7, 0x5, 0x3, 0x7}, {0x7, 0x9, 0x6}, 0xfffffffe, 0x6e6bba, 0x2, 0x0, 0x2, 0x1}, {{@in=@multicast2, 0x4d5, 0x2a}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x3505, 0x2, 0x0, 0x3, 0x1000, 0x2, 0x8487}}, 0xe8) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000700)=0x1, 0x4) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x8, 0x4) (async) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0x1f, &(0x7f00000007c0)=0x196b, 0x4) (async) move_mount(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x205) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000880)=0x1000) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000008c0)={@private0, 0x3b, r2}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000900)) (rerun: 32) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000d40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b80)={0x148, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) r7 = openat$cgroup_ro(r1, &(0x7f0000000d80)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) getsockname$packet(r7, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e80)=0x14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000ec0)={0x2, 0xd, 0x20000, 0x0, 0x4}) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, r8, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x1000}, 0x50) (async) stat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r4, &(0x7f00000010c0)='system.posix_acl_access\x00', &(0x7f0000003340)={{}, {}, [{0x2, 0x0, r3}, {0x2, 0x2, r3}], {0x4, 0x1}, [{0x8, 0x1, r10}, {0x8, 0x2}, {0x8, 0x6}, {0x8, 0x1}, {0x8, 0x7}, {0x8, 0x4}], {0x10, 0x7}, {0x20, 0x6}}, 0x64, 0x1) 831.566368ms ago: executing program 0 (id=4403): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x40901, 0x0) write$FUSE_DIRENT(r0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x200001d0) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x81) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x2000000000003, 0x2}], 0x2, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c667363616368652c61707072616973655f747970653d696d617369672c6d61736b3d5e4d41595f455845792c7375626a5f726f6c653d2c64656663a8bff2b9f07d4e3a6f6e746578"]) 830.457438ms ago: executing program 1 (id=4404): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000240)="81054f82b6083634ff9b2b108148fbed89ba33db1b4c655430cd7864788d818d9a762e3092ceb4e15163801da74ec01afc598da564a4d5c90f1da3d52db45d8329ebe6204dcdcc87e5bac4b006fccb72ea7398b464315b1a4d47cf7cb8ee30997bd00dd084a83df9cae9b5c80873c0b229912d79b62b585ad3f303", 0x7b}, {&(0x7f0000000400)="ed18368d1aee7c", 0x7}, {&(0x7f0000000440)="282d0fe655ff1910037535b64cf6a8b4156f8584a0b2e3b0eae394e5139eb549f0ea7e706f4bc336dccaff32ffb09d68dec18436ee59ae4aa5ff11a14f0ac3c04e5f3474bb1dd965905ce0869f133291cd011e9768b4fdc3d791f28d56ce8939921ece5b45557e8859621ca30d43", 0x6e}, {&(0x7f0000000580)="b8a72ba3ff17929207266f72169ced6d6cc6d79a28acc5617aaa98752a12e3de77cff88ebf9a494988cf92fc076060725ece222df76a2aa1804175591dd8a9d51a0489b0b49d0ca16bbaceaddd48bf106cc22e056f76cd464327f79c08f5a3bb07e1096db3a1460cb17277ae1c1fb1f9e6ce301376b0665e0355478a16c6ad05454ffc58b82e93b2e52adcc40ae8c4782a203ef7715eb88e9d5bfe78397389d5bc16a4d2b408730d0805965ae72faa5da790b8c0a8a011eec6c57d60c32ab5bc28831756d6cd09be91a9c5a4", 0xcc}, {&(0x7f0000000680)="e3c0191bea16a026df9de67c00e79bf3b70dd3d7677393f4d8ef35a7fe7429f885e6ff51866b9233556fde3938accbc3f57d9b1e09774f1190e252549caaccffa1e91cd0fed5bb8b49cf19c1b0c57763b008cbcc1bfe5a859ba36d306e08adf9ccb47ee771c08c7cd3ef901824662c5da54707a4520af430b5d9538f35898b01458cf01e6e84b151c72f78b7ad4125b50abaa9f50f66ebf7d295c5dd00d23df43fe61762", 0xa4}, {&(0x7f00000007c0)="2a003f8d8dc414714f7f714b47bd95034adc8c34e7163ef818118662f64a18d22bec3f8b8e809ad3f8e21bff4df255f588a475bea8cc44c05843996d1ca19e26f2e7a5bd69c7b5027df22c2348a7f0411be1fb974a269ebcf59e72f18c8a1789f69aeb0b5ff0fcbbe898e60cfb23d72fd6b4fa8c63b04256c320c6f328d6818497690da5829ea7293f680b6b9f03691b7d17ea55f2d7edf6bbad73ed0b6acdad2c", 0xa1}, {&(0x7f00000004c0)="51043a12abc025200a29ad20608b5a7169cc7485c5", 0x15}, {&(0x7f0000000880)="86e9f563eae27b2a0d43a1997bfaeb4be79b6f83630ec67ce6e6ada0be7b73a34cf9d1924d93d17c60d2394a57baecb8931d86164458ee9eebce492e9321d192431ebb2b4c727d2e3b0812b51b6c0edfa621ecb2ebb3d0d189952474e3ad4e94783e28bfa4cb1e028d05eee7cd33161012abe8257497a70d386cc95a", 0x7c}], 0x8, &(0x7f0000000980)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9b}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6f}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfa}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x90}, 0x40880) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "e476d0501796a924", "50ac495230f834b7f7768b40b65222de", '\beKx', "009dd280960531d3"}, 0x28) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @remote, @rand_addr=0x64010101}}}], 0x1}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)=0x1) r4 = syz_open_dev$usbfs(0x0, 0xf, 0x8041) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000019c0), 0x22000, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000001ac0)={0x0, 0x80000000, 0x101, 0xfff, 0x7, "e42efaaa02fa03538bfeb569332ea5f25940c0", 0x6, 0x7fffffff}) ioctl$USBDEVFS_RESET(r4, 0x5514) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500", 0x19}], 0x1) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000780)=""/18, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f0000000300)=""/89, 0x59}], 0x7}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) r7 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r8, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x8002, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 763.964949ms ago: executing program 3 (id=4406): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) r1 = fsopen(0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40100001900010025bd700000000000fc020000000000000000000000000000ac1414bb00000000000000000000000000200c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000020000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000fc0003006c7a6a68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a005000028b2930333705a12bc42598c0f3f21b5ddbc9c6dc7a2e7e797bf4dce5b3162d65e710f2f5433aa370c62a5f92e4df480c71bb8656e0990b0c0f19c975d2c8a25c6313443dd6747a1168ef5899ef322f9adddfe0dac2d35a87edd775227015b3c3c5da21ad4b7bc97464321167a93d6ab14bc040a5a99373e3a1cd78d4d702b9be9abc6951498bf4ad0931ab48c62ea6360a687dc880c040876e372f6e090c8be69c943d5c3a95062beea11546f5b9b68c98848e5"], 0x1b4}}, 0x4000080) pipe2$9p(&(0x7f0000000240), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) getresuid(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000200)) fchdir(r1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000080)=0xff, 0x4) read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, 0x0, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000100)=0x97, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0xf) r7 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r4, 0x4068aea3, &(0x7f0000000280)) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x5000)=nil, 0x5000, 0x100000c, 0x13, r9, 0x4a9b6000) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x80108906, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 762.357279ms ago: executing program 3 (id=4407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000100)={{r1}, 0x0, 0x8, @inherit={0x88, &(0x7f0000000040)={0x0, 0x8, 0x2, 0x39, {0x9, 0x6, 0x4, 0x7, 0x7fff}, [0x40, 0x9, 0xffff, 0x1, 0x6c79b237, 0x4, 0x2, 0xa]}}, @subvolid=0xd}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000001100)={0x2, 0x0, [{0xb7f, 0x0, 0x9}, {0xbe8, 0x0, 0x8803}]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000011c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x80, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x63}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x65}, @NL80211_ATTR_PMKID={0x14, 0x55, "4318e3db5d0091c4b6304b90f709a9ac"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="865a14bc9703"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "df9e46c91607c551a95f0f59db5020e4"}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008040}, 0x845) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x2008000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001480), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x6c, r6, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x16fc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcf1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_CON={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000841}, 0x112ab416d469a914) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000001840)={'nat\x00', 0x0, 0x4, 0xd1, [0x1ff, 0xf6, 0x1, 0x3, 0x1, 0x6], 0x7, &(0x7f00000016c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000001740)=""/209}, &(0x7f00000018c0)=0x78) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000001900)={{0x2, 0x7fff}, 0x100, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f00000025c0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002580)={&(0x7f0000001a80)={0xafc, r2, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xad4, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x5, 0x8, 0xe10, 0x85, 0x3, 0x86]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x1ac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1e, 0x2, "d56fb7bb4384662b5df1653b23a523f7b71bfddae8bb6b29b18a"}, @NL80211_FTM_RESP_ATTR_LCI={0xcd, 0x2, "6fac4ca59fdadf882c1416abab5fd346ab4bd15fa9c54c7d6051fcd1ac640a181d84c4d210d311c0dd32774282659615684a93b7797ad530314dcea2bc4ef220a49b56c853026118fea3b0da98071524a6af85a2176397544f7a35e50457beacbe0088397c18ac7d71a1a363ffae7b7e6db5b7e7663db1ffa336e8e0882db60d47afcada7d853e997e9a3e1ce8f781a67f12370f4843fd2c4e9d5604424ad225eee56bca3f527f981d332018989b6643a4e1b593af7debbff81b8ab7bdfca053385eae9e55f6282ecd"}, @NL80211_FTM_RESP_ATTR_LCI={0xb, 0x2, "f8202935734750"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa5, 0x3, "951542106dfc7644f0851f577e8822059c35c7ba2dcfbf941371c14c4a4ca4b2e7ef928fae2fc89f426c3a5d9b5e668b10f79dac70a33ffbf5f7c6c979843293a988cb4ee257fa664a5c28f2fe81dc6ba61512313034b2fd2019d12387d28d055eb3cc08b334d973d2824870d0b7e98a35481423fbd2e3a60de4b3c90c4928fe525304652752eea6a4370920d069d9b5619644cd8f3b7669a79a8290883c4ce041"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x93, 0x8}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x85, 0x80, [@measure_req={0x26, 0x7f, {0x10, 0xd, 0x8, "0907fa64d4334475ba7cfefb1021c3af636b3adfbe60782c592f6d4451e091aa63e199239f272375e0e36b1d34b0c0cbdccd95f26f145001ff6f61996560bd87527f2de02374d8656ffb80fc4360e4fabd58021801eca1bdf6bb6a9e5517a71346d22fe8a1e8eff68287452f14ed0db0aa81aa8424b00ec22e3eacf9"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xe5, 0x7f, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xb8, 0x50}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0x19, 0x8}}, @random_vendor={0xdd, 0x24, "14a063ec6c1f3af38bcf8559c1679ec341391d0353ec0f0de7116e3a26e6f0e2320a2677"}, @mesh_config={0x71, 0x7, {0x1, 0x3, 0x1, 0x1, 0xffffffffffffffff, 0x5, 0x20}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @random_vendor={0xdd, 0x9e, "687ec77c21ce511eb3a5f7279d2e857de8b27359784d0958e81fb5b84d840d8802791000697015783192421513e926781c44480d8c5cb7607c036743d38f7cb89ff4a03d1159b3ec4f512e699c475861ebaabb64f481270f446c7a47b7e66310b79e5c2a747d07ab5ffdf493e3b4eb4f38e19b2c9de09604512fa00edbe2314f06dd8211e0de61bbc4fcde84521cba73277b2ba5a073e9e70cbac81052ee"}]}, @NL80211_ATTR_PROBE_RESP={0x763, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x1, 0x9, 0x6]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0xfff5, 0x800, 0x728]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x6]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x0, 0x2, 0x401, 0x7fff, 0x5, 0x3ff]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0xafc}, 0x1, 0x0, 0x0, 0x4000}, 0x24008008) close(r4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) execveat(r1, &(0x7f0000002600)='./file1\x00', &(0x7f0000002680)={[&(0x7f0000002640)='/*!\x00']}, &(0x7f0000002700)={[&(0x7f00000026c0)='%\x00']}, 0x100) fcntl$getownex(r1, 0x10, &(0x7f0000002740)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000002780)=r9) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f00000027c0)={0x3, 0x5, 0x1000, 0x9b44, 0x40}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000002800)=0x2, 0x4) socket(0x5, 0x3, 0x200) ioctl$int_in(r8, 0x5421, &(0x7f0000002840)) sendto$inet(r8, &(0x7f0000002880)="eaaebe360f3d751e8a34d9f780629a5ed98c7c90b5387d059a991ecb8e7750d07f526831958af9c2e2e3420422b29d986d3cfd57dd5e89739a874a5efbe90e36dc4b10e7f1c614f1db7a7842b305de000d4956bd982634301fff995a11f8a860d0dfeab59d684a0cc731e7c092c8f90786d0e2d83e7a595c20d0677e465c8d22ff834841", 0x84, 0x80, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000002bc0)={0x1, 0x1, &(0x7f0000002940)=""/160, &(0x7f0000002a00)=""/145, &(0x7f0000002ac0)=""/252}) getsockopt(r7, 0x100, 0x1, &(0x7f0000002c00)=""/68, &(0x7f0000002c80)=0x44) 754.845139ms ago: executing program 3 (id=4408): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x16, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$TUNGETDEVNETNS(r2, 0xff0a, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0xb704, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x18, &(0x7f0000000200)=0x100000001, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r7 = dup3(r6, r6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x14, 0x0, &(0x7f0000000000)) fstat(r6, &(0x7f0000000480)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x5c, 0x0, &(0x7f0000000180)=[@register_looper, @acquire={0x40046305, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/202, 0xca, 0x1, 0x11}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/243, 0xf3, 0x2, 0x40}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}, @exit_looper], 0x0, 0x0, 0x0}) 738.511189ms ago: executing program 3 (id=4409): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000f0019000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a170000000000000000000a000200700000000000000014000e00fe80b7bddbf9a965fb4b0000000000bbfc744ce7613d85cc6fb92b55bef479"], 0x104}}, 0x0) 667.032311ms ago: executing program 3 (id=4410): openat$ashmem(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@id={0x1e, 0x3, 0x2, {0x4e23, 0xff}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x2) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', './file0', [{}, {0x20, ','}, {0x20, './binderfs/binder1\x00'}, {0x20, './binderfs/binder1\x00'}], 0xa, "2b0fb2bca3fbd8cef599ae6e7d6eb5b6b05c279a5081fd69031c98f6c5a8c364717579b600d9d50dc54c0683fb7785cfa6e6a46a533ebebb637d4f133af5e90621af5e9139fa4dad"}, 0x7e) close_range(r0, 0xffffffffffffffff, 0x0) 666.634721ms ago: executing program 3 (id=4411): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r1 = syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='projid_map\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) creat(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f0000000100)=""/248, 0xf8}, {&(0x7f0000000500)=""/233, 0xe9}, {&(0x7f0000000880)=""/4087, 0xff7}, {&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001940)=""/197, 0xc5}, {&(0x7f0000001a40)=""/124, 0x7c}, {&(0x7f0000000380)=""/215, 0xd7}], 0x8}, 0xa}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40002100, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f00000000c0)={0x87a, 0x1, 0x9}, &(0x7f0000001ac0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x1000}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x6, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 31.10645ms ago: executing program 5 (id=4412): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) rt_sigprocmask(0x0, &(0x7f0000000080)={[0x8]}, 0x0, 0x8) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=4413): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x8101, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xaa, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003340), 0x40040, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) accept4(0xffffffffffffffff, &(0x7f0000000380)=@qipcrtr, &(0x7f0000000080)=0x80, 0x800) write$evdev(0xffffffffffffffff, &(0x7f0000000280)=[{{r3, r4/1000+10000}, 0x1, 0x0, 0x7}, {{}, 0x12, 0x3, 0xd85d}, {{}, 0x16, 0xb, 0x80000001}, {{0x77359400}, 0x0, 0x1}, {{0x0, 0x2710}, 0x2, 0x1, 0x4}, {{0x77359400}, 0x4, 0x9, 0x8}, {{0x0, 0xea60}, 0x11, 0xff, 0x1}, {{0x77359400}, 0x16, 0x3261, 0x8}, {{}, 0x3, 0x1}], 0xd8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000ff5000/0xa000)=nil) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=4414): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000000, 0x820b01) epoll_create(0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x00\x00\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}, 0x2020) utimensat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x0, 0xea60}}, 0x100) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xd0200, 0x200) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): .398409][ T8078] [ 180.621550][ T31] usb 4-1: device descriptor read/8, error -71 [ 180.647631][ T8082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.647807][ T8082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.750116][ T31] usb 4-1: device descriptor read/8, error -71 [ 180.869147][ T31] usb usb4-port1: unable to enumerate USB device [ 180.928067][ T36] audit: type=1400 audit(1750768174.928:569): avc: denied { read } for pid=8105 comm="syz.1.2819" path="socket:[51809]" dev="sockfs" ino=51809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.092083][ T8113] netlink: 'syz.0.2821': attribute type 4 has an invalid length. [ 181.102168][ T8113] netlink: 'syz.0.2821': attribute type 4 has an invalid length. [ 181.245797][ T31] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 181.408999][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 181.421748][ T31] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 181.435491][ T31] usb 2-1: config 1 has no interface number 0 [ 181.448834][ T31] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 181.459317][ T31] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 181.469986][ T8129] netlink: 'syz.0.2829': attribute type 30 has an invalid length. [ 181.470169][ T31] usb 2-1: config 1 interface 105 has no altsetting 0 [ 181.500430][ T31] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 181.513297][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.521649][ T31] usb 2-1: Product: syz [ 181.526199][ T31] usb 2-1: Manufacturer: syz [ 181.531138][ T31] usb 2-1: SerialNumber: syz [ 181.539528][ T8106] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 181.546830][ T8106] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 181.600403][ T8138] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2832'. [ 181.646385][ T36] audit: type=1400 audit(1750768175.648:570): avc: denied { getopt } for pid=8139 comm="syz.0.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 181.681175][ T8144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 181.681217][ T8144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1508 [ 181.752140][ T36] audit: type=1400 audit(1750768175.758:571): avc: denied { create } for pid=8148 comm="syz.3.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 181.998691][ T8106] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 182.006111][ T8106] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 182.227120][ T31] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 182.249743][ T31] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 182.268533][ T31] usb 2-1: USB disconnect, device number 39 [ 182.679734][ T8190] 9pnet: Could not find request transport: v [ 182.903129][ T8211] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.912607][ T8211] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 182.937016][ T8211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1525 [ 183.070865][ T8234] rust_binder: Error while translating object. [ 183.083364][ T8234] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 183.092328][ T8234] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:399 [ 183.106681][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.125962][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.126004][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.139495][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.157553][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.157592][ T8239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.356997][ T8280] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2883'. [ 183.528075][ T8284] rust_binder: Error while translating object. [ 183.528145][ T8284] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 183.534849][ T8284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:425 [ 185.016302][ T8360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.025838][ T8360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:439 [ 185.084439][ T8363] rust_binder: Write failure EINVAL in pid:439 [ 185.292706][ T8376] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.934786][ T8385] binder: Bad value for 'max' [ 186.263153][ T36] audit: type=1400 audit(1750768180.268:572): avc: denied { execute } for pid=8407 comm="syz.0.2934" name="file0" dev="ramfs" ino=53812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 186.309060][ T36] audit: type=1400 audit(1750768180.268:573): avc: denied { execute_no_trans } for pid=8407 comm="syz.0.2934" path="/file0" dev="ramfs" ino=53812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 186.369544][ T8410] rust_binder: Write failure EINVAL in pid:451 [ 186.565153][ T8429] overlayfs: failed to clone upperpath [ 186.771590][ T8437] kvm: pic: non byte write [ 186.777548][ T8437] random: crng reseeded on system resumption [ 186.927879][ T8441] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.928851][ T8441] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 186.944705][ T8441] rust_binder: Write failure EINVAL in pid:1591 [ 187.144390][ T8448] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.157241][ T8448] rust_binder: Error while translating object. [ 187.165119][ T8448] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 187.172560][ T8448] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1598 [ 187.308834][ T36] audit: type=1400 audit(1750768181.308:574): avc: denied { append } for pid=8459 comm="syz.1.2955" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 187.907783][ T8472] rust_binder: Error while translating object. [ 187.907833][ T8472] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 188.011865][ T8472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:462 [ 188.218005][ T8481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.256649][ T8481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.285642][ T8485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.286341][ T8485] overlayfs: missing 'lowerdir' [ 188.449001][ T585] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 188.600188][ T8500] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.630197][ T36] audit: type=1326 audit(1750768182.638:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8504 comm="syz.0.2973" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5f0b8e929 code=0x0 [ 188.804409][ T8509] kvm: kvm [8508]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x7 [ 188.999115][ T585] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 189.032219][ T8513] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 189.150245][ T585] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.166999][ T585] usb 4-1: config 0 interface 0 has no altsetting 0 [ 189.178827][ T585] usb 4-1: New USB device found, idVendor=0463, idProduct=c227, bcdDevice= 0.00 [ 189.188284][ T585] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.198399][ T585] usb 4-1: config 0 descriptor?? [ 189.475003][ T8524] batadv_slave_1: entered promiscuous mode [ 189.483283][ T8523] batadv_slave_1: left promiscuous mode [ 189.573565][ T8538] devtmpfs: Unknown parameter '^ *([%' [ 189.608749][ T8541] /dev/rnullb0: Can't open blockdev [ 189.615856][ T585] hid-generic 0003:0463:C227.0017: unknown main item tag 0x1 [ 189.631163][ T585] hid-generic 0003:0463:C227.0017: hidraw0: USB HID v1.01 Device [HID 0463:c227] on usb-dummy_hcd.3-1/input0 [ 189.756078][ T8551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:910 [ 189.811644][ T585] usb 4-1: USB disconnect, device number 45 [ 190.958976][ T36] audit: type=1400 audit(1750768184.958:576): avc: denied { nlmsg_read } for pid=8597 comm="syz.0.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 191.159018][ T8617] KVM: debugfs: duplicate directory 8617-7 [ 191.225876][ T36] audit: type=1326 audit(1750768185.228:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8628 comm="syz.0.3019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5f0b8e929 code=0x0 [ 191.323725][ T8636] binder: Bad value for 'max' [ 191.674463][ T8645] rust_binder: Error while translating object. [ 191.674519][ T8645] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 191.689007][ T8645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:925 [ 191.830300][ T8649] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.862656][ T8651] fuse: Invalid rootmode [ 191.871621][ T8649] rust_binder: validate_parent_fixup: new_min_offset=96, sg_entry.length=0 [ 191.873534][ T8649] rust_binder: Error while translating object. [ 191.883181][ T8649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.890340][ T8649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1631 [ 191.900761][ T8651] rust_binder: Error while translating object. [ 191.922312][ T8651] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.935189][ T8651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:929 [ 191.955975][ T8655] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.966461][ T36] audit: type=1400 audit(1750768185.968:578): avc: denied { relabelto } for pid=8654 comm="syz.3.3028" name="file0" dev="tmpfs" ino=3251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 191.976877][ T8657] rust_binder: Write failure EINVAL in pid:931 [ 192.214261][ T8673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3031'. [ 192.259214][ T8677] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 192.415973][ T8697] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 192.549850][ T8705] tipc: Started in network mode [ 192.562836][ T8705] tipc: Node identity 4340d2a61b77000000000000000000aa, cluster identity 4711 [ 192.571873][ T8705] tipc: Enabling of bearer rejected, failed to enable media [ 192.632415][ T8706] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3047'. [ 192.641885][ T8706] rust_binder: Write failure EINVAL in pid:938 [ 192.689006][ T45] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 192.794846][ T36] audit: type=1400 audit(1750768187.794:579): avc: denied { unlink } for pid=1389 comm="syz-executor" name="file0" dev="tmpfs" ino=3251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 192.829229][ T36] audit: type=1326 audit(1750768187.834:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.3.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe0b8e929 code=0x7ffc0000 [ 192.853131][ T36] audit: type=1326 audit(1750768187.834:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.3.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe0b8e929 code=0x7ffc0000 [ 192.877953][ T45] usb 2-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.889116][ T45] usb 2-1: config 0 interface 0 altsetting 238 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.899271][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 192.905902][ T45] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 192.915041][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.924108][ T45] usb 2-1: config 0 descriptor?? [ 193.143276][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 193.149734][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 193.161292][ T45] usb 2-1: USB disconnect, device number 40 [ 193.441486][ T64] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 193.452116][ T36] audit: type=1400 audit(1750768188.454:582): avc: denied { link } for pid=8747 comm="syz.4.3062" name="file1" dev="tmpfs" ino=1975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 193.600238][ T64] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.610439][ T64] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.622209][ T64] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 193.631693][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.634260][ T8753] overlayfs: failed to clone upperpath [ 193.640175][ T64] usb 4-1: SerialNumber: syz [ 193.650497][ T8753] netlink: 'syz.0.3064': attribute type 4 has an invalid length. [ 193.658380][ T8753] netlink: 3465 bytes leftover after parsing attributes in process `syz.0.3064'. [ 193.774504][ T8766] fuse: Bad value for 'fd' [ 193.860664][ T64] usb 4-1: 0:2 : does not exist [ 193.865797][ T64] usb 4-1: unit 5: unexpected type 0x0a [ 193.873420][ T64] usb 4-1: USB disconnect, device number 46 [ 193.882218][ T3587] udevd[3587]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 194.207372][ T36] audit: type=1400 audit(1750768189.204:583): avc: denied { map } for pid=8772 comm="syz.1.3070" path="socket:[55258]" dev="sockfs" ino=55258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 194.421849][ T8775] syzkaller0: refused to change device tx_queue_len [ 194.747611][ T8800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 194.747641][ T8800] rust_binder: Read failure Err(EFAULT) in pid:531 [ 195.939089][ T64] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 196.054866][ T8830] overlayfs: failed to clone upperpath [ 196.099060][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 196.105975][ T64] usb 2-1: config index 0 descriptor too short (expected 124, got 36) [ 196.115636][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.126288][ T64] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 196.137100][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.149081][ T8835] fuse: Unknown parameter '00000000000000000000003' [ 196.156059][ T36] audit: type=1400 audit(1750768191.144:584): avc: denied { bind } for pid=8833 comm="syz.0.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.175695][ T64] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 196.186067][ T64] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 196.196200][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.205176][ T64] usb 2-1: config 0 descriptor?? [ 196.411961][ T8826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:536 [ 196.413173][ T8826] rust_binder: Error while translating object. [ 196.423110][ T8826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 196.429394][ T8826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:536 [ 196.442153][ T64] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 196.468351][ T64] usb 2-1: USB disconnect, device number 41 [ 196.476082][ T64] usblp0: removed [ 196.523706][ T8846] overlayfs: failed to clone upperpath [ 197.135383][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3114'. [ 197.144456][ T8882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3114'. [ 197.187201][ T8889] netlink: 'syz.0.3116': attribute type 1 has an invalid length. [ 197.210226][ T8894] batadv_slave_1: entered promiscuous mode [ 197.217447][ T8893] batadv_slave_1: left promiscuous mode [ 197.269956][ T8904] 9pnet_fd: Insufficient options for proto=fd [ 197.684387][ T36] audit: type=1400 audit(1750768192.684:585): avc: denied { create } for pid=8924 comm="syz.3.3130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 197.705739][ T36] audit: type=1400 audit(1750768192.694:586): avc: denied { accept } for pid=8924 comm="syz.3.3130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.011252][ T36] audit: type=1400 audit(1750768193.014:587): avc: denied { compute_member } for pid=8933 comm="syz.1.3133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 198.034771][ T4767] can0 (unregistered): slcan off ttyS3. [ 198.082615][ T8929] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.108191][ T8929] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.127005][ T8929] bridge_slave_0: entered allmulticast mode [ 198.146368][ T8929] bridge_slave_0: entered promiscuous mode [ 198.174838][ T8929] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.188310][ T8929] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.195533][ T8929] bridge_slave_1: entered allmulticast mode [ 198.202050][ T8929] bridge_slave_1: entered promiscuous mode [ 198.299206][ T36] audit: type=1400 audit(1750768193.294:588): avc: denied { listen } for pid=8951 comm="syz.1.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.362404][ T8929] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.369725][ T8929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.377157][ T8929] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.384535][ T8929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.458908][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.479379][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.495749][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.502938][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.524061][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.531289][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.688086][ T8929] veth0_vlan: entered promiscuous mode [ 198.719862][ T8929] veth1_macvtap: entered promiscuous mode [ 198.855754][ T8992] Unsupported ieee802154 address type: 0 [ 198.881926][ T8996] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 198.881957][ T8996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 198.900144][ T8996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:572 [ 199.933316][ T9036] kvm: pic: non byte write [ 199.948916][ T9036] random: crng reseeded on system resumption [ 200.065971][ T9045] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 200.096678][ T9047] kvm: pic: non byte write [ 200.110294][ T9047] random: crng reseeded on system resumption [ 200.128878][ T9050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:586 [ 200.267144][ T9056] syzkaller0: refused to change device tx_queue_len [ 200.431939][ T36] audit: type=1400 audit(1750768195.434:589): avc: denied { map } for pid=9069 comm="syz.4.3167" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 200.721470][ T9089] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 200.736059][ T9092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:601 [ 201.505204][ T36] audit: type=1400 audit(1750768196.504:590): avc: denied { map } for pid=9136 comm="syz.4.3186" path="socket:[58273]" dev="sockfs" ino=58273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 201.941353][ T9147] can0: slcan on ttyS3. [ 202.166229][ T9146] can0 (unregistered): slcan off ttyS3. [ 203.644117][ T36] audit: type=1400 audit(1750768198.644:591): avc: denied { relabelfrom } for pid=9226 comm="syz.3.3211" name="UNIX" dev="sockfs" ino=59476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 203.687932][ T9225] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 203.687964][ T9225] rust_binder: Error while translating object. [ 203.695101][ T36] audit: type=1401 audit(1750768198.644:592): op=setxattr invalid_context="" [ 203.719007][ T9225] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 203.719104][ T9225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:628 [ 204.631188][ T9245] FAT-fs (rnullb0): invalid media value (0x44) [ 204.669171][ T9245] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 205.092732][ T36] audit: type=1326 audit(1750768200.094:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9272 comm="syz.3.3226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe65a38e929 code=0x0 [ 205.302047][ T9280] kvm: MONITOR instruction emulated as NOP! [ 205.316901][ T9280] SELinux: security_context_str_to_sid (syste_uGй :ě_,Ouwb& Jr_`ly֭fH%~ͦrW@90i Qˉ<„53[]VmaQא]Pa5gVչY/n4.ap [ 205.316901][ T9280]  [ 205.316901][ T9280] c{lUʞ9tG>ɮ\7;) failed with errno=-22 [ 205.393138][ T9294] can0: slcan on ttyS3. [ 205.423240][ T9294] can0 (unregistered): slcan off ttyS3. [ 205.450149][ T9299] x_tables: duplicate underflow at hook 1 [ 205.480226][ T9303] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 205.480261][ T9303] rust_binder: Error while translating object. [ 205.494344][ T9303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 205.504028][ T9303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:635 [ 205.634536][ T36] audit: type=1400 audit(1750768200.634:594): avc: denied { create } for pid=9316 comm="syz.4.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 205.859107][ T306] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 206.010109][ T306] usb 2-1: config 64 has an invalid interface number: 58 but max is 3 [ 206.018679][ T306] usb 2-1: config 64 has an invalid interface number: 104 but max is 3 [ 206.027153][ T306] usb 2-1: config 64 has an invalid descriptor of length 1, skipping remainder of the config [ 206.038416][ T306] usb 2-1: config 64 has 2 interfaces, different from the descriptor's value: 4 [ 206.048410][ T306] usb 2-1: config 64 has no interface number 0 [ 206.055281][ T306] usb 2-1: config 64 has no interface number 1 [ 206.063139][ T306] usb 2-1: config 64 interface 58 altsetting 9 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 206.075106][ T9341] /dev/rnullb0: Can't lookup blockdev [ 206.075130][ T306] usb 2-1: config 64 interface 104 altsetting 8 endpoint 0x1 has invalid maxpacket 26523, setting to 1024 [ 206.092482][ T306] usb 2-1: config 64 interface 104 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 206.112210][ T306] usb 2-1: config 64 interface 104 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 206.133785][ T306] usb 2-1: config 64 interface 58 has no altsetting 0 [ 206.141781][ T306] usb 2-1: config 64 interface 104 has no altsetting 0 [ 206.158967][ T306] usb 2-1: New USB device found, idVendor=13d3, idProduct=3323, bcdDevice=12.3e [ 206.165655][ T9345] SELinux: security_context_str_to_sid (syste_uGй :ě_,Ouwb& Jr_`ly֭fH%~ͦrW@90i Qˉ<„53[]VmaQא]Pa5gVչY/n4.ap [ 206.165655][ T9345]  [ 206.165655][ T9345] c{lUʞ9tG>ɮ\7;) failed with errno=-22 [ 206.168320][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.168347][ T306] usb 2-1: Product: 峴⌛笕ꇆ辞ꋱਜ垷곛ⅎ嫙鋳傹ﴽ쾄⇸⇔ [ 206.215319][ T306] usb 2-1: Manufacturer: 藵Ⲛ揌坃諶蜺੷ׄ焛ꡘ蹤帆禅莸丈螘ᾃ쩌삕⒘ᙛ츳榙꬚璟渀ऻ녚쟮꿺䷉㒧늈謬჈䝬蓥灗跍縢蚍䝰沱䶅핯䴝ඥꨜ䠍졄꼣鈪䒊鬅圸뚑ੲᥥ◜划᧖鷲樔﷯醺퐟곴淶⟐즔ᯝ둗胦썘ѓ᯵䡄｀䑩笒┞ꖣ숿箎」睞믗꺡齫哒怢萍敖㕴墳딸첼翀뗕ᨧ秼叽ꬼ涮꼩䩉㬼 [ 206.253112][ T306] usb 2-1: SerialNumber: Ў [ 206.338293][ T36] audit: type=1326 audit(1750768201.334:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.3.3246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe65a38e929 code=0x0 [ 206.677060][ T306] usb 2-1: USB disconnect, device number 42 [ 207.181633][ T9425] fuse: Bad value for 'fd' [ 207.352665][ T9436] FAT-fs (rnullb0): invalid media value (0x44) [ 207.358904][ T9436] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.381889][ T9439] binder: Bad value for 'stats' [ 207.528961][ T9450] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 207.529004][ T9450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:644 [ 207.648459][ T9462] binder: Bad value for 'max' [ 207.648642][ T9463] binder: Bad value for 'max' [ 207.709954][ T36] audit: type=1400 audit(1750768202.714:596): avc: denied { remount } for pid=9464 comm="syz.3.3261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 207.710753][ T9465] option changes via remount are deprecated (pid=9464 comm=syz.3.3261) [ 207.789004][ T585] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 207.796980][ T9467] rust_binder: Write failure EINVAL in pid:100 [ 207.797244][ T9467] rust_binder: Read failure Err(EAGAIN) in pid:100 [ 207.939031][ T585] usb 2-1: Using ep0 maxpacket: 8 [ 207.952121][ T585] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.962298][ T585] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 207.971237][ T585] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.984168][ T585] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 207.993274][ T585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.005468][ T585] hub 2-1:1.0: bad descriptor, ignoring hub [ 208.011506][ T585] hub 2-1:1.0: probe with driver hub failed with error -5 [ 208.021939][ T585] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 208.049037][ T45] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 208.200520][ T45] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 208.210905][ T9454] rust_binder: Error while translating object. [ 208.210940][ T9454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 208.217609][ T9454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:646 [ 208.227562][ T45] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 208.247315][ T45] usb 4-1: config 0 has no interface number 0 [ 208.254764][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 208.263900][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.271976][ T45] usb 4-1: Product: syz [ 208.276163][ T45] usb 4-1: Manufacturer: syz [ 208.280824][ T45] usb 4-1: SerialNumber: syz [ 208.286268][ T45] usb 4-1: config 0 descriptor?? [ 208.329150][ T585] usb 2-1: USB disconnect, device number 43 [ 208.493160][ T9472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.501795][ T9472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.694649][ T45] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 208.701841][ T45] usb 4-1: No valid video chain found. [ 208.708457][ T45] usb 4-1: USB disconnect, device number 47 [ 208.756423][ T9480] FAT-fs (rnullb0): invalid media value (0x44) [ 208.762745][ T9480] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 208.788998][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 209.595632][ T9511] netlink: 'syz.0.3275': attribute type 4 has an invalid length. [ 209.605287][ T9511] overlayfs: failed to clone upperpath [ 209.707785][ T9524] overlayfs: failed to clone upperpath [ 210.859296][ T3910] Bluetooth: hci0: command 0x1003 tx timeout [ 210.859354][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 210.993037][ T9580] netlink: 5256 bytes leftover after parsing attributes in process `syz.0.3301'. [ 211.012017][ T9585] rust_binder: Error while translating object. [ 211.012058][ T9585] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 211.020041][ T9585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:665 [ 211.319094][ T306] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 211.459073][ T306] usb 2-1: device descriptor read/64, error -71 [ 211.699093][ T306] usb 2-1: device descriptor read/64, error -71 [ 211.939088][ T306] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 212.079206][ T306] usb 2-1: device descriptor read/64, error -71 [ 212.200545][ T9646] 9pnet_fd: Insufficient options for proto=fd [ 212.265079][ T9651] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 212.265126][ T9651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:113 [ 212.268954][ T9650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 212.287439][ T9650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:113 [ 212.339003][ T306] usb 2-1: device descriptor read/64, error -71 [ 212.378855][ T9658] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.464953][ T9666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:120 [ 212.471688][ T306] usb usb2-port1: attempt power cycle [ 212.509488][ T9669] rust_binder: Write failure EINVAL in pid:120 [ 212.756146][ T9677] FAT-fs (rnullb0): invalid media value (0x44) [ 212.771637][ T9677] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 212.849224][ T306] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 212.870281][ T306] usb 2-1: device descriptor read/8, error -71 [ 212.950625][ T9684] rust_binder: Error while translating object. [ 212.950674][ T9684] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 212.956924][ T9684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1055 [ 213.000454][ T306] usb 2-1: device descriptor read/8, error -71 [ 213.249032][ T306] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 213.270160][ T306] usb 2-1: device descriptor read/8, error -71 [ 213.382966][ T9708] FAT-fs (rnullb0): invalid media value (0x44) [ 213.389455][ T9708] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 213.400355][ T306] usb 2-1: device descriptor read/8, error -71 [ 213.509090][ T306] usb usb2-port1: unable to enumerate USB device [ 213.560441][ T9719] rust_binder: Write failure EFAULT in pid:139 [ 214.478996][ T306] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 214.639137][ T306] usb 2-1: Using ep0 maxpacket: 32 [ 214.645971][ T306] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 214.654573][ T306] usb 2-1: config 0 has no interface number 0 [ 214.662562][ T306] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 214.671717][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.679787][ T306] usb 2-1: Product: syz [ 214.684333][ T306] usb 2-1: Manufacturer: syz [ 214.689203][ T306] usb 2-1: SerialNumber: syz [ 214.695016][ T306] usb 2-1: config 0 descriptor?? [ 214.701749][ T306] smsc95xx v2.0.0 [ 214.896358][ T9735] Invalid ELF header type: 2 != 1 [ 214.943431][ T9740] FAT-fs (rnullb0): invalid media value (0x44) [ 214.949835][ T9740] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 215.093118][ T9747] rust_binder: Error while translating object. [ 215.093153][ T9747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 215.099520][ T9747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:163 [ 215.714542][ T306] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -61 [ 215.734915][ T306] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 215.758721][ T9768] /dev/rnullb0: Can't lookup blockdev [ 215.795334][ T9770] overlayfs: failed to clone upperpath [ 215.836130][ T9772] binder: Unknown parameter 'kw' [ 215.924519][ T305] tipc: Subscription rejected, illegal request [ 215.984703][ T306] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 216.010140][ T306] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 216.022625][ T306] usb 2-1: USB disconnect, device number 48 [ 216.169292][ T9791] FAT-fs (rnullb0): invalid media value (0x44) [ 216.175767][ T9791] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 216.263407][ T9793] kvm: pic: non byte write [ 216.268466][ T9793] random: crng reseeded on system resumption [ 216.328150][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3378'. [ 216.328149][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3378'. [ 216.396381][ T36] audit: type=1400 audit(1750768211.394:597): avc: denied { append } for pid=9803 comm="syz.3.3380" name="pfkey" dev="proc" ino=4026533028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 216.690092][ T9827] can0: slcan on ttyS3. [ 216.728916][ T9826] /dev/rnullb0: Can't open blockdev [ 216.760042][ T9825] can0 (unregistered): slcan off ttyS3. [ 216.818417][ T36] audit: type=1400 audit(1750768211.814:598): avc: denied { lock } for pid=9838 comm="syz.1.3388" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 217.108994][ T585] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 217.211489][ T9884] rust_binder: Write failure EINVAL in pid:1081 [ 217.269025][ T585] usb 4-1: Using ep0 maxpacket: 32 [ 217.290444][ T585] usb 4-1: unable to get BOS descriptor or descriptor too short [ 217.298972][ T585] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 217.307603][ T585] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 217.324314][ T585] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 217.346137][ T585] usb 4-1: config 128 has no interface number 0 [ 217.358986][ T585] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 217.372618][ T585] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.383229][ T585] usb 4-1: config 128 interface 127 has no altsetting 0 [ 217.392628][ T585] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 217.402218][ T585] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.410418][ T585] usb 4-1: Product: syz [ 217.414751][ T585] usb 4-1: Manufacturer: syz [ 217.419543][ T585] usb 4-1: SerialNumber: syz [ 217.451954][ T9899] rust_binder: Error while translating object. [ 217.452023][ T9899] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 217.458365][ T9899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:697 [ 217.552574][ T9902] FAT-fs (rnullb0): invalid media value (0x44) [ 217.568613][ T9902] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 217.631937][ T9843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.642636][ T9843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.658824][ T585] usb 4-1: USB disconnect, device number 48 [ 217.678446][ T3587] udevd[3587]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 217.747248][ T9908] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 217.747279][ T9908] rust_binder: Read failure Err(EFAULT) in pid:705 [ 217.882579][ T36] audit: type=1326 audit(1750768212.884:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9912 comm="syz.1.3402" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97d9f8e929 code=0x0 [ 218.333416][ T9928] FAT-fs (rnullb0): invalid media value (0x9f) [ 218.339700][ T9928] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 218.395467][ T9930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1100 [ 218.399280][ T9930] rust_binder: Read failure Err(EFAULT) in pid:1100 [ 218.426970][ T9935] netlink: 'syz.4.3412': attribute type 4 has an invalid length. [ 218.448544][ T9935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1102 [ 218.475449][ T9941] SELinux: failed to load policy [ 218.490577][ T9941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.490598][ T9941] rust_binder: Read failure Err(EFAULT) in pid:1104 [ 218.511645][ T9943] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 218.520283][ T9943] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 218.537209][ T9943] rust_binder: Error in use_page_slow: ESRCH [ 218.537232][ T9943] rust_binder: use_range failure ESRCH [ 218.543641][ T9943] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 218.549435][ T9943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 218.557494][ T9943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1106 [ 218.567525][ T9943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9943 comm=syz.4.3415 [ 218.633150][ T9947] kvm: pic: single mode not supported [ 218.633959][ T9947] kvm: pic: single mode not supported [ 218.641184][ T9947] kvm: pic: non byte write [ 218.652620][ T9947] kvm: pic: non byte write [ 218.657420][ T9947] kvm: pic: level sensitive irq not supported [ 218.657493][ T9947] kvm: pic: non byte write [ 218.668256][ T9947] kvm: pic: single mode not supported [ 218.668690][ T9947] kvm: pic: non byte write [ 218.678738][ T9947] kvm: pic: single mode not supported [ 218.679242][ T9947] kvm: pic: single mode not supported [ 218.685420][ T9947] kvm: pic: single mode not supported [ 218.690904][ T9947] kvm: pic: level sensitive irq not supported [ 218.697246][ T9951] tmpfs: Unknown parameter 'jug}' [ 218.766172][ T9957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 218.767306][ T36] audit: type=1400 audit(1750768213.764:600): avc: denied { lock } for pid=9956 comm="syz.4.3420" path="/dev/binderfs/binder0" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 218.767366][ T9957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1114 [ 218.798613][ T9959] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 218.806202][ T9958] FAT-fs (rnullb0): invalid media value (0x9f) [ 218.820721][ T9958] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 218.873880][ T9965] binder: Unknown parameter 'smackfsdef' [ 218.975151][ T9977] syzkaller0: entered promiscuous mode [ 218.982175][ T9977] syzkaller0: entered allmulticast mode [ 219.042963][ T9977] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 219.043004][ T9977] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:719 [ 219.052854][ T9977] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:719 [ 219.102942][ T9994] FAT-fs (rnullb0): invalid media value (0x9f) [ 219.118474][ T9994] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 219.142338][ T9997] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 219.299139][ T36] audit: type=1400 audit(1750768214.304:601): avc: denied { listen } for pid=10025 comm="syz.0.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 219.352717][T10030] FAT-fs (rnullb0): invalid media value (0x9f) [ 219.359501][T10030] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 219.570973][T10054] batadv_slave_1: entered promiscuous mode [ 219.587291][T10056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3454'. [ 219.597193][T10056] binder: Bad value for 'stats' [ 219.615316][T10053] batadv_slave_1: left promiscuous mode [ 219.620358][T10059] FAT-fs (rnullb0): invalid media value (0x9f) [ 219.627233][T10059] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 219.747093][ T36] audit: type=1400 audit(1750768214.744:602): avc: denied { watch watch_reads } for pid=10074 comm="syz.4.3463" path="/412/file0" dev="incremental-fs" ino=2311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.843754][T10078] can0: slcan on ttyS3. [ 219.989901][T10087] SELinux: failed to load policy [ 220.479544][T10078] can0 (unregistered): slcan off ttyS3. [ 220.987760][ T36] audit: type=1326 audit(1750768215.984:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f0b8e929 code=0x7fc00000 [ 221.079145][T10177] SELinux: security_context_str_to_sid () failed with errno=-22 [ 221.369924][T10197] fuse: Bad value for 'group_id' [ 221.374943][T10197] fuse: Bad value for 'group_id' [ 221.389026][ T36] audit: type=1400 audit(1750768216.374:604): avc: denied { mounton } for pid=10196 comm="syz.1.3492" path="/282/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 221.438967][ T36] audit: type=1400 audit(1750768216.434:605): avc: denied { unmount } for pid=6466 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 221.459984][T10199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:757 [ 223.900046][ T36] audit: type=1326 audit(1750768218.904:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5f0b2ab19 code=0x7fc00000 [ 224.531560][T10228] rust_binder: Write failure EINVAL in pid:761 [ 224.531712][T10228] rust_binder: Write failure EFAULT in pid:761 [ 224.554757][ T36] audit: type=1400 audit(1750768219.544:607): avc: denied { setattr } for pid=10226 comm="syz.1.3506" name="binder1" dev="binder" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 224.598624][T10234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3508'. [ 224.668406][T10238] binder: Unknown parameter 'defcontext01777777777777777777777' [ 224.682927][T10239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.788296][T10246] fuse: Bad value for 'fd' [ 225.180227][ T36] audit: type=1400 audit(1750768220.184:608): avc: denied { associate } for pid=10262 comm="syz.0.3518" name="fuse" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 226.063951][T10293] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 226.085768][T10286] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 226.264208][ T36] audit: type=1400 audit(1750768221.264:609): avc: denied { create } for pid=10297 comm="syz.3.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 226.499022][ T64] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 226.658997][ T64] usb 4-1: device descriptor read/64, error -71 [ 226.763681][T10318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.928978][ T64] usb 4-1: device descriptor read/64, error -71 [ 227.169038][ T64] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 227.318987][ T64] usb 4-1: device descriptor read/64, error -71 [ 227.489941][T10337] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 227.489991][T10337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:793 [ 227.578346][ T64] usb 4-1: device descriptor read/64, error -71 [ 227.699124][ T64] usb usb4-port1: attempt power cycle [ 227.727193][T10341] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 227.844075][T10351] FAT-fs (rnullb0): invalid media value (0x9f) [ 227.889014][T10351] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 228.039020][ T64] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 228.070039][ T64] usb 4-1: device descriptor read/8, error -71 [ 228.210201][ T64] usb 4-1: device descriptor read/8, error -71 [ 228.348997][ T585] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 228.459049][ T64] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 228.480312][ T64] usb 4-1: device descriptor read/8, error -71 [ 228.499007][ T585] usb 2-1: Using ep0 maxpacket: 8 [ 228.506218][ T585] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 228.515480][ T585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.525189][ T585] usb 2-1: config 0 descriptor?? [ 228.610228][ T64] usb 4-1: device descriptor read/8, error -71 [ 228.719195][ T64] usb usb4-port1: unable to enumerate USB device [ 228.733191][ T585] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 228.744692][ T585] asix 2-1:0.0: probe with driver asix failed with error -32 [ 228.862288][T10386] overlayfs: failed to clone upperpath [ 229.091947][ T585] usb 2-1: USB disconnect, device number 50 [ 229.261659][T10409] sock: sock_timestamping_bind_phc: sock not bind to device [ 229.280394][T10411] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 229.281670][T10411] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 229.300768][T10415] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 229.309526][T10415] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 229.323570][T10415] rust_binder: Write failure EINVAL in pid:1217 [ 229.384794][T10422] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3573'. [ 229.401042][T10422] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 229.401588][T10422] rust_binder: Error in use_page_slow: ESRCH [ 229.408232][T10422] rust_binder: use_range failure ESRCH [ 229.415049][T10422] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 229.421747][T10422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 229.430713][T10422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1222 [ 229.472949][T10424] rust_binder: Error in use_page_slow: ESRCH [ 229.472976][T10424] rust_binder: use_range failure ESRCH [ 229.479365][T10424] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 229.485818][T10424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 229.494922][T10424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1224 [ 229.568990][ T31] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 229.728990][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 229.729434][ T36] audit: type=1326 audit(1750768224.734:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10390 comm="syz.0.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f0b8e929 code=0x7fc00000 [ 229.739781][ T31] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 229.767528][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.777928][ T31] usb 4-1: config 0 descriptor?? [ 229.812754][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3579'. [ 230.389787][ T31] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 230.398245][T10461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1235 [ 230.402379][ T31] asix 4-1:0.0: probe with driver asix failed with error -32 [ 230.646962][T10498] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 230.659003][T10498] overlayfs: missing 'lowerdir' [ 230.664941][T10498] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.665426][T10498] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 230.672098][T10498] rust_binder: Error while translating object. [ 230.680991][T10498] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 230.687297][T10498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1248 [ 230.759461][ T585] usb 4-1: USB disconnect, device number 53 [ 230.808078][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3608'. [ 231.032701][T10552] rust_binder: Write failure EINVAL in pid:318 [ 231.032799][T10552] rust_binder: Read failure Err(EAGAIN) in pid:318 [ 231.040139][T10552] rust_binder: Write failure EINVAL in pid:318 [ 231.040162][T10553] rust_binder: Read failure Err(EAGAIN) in pid:318 [ 231.067499][T10557] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.074188][T10557] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.231211][ T36] audit: type=1326 audit(1750768455.237:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.3.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65a38e929 code=0x7ffc0000 [ 231.262238][ T36] audit: type=1326 audit(1750768455.237:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.3.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65a38e929 code=0x7ffc0000 [ 231.286319][ T36] audit: type=1326 audit(1750768455.237:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.3.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65a38e929 code=0x7ffc0000 [ 231.310119][ T36] audit: type=1326 audit(1750768455.237:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.3.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65a38e929 code=0x7ffc0000 [ 231.333828][ T36] audit: type=1326 audit(1750768455.237:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.3.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe65a38e929 code=0x7ffc0000 [ 231.364424][ T36] audit: type=1326 audit(1750768455.237:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.3.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65a38e929 code=0x7ffc0000 [ 231.396135][ T36] audit: type=1326 audit(1750768455.237:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.3.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe65a38e929 code=0x7ffc0000 [ 231.424663][T10590] rust_binder: Write failure EINVAL in pid:352 [ 231.426108][ T36] audit: type=1326 audit(1750768455.237:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.3.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65a38e929 code=0x7ffc0000 [ 231.469477][ T36] audit: type=1326 audit(1750768455.237:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.3.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe65a38d290 code=0x7ffc0000 [ 231.507962][T10603] rust_binder: Error while translating object. [ 231.508001][T10603] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 231.514309][T10603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:365 [ 231.560152][T10608] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 231.657839][T10611] can0: slcan on ttyS3. [ 231.719575][T10611] can0 (unregistered): slcan off ttyS3. [ 231.744328][T10623] rust_binder: Error while translating object. [ 231.744382][T10623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 231.753155][T10623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:375 [ 231.878584][T10644] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 232.053013][T10660] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.053632][T10661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.065476][T10661] rust_binder: Write failure EINVAL in pid:388 [ 232.082217][T10662] rust_binder: Write failure EINVAL in pid:388 [ 232.201522][ T305] bridge_slave_1: left allmulticast mode [ 232.223727][ T305] bridge_slave_1: left promiscuous mode [ 232.229532][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.237398][ T305] bridge_slave_0: left allmulticast mode [ 232.247133][ T305] bridge_slave_0: left promiscuous mode [ 232.253979][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.277581][T10676] SELinux: failed to load policy [ 232.353039][T10666] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.360481][T10666] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.368057][T10666] bridge_slave_0: entered allmulticast mode [ 232.374680][T10666] bridge_slave_0: entered promiscuous mode [ 232.385482][T10666] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.396355][T10666] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.405272][T10666] bridge_slave_1: entered allmulticast mode [ 232.412031][T10666] bridge_slave_1: entered promiscuous mode [ 232.418446][ T305] tipc: Left network mode [ 232.424864][ T305] veth0_vlan: left promiscuous mode [ 232.458509][T10702] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 232.470575][T10702] overlayfs: missing 'lowerdir' [ 232.567622][T10714] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3664'. [ 232.591285][T10666] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.598501][T10666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.611331][T10717] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 232.611366][T10717] rust_binder: Error while translating object. [ 232.620959][T10717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 232.627420][T10717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:404 [ 232.661964][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.691844][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.699334][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.716367][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.723607][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.741043][T10731] overlayfs: conflicting options: userxattr,metacopy=on [ 232.760236][T10732] overlayfs: conflicting options: userxattr,metacopy=on [ 232.778424][T10666] veth0_vlan: entered promiscuous mode [ 232.794366][T10666] veth1_macvtap: entered promiscuous mode [ 232.851940][T10737] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 232.869596][T10737] rust_binder: Write failure EINVAL in pid:2 [ 233.447456][T10779] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.464510][T10782] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.479441][T10782] rust_binder: Error in use_page_slow: ESRCH [ 233.479469][T10782] rust_binder: use_range failure ESRCH [ 233.485750][T10782] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 233.492166][T10782] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 233.501871][T10782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:42 [ 233.574259][T10798] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.586404][T10798] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.600602][T10798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:55 [ 233.679277][T10808] FAT-fs (rnullb0): invalid media value (0x9f) [ 233.694906][T10808] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 233.871715][T10825] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.891361][ T875] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 233.895982][T10833] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.907980][T10834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:78 [ 233.919138][T10835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:78 [ 233.956968][T10840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.986195][T10840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:84 [ 233.986195][T10841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:84 [ 234.013691][T10845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 234.057796][ T875] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 234.085737][ T875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.109226][ T875] usb 4-1: Product: syz [ 234.113458][ T875] usb 4-1: Manufacturer: syz [ 234.118086][ T875] usb 4-1: SerialNumber: syz [ 234.254484][T10861] random: crng reseeded on system resumption [ 234.574465][T10883] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 234.719596][T10886] SELinux: security_context_str_to_sid () failed with errno=-22 [ 235.490204][T10934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10934 comm=syz.1.3728 [ 235.503085][T10934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=10934 comm=syz.1.3728 [ 235.516869][T10934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=10934 comm=syz.1.3728 [ 236.048332][T10936] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3729'. [ 236.081430][ T36] kauditd_printk_skb: 49 callbacks suppressed [ 236.081467][ T36] audit: type=1400 audit(1750768460.081:669): avc: denied { create } for pid=10939 comm="syz.1.3731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 236.286097][T10957] overlayfs: failed to resolve './file1': -2 [ 236.665027][ T64] usb 4-1: USB disconnect, device number 54 [ 236.679137][T10964] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 236.679163][T10964] rust_binder: Error while translating object. [ 236.687847][T10964] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 236.694109][T10964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:425 [ 237.039123][ T64] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 237.200225][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.211275][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.221961][ T64] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 237.231322][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.240138][ T64] usb 4-1: config 0 descriptor?? [ 237.650765][ T64] hid-steam 0003:28DE:1142.0018: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 237.719074][ T64] hid-steam 0003:28DE:1142.0018: Steam wireless receiver connected [ 237.731113][ T64] hid-steam 0003:28DE:1142.0019: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 237.852544][T10966] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 89) [ 237.852575][T10966] rust_binder: Error while translating object. [ 237.863458][T10966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 237.869939][T10966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:427 [ 237.880977][ T64] usb 4-1: USB disconnect, device number 55 [ 237.923053][ T64] hid-steam 0003:28DE:1142.0018: Steam wireless receiver disconnected [ 237.994558][T11002] kvm: pic: non byte write [ 238.000294][T11002] random: crng reseeded on system resumption [ 238.356896][T11014] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3761'. [ 239.081554][T11044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 239.085849][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 239.101542][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 239.109219][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 239.118603][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 239.125805][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 239.133433][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 239.141629][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 239.148888][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 239.156382][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 239.163604][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 239.277216][T11053] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3774'. [ 239.303960][ T36] audit: type=1326 audit(1750768463.301:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz.3.3775" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe65a38e929 code=0x0 [ 239.506843][T11074] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3781'. [ 239.516081][T11074] tipc: Started in network mode [ 239.521174][T11074] tipc: Node identity , cluster identity 4711 [ 239.527280][T11074] tipc: Failed to obtain node identity [ 239.532839][T11074] tipc: Enabling of bearer rejected, failed to enable media [ 239.661788][ T46] bridge_slave_1: left allmulticast mode [ 239.667598][ T46] bridge_slave_1: left promiscuous mode [ 239.673557][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.681683][ T46] bridge_slave_0: left allmulticast mode [ 239.688536][ T46] bridge_slave_0: left promiscuous mode [ 239.694338][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.861226][ T46] veth1_macvtap: left promiscuous mode [ 239.866837][ T46] veth0_vlan: left promiscuous mode [ 239.958377][T11081] can: request_module (can-proto-6) failed. [ 240.086850][T11087] fuse: Bad value for 'group_id' [ 240.092645][T11087] fuse: Bad value for 'group_id' [ 240.170889][T11096] rust_binder: Error while translating object. [ 240.170930][T11096] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 240.177339][T11096] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:445 [ 240.282571][T11105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:454 [ 240.300376][T11105] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 240.436497][ T36] audit: type=1326 audit(1750768464.431:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11112 comm="syz.3.3796" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe65a38e929 code=0x0 [ 240.459764][ T36] audit: type=1326 audit(1750768464.431:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11112 comm="syz.3.3796" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe65a38e929 code=0x0 [ 240.487645][T11115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:462 [ 240.501172][T11118] rust_binder: Error while translating object. [ 240.512488][T11118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 240.518853][T11118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:467 [ 240.829005][ T45] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 240.990197][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.001238][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.011027][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 241.024594][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.034287][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.043300][ T45] usb 4-1: config 0 descriptor?? [ 241.253047][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.261020][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.271293][T11142] binder: Bad value for 'stats' [ 241.277198][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.290413][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.298771][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.311516][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.319822][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.327366][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.335058][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.343227][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.351429][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.360346][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.375067][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.382727][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.390465][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.399042][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.406590][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.414637][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.422566][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.430303][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.437975][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.445509][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.453045][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.460549][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.468776][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.469132][T11140] rust_binder: Write failure EFAULT in pid:478 [ 241.476738][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.477361][T11129] rust_binder: Write failure EFAULT in pid:478 [ 241.483060][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.506243][ T45] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 241.514012][ T45] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 241.523406][ T45] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 241.538842][ T45] usb 4-1: USB disconnect, device number 56 [ 241.553314][T11165] fido_id[11165]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 242.635048][T11183] binder: Bad value for 'stats' [ 242.768252][T11193] overlayfs: failed to clone upperpath [ 243.059029][ T45] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 243.208981][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 243.215308][ T45] usb 4-1: config 6 has an invalid interface number: 111 but max is 0 [ 243.223615][ T45] usb 4-1: config 6 has no interface number 0 [ 243.229826][ T45] usb 4-1: config 6 interface 111 has no altsetting 0 [ 243.238508][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=fa.e9 [ 243.247780][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.255833][ T45] usb 4-1: Product: syz [ 243.260088][ T45] usb 4-1: Manufacturer: syz [ 243.264716][ T45] usb 4-1: SerialNumber: syz [ 243.272176][ T45] usbhid 4-1:6.111: couldn't find an input interrupt endpoint [ 243.361134][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3832'. [ 243.371042][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3832'. [ 243.472645][ T45] usb 4-1: USB disconnect, device number 57 [ 243.975027][T11228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.975196][T11228] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 243.982012][T11228] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 243.996257][T11228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1315 [ 244.149630][T11247] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@qkp [ 244.149630][T11247] C<+ [ 244.259099][ T31] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 244.317143][T11262] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.319288][ T36] audit: type=1400 audit(1750768468.311:673): avc: denied { create } for pid=11260 comm="syz.1.3845" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 [ 244.367749][ T36] audit: type=1400 audit(1750768468.311:674): avc: denied { write } for pid=11260 comm="syz.1.3845" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="rootfs" ino=71003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 [ 244.368678][T11262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 244.411676][ T36] audit: type=1400 audit(1750768468.311:675): avc: denied { open } for pid=11260 comm="syz.1.3845" path="/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="rootfs" ino=71003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 [ 244.439052][T11262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1322 [ 244.508843][T11270] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.508995][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 244.532130][ T31] usb 4-1: config 1 interface 0 altsetting 248 bulk endpoint 0x1 has invalid maxpacket 64 [ 244.542585][ T31] usb 4-1: config 1 interface 0 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.556007][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 244.571430][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 244.576759][T11273] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 244.580853][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.581896][T11273] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 244.589031][ T31] usb 4-1: Product: syz [ 244.606604][T11273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1324 [ 244.628952][ T31] usb 4-1: Manufacturer: I [ 244.648949][ T31] usb 4-1: SerialNumber: syz [ 244.659649][T11235] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 244.666973][T11235] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 244.844732][T11280] loop2: detected capacity change from 0 to 7 [ 244.881608][ T31] usb 4-1: USB disconnect, device number 58 [ 245.074357][T11296] can: request_module (can-proto-0) failed. [ 245.212808][T11309] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 245.264463][T11310] rust_binder: Error in use_page_slow: ESRCH [ 245.271282][T11310] rust_binder: use_range failure ESRCH [ 245.277483][T11310] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 245.283120][T11310] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 245.291216][T11310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:146 [ 245.301274][T11311] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 245.371951][T11334] input: syz0 as /devices/virtual/input/input34 [ 245.410112][T11344] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 245.447903][T11334] binder: Bad value for 'max' [ 245.459693][T11335] binder: Bad value for 'max' [ 245.586060][T11356] netlink: 'syz.4.3869': attribute type 4 has an invalid length. [ 245.632303][T11356] overlayfs: missing 'lowerdir' [ 245.666523][T11367] : Can't lookup blockdev [ 245.685121][ T36] audit: type=1400 audit(1750768469.681:676): avc: denied { accept } for pid=11371 comm="syz.3.3875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 245.818858][T11383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:524 [ 245.878010][T11393] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3883'. [ 246.062557][T11420] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.062618][T11420] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.273607][T11440] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.285724][T11440] rust_binder: Error while translating object. [ 246.292425][T11440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 246.298646][T11440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1383 [ 246.349079][ T31] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 246.510347][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 246.518955][ T31] usb 4-1: config 1 interface 0 altsetting 208 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 246.530167][ T31] usb 4-1: config 1 interface 0 altsetting 208 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 246.541197][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 246.549315][ T36] audit: type=1326 audit(1750768470.551:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11443 comm="syz.4.3900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444418e929 code=0x7fc00000 [ 246.549737][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.40 [ 246.583133][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.591271][ T31] usb 4-1: Product: syz [ 246.595589][ T31] usb 4-1: Manufacturer: syz [ 246.605644][ T31] usb 4-1: SerialNumber: syz [ 246.616371][T11396] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 246.828121][ T31] usbhid 4-1:1.0: can't add hid device: -71 [ 246.834898][ T31] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 246.844327][ T31] usb 4-1: USB disconnect, device number 59 [ 247.469107][ T31] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 247.568615][T11467] fuse: Bad value for 'group_id' [ 247.573915][T11467] fuse: Bad value for 'group_id' [ 247.619031][ T31] usb 4-1: Invalid ep0 maxpacket: 32 [ 247.748997][ T31] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 247.899981][ T31] usb 4-1: Invalid ep0 maxpacket: 32 [ 247.906280][ T31] usb usb4-port1: attempt power cycle [ 248.249017][ T31] usb 4-1: new low-speed USB device number 62 using dummy_hcd [ 248.269395][ T31] usb 4-1: Invalid ep0 maxpacket: 32 [ 248.399011][ T31] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 248.419356][ T31] usb 4-1: Invalid ep0 maxpacket: 32 [ 248.424864][ T31] usb usb4-port1: unable to enumerate USB device [ 248.615731][T11497] rust_binder: Error while translating object. [ 248.615765][T11497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 248.622123][T11497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:190 [ 248.743180][T11507] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 115) [ 248.752438][T11507] rust_binder: Error while translating object. [ 248.763669][T11507] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 248.770054][T11507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 248.814151][T11511] overlayfs: failed to resolve './bus': -2 [ 248.854023][T11515] rust_binder: Write failure EINVAL in pid:208 [ 248.908728][T11519] binder: Bad value for 'max' [ 248.937650][T11522] overlayfs: missing 'lowerdir' [ 248.946176][T11524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:215 [ 248.953261][T11522] tmpfs: Unknown parameter 'hash' [ 248.997540][T11526] binder: Unknown parameter 'ǨDt;' [ 249.121471][ T36] audit: type=1326 audit(1750768473.121:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11532 comm="syz.1.3935" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97d9f8e929 code=0x0 [ 249.637576][ T36] audit: type=1400 audit(1750768473.631:679): avc: denied { lock } for pid=11557 comm="syz.4.3943" path="socket:[72757]" dev="sockfs" ino=72757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 249.667323][T11560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.667433][T11560] rust_binder: Write failure EINVAL in pid:1401 [ 249.676117][T11562] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.722343][T11568] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3946'. [ 249.907245][T11583] rust_binder: Write failure EFAULT in pid:229 [ 249.946687][T11591] 9pnet_fd: Insufficient options for proto=fd [ 250.725746][T11629] rust_binder: Write failure EINVAL in pid:257 [ 250.747077][ T36] audit: type=1400 audit(1750768474.741:680): avc: denied { create } for pid=11635 comm="syz.4.3966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 250.803507][T11639] overlayfs: failed to resolve './file0': -2 [ 250.932614][T11646] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 250.943760][T11646] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 251.113305][T11655] can0: slcan on ttyS3. [ 251.180688][T11654] can0 (unregistered): slcan off ttyS3. [ 251.226684][T11668] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 251.298987][ T36] audit: type=1400 audit(1750768475.291:681): avc: denied { write } for pid=875 comm="kworker/1:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=73125 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.021154][T11711] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 252.075882][T11717] kvm: pic: non byte write [ 252.082079][T11717] random: crng reseeded on system resumption [ 252.585956][T11721] tmpfs: Unknown parameter 'siZe' [ 252.953117][T11745] x_tables: duplicate underflow at hook 2 [ 252.960484][T11748] overlayfs: failed to clone upperpath [ 253.013196][T11752] tmpfs: Unknown parameter 'siZe' [ 253.266060][ T36] audit: type=1400 audit(1750768477.261:682): avc: denied { remove_name } for pid=11777 comm="syz.0.4005" name="binder0" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 253.290426][ T36] audit: type=1400 audit(1750768477.261:683): avc: denied { unlink } for pid=11777 comm="syz.0.4005" name="binder0" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.626028][T11786] tmpfs: Unknown parameter 'siZe' [ 253.709631][T11817] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:542 [ 253.969122][ T875] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 254.141283][ T875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 25649, setting to 64 [ 254.159072][ T875] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 254.168413][ T875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.176859][ T875] usb 4-1: Product: syz [ 254.183692][ T875] usb 4-1: Manufacturer: syz [ 254.188377][ T875] usb 4-1: SerialNumber: syz [ 254.194228][ T875] usb 4-1: config 0 descriptor?? [ 254.201383][T11823] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 254.210849][ T875] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input35 [ 254.229048][T11861] overlayfs: failed to clone upperpath [ 254.300818][ T36] audit: type=1400 audit(1750768478.301:684): avc: denied { create } for pid=11864 comm="syz.1.4038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 254.412662][ T875] usb 4-1: USB disconnect, device number 64 [ 254.502164][T11882] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4045'. [ 254.779254][T11892] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 254.798195][T11894] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 254.805378][T11894] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 254.811957][T11894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1435 [ 254.948989][ T36] audit: type=1400 audit(1750768478.941:685): avc: denied { setattr } for pid=11900 comm="syz.3.4052" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 255.379132][T11904] overlayfs: failed to clone lowerpath [ 256.095940][T11940] bpf: Bad value for 'mode' [ 256.309588][T11946] FAT-fs (rnullb0): bogus number of reserved sectors [ 256.316434][T11946] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 256.339942][T11949] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 256.339966][T11949] rust_binder: Error while translating object. [ 256.350692][T11949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 256.356945][T11949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:563 [ 256.671785][T11963] 9pnet_fd: Insufficient options for proto=fd [ 256.686660][T11966] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4077'. [ 256.776542][T11974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 256.776571][T11974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:582 [ 257.485872][T12027] rust_binder: Error while translating object. [ 257.495283][T12027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 257.501902][T12027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:592 [ 258.689064][ T585] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 258.838982][ T585] usb 4-1: Using ep0 maxpacket: 16 [ 258.845811][ T585] usb 4-1: config 1 has an invalid interface number: 4 but max is 2 [ 258.854142][ T585] usb 4-1: config 1 has no interface number 1 [ 258.860727][ T585] usb 4-1: too many endpoints for config 1 interface 4 altsetting 0: 249, using maximum allowed: 30 [ 258.871662][ T585] usb 4-1: config 1 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 249 [ 258.886908][ T585] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.896759][ T585] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.904945][ T585] usb 4-1: Product: syz [ 258.909166][ T585] usb 4-1: Manufacturer: syz [ 258.913826][ T585] usb 4-1: SerialNumber: syz [ 259.541134][T12096] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 259.542085][T12096] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 259.548658][T12096] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1450 [ 259.740516][T12109] IPv6: NLM_F_CREATE should be specified when creating new route [ 259.767820][T12109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.775416][T12109] IPv6: NLM_F_CREATE should be set when creating new route [ 259.927040][T12114] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.934444][T12114] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.941648][T12114] bridge_slave_0: entered allmulticast mode [ 259.948142][T12114] bridge_slave_0: entered promiscuous mode [ 259.955314][T12114] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.962504][T12114] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.969732][T12114] bridge_slave_1: entered allmulticast mode [ 259.976314][T12114] bridge_slave_1: entered promiscuous mode [ 260.050465][T12114] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.057629][T12114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.065009][T12114] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.072112][T12114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.106691][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.115188][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.127860][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.135016][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.165041][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.172209][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.259402][T12114] veth0_vlan: entered promiscuous mode [ 260.289220][T12114] veth1_macvtap: entered promiscuous mode [ 260.809097][ T875] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 260.968973][ T875] usb 6-1: Using ep0 maxpacket: 32 [ 260.989320][ T875] usb 6-1: unable to get BOS descriptor or descriptor too short [ 261.008226][ T875] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 261.019618][ T875] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 261.031502][ T875] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 261.042509][ T875] usb 6-1: config 128 has no interface number 0 [ 261.049888][ T875] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 261.061671][ T875] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.072389][ T875] usb 6-1: config 128 interface 127 has no altsetting 0 [ 261.090082][ T875] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 261.109003][ T875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.119311][ T875] usb 6-1: Product: syz [ 261.123538][ T875] usb 6-1: Manufacturer: syz [ 261.138499][ T875] usb 6-1: SerialNumber: syz [ 261.408399][T12133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.417313][T12133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.430050][ T585] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 261.450454][ T585] usb 4-1: USB disconnect, device number 65 [ 261.462417][ T3587] udevd[3587]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 261.968191][T12157] overlayfs: failed to clone upperpath [ 262.023645][ T36] audit: type=1400 audit(1750768486.021:686): avc: denied { map } for pid=12163 comm="syz.1.4151" path="socket:[75920]" dev="sockfs" ino=75920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 262.047740][ T36] audit: type=1400 audit(1750768486.021:687): avc: denied { read } for pid=12163 comm="syz.1.4151" path="socket:[75920]" dev="sockfs" ino=75920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 262.074640][T12166] fuse: Bad value for 'user_id' [ 262.079897][T12166] fuse: Bad value for 'user_id' [ 262.224752][ T36] audit: type=1400 audit(1750768486.221:688): avc: denied { create } for pid=12179 comm="syz.1.4157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 262.771514][T12189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 262.828280][T12197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4165'. [ 262.858082][ T36] audit: type=1400 audit(1750768486.851:689): avc: denied { shutdown } for pid=12198 comm="syz.0.4166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.910485][T12205] binder: Unknown parameter '0xffffffffffffffff' [ 262.978000][T12217] SELinux: failed to load policy [ 263.008997][ T1254] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 263.057387][T12222] can0: slcan on ttyS3. [ 263.119477][T12222] can0 (unregistered): slcan off ttyS3. [ 263.159425][ T1254] usb 4-1: too many configurations: 161, using maximum allowed: 8 [ 263.168233][ T1254] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 113 [ 263.178222][ T1254] usb 4-1: can't read configurations, error -22 [ 263.311177][ T1254] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 263.469375][ T1254] usb 4-1: too many configurations: 161, using maximum allowed: 8 [ 263.478133][ T1254] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 113 [ 263.487036][ T1254] usb 4-1: can't read configurations, error -22 [ 263.493834][ T1254] usb usb4-port1: attempt power cycle [ 263.677430][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4187'. [ 263.839152][ T1254] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 263.860005][ T1254] usb 4-1: too many configurations: 161, using maximum allowed: 8 [ 263.868716][ T1254] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 113 [ 263.877451][ T1254] usb 4-1: can't read configurations, error -22 [ 264.009053][ T1254] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 264.029880][ T1254] usb 4-1: too many configurations: 161, using maximum allowed: 8 [ 264.038730][ T1254] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 113 [ 264.047429][ T1254] usb 4-1: can't read configurations, error -22 [ 264.054056][ T1254] usb usb4-port1: unable to enumerate USB device [ 264.857479][T12302] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.864766][T12302] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.872077][T12302] bridge_slave_0: entered allmulticast mode [ 264.878419][T12302] bridge_slave_0: entered promiscuous mode [ 264.885357][T12302] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.892492][T12302] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.899811][T12302] bridge_slave_1: entered allmulticast mode [ 264.906350][T12302] bridge_slave_1: entered promiscuous mode [ 264.971809][T12302] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.979024][T12302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.986331][T12302] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.993568][T12302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.020313][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.027874][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.038430][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.045566][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.055235][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.062344][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.097407][T12302] veth0_vlan: entered promiscuous mode [ 265.111148][T12302] veth1_macvtap: entered promiscuous mode [ 265.145699][ T36] audit: type=1400 audit(1750768489.141:690): avc: denied { audit_read } for pid=12306 comm="syz.1.4195" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 265.145817][T12307] SELinux: security_context_str_to_sid () failed with errno=-22 [ 265.189983][T12311] incfs: mount failed -22 [ 265.194487][T12311] incfs: mount failed -22 [ 265.199208][T12311] incfs: mount failed -22 [ 265.203791][T12311] incfs: mount failed -22 [ 265.208271][T12311] incfs: mount failed -22 [ 265.212936][T12311] incfs: mount failed -22 [ 265.217471][T12311] incfs: mount failed -22 [ 265.222079][T12311] incfs: mount failed -22 [ 265.226543][T12311] incfs: mount failed -22 [ 265.231184][T12311] incfs: mount failed -22 [ 265.235723][T12311] incfs: mount failed -22 [ 265.240339][T12311] incfs: mount failed -22 [ 265.240824][T12310] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4196'. [ 265.244939][T12311] incfs: mount failed -22 [ 265.529039][ T1254] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 265.679762][ T1254] usb 2-1: no configurations [ 265.684514][ T1254] usb 2-1: can't read configurations, error -22 [ 265.819983][ T1254] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 265.821956][T12316] rust_binder: Write failure EFAULT in pid:619 [ 265.969440][ T1254] usb 2-1: no configurations [ 265.980702][ T1254] usb 2-1: can't read configurations, error -22 [ 265.987148][ T1254] usb usb2-port1: attempt power cycle [ 266.139626][ T306] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 266.243807][ T875] usb 6-1: USB disconnect, device number 2 [ 266.248638][ T3587] udevd[3587]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 266.301865][ T306] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 266.311031][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.319069][ T306] usb 4-1: Product: syz [ 266.323314][ T306] usb 4-1: Manufacturer: syz [ 266.327929][ T306] usb 4-1: SerialNumber: syz [ 266.334905][ T306] r8152-cfgselector 4-1: Unknown version 0x0000 [ 266.339061][ T1254] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 266.341245][ T306] r8152-cfgselector 4-1: config 0 descriptor?? [ 266.369874][ T1254] usb 2-1: no configurations [ 266.374531][ T1254] usb 2-1: can't read configurations, error -22 [ 266.449846][ T36] audit: type=1326 audit(1750768490.451:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="syz.5.4201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ac3b8e929 code=0x0 [ 266.509076][ T1254] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 266.521053][T12326] SELinux: failed to load policy [ 266.540062][ T1254] usb 2-1: no configurations [ 266.544738][ T1254] usb 2-1: can't read configurations, error -22 [ 266.551201][T12327] binder: Unknown parameter 'rI' [ 266.552183][ T1254] usb usb2-port1: unable to enumerate USB device [ 266.558797][ T306] r8152-cfgselector 4-1: Unknown version 0x0000 [ 266.570216][ T306] r8152-cfgselector 4-1: bad CDC descriptors [ 266.609539][T12338] rust_binder: Write failure EINVAL in pid:398 [ 266.609677][T12338] rust_binder: Write failure EINVAL in pid:398 [ 266.616278][T12338] rust_binder: Write failure EINVAL in pid:398 [ 266.633864][ T36] audit: type=1400 audit(1750768490.631:692): avc: denied { append } for pid=12339 comm="syz.0.4207" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 266.766051][ T306] r8152-cfgselector 4-1: USB disconnect, device number 70 [ 266.937774][ T36] audit: type=1326 audit(1750768490.931:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12386 comm="syz.0.4213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e0598e929 code=0x0 [ 267.307010][T12396] rust_binder: Write failure EFAULT in pid:625 [ 267.324579][T12399] rust_binder: Write failure EFAULT in pid:17 [ 267.359250][T12407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 267.423365][T12413] rust_binder: Write failure EINVAL in pid:30 [ 267.432277][T12413] rust_binder: Write failure EINVAL in pid:30 [ 267.453464][T12415] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4224'. [ 267.759033][ T306] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 267.910171][ T306] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 267.921221][ T306] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 267.931714][ T306] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 267.940820][ T306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 267.948852][ T306] usb 6-1: SerialNumber: syz [ 267.956158][ T306] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 267.964626][ T306] usb-storage 6-1:1.0: USB Mass Storage device detected [ 267.972383][ T306] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 267.980737][ T306] scsi host1: usb-storage 6-1:1.0 [ 268.152613][T12420] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 268.152645][T12420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 268.161477][T12420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:628 [ 268.306077][T12422] rust_binder: Error while translating object. [ 268.315324][T12422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 268.321562][T12422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 268.342003][T12424] rust_binder: Write failure EINVAL in pid:13 [ 268.351748][T12424] rust_binder: Error while translating object. [ 268.357856][T12424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 268.364182][T12424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 268.396296][T12428] binder: Bad value for 'max' [ 268.486434][T12442] netlink: 'syz.1.4234': attribute type 4 has an invalid length. [ 268.494393][T12442] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4234'. [ 268.519646][ T585] usb 6-1: USB disconnect, device number 3 [ 268.684206][T12449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 268.738980][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 268.748146][T12459] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 268.763280][T12459] SELinux: failed to load policy [ 268.820126][T12464] binder: Unknown parameter '0000000000000000000500000000000000000000000' [ 268.889927][T12471] binder: Unknown parameter 'max:k>Q[ ' [ 268.898965][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 268.905311][ T10] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 268.913866][ T10] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 268.922712][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.933025][ T10] usb 2-1: config 0 has no interface number 0 [ 268.940065][ T10] usb 2-1: config 0 interface 247 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 268.953454][ T10] usb 2-1: config 0 interface 247 has no altsetting 0 [ 268.962834][ T10] usb 2-1: New USB device found, idVendor=0b05, idProduct=171d, bcdDevice=3d.56 [ 268.972046][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.980109][ T10] usb 2-1: Product: syz [ 268.984302][ T10] usb 2-1: Manufacturer: syz [ 268.988975][ T10] usb 2-1: SerialNumber: syz [ 268.994341][ T10] usb 2-1: config 0 descriptor?? [ 269.199006][ T875] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 269.348953][ T875] usb 4-1: Using ep0 maxpacket: 32 [ 269.355523][ T875] usb 4-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config [ 269.365914][ T875] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 269.374939][ T875] usb 4-1: New USB device found, idVendor=1e7d, idProduct=1b5a, bcdDevice= 0.00 [ 269.384027][ T875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.392730][ T875] usb 4-1: config 0 descriptor?? [ 269.601272][T12478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.609883][T12478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.623052][ T10] usb 4-1: USB disconnect, device number 71 [ 269.647795][T12486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.657370][T12486] SELinux: failed to load policy [ 269.723745][T12488] FAULT_INJECTION: forcing a failure. [ 269.723745][T12488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.737055][T12488] CPU: 1 UID: 0 PID: 12488 Comm: syz.3.4251 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 269.737095][T12488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.737113][T12488] Call Trace: [ 269.737125][T12488] [ 269.737135][T12488] __dump_stack+0x21/0x30 [ 269.737173][T12488] dump_stack_lvl+0x10c/0x190 [ 269.737202][T12488] ? __cfi_dump_stack_lvl+0x10/0x10 [ 269.737232][T12488] ? proc_fail_nth_write+0x17e/0x210 [ 269.737259][T12488] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 269.737284][T12488] dump_stack+0x19/0x20 [ 269.737311][T12488] should_fail_ex+0x3d9/0x530 [ 269.737342][T12488] should_fail+0xf/0x20 [ 269.737368][T12488] should_fail_usercopy+0x1e/0x30 [ 269.737398][T12488] _copy_from_user+0x22/0xb0 [ 269.737432][T12488] get_itimerspec64+0xa2/0x2f0 [ 269.737469][T12488] ? __cfi_get_itimerspec64+0x10/0x10 [ 269.737504][T12488] ? mutex_unlock+0x8b/0x240 [ 269.737542][T12488] ? __cfi_mutex_unlock+0x10/0x10 [ 269.737570][T12488] ? __fget_files+0x2c5/0x340 [ 269.737615][T12488] __x64_sys_timer_settime+0x143/0x240 [ 269.737644][T12488] ? __cfi___x64_sys_timer_settime+0x10/0x10 [ 269.737675][T12488] ? __kasan_check_read+0x15/0x20 [ 269.737705][T12488] x64_sys_call+0x1cd7/0x2ee0 [ 269.737738][T12488] do_syscall_64+0x58/0xf0 [ 269.737760][T12488] ? clear_bhb_loop+0x50/0xa0 [ 269.737787][T12488] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 269.737814][T12488] RIP: 0033:0x7fe65a38e929 [ 269.737853][T12488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.737874][T12488] RSP: 002b:00007fe65b2bb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 269.737910][T12488] RAX: ffffffffffffffda RBX: 00007fe65a5b5fa0 RCX: 00007fe65a38e929 [ 269.737930][T12488] RDX: 0000200000000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 269.737946][T12488] RBP: 00007fe65b2bb090 R08: 0000000000000000 R09: 0000000000000000 [ 269.737962][T12488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.737978][T12488] R13: 0000000000000000 R14: 00007fe65a5b5fa0 R15: 00007ffd118fd728 [ 269.738002][T12488] [ 269.967899][T12492] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.968581][T12492] rust_binder: Error while translating object. [ 269.975245][T12492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 269.981483][T12492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:671 [ 270.131502][T12512] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.160775][T12512] SELinux: failed to load policy [ 270.197686][T12515] FAULT_INJECTION: forcing a failure. [ 270.197686][T12515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.210874][T12515] CPU: 1 UID: 0 PID: 12515 Comm: syz.0.4261 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 270.210914][T12515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.210926][T12515] Call Trace: [ 270.210933][T12515] [ 270.210940][T12515] __dump_stack+0x21/0x30 [ 270.210963][T12515] dump_stack_lvl+0x10c/0x190 [ 270.210982][T12515] ? __cfi_dump_stack_lvl+0x10/0x10 [ 270.211001][T12515] ? fpu__alloc_mathframe+0xb8/0x160 [ 270.211019][T12515] dump_stack+0x19/0x20 [ 270.211036][T12515] should_fail_ex+0x3d9/0x530 [ 270.211056][T12515] should_fail+0xf/0x20 [ 270.211073][T12515] should_fail_usercopy+0x1e/0x30 [ 270.211093][T12515] _copy_to_user+0x24/0xa0 [ 270.211115][T12515] copy_siginfo_to_user+0x26/0xb0 [ 270.211135][T12515] x64_setup_rt_frame+0x768/0xcc0 [ 270.211158][T12515] ? __cfi_x64_setup_rt_frame+0x10/0x10 [ 270.211178][T12515] ? mutex_unlock+0x8b/0x240 [ 270.211198][T12515] arch_do_signal_or_restart+0x31d/0x720 [ 270.211219][T12515] ? fput+0x1a5/0x240 [ 270.211233][T12515] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 270.211262][T12515] ? ksys_write+0x1ef/0x250 [ 270.211285][T12515] ? __kasan_check_read+0x15/0x20 [ 270.211305][T12515] syscall_exit_to_user_mode+0x58/0xb0 [ 270.211327][T12515] do_syscall_64+0x64/0xf0 [ 270.211341][T12515] ? clear_bhb_loop+0x50/0xa0 [ 270.211359][T12515] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 270.211377][T12515] RIP: 0033:0x7f2e0598d3df [ 270.211391][T12515] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 270.211406][T12515] RSP: 002b:00007f2e067b1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 270.211423][T12515] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 00007f2e0598d3df [ 270.211434][T12515] RDX: 0000000000000001 RSI: 00007f2e067b1090 RDI: 0000000000000003 [ 270.211445][T12515] RBP: 00007f2e067b1090 R08: 0000000000000000 R09: 00007f2e067b0df7 [ 270.211456][T12515] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 270.211466][T12515] R13: 0000000000000000 R14: 00007f2e05bb5fa0 R15: 00007ffe75446a88 [ 270.211480][T12515] [ 270.439120][ T305] bridge_slave_1: left allmulticast mode [ 270.445648][ T305] bridge_slave_1: left promiscuous mode [ 270.451995][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.459940][ T305] bridge_slave_0: left allmulticast mode [ 270.465713][ T305] bridge_slave_0: left promiscuous mode [ 270.472013][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.577125][ T305] tipc: Left network mode [ 270.584384][ T305] veth1_macvtap: left promiscuous mode [ 270.590218][ T305] veth0_vlan: left promiscuous mode [ 270.665491][ T306] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 270.675219][ T306] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 270.740176][T12532] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 270.740214][T12532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:473 [ 270.831421][T12537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.866321][T12541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.883693][T12541] SELinux: failed to load policy [ 270.972887][T12544] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 270.983024][T12544] kvm: pic: level sensitive irq not supported [ 270.983088][T12544] kvm: pic: non byte read [ 271.131237][ T36] audit: type=1400 audit(1750768495.131:694): avc: denied { execute } for pid=12555 comm="syz.3.4276" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 271.202433][ T36] audit: type=1400 audit(1750768495.201:695): avc: denied { setattr } for pid=12555 comm="syz.3.4276" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 271.202945][T12556] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4276'. [ 271.488668][ T1254] usb 2-1: USB disconnect, device number 55 [ 271.625700][T12565] SELinux: failed to load policy [ 271.787572][T12582] binder: Unknown parameter 'permit_directio' [ 271.797633][T12582] binder: Unknown parameter 'permit_directio' [ 271.809893][T12582] binder: Unknown parameter 'permit_directio' [ 271.816236][T12582] binder: Unknown parameter 'permit_directio' [ 271.823123][T12582] binder: Unknown parameter 'permit_directio' [ 271.839355][T12582] binder: Unknown parameter 'permit_directio' [ 271.851015][T12582] binder: Unknown parameter 'permit_directio' [ 271.859725][T12582] binder: Unknown parameter 'permit_directio' [ 271.866684][T12582] binder: Unknown parameter 'permit_directio' [ 271.873249][T12582] binder: Unknown parameter 'permit_directio' [ 271.879700][T12582] binder: Unknown parameter 'permit_directio' [ 271.886001][T12582] binder: Unknown parameter 'permit_directio' [ 271.893037][T12582] binder: Unknown parameter 'permit_directio' [ 271.899755][T12582] binder: Unknown parameter 'permit_directio' [ 271.906071][T12582] binder: Unknown parameter 'permit_directio' [ 271.912616][T12582] binder: Unknown parameter 'permit_directio' [ 271.919140][T12582] binder: Unknown parameter 'permit_directio' [ 271.925701][T12582] binder: Unknown parameter 'permit_directio' [ 271.939322][T12582] binder: Unknown parameter 'permit_directio' [ 271.949415][T12582] binder: Unknown parameter 'permit_directio' [ 271.960927][T12582] binder: Unknown parameter 'permit_directio' [ 271.967509][T12582] binder: Unknown parameter 'permit_directio' [ 271.974937][T12582] binder: Unknown parameter 'permit_directio' [ 271.981740][T12582] binder: Unknown parameter 'permit_directio' [ 271.988281][T12582] binder: Unknown parameter 'permit_directio' [ 271.996730][T12582] binder: Unknown parameter 'permit_directio' [ 272.003453][T12582] binder: Unknown parameter 'permit_directio' [ 272.012333][T12582] binder: Unknown parameter 'permit_directio' [ 272.018717][T12582] binder: Unknown parameter 'permit_directio' [ 272.025256][T12582] binder: Unknown parameter 'permit_directio' [ 272.031966][T12582] binder: Unknown parameter 'permit_directio' [ 272.038312][T12582] binder: Unknown parameter 'permit_directio' [ 272.044937][T12589] batadv_slave_1: entered promiscuous mode [ 272.045042][T12582] binder: Unknown parameter 'permit_directio' [ 272.066681][T12588] batadv_slave_1: left promiscuous mode [ 272.081323][T12591] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 272.109179][T12596] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 272.136077][T12596] SELinux: failed to load policy [ 272.428953][ T585] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 272.588937][ T585] usb 4-1: Using ep0 maxpacket: 8 [ 272.608611][ T585] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.628956][ T585] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.658936][ T585] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.672220][ T585] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 272.689166][ T585] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.709625][ T585] usb 4-1: config 0 descriptor?? [ 272.888937][T12609] binder: Bad value for 'stats' [ 272.915616][T12605] netlink: 393 bytes leftover after parsing attributes in process `syz.3.4292'. [ 273.127429][ T585] hid-rmi 0003:06CB:81A7.001C: unknown main item tag 0x0 [ 273.134653][ T585] hid-rmi 0003:06CB:81A7.001C: unknown main item tag 0x0 [ 273.141889][ T585] hid-rmi 0003:06CB:81A7.001C: unknown main item tag 0x0 [ 273.149039][ T585] hid-rmi 0003:06CB:81A7.001C: unknown main item tag 0x0 [ 273.156161][ T585] hid-rmi 0003:06CB:81A7.001C: unknown main item tag 0x0 [ 273.163899][ T585] hid-rmi 0003:06CB:81A7.001C: unknown main item tag 0x0 [ 273.171582][ T585] hid-rmi 0003:06CB:81A7.001C: unknown main item tag 0x0 [ 273.178654][ T585] hid-rmi 0003:06CB:81A7.001C: unbalanced collection at end of report description [ 273.189529][ T585] hid-rmi 0003:06CB:81A7.001C: parse failed [ 273.195627][ T585] hid-rmi 0003:06CB:81A7.001C: probe with driver hid-rmi failed with error -22 [ 273.228972][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 273.240854][T12626] SELinux: failed to load policy [ 273.331469][T12605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.340170][T12605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.380177][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.391565][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.401398][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 273.413347][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.422620][ T9] usb 2-1: config 0 descriptor?? [ 273.449549][T12640] tmpfs: Unknown parameter '' [ 273.454701][T12639] input input38: cannot allocate more than FF_MAX_EFFECTS effects [ 273.554140][T12647] random: crng reseeded on system resumption [ 273.650335][T12652] rust_binder: Error while translating object. [ 273.650382][T12652] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 273.656653][T12652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:99 [ 273.694700][T12654] SELinux: failed to load policy [ 273.834351][ T9] lenovo 0003:17EF:6047.001D: unknown main item tag 0x0 [ 273.841566][ T9] lenovo 0003:17EF:6047.001D: unknown main item tag 0x0 [ 273.850311][ T9] lenovo 0003:17EF:6047.001D: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 273.922730][T12670] fuse: Bad value for 'fd' [ 273.978978][ T875] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 274.027186][T12676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:495 [ 274.037634][T12616] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 274.047028][T12616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:55 [ 274.057858][ T9] lenovo 0003:17EF:6047.001D: Failed to switch F7/9/11 mode: -71 [ 274.075138][ T9] lenovo 0003:17EF:6047.001D: Failed to switch middle button: -71 [ 274.083268][ T9] lenovo 0003:17EF:6047.001D: Fn-lock setting failed: -71 [ 274.090781][ T9] lenovo 0003:17EF:6047.001D: Sensitivity setting failed: -71 [ 274.103305][ T9] usb 2-1: USB disconnect, device number 56 [ 274.134028][T12680] SELinux: failed to load policy [ 274.140802][ T875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 274.152001][ T875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.161857][ T875] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 274.170995][ T875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.179703][ T875] usb 6-1: config 0 descriptor?? [ 274.215605][T12683] input: syz1 as /devices/virtual/input/input39 [ 274.224200][T12683] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 274.231465][T12683] rust_binder: Write failure EINVAL in pid:502 [ 274.275340][T12690] mmap: syz.0.4323 (12690): VmData 29208576 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 274.590156][ T875] zydacron 0003:13EC:0006.001E: unknown main item tag 0x6 [ 274.601453][ T875] zydacron 0003:13EC:0006.001E: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.5-1/input0 [ 274.779688][T12700] net_ratelimit: 23 callbacks suppressed [ 274.779710][T12700] vlan0: mtu greater than device maximum [ 274.791413][T12656] rust_binder: Write failure EINVAL in pid:103 [ 274.805998][ T31] usb 6-1: USB disconnect, device number 4 [ 274.847314][T12707] SELinux: failed to load policy [ 274.991048][T12723] rust_binder: Write failure EINVAL in pid:67 [ 275.122332][T12725] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4335'. [ 275.175158][T12736] SELinux: failed to load policy [ 275.202084][ T9] usb 4-1: USB disconnect, device number 72 [ 275.287079][ T36] audit: type=1400 audit(1750768499.281:696): avc: denied { accept } for pid=12741 comm="syz.3.4342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 275.326025][T12750] rust_binder: Got transaction with invalid offset. [ 275.327150][T12750] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 275.334458][T12750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:519 [ 275.391805][ T36] audit: type=1400 audit(1750768499.391:697): avc: denied { listen } for pid=12755 comm="syz.5.4348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 275.516840][T12771] SELinux: failed to load policy [ 275.600918][T12773] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 275.666251][T12776] wg2: entered promiscuous mode [ 275.679919][T12776] wg2: entered allmulticast mode [ 275.786442][T12784] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55466 sclass=netlink_xfrm_socket pid=12784 comm=syz.0.4359 [ 275.999042][ T875] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 276.130292][T12797] rust_binder: Write failure EINVAL in pid:543 [ 276.148950][ T875] usb 6-1: Using ep0 maxpacket: 8 [ 276.152697][T12800] bpf: Bad value for 'mode' [ 276.157187][ T875] usb 6-1: config 1 has an invalid interface number: 3 but max is 2 [ 276.173154][T12803] binder: Unknown parameter 'suaba' [ 276.180995][T12805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:551 [ 276.181785][ T875] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 276.202692][ T875] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 276.211918][ T875] usb 6-1: config 1 has no interface number 1 [ 276.218068][ T875] usb 6-1: too many endpoints for config 1 interface 3 altsetting 4: 226, using maximum allowed: 30 [ 276.230383][ T875] usb 6-1: config 1 interface 3 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 276.244193][ T875] usb 6-1: config 1 interface 3 has no altsetting 0 [ 276.252741][ T875] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.261959][ T875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.270417][ T875] usb 6-1: Manufacturer: ъ [ 276.275031][ T875] usb 6-1: SerialNumber: 姜숽揭놌ක黮鴜か屉尔祵娳볻뎯嵽뤡ᮔ懫꧙ꋸ暦辚錡冚諲઎ࢧ齀扫Κൢ鋮恳烲 [ 276.342523][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4367'. [ 276.555896][T12824] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 276.657431][T12831] rust_binder: Write failure EINVAL in pid:755 [ 276.657878][T12832] rust_binder: Read failure Err(EAGAIN) in pid:755 [ 276.698508][ T875] usb 6-1: 0:2 : does not exist [ 276.701574][T12836] binder: Unknown parameter 'permit_directio' [ 276.714458][ T875] usb 6-1: USB disconnect, device number 5 [ 277.021403][T12845] binder: Binderfs stats mode cannot be changed during a remount [ 277.030006][T12845] binder: Binderfs stats mode cannot be changed during a remount [ 277.049181][ T31] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 277.200356][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.210564][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.224102][ T31] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 277.233369][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.242389][ T31] usb 4-1: config 0 descriptor?? [ 277.647439][T12862] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 277.652067][ T1254] usb 4-1: USB disconnect, device number 73 [ 277.716036][T12870] binder: Binderfs stats mode cannot be changed during a remount [ 277.837575][T12881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12881 comm=syz.0.4393 [ 278.108138][T12883] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 278.115399][T12883] rust_binder: Write failure EINVAL in pid:157 [ 278.185704][T12890] binder: Bad value for 'max' [ 278.219562][T12893] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 278.228020][T12892] rust_binder: Write failure EINVAL in pid:772 [ 278.260252][T12896] rust_binder: Error while translating object. [ 278.266539][T12896] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 278.273214][T12896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:776 [ 278.324622][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4401'. [ 278.388356][T12912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 278.389088][T12912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 278.395637][T12913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 278.414526][T12915] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4406'. [ 278.427776][T12916] overlayfs: failed to resolve './file0': -2 [ 278.471233][T12920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:789 [ 278.516363][ T36] audit: type=1326 audit(1750768502.511:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12926 comm="syz.3.4411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe65a38e929 code=0x0 [ 278.629013][ T875] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 278.790469][ T875] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 278.801751][ T875] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 278.812761][ T875] usb 2-1: config 0 interface 0 has no altsetting 0 [ 278.819707][ T875] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 278.828824][ T875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.837744][ T875] usb 2-1: config 0 descriptor?? [ 278.843110][T12910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 278.962234][ T36] audit: type=1326 audit(1750768502.961:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac3b8e929 code=0x7fc00000 [ 278.985929][ T36] audit: type=1326 audit(1750768502.961:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ac3b8e929 code=0x7fc00000 [ 279.009793][ T36] audit: type=1326 audit(1750768502.961:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac3b8e929 code=0x7fc00000 [ 279.033800][ T36] audit: type=1326 audit(1750768502.961:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac3b8e929 code=0x7fc00000 [ 279.057717][ T36] audit: type=1326 audit(1750768502.961:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac3b8e929 code=0x7fc00000 [ 279.081275][ T36] audit: type=1326 audit(1750768502.961:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac3b8e929 code=0x7fc00000 [ 279.104927][ T36] audit: type=1326 audit(1750768502.961:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac3b8e929 code=0x7fc00000 [ 279.128433][ T36] audit: type=1326 audit(1750768502.961:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac3b8e929 code=0x7fc00000 [ 279.152546][ T36] audit: type=1326 audit(1750768502.961:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac3b8e929 code=0x7fc00000 [ 279.197551][T12931] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 279.226340][T12933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 279.242073][T12935] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 279.242073][T12935] null pointer dereference occurred [ 279.261205][T12935] ------------[ cut here ]------------ [ 279.266028][ T875] holtek_mouse 0003:04D9:A067.001F: unknown main item tag 0x4 [ 279.266686][T12935] kernel BUG at rust/helpers/bug.c:7! [ 279.281168][T12935] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 279.288173][T12935] CPU: 1 UID: 0 PID: 12935 Comm: syz.5.4414 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 279.301733][T12935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 279.311801][T12935] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 279.317104][T12935] Code: 3e ca e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 5a 56 9e fd 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 10 92 d7 71 90 90 90 90 90 90 90 90 90 [ 279.336748][T12935] RSP: 0018:ffffc900038b71b0 EFLAGS: 00010246 [ 279.342832][T12935] RAX: 000000000000005a RBX: 1ffff92000716e38 RCX: 54421b3e1a912300 [ 279.350822][T12935] RDX: ffffc900039d9000 RSI: 0000000000003f41 RDI: 0000000000003f42 [ 279.358821][T12935] RBP: ffffc900038b71b0 R08: ffffc900038b6ea7 R09: 1ffff92000716dd4 [ 279.366830][T12935] R10: dffffc0000000000 R11: fffff52000716dd5 R12: 0000000000000000 [ 279.374831][T12935] R13: dffffc0000000000 R14: ffffc900038b71e0 R15: ffffc900038b7210 [ 279.382838][T12935] FS: 00007f0ac49166c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 279.391785][T12935] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.398389][T12935] CR2: 000000110c272599 CR3: 000000011a4c8000 CR4: 00000000003526b0 [ 279.406566][T12935] Call Trace: [ 279.409892][T12935] [ 279.412838][T12935] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 279.420321][T12935] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 279.428323][T12935] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 279.441898][T12935] ? p9pdu_vwritef+0x2720/0x2720 [ 279.446883][T12935] ? radix_tree_node_alloc+0x1af/0x400 [ 279.452373][T12935] ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0 [ 279.460655][T12935] ? __asan_memcpy+0x5a/0x80 [ 279.465279][T12935] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 279.473402][T12935] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 279.482200][T12935] ? p9pdu_writef+0xdb/0x130 [ 279.486816][T12935] ? p9pdu_vwritef+0x2720/0x2720 [ 279.491810][T12935] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 279.500963][T12935] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 279.509843][T12935] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 279.517698][T12935] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 279.525363][T12935] ? p9_client_prepare_req+0x732/0xa10 [ 279.530907][T12935] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 279.539176][T12935] ? __kasan_check_write+0x18/0x20 [ 279.544309][T12935] ? _raw_spin_lock+0x8c/0x120 [ 279.549097][T12935] ? __cfi__raw_spin_lock+0x10/0x10 [ 279.554317][T12935] ? __kasan_check_write+0x18/0x20 [ 279.559459][T12935] ? _raw_spin_lock+0x8c/0x120 [ 279.564282][T12935] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 279.572604][T12935] p9_fd_request+0x38d/0x500 [ 279.577220][T12935] p9_client_rpc+0x2f9/0xb40 [ 279.581843][T12935] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 279.590110][T12935] ? p9_fid_create+0x3d0/0x3d0 [ 279.594901][T12935] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 279.603171][T12935] ? p9_conn_create+0x4c9/0x570 [ 279.608039][T12935] ? p9_fd_create+0x2f3/0x4c0 [ 279.612733][T12935] p9_client_create+0x96a/0x1190 [ 279.617692][T12935] ? __cfi_p9_client_create+0x10/0x10 [ 279.623100][T12935] ? kasan_save_alloc_info+0x40/0x50 [ 279.628410][T12935] ? __kasan_kmalloc+0x96/0xb0 [ 279.633207][T12935] ? kstrdup+0x7b/0x140 [ 279.637385][T12935] ? __kasan_check_write+0x18/0x20 [ 279.642566][T12935] v9fs_session_init+0x1e1/0x1820 [ 279.647627][T12935] ? __cfi_v9fs_session_init+0x10/0x10 [ 279.653109][T12935] ? kasan_save_alloc_info+0x40/0x50 [ 279.658948][T12935] ? __kasan_kmalloc+0x96/0xb0 [ 279.663735][T12935] ? v9fs_mount+0xbd/0xa00 [ 279.668172][T12935] v9fs_mount+0xd7/0xa00 [ 279.672442][T12935] ? __cfi_v9fs_mount+0x10/0x10 [ 279.677311][T12935] ? selinux_capable+0x38/0x50 [ 279.682148][T12935] legacy_get_tree+0x103/0x1b0 [ 279.686936][T12935] ? __cfi_v9fs_mount+0x10/0x10 [ 279.691903][T12935] vfs_get_tree+0x9e/0x290 [ 279.696368][T12935] do_new_mount+0x251/0xb40 [ 279.701197][T12935] ? security_capable+0xcf/0xf0 [ 279.706067][T12935] path_mount+0x688/0x1050 [ 279.710501][T12935] ? putname+0x113/0x150 [ 279.714791][T12935] __se_sys_mount+0x2bd/0x480 [ 279.719491][T12935] ? __x64_sys_mount+0xf0/0xf0 [ 279.724273][T12935] ? __kasan_check_write+0x18/0x20 [ 279.729596][T12935] ? fpregs_restore_userregs+0x11d/0x260 [ 279.735286][T12935] __x64_sys_mount+0xc3/0xf0 [ 279.739940][T12935] x64_sys_call+0x2021/0x2ee0 [ 279.744646][T12935] do_syscall_64+0x58/0xf0 [ 279.749075][T12935] ? clear_bhb_loop+0x50/0xa0 [ 279.753769][T12935] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 279.759726][T12935] RIP: 0033:0x7f0ac3b8e929 [ 279.764334][T12935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.784041][T12935] RSP: 002b:00007f0ac4916038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 279.792468][T12935] RAX: ffffffffffffffda RBX: 00007f0ac3db5fa0 RCX: 00007f0ac3b8e929 [ 279.800472][T12935] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 279.808903][T12935] RBP: 00007f0ac3c10b39 R08: 0000200000000140 R09: 0000000000000000 [ 279.816891][T12935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.824895][T12935] R13: 0000000000000000 R14: 00007f0ac3db5fa0 R15: 00007fffd0987f48 [ 279.832912][T12935] [ 279.836038][T12935] Modules linked in: [ 279.840605][T12935] ---[ end trace 0000000000000000 ]--- [ 279.846384][ T875] holtek_mouse 0003:04D9:A067.001F: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.1-1/input0 [ 279.865071][ T306] usb 2-1: USB disconnect, device number 57 [ 279.876964][T12935] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 279.882395][T12935] Code: 3e ca e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 5a 56 9e fd 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 10 92 d7 71 90 90 90 90 90 90 90 90 90 [ 279.886807][T12937] fido_id[12937]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 279.902325][T12935] RSP: 0018:ffffc900038b71b0 EFLAGS: 00010246 [ 279.923123][T12935] RAX: 000000000000005a RBX: 1ffff92000716e38 RCX: 54421b3e1a912300 [ 279.931583][T12935] RDX: ffffc900039d9000 RSI: 0000000000003f41 RDI: 0000000000003f42 [ 279.939662][T12935] RBP: ffffc900038b71b0 R08: ffffc900038b6ea7 R09: 1ffff92000716dd4 [ 279.947678][T12935] R10: dffffc0000000000 R11: fffff52000716dd5 R12: 0000000000000000 [ 279.955825][T12935] R13: dffffc0000000000 R14: ffffc900038b71e0 R15: ffffc900038b7210 [ 279.963886][T12935] FS: 00007f0ac49166c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 279.972911][T12935] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.979964][T12935] CR2: 00007f0ac21f7d58 CR3: 000000011a4c8000 CR4: 00000000003526b0 [ 279.988281][T12935] Kernel panic - not syncing: Fatal exception [ 279.994785][T12935] Kernel Offset: disabled [ 279.999128][T12935] Rebooting in 86400 seconds..