last executing test programs: 5m40.552738281s ago: executing program 2 (id=998): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), r1) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/sync_on_suspend', 0x1a3001, 0x18) write$khugepaged_scan(r3, &(0x7f0000000000), 0x8) (async) write$khugepaged_scan(r3, &(0x7f0000000000), 0x8) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7b, 0x1, 0xf}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7b, 0x1, 0xf}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 5m40.471908009s ago: executing program 2 (id=1000): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', r0, &(0x7f0000000100)='./file0/../file0\x00', 0x145) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000200)=0x9) r1 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @desc1}, &(0x7f0000001080)={0x0, "ddbccf095457dfd2f87457a4e8f6bffca5bf7c026c9125596e954a3c489562061333e72e2946890c19c3edc50daa560000000000000000db6b18d700", 0x1d}, 0x48, 0xfffffffffffffffe) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x800, 0x5, 0x13, 0x4, "37b4d3e0a295c063efbca67058155dae4d051016e2658b6321b6b95afbcccce8383326b28e3bb521f92c100b407eb12bcf8194cd73c1508ac9b61a086cd48fa5", "4f1f59a6a6c31fa7f80111c2fbf28fa76a849280ba805279b0ded705630b65a2", [0x1]}) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000380)) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000da5ef908030410600005fdff00010902127765000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="407d2800000006d5a8625a6fac98cde6d9234321aa106003efe9afc7f1795ada8c71700757dce4a0"], 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x1a, 0x2}, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x23}}) keyctl$setperm(0x5, r1, 0x13220c28) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r1, 0x2, 0x1000}, &(0x7f00000000c0)={'enc=', 'raw', ' hash=', {'sha256-avx2\x00'}}, &(0x7f0000000140)="8ae6", &(0x7f0000000880)=""/4096) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x7}, 0x14) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 5m39.959940859s ago: executing program 2 (id=1014): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="200dd448357507df10dc821f37b36282ceac34008f4384b27f7eda"], 0x15) r2 = dup(r1) r3 = memfd_secret(0x80000) syz_clone3(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0) ftruncate(r3, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write(r3, &(0x7f0000000400)="37213a8b90b64c50bd34f2eb3dd5d80a3bffef5ed39fd6cad291be76f7fbe9b3dd33dd05f870c78f9557a53ec43d49d518ec03f3cd352726504f942bd5e3d14b8eb5ac8bb9274dde554c2e6aaf9ed77170bb1f94aaf067347d162c4430cfa7903832f07184b60bbccbc8076f7d89b62a711d24b586223d453f3704b0107544cceff0598dc0f434fd042618ed40ca68ad4083b5ebd12c335c17e53c7522ed681ccb80e29ac56498b66a651b2b708b2e8fad6ef2b68d991647160ce15966153e63a4c56b6bb6fe0a", 0xc7) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="427df98eb172556a1f14282b0e0e62fb46ddf018a2f59c485028ad6964adddf1f814215b70d030eea1ac253be5a89d4e35d969c08339850347161b8fa20cb61ad9e1f212ef0adbe4a9244b4bb41e097ac56545ea025c73f5b897f0cf1a", @ANYRESHEX=r2, @ANYBLOB=',afid=0x0000000000000008,k']) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r6 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r6, r5, 0x0, 0xffffffff) 5m39.903887555s ago: executing program 2 (id=1015): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f96}, 0xe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f96}, 0xe) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) (async) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 5m39.903283615s ago: executing program 2 (id=1016): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b080003"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) r3 = socket$inet6(0xa, 0x5, 0x7) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x2}, 0x4) r5 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc0a, @mcast1}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x400200, 0x0) sendto$inet6(r5, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r3, 0x4230}], 0x1, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x60, r8, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe6}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb49}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbd}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd04e}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}]}, 0x60}}, 0x8001) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x946}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4810) 5m39.842360251s ago: executing program 2 (id=1019): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000002100001000a0c10000000e6ff224e0000", 0x58}], 0x1) ioctl$BLKRRPART(r1, 0x125f, 0x0) 5m39.775383757s ago: executing program 32 (id=1019): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000002100001000a0c10000000e6ff224e0000", 0x58}], 0x1) ioctl$BLKRRPART(r1, 0x125f, 0x0) 3m15.831429773s ago: executing program 0 (id=2941): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x2}) socket$netlink(0x10, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001580)={0x2, 0xb, 0x1, 0x7, 0x8, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_key={0x1, 0x9}]}, 0x40}}, 0x24000004) unshare(0x2040400) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x5, @mcast2}, 0x1c) capset(&(0x7f0000000040)={0x20071026}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224effffffff", 0x58}], 0x1) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) sendto$packet(r2, &(0x7f0000000d80)="eda55fd5fddeee476d9e0ed8c643bb699a9448045b4e497f27506933658d0d9cb5bae207bd2ccdedfb3bb837d2adc0157eac3572ca7b40c418231fa49f2b0f741888d8652a6d8fb39a9a772ce8b46d23427148fd872f73f88b23b75d2ee45c1863e0af0a2c9d16a273a8d7735fe14c42a493debd15e64bf0cde2b5487cde329a0d2d483ec9202380a63bb21ec30abed29d9fd7d49f344ec5b5bc02344217963d1c43ea689f42c82212e656fd4a7472c8f8f4df229d8860a7", 0xffffffffffffffe3, 0x4000804, &(0x7f0000000d40)={0x11, 0xd, r3, 0x1, 0xfd}, 0x14) r6 = getpgid(0x0) syz_pidfd_open(r6, 0x0) capget(&(0x7f00000002c0)={0x20071026, r6}, &(0x7f0000000e40)={0x1911, 0xb, 0x2, 0x1, 0x5, 0x3196}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x1}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@dev, @loopback, 0x0}, &(0x7f00000003c0)=0xc) sendmmsg$sock(r1, &(0x7f0000000c80)=[{{&(0x7f0000000180)=@in6={0xa, 0x4e20, 0x3b, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000200)="b2c5e69ffd982044b94cc0056615d5dd1d5370ec2b88f9f5aef51d9ec9b54873d3b812cf32de29add51107cd6a7942d2bc9a75039a2756108aee9c21d00b2ffad86a41176a2a00ab0d23137e4d8524589f68c24cf69d5fabe63946e9522df410fd6388da07c2e35ef1fb4be132593bafed719a976a43f2930b0af43cdd750654d399a2dd0457f8f820c3439b4878", 0x8e}, {&(0x7f0000000300)="9a389c736ce0884a70a666415817310fc82f297da5f3136831a4a558a6e75a5da6d9deb82ec29100da4f642c5d62cf5a2bcf377a604ef64e8986ad56424a84c67435461dd0df5b5913e0267a6e2e1e3fe6d2f8a55731028f88cdc06ebd549cd50dc0007582550758c6f74dfe69f4c3ff26e2859c51fdb802cd76bf514b68525ea74126467f8c87180d", 0x89}, {&(0x7f0000000440)="36a997df225e345f614e0cb38ef4610a0e2b18b289cec20bedcb0180a8b73d6b124617bed7a3c23c60a591660e3ab910ba02fde3cd49ba8f2c27c6296296f1b1a6cc437869e4ba0aef4963653b930b6307ea1a89cc280c3053237569664f9e2aa5e76a85b44500b0bbcdf6f8dfc9a22f98efc512b6d7fae961bfd29cab71b5e1a86f90726707dc25ab316c37a85aeca6ab7e82623bccdc4ca487e2425e9a73365ba5ae312c357f4c", 0xa8}, {&(0x7f0000000000)="2e291ad356408a96e32ecb43d120a4bbfc789abb2fde7151", 0x18}, {&(0x7f0000000500)="cefddde6e3a2232d4022f2a0d11b0f4125f3c0b9fbc31538ab3eb616647872d460e8db7bbba8f068847f5323c97ac6f0c4b1cd39db5d2637c6b73d0ab27c7d3bb26a97a5bd989e373859839d695ef125835feacd953a0fcb187998c76a7f144a71512f088c8bb3cdc921c6ca73c520c4f62bfb9a0fc809a8795ad949b5c3c96c4652b070e013e967fd068784e996e856104303e4f75982d95cc0ab7abed39b9c5aea5900f8877034b917", 0xaa}, {&(0x7f00000005c0)="04fbb8df2807cc57e494019aad5e93c83053ce4224e90dccf5b029bf3b06000ef934b3fd7a855617a57d91ad1a9bbc7be5ea16d49e300378dd8e40cccc720a9220ccc49fc33fa879222266f8485c945d2f850bd09aca19c47f4013e3341338fbeb313a1d3bde653153488a6f993a24b09a4b39becbe6d4222c67bb91522510730a52518c8faa6c7b96f85594e2e1227ef44afe6b2500c48765e3d38e0802c1d027b1c458", 0xa4}], 0x6}}, {{&(0x7f0000000700)=@xdp={0x2c, 0x14, r7, 0x9}, 0x80, &(0x7f0000000900)=[{&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000000780)="4d8c097c7051d1bfc7abc3ef0d6c17f7ed8bb1383f8eec0926dfe4e5e26ad85b81a015d4d69459d039db14e7303c8dbad05ebaa0792f790a5c15e30f333e9c29512e8367ae561e15536287f4e53133b129f8aa52e6251b880bc7438098a225b97ab671a963e0de89c284c5448af676e67a5d82d766c5e755ee234d8deabe3baa3adeaa4c1bec87dd7e5c729dc8d41dc0c9a5029ddee9abbebfdfeed0d18a7156d83a8f4cc73bdd1f", 0xa8}, {&(0x7f0000000840)="2a82c50cc0765cf7a498d920754654ed", 0x10}, {&(0x7f0000000880)="ed118ddf6b5781d68202e167dab11dee6a697e3a54de5154c8346e7be77cc3c0e774f4fe70a08c545fddb3d5474a75cd0fc8e0e8818d21b30df212af5c89ebd0014bb1149d10915e43f0fb284926a7e4380bd38ebc8600c16097b0704555996a9786cfc8a18f88539adbe9347501078c876b6552ec", 0x75}], 0x4, &(0x7f0000000940)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x999}}], 0x30}}, {{&(0x7f0000000980)=@phonet={0x23, 0xc, 0xf0, 0x5}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a00)="435fe3f5ca051c69bc0efac29b3a5a55cee64eaa967b4efaed0e64a5f153b3815001a43c7801900560eed3c1f6b231ee337d80ff73809950bdb69552422ba1baa6f20c93e461ed126fb9c5107a2e35c0fdc5fa5e9f7c87856082dbe6165610d6f00dac12f5776d341eb90c534abfec359bf0df4599056ef7d5fa2af5fbdd5fafbe6abf389fa2a9689acb6d4d5d83631bc8669c1cc80b5a3a47d3d819b688b91a21e12a05881bd11afaeabf58", 0xac}, {&(0x7f0000000ac0)="1164096aced99221546c98da1080fe9274700c18bfbd83fe0f4dedb218844373d95581b6afddde05af59c76d6f6c39ae63ec0579ae9784c4bbad6521224aa1c830e9af7a138d465b3a134bce623080f161bb25de14776b881dbdb3fd1caf92efa8a330ea942e09930873e3eedfa87ea432b04f87647e6c0fa8cb26ea788c228f413c20605fddf2300910bd03b6d02af1", 0x90}], 0x2, &(0x7f0000000bc0)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x90}}], 0x3, 0x11) 3m15.684075208s ago: executing program 0 (id=2942): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x345, 0x0, 0x6}]}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 3m15.500657275s ago: executing program 0 (id=2944): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000026080cecc822bc824e2b42cfe15e4179ca4f7db9b067eff65a240288fb3e2bd8fa94ce5fa706e94d3bdad6873164420b7a94ab9", @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf251100000005001200f6000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008081}, 0x4000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}], 0x1, 0xffffffff, 0x8, 0xd) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x67, 0x8, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x67, 0x0, 0x2, 0x2f, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x3c, 0x76, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@empty, 0x8001}, {@rand_addr=0x64010101, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4}, {@broadcast, 0x1}, {@multicast2, 0x6}, {@multicast2}]}, @timestamp_prespec={0x44, 0x1c, 0x70, 0x3, 0x6, [{@multicast2, 0x3ff}, {@broadcast, 0xde31}, {@empty, 0x4}]}, @cipso={0x86, 0x1e, 0x40e3fda70964fe52, [{0x6, 0x7, "97b052d939"}, {0x6, 0x5, "17973c"}, {0x2, 0x4, "e473"}, {0x6, 0x8, "1911eaa9f91b"}]}, @generic={0x88, 0xa, "ebcaf4dde97c79f9"}]}}}}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc141200004788031c09103228", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x1, 0x8, 0x6, 0x8000, {{0xd, 0x4, 0x3, 0x21, 0x34, 0x67, 0x0, 0xa, 0x4, 0x0, @local, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x85, 0x1, 0xf, [{@loopback, 0x4}]}, @timestamp_addr={0x44, 0x14, 0x68, 0x1, 0x9, [{@private=0xa010102, 0x2}, {@empty, 0x9}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x20, 0x7800, 0xfffffffb, 0x4, {{0x2e, 0x4, 0x2, 0x24, 0xb8, 0x64, 0x0, 0xfd, 0x2f, 0x0, @private=0xa010102, @loopback, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x9b, 0x3, 0x8, [{@broadcast, 0x2}, {@multicast1, 0x774d}, {@multicast2, 0x81}, {@broadcast, 0x101}, {@empty, 0x40}]}, @timestamp={0x44, 0x14, 0xfc, 0x0, 0x1, [0x9, 0x5, 0xe, 0xfffff000]}, @lsrr={0x83, 0x2b, 0xc9, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x28}, @broadcast, @remote, @remote]}, @timestamp_addr={0x44, 0xc, 0x2, 0x1, 0x6, [{@rand_addr=0x64010100, 0x1}]}, @noop, @ssrr={0x89, 0x27, 0x87, [@loopback, @rand_addr=0x64010100, @multicast2, @rand_addr=0x64010100, @local, @local, @local, @local, @loopback]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x40, 0x20, 0x9, 0x0, {{0x7, 0x4, 0x0, 0x8, 0x1c, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @broadcast, {[@end, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x7b7, 0x1, 0x80, 0x7, {{0x44, 0x4, 0x3, 0x26, 0x110, 0x65, 0x0, 0x4f, 0x2, 0x0, @empty, @private=0xa010101, {[@timestamp_prespec={0x44, 0x4c, 0x5c, 0x3, 0x7, [{@remote, 0x5}, {@loopback, 0x8}, {@private=0xa010102, 0x6}, {@broadcast, 0x2}, {@multicast2, 0xa}, {@empty, 0x1}, {@loopback, 0xfffffffc}, {@loopback, 0x8}, {@remote, 0xf16}]}, @generic={0x94, 0x3, '-'}, @noop, @cipso={0x86, 0x60, 0x1, [{0x2, 0xf, "9b80f96d26167ef1b1b52c35f7"}, {0x5, 0x11, "cbbb0c8808fa68fe6e1aecc00cd856"}, {0x5, 0xa, "7a49dc21d7a905b7"}, {0x7, 0xb, "afcb50292ed36a54cd"}, {0x5, 0xd, "76e153df47148c74671cab"}, {0x1d25ef01f40b9df0, 0x3, "a4"}, {0x6, 0x11, "e1619a1dec125fe4c1a8aec3c38e1c"}, {0x7, 0x4, '^A'}]}, @end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x9e, [@local, @rand_addr=0x64010100, @loopback, @loopback, @empty]}, @timestamp_prespec={0x44, 0x2c, 0x8d, 0x3, 0x8, [{@multicast2, 0x80000000}, {@multicast1, 0xd6}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x575bd72b}, {@loopback, 0x8}, {@multicast1, 0xe278}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000800)={@initdev, 0x0}, &(0x7f0000000840)=0x14) r13 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r13, &(0x7f00000000c0)={0x1d, r14}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000880)={@rand_addr, @dev, 0x0}, &(0x7f00000008c0)=0xc) r16 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r16, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r17 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r16, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x40, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r18, 0x1, 0xe5, 0x6, @local}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000900)={'sit0\x00', 0x0, 0x7800, 0x700, 0x4, 0xa, {{0x19, 0x4, 0x1, 0x2d, 0x64, 0x64, 0x0, 0xb8, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x22}, {[@lsrr={0x83, 0xb, 0xa0, [@local, @empty]}, @timestamp={0x44, 0x10, 0x58, 0x0, 0xb, [0x3, 0xffff, 0x5]}, @timestamp={0x44, 0x20, 0xd4, 0x0, 0xb, [0x4, 0x4aa, 0xb, 0x6, 0x5, 0x1000, 0xb1]}, @end, @cipso={0x86, 0x11, 0x1, [{0x2, 0xb, "2b80c0daa936b1203a"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ac0)={'gretap0\x00', &(0x7f0000000a00)={'tunl0\x00', 0x0, 0x20, 0x40, 0x7fff, 0x0, {{0x24, 0x4, 0x2, 0x1a, 0x90, 0x66, 0x0, 0x0, 0x2f, 0x0, @local, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0xf3, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x401}, {@loopback, 0x4}, {@loopback, 0x6}]}, @ssrr={0x89, 0x1f, 0x7, [@private=0xa010102, @remote, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1]}, @noop, @timestamp_prespec={0x44, 0xc, 0xce, 0x3, 0xe, [{@local}]}, @timestamp_prespec={0x44, 0x1c, 0xb6, 0x3, 0x6, [{@remote, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fe}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x5}]}, @lsrr={0x83, 0xb, 0xb3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x10, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x488}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xb898a92fb235acb3}, 0xc, &(0x7f0000000b00)={&(0x7f0000001800)=ANY=[@ANYBLOB="6c060000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000101000008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="34010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400f000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="2401028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="7400028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000008000100", @ANYRES32=r11, @ANYBLOB="4802028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400faffffff3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400f9ffffff08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r18, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="84000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r19, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=r20, @ANYBLOB], 0x66c}, 0x1, 0x0, 0x0, 0x40048}, 0x20008800) 3m15.34652019s ago: executing program 0 (id=2946): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0xd}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "1f7b262124df6966712712b6577c5f72"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3a}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x80) socketpair(0x35ac7e443bf3058e, 0x1, 0x3, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r0, 0x200, 0xfff, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x4c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "7af69ad358d6e2d8"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "ef48b0461efd551b"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xc}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "2c9a536c32865cd9"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20048000}, 0x8085) fchdir(r1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000340)={0x2, 'veth1\x00', {0x2f5f2c96}, 0x6}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000380)={@initdev, @empty, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "21b5bb238d6eb501998ab2fe33cfbc4d"}, @NL80211_ATTR_PMK={0x14, 0xfe, "18bf6d610d793d9a3db21ad8c65dca74"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x480) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), r1) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x5) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000640)={r3, 0x1, 0x6, @random="7028cc811835"}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000680)={'ip6gre0\x00', {0x2, 0x4e20, @private=0xa010102}}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r5, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x804) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000800), 0x800, 0x0) fgetxattr(r1, &(0x7f0000000840)=@known='system.posix_acl_default\x00', &(0x7f0000000880)=""/121, 0x79) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000900)=0x6, 0x4) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) r8 = syz_open_pts(r7, 0x688200) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, r0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1c}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x512}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7f}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, r0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x8}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0xc800) write$nbd(r8, &(0x7f0000000bc0)={0x67446698, 0x1, 0x4, 0x2, 0x4, "b2da874e4d67a22a727f801440fa03cd24b44b73aee08a4cea12d1392ca5f714f1ffbd940d87179ffbdb21d5bade7af0d65c5832564d8ceae0f43fc35de1073f5bf352aac49038e98284e47800fa6dd31a18015f8754ad9f336c6cf7bdaef39e0b363a6a0f88ed5d3c8d3b3bcf2c5fbbc46c0c4c5c856953bb69902ad6fc416230726b664028a0c803b33b07c8136a33a945304e03fe3e0a8edc99f6c9f2443072d65ab233a417c0cf74080f7b592ab3941515bac3a645"}, 0xc7) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8983, &(0x7f0000000cc0)={0x2, 'veth1_to_bond\x00', {0x81}, 0x3}) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000d40), r1) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, r11, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000005) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000e40)=0x3, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r12, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x5c, r0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x78c}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xd}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x4, 0x6, 0x1, 0x7, 0xe, 0x0, 0xf, 0x6]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 3m15.243322911s ago: executing program 0 (id=2947): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x80500, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x410000, 0x102) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800008, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',cache=0']) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r7, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x4, 0x10003}) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000240)={{r8}, 0x7, &(0x7f00000000c0)=[0x2, 0x3, 0xc471, 0x3, 0x7, 0x10000, 0x1], 0x401, 0xb}) r9 = getuid() r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0x5, &(0x7f0000000000)=0x83, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@noxattr}, {@dfltuid={'dfltuid', 0x3d, r9}}, {@loose}, {@cache_readahead}], [{@subj_user={'subj_user', 0x3d, 'trans=fd,'}}, {@uid_gt={'uid>', r9}}]}}) 3m15.051691709s ago: executing program 0 (id=2948): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xa) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) fcntl$setpipe(r1, 0x407, 0x7) (async) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000040), &(0x7f0000000080)) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r3, &(0x7f0000000440)={0x90, 0xfffffffffffffffe, r4, {0x4, 0x0, 0x40, 0xfffffffffffffff9, 0xfff, 0x7, {0x1, 0x100, 0x5, 0x6, 0x7, 0x3, 0xfffff000, 0x3c, 0xfff, 0x1000, 0x0, r5, r6, 0x4708bfac, 0x10}}}, 0x90) (async) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x1800000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2e3766645cb4de", @ANYRESHEX=r0, @ANYBLOB=',debug=0x0000000000000000,cache=mmap,cache=none,dfltgid=', @ANYRESHEX=r6, @ANYBLOB=',msize=0x0000000000000008,access=user,dfltgid=', @ANYRESHEX=0xee00, @ANYBLOB=',version=9p2000.u,directio,uname=*:*,obj_user=9p\x00,fsuuid=17542b9f-edda-cfb8-ffcc-d64eff\x00d,\x00']) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000005c0)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) lstat(&(0x7f0000000080)='./file2\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r9, 0x0, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, &(0x7f0000000d00)=0xc) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r11, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r12, r13, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000002200)="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", 0x2000, &(0x7f0000000f80)={&(0x7f0000000380)={0x50, 0x0, 0x5, {0x7, 0x2b, 0xfb6, 0x20400000, 0x5, 0x80, 0xd96, 0x8, 0x0, 0x0, 0x1, 0x9}}, &(0x7f0000000400)={0x18, 0x0, 0xffffffffffffffff, {0x2}}, &(0x7f0000000500)={0x18, 0x0, 0x7f0f, {0x7ff}}, &(0x7f0000000540)={0x18, 0x0, 0xdf, {0x192c}}, &(0x7f0000000580)={0x18, 0x0, 0x4, {0xfffffffa}}, &(0x7f0000000600)={0x28, 0x0, 0x6cb55b62, {{0x1000, 0x80000001, 0x2, r7}}}, &(0x7f0000000640)={0x60, 0x0, 0x5, {{0x8, 0x2, 0x1d7e000000000, 0x4, 0x3, 0xffffffff, 0x8001, 0xfffffffb}}}, &(0x7f00000006c0)={0x18, 0x0, 0xffffffff, {0x2}}, &(0x7f0000000700)={0x15, 0x0, 0x2, {'fuse\x00'}}, &(0x7f0000000740)={0x20, 0x0, 0x9, {0x0, 0x16}}, &(0x7f0000000780)={0x78, 0x0, 0xadf4, {0x3, 0x4e, 0x0, {0x6, 0x5, 0xffffffff, 0x2, 0x3, 0x101, 0x80000001, 0x7e90, 0x1000, 0xa000, 0xffff, r5, r6, 0x1200, 0x4}}}, &(0x7f00000008c0)={0x90, 0x0, 0x8000000000000001, {0x1, 0x1, 0x3, 0xfff, 0xfff, 0x4, {0x6, 0x1006, 0x5, 0x2, 0x7b, 0x80000001, 0x0, 0x6, 0x1, 0xa000, 0xfaa, r5, r6, 0x3, 0x15}}}, &(0x7f0000001040)=ANY=[@ANYBLOB="48000000000000000000000000003e1107b400000100000000000000963b000000000000000000000000000000160a00"/76], &(0x7f0000000980)={0x338, 0x0, 0x33a, [{{0x4, 0x3, 0x2, 0x373b, 0x2, 0x7, {0x3, 0x0, 0x2, 0xe0, 0x7fffffffffffffff, 0x8, 0x9, 0x8, 0x2, 0x4000, 0xc4b, r5, r6, 0x82, 0xe}}, {0x2, 0x3752, 0x1, 0xb5a3, '&'}}, {{0x1, 0x1, 0xc, 0x5, 0x800, 0x5, {0x0, 0xc45, 0x9, 0x2, 0x120, 0x8, 0x538e, 0x8001, 0x1, 0x2000, 0xfffffffd, r5, r6, 0x0, 0x1}}, {0x0, 0x0, 0x5, 0x4, 'fuse\x00'}}, {{0x6, 0x0, 0x6, 0x10000, 0x80000000, 0x1, {0x4, 0x6, 0x51, 0x3, 0x400, 0xe6, 0x4, 0x8001, 0x8, 0x6000, 0x7, r5, r6, 0x123, 0x2}}, {0x2, 0x1, 0x10, 0x6dc, 'version=9p2000.u'}}, {{0x3, 0x2, 0x7fffffff, 0x4, 0x9, 0x6, {0x1, 0xd, 0x3, 0x7, 0xf, 0xa, 0x5, 0x6a1edc76, 0x7ff, 0x1000, 0x0, r9, r6, 0x6, 0x8}}, {0x1, 0x1, 0x9, 0x9, 'trans=fd,'}}, {{0x2, 0x2, 0xffffffffffffffff, 0x0, 0x401, 0x9f51, {0x1, 0x6, 0x4, 0x898d, 0x3ff, 0x10, 0x7, 0x2, 0x68, 0xd000, 0x9, r5, r6, 0xfffffff8, 0xa}}, {0x5, 0x9, 0x0, 0x7fff}}]}, &(0x7f0000000d40)={0xa0, 0xfffffffffffffff5, 0xf04d, {{0x5, 0x0, 0x9, 0x6, 0x5, 0x7fff, {0x5, 0x3, 0x9, 0x2, 0xffffffffffffffff, 0xfffffffffffffffb, 0x5, 0x4, 0x3, 0xc000, 0x5, r5, r10, 0xfffffffb}}}}, &(0x7f0000000e00)={0x20, 0x0, 0x2, {0x3, 0x0, 0x8}}, &(0x7f0000000e40)={0x130, 0xffffffffffffffda, 0xed23, {0x6, 0x6, 0x0, '\x00', {0x8000, 0xa000, 0x3, 0x2, r5, r13, 0x4000, '\x00', 0xe3b9, 0x8001, 0x0, 0x4e5d, {0x6, 0xd}, {}, {0x5, 0x7}, {0x81, 0x5c}, 0x5, 0x20000, 0x9, 0x2}}}}) (async) read(r0, &(0x7f0000001a00)=""/1, 0x1) (async) r14 = socket$pptp(0x18, 0x1, 0x2) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r14) (async) fcntl$setstatus(r0, 0x4, 0x42800) r15 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r15, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r15, 0x6, 0x1, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_ENDIAN(r8, 0x4008af13, &(0x7f0000000040)={0x3, 0x80000000}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) 3m12.062566653s ago: executing program 3 (id=2975): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x10}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000300)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x5) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000406a052c030000000000010902240001000040b1090400fb010300010009210101000122057c0905810320000c0000"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m11.479529791s ago: executing program 3 (id=2989): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', 0x145) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3m11.379682001s ago: executing program 3 (id=2992): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d02, 0x0, 0xffffffffffffffff}]}) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x2000c8c0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93503d", 0x3}], 0x1}}], 0x1, 0x40) recvmmsg(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0xc8b}], 0x1, 0x120, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) 3m11.039917204s ago: executing program 3 (id=2995): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xe) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x3, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001680)) r5 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000001c0)={0x0, r5}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000440)=0xc6728099335eb943) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000480)={@rand_addr=0x64010100, @empty, r8}, 0xc) socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e23, 0x3, @remote}, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x0, {[0x7b3, 0xfffffffc, 0x10, 0x8000, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/7, 0x7, 0x2, 0x21}, @fda={0x66646185, 0x9, 0x0, 0x29}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x1000}, @clear_death={0x400c630f, 0x1}], 0x56, 0x0, &(0x7f0000000380)="f22439c47e109c6096ea2bae1f7d03b8c44245ee48a8a255e0db445a21505ddddb4f9e2515db95a1de45d524bb52899f326bab2c88053f7a7475b3ec0373c50a7a4d67df5fde31db1a31325bebcf85b344c0596e65b8"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 3m10.897900238s ago: executing program 3 (id=2997): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000057b000/0x400000)=nil) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x800455cc, 0x0) fcntl$notify(r1, 0x402, 0x9) 3m10.492002868s ago: executing program 3 (id=3005): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4c7ca3e9, 0x4, 0xffffffffffffffff}, {0x3, 0x2, 0x2, 0x7fff}, 0x6, 0x8000}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7}}}, 0xb8}}, 0x4000) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) fsmount(r0, 0x1, 0x4) 3m10.435154454s ago: executing program 33 (id=3005): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4c7ca3e9, 0x4, 0xffffffffffffffff}, {0x3, 0x2, 0x2, 0x7fff}, 0x6, 0x8000}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7}}}, 0xb8}}, 0x4000) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) fsmount(r0, 0x1, 0x4) 2m59.07587565s ago: executing program 34 (id=2948): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xa) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) fcntl$setpipe(r1, 0x407, 0x7) (async) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000040), &(0x7f0000000080)) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r3, &(0x7f0000000440)={0x90, 0xfffffffffffffffe, r4, {0x4, 0x0, 0x40, 0xfffffffffffffff9, 0xfff, 0x7, {0x1, 0x100, 0x5, 0x6, 0x7, 0x3, 0xfffff000, 0x3c, 0xfff, 0x1000, 0x0, r5, r6, 0x4708bfac, 0x10}}}, 0x90) (async) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x1800000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2e3766645cb4de", @ANYRESHEX=r0, @ANYBLOB=',debug=0x0000000000000000,cache=mmap,cache=none,dfltgid=', @ANYRESHEX=r6, @ANYBLOB=',msize=0x0000000000000008,access=user,dfltgid=', @ANYRESHEX=0xee00, @ANYBLOB=',version=9p2000.u,directio,uname=*:*,obj_user=9p\x00,fsuuid=17542b9f-edda-cfb8-ffcc-d64eff\x00d,\x00']) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000005c0)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) lstat(&(0x7f0000000080)='./file2\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r9, 0x0, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, &(0x7f0000000d00)=0xc) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r11, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r12, r13, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000002200)="36335a41b0a26d356eea6fa0c7210919595ac718d391cdbad62e981ac638e52aebe4781e487c4df39a85ac31506afd09c514dce72de8479312bd3810982f7ef24c7a7b542c9dd252cb63a8ee5d5c98ea16fdaa0faa399bae9c26e1c859ce6acd8e1b66d0515bdb9ecb2ea402307f20a82b23d41786a59c42a13f52e3eb30ba3ed09356f198fb9f36c88a79c9579b715564ee0967bf68c2fd0e6888ffaefe340de52349fdae4be3d950e6f518f417bc1d9af08824d464f5cd85010d6198dc13a5ea0e0343f5fd119daea18e12cf8a09176dde45c02c6129b946326f1c275b18c9a8907d24aa20950ee33fbce8cd0a611c1cc08b204110db5082f23962a15da091a1675a69198efe6c8f810e8252011999d833f88e012f03e505e09f18dc08d2ee9a7c4aec2f99121ad7a0156d6bfd497e7a544a2038e237742fc3ddead3979081d7a6b061e0c97d4f3b9985869143524791b83b332f241e4ed1d564b467380344a184308c66c337df6bd9b9c0db7460883bc0163c0329df79541c3664a12ce197422e95a826875e75582a692cc2b3901aa5fcb0b463580c9865f55f44618a0db38235ec43fe161513eb58c2fd4399a5a615b4a6fe095025308924472cda34596551431afb6ab08cbcef2d21ca01cf87668fa4e5e36563910c15561dbd38561c158b06e1ed12311960658b76e9856216e5c9ab3a597c2897e3f3a0ce702b7a7574006e6a9190bf38071dcef12f91315f5c30127314de4912e9b4cb9c26a691e8026e782ee5a67ed5810cf170865e7c1682e95d732235cecd2afc641efe43309c548dce549216d23e0702d71c269966fc3eff08d592d4f137fa045cfe2a76df5a897bebfaebd59d598c3941762bd571525c9e699c031e347d0d0d03f380f9c09e4c6db3de5fb8511c7aff004e87ce9f36a7ac1f15c2916e1a7033913b015c41a6dc952150dd5235aad8fc0de4bca0fa7523b12d44977c9ac4b23acd201bcbad6634c17c85f85ae5eef15e2e2778abfbdc8588255aa1a006f22efb42110cfabc0d57f9e5967dde059a59968e207459a9ab8104956ea055d42e28c9ee8a24e7ba6ffb0813a9e9a45f01e8c9e8b8c287e7980f6488933ef6858cbe092a30890ca4d6496a33566911efe6c18a42de6cb1afa856e1b3385b47cf371cb37c0d97e17645be1267821d43cadcb16ab94ceb09a54db91418ee96a2f223c1f93b39be8439f89ea65a72ef21d35dc77c12df502c907833bc737afb1bd9825e6dd9595334a75fecd9e856cc9c304f54ae23715e7d423f19a0b8d31741f0c54c3dddea211e5e210d4d5c80f58c0fbe560ab817cc45af883894d054800170847cae60c24cf4a33f16a8e1baab5ab479308bf38efb902c36a1f4d7b889213a5e420d9492c9a58c921eb41ecd8128ff7c4b58646fd4c08bd6b354a99af9d6eb9d004ff5d282ff665d2eb6f0d86db66be81a808bebcdbe8d6085b0ae11b33aca8f8b0d111492f6e14de9537f83fdef82417beb2bf43158930b66ee4f17bccca2fbfb17a80016c3cdc5345dc2a04b8d60309ca8296592f9f85c0f6a4dc0fe46daaed051382977667f1a4d277fa97e55dbf9408feb6bcbefe39529b11a6e503833bd1193183985e21592e6abeb592079f15a8f50dd5fb8cf4a2a494a4d0b8b9a6a5b4cb8cc22b48f1a97cce7f54aeaea80f7c8235a0383881b9d211623ef55e7c309c2b308e38daba03803238fbc2a1d5bfdbdbd258b97bd4700de8044e5d8e0d7c187347f7387bc2f78a455d33670da3eb55d435c1c6068db343e3ecae15eef436fafdc9466cb1567676bd4a486ec2f81c49a0d34b2727c748a0e5cfb8755077b1e22e8a0a7b77b25c1210136a76c9829bbeeb9348ac08ed266d50fae202404e1b03dbefd38efee66eb044c85cdf5c167fc918a381d59c06e4fc9cacb63f620bb89f98a324e4c4c69f364221437655e47c378b909fbb05fff8f7ed5bbbe9f04e199036bbf747870c62dff5c0783803f1ff447547185ea348b6b7499e446a0f0b10e0d0b5e75412f14093db1cc6b4e55771bc60505b82b5adcd3ace4d68beddd0d41f1035d1888bc81b9437b88121028448b85d492590f1e23d3f5779e8ad703a0ba6a961778bf3f1d34d9c6d6118109302c6faaa5ddf0cafb48195c29ea7861a08af23a2d7e3abf8ae9819bbec06d6dae997a67f460ac7a9e9ffc3b2925885db3fd72facf80a715bc8b32f016a7e20980abaa16769c38e3b2c6b6f9b9bfc8a6f66cc9834cfd2f4c20f11af4dc2f4923802d09a22dd1f87ac4193fade67fa3e15f674b875dba1cc01d9d06baa238196108d6098576000dd9adefa41333c7722feed2d089ce9cf291ace9e2fe59b8ad22455d852e60f1cd0c7b2c1c4f73c350223b1b0cef548848b8fabfc8373a2fd301214db63771f16f398b23738b72cbb12904486cff2e7d1faa7429fb2b8e55e0c8d74ed1dc6f28076b51aa6b5eead84a44e5551e9e0d173b25b10a7fe0d0bf04c95d300b48f6cf470969667e27d261acec657ce53ccc5a6d0a61c8300fa713d5f95868ad4c3eb006555dabffa48b13a73077704c824a820c4cb3a1c38bf75343e45a71ba9886673eee169a0c77d5ef87bacb08df2989fe58675c561c89302a99065b54af259fad660a805f30e4d53b1f8c93300a9d09f9e660e230eee434d3af24a5f9757f3acf37914a2cfa0142f840957f2bbeaa2d2d7c329bcff0dabaa05f9bebdd8c04138e2ac5f882f8901f7dbc8fd3831b82664fdf34f77f78a11d6985b71fcda5440cae48b707c489949a304f8f8a1bd8e986bd3ed82def4587c2d72af8ed7c0176fadfdc1e3af3ffb6e92e59c161daba9151e798cd99510772e16a186a392daa8f24f74cc69025a4632671afb5d76b3b6abd37fe5c12a7174b9221b723072b82eaf5f8b44add0dad079a94f1e33b496c0a64c66d880fa02687b79c3cebbbfd44dedc5aa03020a8196116cf56e39fc508d21045a65b22f061e28956f9b7e63bb285077ac854b075b24573a98b39904e8fdca3da6df1f302fbeea542a9cd250d97fefeb57484ffdf6b170abc31632218f34400e1e5f31d7d1c10a92401c0412a41354765102ff951c9aa9983475607b460d90243db4bb61376d5c068a13dbcdd2549535fcaa44d372d5f21c04ae41f6a5502ff296e66540e7e2ccdb492586594a14eea9397ebc8d103794f340718cbbd06cf13ec7089081cf1586e97519f1ee6081a831ff314f9b5a17a36318d5386461dfe186caf4686595cde92fa72d1038da2ac5b2c71897f86328916444bbb6b742ab16814a32973d8393b5c7b5dc8310d26db326c32bf327afe116002e02240d99c52f6177f513a9f89ea201a98b413aa0dfea1574f10c2a117334335435e34cc777fdf74852a1ce1845a5948a3e4a13e9bce8daa2fca9cf3a786024c73213e7190e2800b022726c26b636a4da08bd4ddb079ab3fcffb8d29f4f10031deccc92053cb339fcc6c8515dafad4338aa2abb6daff86694d5cabe6f84b11dff4356dc67a2f423abfadd43c1c6133d0e5efdd94ea8fd237bbb9924f10c1240d491283243fce7b66c532bbb8acbe1aaed0f2f558c21a5d3eb1690b00ad11d62b2624233a696f6a6353eb947257bee4bce9ac212b8b29ad6023b70a0feef70ee289fdeddb76296a99059f79c50ef561413c38376ceb25904433dd1c738f236ab63cbfa2eb9e77c3cb3acb1039ede07b796c1a50eb69c04a42de1077de03b05bd0cf701f4f14ca369fb362b7d9eca955fa584b8ab6b66d7894be6338c9e81fee4a2cdf2e0d480094fa323f6bc37b5e233f372f1e82506c3c203b23d040248133c0303f50dcafc0bf529bf1ebee0b7d48f9e9c5087ba65b46fbf37ce2385a4ea4606c1af13a937dd9f35a415ea6d59d8dbaad1a4204c579e4b6bfbe8c4053261e64330707d1d8eb70b82bd836af5fb9e626ce8a3cc55986338c96be84846245416105d7a65631c55d3889687c81d66e797768e3014883bcce3407a122c1d1787f2ea00816762e8a531cc778c5893cbbaba03aef918e2a60bc0185cd707d3f5d2a685908f53d3cfe1201cd3cfa0eccfdbabb555ba6ab052197b7e03381b1b4241108cdf2606de9812cfa89646ad4bc95aacea1d3fdc2fc70f7a82933e9ea6303eda0b6c4bfb5671f821bbd323c7105459a4c125dec54e97b6dc6b965ba69d4db6103617809bad54684bc7275c2592a449ccc7544ea5ddb50180e635d9203224fb38b581d9180fb85cfcb25105e6792b49747450e598d08202809bdf735062dd8e901dceb8bd3e74584e7dde581f8a4bd73bfef08e5b84b842b3fb4b8022ba160eac5f397ab8f918d2600f91bd45f7f3778cb04b08e8156b72eab94344f75cde74e6eacd5aa7c78c5f78de2dbdd3e230549651e7e9c010501c20ed55ac7d54b61c9f4b2bd14d15ca6c7823441861c3b590cfa5a4f60b7579a3dc46ad93da71fa229e1df78960f1a6f84eaa274a6d87098e0fab4ee1eeb9797e250b1947458cbcb7834cb8fae74eb660afc47a3f9f7dfc4442ad8ed31abdaf863b6f8d9a6cb9570fbd70bb5498bccac47a792ca9ea84a4f55cd1eb263727b1f8962cce954c60986146b3c9493fe2811f0cc711b377fad774a0bd6e2d448ed73198e2e5dda468681fec326731ca28e9d1a5b4929bab06550172030fa6edc402366bf0aae26a579d77ea3ff40e594790ad7c631a0a70da9e959d48afb1351ebd7881a7ddc542ead2398e5e6f5eb21fe30ab89edf3db25125aa2fb88efda6ff65d7cb64c6f1c306542697d6d265075ed75b9ede60b09278f3188987fef836d5790325d41b8c6e9627dba11d201a5917db5d2c62ce75a1315991a91c5e1c119cce8a48c8bc5367851efc78103cb654d76eab3aac9771db014766cb2245c1dd8d4a8688fcab8203954092c9e33ce2b6daaecf931f2f2e872c94f2b5133b1604fad636327db137c53cd5b5822c07e1f4df4a71912c736bd115bb454b63f3957906f1fb919005a059a829b1700d096973b676f8ed6c16acfe08b21cd112113c8061dfb64d4c004938e8cc654799839b54323c5dfd935cd0751ea15a4f3e8e99dc0e591193b24c4a3ca5d5c75b2f11c7b0ed7baa2ae2adb43e7e2456addf43f83f442273a698022fa09fdfb5c7ee714c3c1b57a445a9cce67c0edd801598652de9bfa18b56da6e836ab8779f77b2f2b7f14fb7d902c7915174521db48bec26082fb48ab6067fb7c5c27fb6307c7676f5d3adfc37686686804597d9b54e6009fcd6a4e38f88804904c6912de6b1e70382d7a7e9c2b9dd150d45b93610486ee93868308e7b1640a2f9a0814f2310bcac9c17bbf324e069b81ecececae560d11df6ab6e4d7f8cba63b8f89dcd3e82045edae43f7791c01bcfa51e55ec7c6f0ee01417233cb2687b06735645087f8d9c66b9e95b365a3f69e5faddddee194722bfcab3063ac27acc3899311d7ff81e0887ce8c6d2d55e8a565b435041a7674b94c5656982f049d10c0521ca69e109915110e212915d8283923ad26059141c8c7955f004e51c3a4e08c273e0986c7c00996be657a5d1dfe60e4ef6e094e14d8277437d6aeb83970d08ce43c568b9c02fb4ad82812bf4344d5bd7a16e829d5f8fb642df54975b79c2f68499699ce718c10c5015bae00825df940eb8dc9b9a76eb0ef3a6850ab1fa6c55973a37d84e72d68894250339dbadde4b6543b0a12e83f6ec8ce28d6463bed9cbd2f93ddcb42f5ad8762ce0a09781c142c4eca4ff48860c7d63c683eb6009e7b9dd33a6ef8b66f9be1a6feb5f2dfc187998d9ffb47cd82b8a27ba4cf8178c7e0a1ab27a39360455f14b49a0d87dbfefe3809befc52cb5c01adf0c57e68cef5ee55cf6c6ec59a838e22c01ccd911c70a3bdce5adeb37f22ba41a17ff0ef631428825c95e27ae8db5c52e9914c9c5f5701c10135ef63c5f64ea372ccbe9be0c03abb118543c09943f9ff35254248e32c2e84bb6260bd297b56f38a1c4a8665db56f56e09e6ade1b46a37a0395cfdbb515905d4586419d409f14ebeb0fd39576ccc8cbb940559215a6168d08a1029bdd73816ddc5b12210d34370a8f6dae9943a95aa78c3e14a8f5eb664ac6c150daea2742cf2b77d8319a30f9a6e17b19992086518f2efe826a67f645aadd451f16fdda378e38c707f312548c449e77d21091074814a0eef1e587a3f44ba3797e461d2800f6079f28904316345b012e78d048662a730977c3ae4cfbaec82203d0028eac583742558eb249973a249e3598ff98777271403635e310b99643afca65b1ecd0a23502a740bb21b9b1715efdc1f172b8faaf21eb5d781ce8e0d2feffa14749635fee025afba4552805045cd4456e5f3fc70a151f081564e9c6514a33212be9efef41b63ab3876a949c947ee9b1092abed7043eddf3be9eda0bfa4291e0b27c841abfab4e21a3148de994f7f3249aa9e642c5334415d350c1e2b98cbb62e3e79e80fc160fdb7338ac2d459e5d1dca9ce0acdb39c85ef1f3a6800f61c1833f78b5950a6bc998f85675eaeb30e8f71983537171c510157ac99ae8b247d75380eedc6c8bc4421d75dc742fd7d907dd3d20e8faf933e35358ea1c8d613ca2c6fa918a2b171709c049bbc95e754b0e64d9ea47898cde31e0f4ab08b1aa0ffe62941812104c70f4b20e0f9ae15090a8e1f12ff6eb55af3bde44111204fb11377a80e05539959ee718133837c8ed2ae48c90a62fc056b5eeb3a4dc385506d036e50c799b1badb80057fb400903dd515829536e7214b9a0dde8413c30c336a847aea67a46ceeb6234195323881237c62c50edb627363213e758b5e3b3803be81b82575c9131f8ec3e17ac88bffa847e3521bf9857f5609b81eef7badb2631da6d39d2df2c3ef1627b659f9107916c1e3456fa0b41804f4ac15bae9f6c02f28c3383d58d04c04ecdd73222ae01a5781ff671962a4984f8c9d8ea126042bff5982ae1c86462b826710c15ed88e4c26edc563ce681e31a59159974273f00743cba6b2561b421d5c253e624f249384d5022e20ef39c6026b13a62da3ab103e684ca0eeefe1a2fedf2f4d7cb215b466e05298a07c2e70bc8430d6196650ee7ffebf1fbe71a3dff6602ab43a0fd3c165cf43b69357e84eb0d5be3eee467b4d64cb2a7b609162310a71660e09909faeea122336938205f74f6efd6c0ad363b035b1037677399511516388c0f8baddee8b8dd102d8ae296249c4718f4547c964e1145b79f600bae8899ac9b4e08598c576fa51a8c776490b7317cce5539047a9c02d4fdffe7d37e25002b9d6c65703b8800f9e6b1cd2cbbd0c9f493e2aa82e491ba313481da5835aa459b08a54c23bf8d885e53b5f47da9113df1eed0fe089409f3232f6095b59b16ed8522ae92ca9d2aeca524b285a9b425939ad36960ee8d31ea94277563fdcf08ebebf357d7b7aee1dac08ca74c0fe7152920d6472fb53ee8a7aba8ef84994d1322e04ccdaa522f6d5c4bfa55d4d161c68b44338b384c05eec06cf29dfd4e9194377e5096fcf3029627dd5a88a8390d0e6556513f25aa1cfeeab359ade91976980a95d6efd3e56d04f185f4c3f819c9116bcb2740b468e634ef8913f63a037db1d155486fef94859a2b629de1f2cf7dc242398a838f45894f8e17ecc932f2aa5ea293b1e8a85c8d8cd3c8004dec9dfab5571313f6224824bbc3e91568082abeecc8b633aa8f3242de153867564173af2a0be01cf69c07ffe6be63cc8c88d4aae702a06c54708f0f25751158865ba0f61c6638467e5c31379f1c78d8a88713ad75736071058b0fef32aa0a8b980b8d465401b5c4de6a37f96dd773ea6d70b171a03c9b2deb35b89a00568401e4d6057d676c3879c1f4ea52a4aa17b71fb788f33689df2b587e8184533ee24f019199aeb74572e02bd0aef7e81bf1eb4987c368fa01592e1d6080f18b04133d6170d1243fdc17f66d54e2cd6defe280dcde35183013170fc83df07e42282bf24974beee8b0db5442dd6a46ad24cd219a7f815df25d9a21a238d89342a71c18125ea9267a14e79545e1ee460e89d0b3074e73eb310ede4239fa40031dc99d4179f4a9f4f5b34e1aa872725815424ccd8c862effb49d6a62e254f295f6e8bd9ef43f0198bdc64d0f5a658ea2b11fa73103f5ad9c6f64804a4abef97ba37990329a6d442e3776a07431c8870a0aa64de8c65f140388bef095a110129c582cb2a29deeb19c2af922a6b2bf4c9c18d2486e59699721c6bec8fe60c8b92153f49cfc93cc96bae87d15c498b470bb36fe76558b2fe60a29aa339c9b7e27f90d2a9a79938596fd8921bd7a15ed39e689836ad03c1fbbde4471f29e4a1bf835029b9e93855ad3ffca47547a2471443de3fae1bc9f097055326095d4c4120d83a92afa75bc1e10624447c2be13fceaa881fdecb6f6a3e612a7136256927448ce8516e91cf288eb1501fdc1524d7078a352165acca51a3c85021b17c519a1bacbfacb6c1aeca97e0b13e82602abe6bd878ed8678a322369b772e7015b99e02e577ffdafbc1fddc548e1e0a5cfac6f413537e21af6c32d0932fac2d9db1d24fca4fb5e3cb34cdd8a16a436b0c00f719001084e597b7b1b29601c450ff7fdbbb03ef379e7c0d4037908f82a3330d433ec23232b72177504f76e122e74361d49a373e5d7a73fe634045b5a34f681833efdcec6746931409e9cb0f142d49c3d6176d9fbf1d3791dac77825517f99ead98c1227fa417009efdea0768584a09f21c999961c22fd1d5a8a45bd9998ea891cf018c155839bf1e3844a01259eab4842bfbf358c331b2ce03c63a007892d92bd0a11fad834ef6dad5ea6e16336ebdd62c785cc5e4c58f53e1091535ed6f5a9283e867e0c7fcf69a7e076058ae09c84b747a003eaaf079d8eb49d3dc6a8c474d78363ce140a0a6fa93c8f657c022dfb9ec725f0ec52384eb7d120ef638dd825d9f7d01e7382bb9397bcd4ea41e99a324f20786f9b5dd4dba8cb3e72669545a5d8c6e615e9abafbb671afe86d78648dffddbf9facb35e1c74c9332ee4b292a5fe9453be1a23b06d9f0a478d0a5adaa79195db45eb8926f71ff23ac7aa13f9974b79fd9fac44502ce2b4de3e411e066a6756ba15171ca0aacd25b8d2748e1cd2be62c7c087e827ab01bbb2ce060d262a16b9b80ea6afc1cd34a525ddc1dfd40091be127586c3936dd279e20aabf306ecf51415a3bb3c16d441bed5b4b56abd933f1a5a5c57b7916488d4463b85dbb2237ca0178192db3db914aad05bb81b5c2db5362cfbfe2b61f72dcefdf0f73eb11ebb8646bb43ca6da33fd5a8cae419126050228fc4756991c8af27f2241a0e0df724085b77cd53431862a776e126da213589e289966f61401f71144436ce27b4ee4a7bd3ee6f0e46cad98bca81c9133800ed3112f771b7aa11498e0c2de1ce9dbfcafb494f1c56e70d4b1910ebb3cb1ada2921a6d394350492124962571cba0be7530bb8f109940534206bbdc658745eeaae4389dd30992415bfc493db00f8b43a2c61e6bd983f181def06170d030c8ea96914788e730fe1126bd1562720a66c116218981e675a3cb11a5a0c3722a581a475b6469557c23cb5d23bb63e0d0f64bfafc8a3cc1e7799670d2d201fd5147453f27e2c3ce9cc9a5be1694af2a5a2cfe059b13975cf2fee2ffaf3f8fe698a07ecff5ca5e43e92b148791a43bf0e52c6e88cc88f55a93ae8f5b9a83d38018968907b1c704c3fca59ed867a17cf9f30a26cba03e2c8415feb18fabaf810914a6f026670a8c52f1fb5415e92721251ebf2f1fd5f9021bca54c959e6b8cf256cf40eb4f47fd2077381010791867c50a5d7e3fdc30b8a0997182bf2ec62088b061146973b17d178bc48fcba5c0542b4ebcf24eb85de326909ea5a8eee2e3788da3aeb2ce702000d1489ca71826831157dda4204f346a64079a0701149699004b2a3db78b6fa83452c7872f75e8884d55290ff90b3fdb5da1f86d09db8b1e3acc29d2132277893ba43622ab22cfeb262cfb3e9b0dba7cd2dcab99cef117471cc289a361ae7c26b039529db0a9dd0e94f16066fcf105005110557702f74edf0919bbe5f602e714e71d4aaf71c9ffe3c303c3bcd540829e13177d736e9866c5dfeafb6e67a2d70fe0e3a35718e7e8abef5f42592a98ad3bfc8f9cb2e517075d662b745c43148d24058b5e6debbd808f96f054c674f3aabfca83ca5082c7e0099e9f2b93081255c71801d98103d362fcfea0755f5ed547afdc25d28f694760521d4e76cdef8fcb4554ee4abfff26eb00d5472b5379ae07bf3c57b855e7c0391246ec72a7dd51f617fea90c3c194a76eda5ba470180b34450a1d867fba79b33aed0c1a413be3c851d1be6d61e2cce7f561f2370540e850925116acc5411b139ccee32bba497af8638ffe2bdbdf590573e67b32e9b157a369a9e1a7613a80ab614213a8314ecb337aa58235d0b494ead8cec088e6b95ceb6a3335eb6b1ac9eea1fb8d77817af437cbf77dfb1c964d7d3597b72baebc818dc5ccf00d1d3420cd0e71579672f58773e817a9f40d52c0f6ab65bb8f26cd90ba3e2dd4074441793fac8912068f5318173e6ef84dda7d6fcefbfa8df41984d0c052e0877ecf27bbedb838e391f77b5df8e1cdeebdb13edfbc982b4093178cb4f2fed01fa2ae04e5ab3dd67a49806a2b1ab38267467d8def037fe1c946ab2840e0a96a1603bcb6aef7aff9e16cea08542206bec766823a177ef5eed9dc3f2cc0c1fbbadaa9c7efd0fb1e7e3b2c233227ea50a066a07736c38445b24cbe6dbf3dc19ea4089e9bec28c39577981e0d62685126aed6591a5899092f3694a4a7c101c9e955c409066e6c45cd84905eaa19e1d47e257798151d46c8a103cb416032559c04f9c236970ca7c1ee01c05262c8a444f8c9621ae927d2f0b65d875e054205d879fa1c00643cc6ade63d017aef86fc0208af017fff60e1787cdcc64dd3e45c42f870e6d084c304dc2bf9a944da93b241be611bbcef5da646acad2d0923a00630b8a9c6b9eb03ae5492fae2855748d48633578506806addeea5addbc6b0cfa4d7175bbe0c4faa0cef9d69d483762c4e9d522988af13faecddc69a003662d85dce1fc81cef5c17b11da0cad646bb37297517499f86a8ba5e800973f0f164be13a2de151cecfef43954a8b479763b42de9f408835cc5f3093979df11c09371997ad5c43355614940bd3f73c51d5df8b8a539aa7c225ebd25562a6c0bc969e9269742695d23cd93031e397852f868adb2ab92b02259d15f1111aa86a34a903b96b0deeda71c3546ad33332ca06b9add176807dfb30edb5f8279f7ba7c5e7334b7166353e9b6d99c84f8274095447c8c81b283a756b0266d1413974e32558015b21780eae6e38f1102ab4b70343a0feab14ef48629ed30cacfa5aba4e890853e80313b4085fca48faa98977b7b36b1ac9e6e34610a8998abe7907e92a5dee0847eda07ddaa857d6cee7a516aa2bf8b2bfd13e9b0e85cd2e3bd34948e05deed26f2a284637ec4d8a8e659c5784bc705b90d8c625455c9979eef8b93672fa259e7b23870a578bf2820e2843917e5d07118b3b9d6c23aab8902b1301c2d0189002a04d850e", 0x2000, &(0x7f0000000f80)={&(0x7f0000000380)={0x50, 0x0, 0x5, {0x7, 0x2b, 0xfb6, 0x20400000, 0x5, 0x80, 0xd96, 0x8, 0x0, 0x0, 0x1, 0x9}}, &(0x7f0000000400)={0x18, 0x0, 0xffffffffffffffff, {0x2}}, &(0x7f0000000500)={0x18, 0x0, 0x7f0f, {0x7ff}}, &(0x7f0000000540)={0x18, 0x0, 0xdf, {0x192c}}, &(0x7f0000000580)={0x18, 0x0, 0x4, {0xfffffffa}}, &(0x7f0000000600)={0x28, 0x0, 0x6cb55b62, {{0x1000, 0x80000001, 0x2, r7}}}, &(0x7f0000000640)={0x60, 0x0, 0x5, {{0x8, 0x2, 0x1d7e000000000, 0x4, 0x3, 0xffffffff, 0x8001, 0xfffffffb}}}, &(0x7f00000006c0)={0x18, 0x0, 0xffffffff, {0x2}}, &(0x7f0000000700)={0x15, 0x0, 0x2, {'fuse\x00'}}, &(0x7f0000000740)={0x20, 0x0, 0x9, {0x0, 0x16}}, &(0x7f0000000780)={0x78, 0x0, 0xadf4, {0x3, 0x4e, 0x0, {0x6, 0x5, 0xffffffff, 0x2, 0x3, 0x101, 0x80000001, 0x7e90, 0x1000, 0xa000, 0xffff, r5, r6, 0x1200, 0x4}}}, &(0x7f00000008c0)={0x90, 0x0, 0x8000000000000001, {0x1, 0x1, 0x3, 0xfff, 0xfff, 0x4, {0x6, 0x1006, 0x5, 0x2, 0x7b, 0x80000001, 0x0, 0x6, 0x1, 0xa000, 0xfaa, r5, r6, 0x3, 0x15}}}, &(0x7f0000001040)=ANY=[@ANYBLOB="48000000000000000000000000003e1107b400000100000000000000963b000000000000000000000000000000160a00"/76], &(0x7f0000000980)={0x338, 0x0, 0x33a, [{{0x4, 0x3, 0x2, 0x373b, 0x2, 0x7, {0x3, 0x0, 0x2, 0xe0, 0x7fffffffffffffff, 0x8, 0x9, 0x8, 0x2, 0x4000, 0xc4b, r5, r6, 0x82, 0xe}}, {0x2, 0x3752, 0x1, 0xb5a3, '&'}}, {{0x1, 0x1, 0xc, 0x5, 0x800, 0x5, {0x0, 0xc45, 0x9, 0x2, 0x120, 0x8, 0x538e, 0x8001, 0x1, 0x2000, 0xfffffffd, r5, r6, 0x0, 0x1}}, {0x0, 0x0, 0x5, 0x4, 'fuse\x00'}}, {{0x6, 0x0, 0x6, 0x10000, 0x80000000, 0x1, {0x4, 0x6, 0x51, 0x3, 0x400, 0xe6, 0x4, 0x8001, 0x8, 0x6000, 0x7, r5, r6, 0x123, 0x2}}, {0x2, 0x1, 0x10, 0x6dc, 'version=9p2000.u'}}, {{0x3, 0x2, 0x7fffffff, 0x4, 0x9, 0x6, {0x1, 0xd, 0x3, 0x7, 0xf, 0xa, 0x5, 0x6a1edc76, 0x7ff, 0x1000, 0x0, r9, r6, 0x6, 0x8}}, {0x1, 0x1, 0x9, 0x9, 'trans=fd,'}}, {{0x2, 0x2, 0xffffffffffffffff, 0x0, 0x401, 0x9f51, {0x1, 0x6, 0x4, 0x898d, 0x3ff, 0x10, 0x7, 0x2, 0x68, 0xd000, 0x9, r5, r6, 0xfffffff8, 0xa}}, {0x5, 0x9, 0x0, 0x7fff}}]}, &(0x7f0000000d40)={0xa0, 0xfffffffffffffff5, 0xf04d, {{0x5, 0x0, 0x9, 0x6, 0x5, 0x7fff, {0x5, 0x3, 0x9, 0x2, 0xffffffffffffffff, 0xfffffffffffffffb, 0x5, 0x4, 0x3, 0xc000, 0x5, r5, r10, 0xfffffffb}}}}, &(0x7f0000000e00)={0x20, 0x0, 0x2, {0x3, 0x0, 0x8}}, &(0x7f0000000e40)={0x130, 0xffffffffffffffda, 0xed23, {0x6, 0x6, 0x0, '\x00', {0x8000, 0xa000, 0x3, 0x2, r5, r13, 0x4000, '\x00', 0xe3b9, 0x8001, 0x0, 0x4e5d, {0x6, 0xd}, {}, {0x5, 0x7}, {0x81, 0x5c}, 0x5, 0x20000, 0x9, 0x2}}}}) (async) read(r0, &(0x7f0000001a00)=""/1, 0x1) (async) r14 = socket$pptp(0x18, 0x1, 0x2) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r14) (async) fcntl$setstatus(r0, 0x4, 0x42800) r15 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r15, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r15, 0x6, 0x1, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_ENDIAN(r8, 0x4008af13, &(0x7f0000000040)={0x3, 0x80000000}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) 11.553608484s ago: executing program 5 (id=4793): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f00000000c0)=0x1, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 9.334015612s ago: executing program 6 (id=4873): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 9.308571745s ago: executing program 5 (id=4793): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f00000000c0)=0x1, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 7.374815895s ago: executing program 6 (id=4874): syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0x2, 0x21, {0x21, 0x22, "3d708e9f88bd6e679a5d300b9ef81b9605229c28dc979f27e788098f3b81b9"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}}, &(0x7f0000000280)={0x34, &(0x7f00000000c0)={0x40, 0x31, 0x50, "f9392369e0a06fce286dd239260a3f58e82f854fc76407ba25195115b6a29a55edbfdbf2d30e45b25fca039f69e7e03e70a0d0c13b56148edf79ffdd46d52026eecba315e8e0f65a7da6e822160a2547"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000001c0)={0x20, 0x0, 0x7, {0x5, "0ebc31bffc"}}, &(0x7f0000000200)={0x20, 0x1, 0x1, 0xc}, &(0x7f0000000240)={0x20, 0x0, 0x1, 0x8}}) (async) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0x2, 0x21, {0x21, 0x22, "3d708e9f88bd6e679a5d300b9ef81b9605229c28dc979f27e788098f3b81b9"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}}, &(0x7f0000000280)={0x34, &(0x7f00000000c0)={0x40, 0x31, 0x50, "f9392369e0a06fce286dd239260a3f58e82f854fc76407ba25195115b6a29a55edbfdbf2d30e45b25fca039f69e7e03e70a0d0c13b56148edf79ffdd46d52026eecba315e8e0f65a7da6e822160a2547"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000001c0)={0x20, 0x0, 0x7, {0x5, "0ebc31bffc"}}, &(0x7f0000000200)={0x20, 0x1, 0x1, 0xc}, &(0x7f0000000240)={0x20, 0x0, 0x1, 0x8}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000440)={0x14, &(0x7f00000002c0)={0x20, 0xd, 0xfd, {0xfd, 0xd, "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"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x1c, &(0x7f0000000480)={0x40, 0x7, 0x6f, "be2437cafa9fab792f6142591c0dbbe93436b8bae106d7de20f87a6e3ccf7cd852056cf47f73414863fe6ed3a4aae8ef6e78307adfa0b00cccb46bb65d59ee1683c64e94e45787bec54c9cd30427f31067bb8a839303f8c61602780c7dc4969d52a72a5671af1143e6b871b6f8829d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}}) syz_usb_connect$cdc_ncm(0x2, 0x79, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0x19, 0xc0, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "8a84f8c8013d"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xe7f6, 0x2, 0xffff, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x1c}, [@call_mgmt={0x5, 0x24, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x0, 0xc5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x5, 0x5}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x7, 0xfb, 0x2, 0x8, 0x6}, 0x7a, &(0x7f0000000680)={0x5, 0xf, 0x7a, 0x4, [@generic={0x64, 0x10, 0x1, "2f79253b3db1a34579fcc1e5173697548adc5bae2d8b9faeeaa6d016a20f84a63ede8bffd50337e1c0cb0a42e6bc90e8ea845130f045312aa68367a177dace4618cf91070086a4fabea3b7a2a66e9b20f63626667b7e92ff13ea75be4de92347de"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xcf, 0x8, 0x40, 0x8, 0x6}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x3025}}, {0xab, &(0x7f0000000800)=@string={0xab, 0x3, "b53952640f5328ed6d613bd74c2a177e2f630163da2875e17606df4ed01fe73463cb4192619e8a896b7b4b92a265ac30693df48ee3faf9fc8ec2a4a3ab62731d7305ba1926635c48bfd802c88396e444e3c846e07108cb2ba732301687c260bf54ebda423c7a4ad4dfa86b405ef6728581586cdd955561524d69e88e697f9057dfbac0b8dcfaeb0cba73d934236c9a6a19835893dcb621393256f8530b01896f145c671ebe3371739f"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x3801}}]}) (async) r0 = syz_usb_connect$cdc_ncm(0x2, 0x79, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0x19, 0xc0, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "8a84f8c8013d"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xe7f6, 0x2, 0xffff, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x1c}, [@call_mgmt={0x5, 0x24, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x0, 0xc5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x5, 0x5}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x7, 0xfb, 0x2, 0x8, 0x6}, 0x7a, &(0x7f0000000680)={0x5, 0xf, 0x7a, 0x4, [@generic={0x64, 0x10, 0x1, "2f79253b3db1a34579fcc1e5173697548adc5bae2d8b9faeeaa6d016a20f84a63ede8bffd50337e1c0cb0a42e6bc90e8ea845130f045312aa68367a177dace4618cf91070086a4fabea3b7a2a66e9b20f63626667b7e92ff13ea75be4de92347de"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xcf, 0x8, 0x40, 0x8, 0x6}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x3025}}, {0xab, &(0x7f0000000800)=@string={0xab, 0x3, "b53952640f5328ed6d613bd74c2a177e2f630163da2875e17606df4ed01fe73463cb4192619e8a896b7b4b92a265ac30693df48ee3faf9fc8ec2a4a3ab62731d7305ba1926635c48bfd802c88396e444e3c846e07108cb2ba732301687c260bf54ebda423c7a4ad4dfa86b405ef6728581586cdd955561524d69e88e697f9057dfbac0b8dcfaeb0cba73d934236c9a6a19835893dcb621393256f8530b01896f145c671ebe3371739f"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x3801}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000b00)={0x14, &(0x7f0000000a80)={0x7ab4ed6d74ba1abf, 0x11, 0x18, {0x18, 0x6, "c7ba8320fdad6d8b613cf5862dbc210a3b3a1095cf53"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e00)={0x44, &(0x7f0000000b40)={0x0, 0x7, 0xeb, "fccc0002355cadb99c8adc2f4430addf7416a5aaa7d73df7898dcbc7aa87d00a586ba0fb274a4655ee7fd23d2548e594b7976249d65260008380cddbac9c15cb90a77c29cd52e35a0b7c82a0ebb0895e3667b52deca143db96c48af98af25e584e5472cfa0d3d9f122f28b8c3401f5f9928b7c735f3b4ab66863199bfabeaf8a64c503493c0b0fa93b168c4b5497fe436f1a186cac59fb5269d0d226b03cf5eb253ae0ef00092e7d1e91f76fd6f4732a78880c02f15eead59c7250cce7a1a5abb0f1fa1ae29eff3fe8360af11c80d926af4b08d085cafa34740bde617f3f973156f967ca401b63957fc9c1"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000cc0)={0x20, 0x80, 0x1c, {0x2, 0x2, 0x9a1, 0x3, 0x8, 0x2, 0x5, 0x6, 0x1000, 0x7, 0x6}}, &(0x7f0000000d00)={0x20, 0x85, 0x4, 0x9b}, &(0x7f0000000d40)={0x20, 0x83, 0x2}, &(0x7f0000000d80)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000dc0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000e80)={0x0, 0x6, 0x8a, {0x8a, 0x2, "3cf0927e60402cb0bc5ea89abd0e3415c96f1ca30a6465f65c6db4f155d6412904398201cf5e89f01cc5648ed3a7865b3cdd7b397cbdd5f3d2521412693a1b9ff5153246432441b0044b9e3d37c0e23145a128dcb3babcba0aea90d72e99911bec2434b18c3b8c80eeed6b45eec1466a7f462d7c769dd9460344a16922d334e2c3de8a6fb85ef957"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xdd, "c2ede543cb9e39c5b8bbee8bece948c23e10ca73f8fbf8851160b1440ca3f571876faba96207f3103c567304b87f18875c9bbdc13e21ab25d1d6878c524a55649219bb2b2104c9664d530aeaf6e63883b304a3909ba5255a068189e6ac1bbd5920a0cc7061cb43142583dab79dde31ee0d90a0691ee4239246bf9b07b83c06314a841c5d5ad0e4036322949bad42ebf0f81c8ebfb78a43b5d6c5aad1152f9ee5291a9899ef31e0b70191d8be7e66e9061c0b5a878001b3ac15b2647f0ebd39a27c9004761b3e1011b10523d12e5cdea8b34f45865ef013794ff97f05bf"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001100)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x1000, 0x51, 0x5, 0xb4, 0x7, 0x6, 0x2, 0x10, 0x3, 0x3ff, 0x2, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0x1000}, &(0x7f00000011c0)={0x20, 0x83, 0x2}, &(0x7f0000001200)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000001240)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000e80)={0x0, 0x6, 0x8a, {0x8a, 0x2, "3cf0927e60402cb0bc5ea89abd0e3415c96f1ca30a6465f65c6db4f155d6412904398201cf5e89f01cc5648ed3a7865b3cdd7b397cbdd5f3d2521412693a1b9ff5153246432441b0044b9e3d37c0e23145a128dcb3babcba0aea90d72e99911bec2434b18c3b8c80eeed6b45eec1466a7f462d7c769dd9460344a16922d334e2c3de8a6fb85ef957"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xdd, "c2ede543cb9e39c5b8bbee8bece948c23e10ca73f8fbf8851160b1440ca3f571876faba96207f3103c567304b87f18875c9bbdc13e21ab25d1d6878c524a55649219bb2b2104c9664d530aeaf6e63883b304a3909ba5255a068189e6ac1bbd5920a0cc7061cb43142583dab79dde31ee0d90a0691ee4239246bf9b07b83c06314a841c5d5ad0e4036322949bad42ebf0f81c8ebfb78a43b5d6c5aad1152f9ee5291a9899ef31e0b70191d8be7e66e9061c0b5a878001b3ac15b2647f0ebd39a27c9004761b3e1011b10523d12e5cdea8b34f45865ef013794ff97f05bf"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001100)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x1000, 0x51, 0x5, 0xb4, 0x7, 0x6, 0x2, 0x10, 0x3, 0x3ff, 0x2, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0x1000}, &(0x7f00000011c0)={0x20, 0x83, 0x2}, &(0x7f0000001200)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000001240)={0x20, 0x89, 0x2}}) syz_usb_connect$cdc_ncm(0x5, 0x11f, &(0x7f0000001300)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10d, 0x2, 0x1, 0x6, 0x30, 0x30, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, 'ltt'}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0xfffff516, 0xc, 0x8, 0xf5}, {0x6, 0x24, 0x1a, 0x2, 0x30}, [@mdlm={0x15, 0x24, 0x12, 0xf}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x7, 0x6, 0xf5, 0x6, 0x7}, @mdlm_detail={0x77, 0x24, 0x13, 0x9, "d84c44267b74407438c0439f10bcfa77b3c655a2543302078f8df92ce2b7a97f0a4fd65aa75ffc450f3eea68b39a752e1a87ddbd1bb4e6dc485fee5e4e6a30075ab53f36be4ff79ec5c60c01522506ca75568e3f877962f0e50f176f5cdc6d0a7c9ce0634341c339abc6fd159b7c5c1d9bbc07"}, @country_functional={0x12, 0x24, 0x7, 0x7f, 0x7, [0xff, 0x9, 0x7, 0x76, 0xff, 0x7fff]}, @acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x3, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x6, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x7, 0x4, 0xe}}}}}}}]}}, &(0x7f0000001800)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x200, 0x5, 0x9, 0x3, 0x40}, 0x34, &(0x7f0000001480)={0x5, 0xf, 0x34, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x1, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9, 0x25, 0x8, 0x4, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x3, 0x0, 0xd1}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x7, 0xf, 0x2, [0xf]}]}, 0x6, [{0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x8e, &(0x7f0000001500)=@string={0x8e, 0x3, "b2ffdef9d4f5f3c06a9cc306c9882f16a2bd15d585594a3aa7c6b94dca6107393dee3fbcc3dcefaca27df4b2c0844bab5457f3e2b53a6a345ef02b4032b39ec7d9a8eeb4d47cee11cf53f9ae599dda3dff8a49f445d65e8f774e6e13df9449e388201fae77f755c7417ddecd43675674fcf4e126e050032f811314012fdc74fbb041e28069e3970520c9f28c"}}, {0xa7, &(0x7f00000015c0)=@string={0xa7, 0x3, "5863e85a518cf2fcfc7727c82e67a5239df834a63b755a0ef0c6ca81ef32189932a07a3d166d0fd65ebb5c93e2b99a03b614c00d8a19415037bc3291fabac094c91f584db8bf5ecd1d6632d5aec1e194e38337885ae0ebe54832bd77fd596a7adb865b2b2e41ca74623314a0b0c811e5caa802100fac5559f90f61c69ceed81e980ff56830d261cbe739a3690cc9f24f4e8413ea20d5a7574382c01ed2f0f3fa5c85f7c465"}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x447}}, {0xe8, &(0x7f0000001700)=@string={0xe8, 0x3, "660ac26a4b88210dca1ae50ff4a6cf58b03bdd598747b30b6f2f05786b83cb053d76d7d41eb9c66d0163952b4907fd0e547fe5821279a5c657def4f22362dc843ff53645f9608cf3782182e6f6a44d9e6a82957a66dfbd918a9111c2b5cb0b5b66ebbf673872aac104f6134b9bcbd68512d705585d72d7498d4b9ed2e864adadb68ccc3b6bc34ef8da1c63dfcd1f3b5b8dc60ca1594cde2003f23b3ed66b123466392edeb79a07139f45c2f9de2d4b95fb62c710d04d99981c0d90c663da8ff3c6388dce9a59fa3f45646238225e57e8304c36e8b5e98529286a7db9e5fe1d7ee67726624005"}}]}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001880), 0x202) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000018c0), 0x307400, 0x0) close_range(r1, r2, 0x0) r3 = syz_usb_connect$hid(0xa, 0x3f, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc24f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x80, 0xe, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0xa, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x60b}}, {{{0x9, 0x5, 0x81, 0x3, 0x600, 0x0, 0x6, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x387, 0x40, 0x0, 0x5}}]}}}]}}]}}, &(0x7f0000001cc0)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x110, 0x1, 0xff, 0x80, 0x40, 0x9}, 0xc, &(0x7f0000001980)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x9, 0x9}]}, 0x4, [{0xa0, &(0x7f00000019c0)=@string={0xa0, 0x3, "04dd5938eec62eef81bad5f786384cbd4c84f57462bf0ceb5fa1c455930f28472c2a0e0f9900287348ac483c99735f3af52e3f101cafd76d57d9ee4714bcfb5bab86a14d2fd96919fcb058c51d9a765eef86ef437070b5fa07749a1654e96fceb7c93395890fe7a1377b1191fad5331aa4996cff99b9c96eb23003dd8aca429a4b17048a870f2a2a968d478ad4916711ab89788d0e3bbdf0df5060c9bfa1"}}, {0x75, &(0x7f0000001a80)=@string={0x75, 0x3, "c84b408b202b3a7450278fbda7d2650f9a2ff73bb06b2b02f588954f22c310d11f782d8f53516f1e0befa3835eeff0caeac851a707a34b87d9c2769eb57da844870469090efdd022966fb126fe2b96605fadaf75edb1a7db47428108055f450a62b558d1a738f92f614219d224b57be395f43f"}}, {0xe2, &(0x7f0000001b00)=@string={0xe2, 0x3, "7b9903421c33af855d54430dfbdc197b25049fe486d661d4fac46809d9468dd680cea79382a4ac71dee4299546d741eb11beec6593a373820dc6a69a8b76a0b66bdcb126f59ec896eceb55e5e1f4d06331d9697426b366c826b26cad178ceae76305d79cdbd152f9ee192cfde87893679114ee771a8e90982f3a140151bd5670718b0c58da3e6b41d028f84f0ee6ad94323f87c1695347904355601191a6cffd101cadf59fa0d6f3dc87462e4a09d17a62bd671bf4bde04053a523332820682d752698193f571349c412b884def22cba0d496ce3136544337bdf4ccdb650902a"}}, {0xad, &(0x7f0000001c00)=@string={0xad, 0x3, "8e56c8cc65cba7e4f91d0ab18a23f8f9c2845c18de79607e182f038e1dc8893a1d038767d08a7bf6ec39a2b1aa1bb2a5e9bf20d917ee15c4be2d2bc786297de78350fb55bd5b417a9e1c4207f8c77c1f2cbc0db5d95794cedb04c8ccc1185cabe1e0a751db45b56dc97bf85b8c6263e973b3eb4d8c604e15f1cc537127866d789c6de090d7354c6cd68bd597309f9f4afc16c68039fe36dbd456d06c55d929aa737539163a7d6aed6a6aba"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000001ec0)={0x24, &(0x7f0000001d40)={0x40, 0x23, 0x3f, {0x3f, 0x8, "4b0ea2168328ba45705fdb20fff7b9bc027e3f47325e8f09f844de2c335d53b6f674fffa2a8050029dc15120f342cfd17d1ad7090e58301157fcc720d8"}}, &(0x7f0000001dc0)={0x0, 0x3, 0x57, @string={0x57, 0x3, "bc648e7e61bbd86694c2e39464490da613b9481b86952d3757a6efd16a9e21990c6b0c980df4515198db22fe9084298a6c91515b666864601c581fd2bcfd4d5ef5daa4e5afe75cb46a0bb66850c31d4e3a4984248b"}}, &(0x7f0000001e40)={0x0, 0x22, 0x27, {[@global=@item_4={0x3, 0x1, 0x7, "03312ecf"}, @local=@item_4={0x3, 0x2, 0x1, "2d73f48f"}, @main=@item_4={0x3, 0x0, 0xc, "49f10b47"}, @main=@item_012={0x2, 0x0, 0x9, 'T?'}, @main=@item_4={0x3, 0x0, 0xa, "21efa887"}, @local=@item_4={0x3, 0x2, 0x0, "41e12a42"}, @main=@item_4={0x3, 0x0, 0xb, "f5640b21"}, @local=@item_012={0x2, 0x2, 0xa, "de87"}, @global=@item_012={0x0, 0x1, 0x7}, @global=@item_012={0x1, 0x1, 0x2, "fc"}]}}, &(0x7f0000001e80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0xebd}}}}, &(0x7f0000002140)={0x2c, &(0x7f0000001f00)={0x0, 0xb, 0x52, "b4c427828058d568ec92d2c5baa02fd9f06303bda19873619fc155ac5cd8b27ebdde9a2028b1042e54549760adc30dec66dfabca0e2eae06fcc6e8d35b8acf0f3a9814483225aa64ac57b863091dba142a4a"}, &(0x7f0000001f80)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000001fc0)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000002000)={0x20, 0x1, 0xbd, "2ecc68faae7c4d285b4f04d472014e4147340c0981a3e090780ec99579a11bc0b63d4e3256fe2c1461c672f075efd88ea7348e3f3dfc5037b7942c761cd2cda2f3adef444a52ff3696badd41f56b591de1f75fdefc5e61fcf9316f817ce203fa87ed1f9ef538d38d924ee1715c67ad884763d05231e55c7b2c9cea46b14693a5691059280527d7660e9d5b81d17a4be0f0313b081afcec32c068ad5f49f7762740172bd7fa0462b69d454ae8aabb8d5e2b27280e96dfc4e65e23a438c7"}, &(0x7f0000002100)={0x20, 0x3, 0x1, 0xb}}) (async) syz_usb_control_io$hid(r3, &(0x7f0000001ec0)={0x24, &(0x7f0000001d40)={0x40, 0x23, 0x3f, {0x3f, 0x8, "4b0ea2168328ba45705fdb20fff7b9bc027e3f47325e8f09f844de2c335d53b6f674fffa2a8050029dc15120f342cfd17d1ad7090e58301157fcc720d8"}}, &(0x7f0000001dc0)={0x0, 0x3, 0x57, @string={0x57, 0x3, "bc648e7e61bbd86694c2e39464490da613b9481b86952d3757a6efd16a9e21990c6b0c980df4515198db22fe9084298a6c91515b666864601c581fd2bcfd4d5ef5daa4e5afe75cb46a0bb66850c31d4e3a4984248b"}}, &(0x7f0000001e40)={0x0, 0x22, 0x27, {[@global=@item_4={0x3, 0x1, 0x7, "03312ecf"}, @local=@item_4={0x3, 0x2, 0x1, "2d73f48f"}, @main=@item_4={0x3, 0x0, 0xc, "49f10b47"}, @main=@item_012={0x2, 0x0, 0x9, 'T?'}, @main=@item_4={0x3, 0x0, 0xa, "21efa887"}, @local=@item_4={0x3, 0x2, 0x0, "41e12a42"}, @main=@item_4={0x3, 0x0, 0xb, "f5640b21"}, @local=@item_012={0x2, 0x2, 0xa, "de87"}, @global=@item_012={0x0, 0x1, 0x7}, @global=@item_012={0x1, 0x1, 0x2, "fc"}]}}, &(0x7f0000001e80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0xebd}}}}, &(0x7f0000002140)={0x2c, &(0x7f0000001f00)={0x0, 0xb, 0x52, "b4c427828058d568ec92d2c5baa02fd9f06303bda19873619fc155ac5cd8b27ebdde9a2028b1042e54549760adc30dec66dfabca0e2eae06fcc6e8d35b8acf0f3a9814483225aa64ac57b863091dba142a4a"}, &(0x7f0000001f80)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000001fc0)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000002000)={0x20, 0x1, 0xbd, "2ecc68faae7c4d285b4f04d472014e4147340c0981a3e090780ec99579a11bc0b63d4e3256fe2c1461c672f075efd88ea7348e3f3dfc5037b7942c761cd2cda2f3adef444a52ff3696badd41f56b591de1f75fdefc5e61fcf9316f817ce203fa87ed1f9ef538d38d924ee1715c67ad884763d05231e55c7b2c9cea46b14693a5691059280527d7660e9d5b81d17a4be0f0313b081afcec32c068ad5f49f7762740172bd7fa0462b69d454ae8aabb8d5e2b27280e96dfc4e65e23a438c7"}, &(0x7f0000002100)={0x20, 0x3, 0x1, 0xb}}) r4 = syz_usb_connect$cdc_ncm(0x4, 0xa2, &(0x7f0000002180)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x2, 0x1, 0x6, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "8e"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xd0, 0x7f, 0x7, 0x40}, {0x6, 0x24, 0x1a, 0x2, 0xb}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xfd, 0x292}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x7, 0x3, 0x2}, @dmm={0x7, 0x24, 0x14, 0x67, 0x8}, @obex={0x5, 0x24, 0x15, 0x3ff}, @mbim={0xc, 0x24, 0x1b, 0x8000, 0x5, 0xff, 0x6, 0xf23a, 0x67}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x1ff, 0x9, 0xf9, 0x1ff, 0xf8}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x7, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x9, 0x1, 0xa8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x3, 0x3a}}}}}}}]}}, &(0x7f0000002800)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x4, 0x1, 0x5, 0x60}, 0x8d, &(0x7f0000002280)={0x5, 0xf, 0x8d, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xcf, "edea640701ef6749981da3f383170395"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "4ee890a5f82b4a48c84ab690a9954b59"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x80, 0x37cf}, @generic={0x43, 0x10, 0x2, "5f8fe593421b79ce62ba4620952f535400c8726f9e8fc1a4efff76f520259a34c6447ae813b52693806a8539980e775e0372bd06bef0dbb240c015ecaac85bcc"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x9, 0xf000, 0x6, [0x0]}]}, 0xa, [{0x2e, &(0x7f0000002340)=@string={0x2e, 0x3, "9c5a4aa3d07492b00406bdb858e86c8c1e9fa63a2ceae7c91f31c0388b783b63343c87840381540f059a304c"}}, {0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x801}}, {0x81, &(0x7f00000023c0)=@string={0x81, 0x3, "10a9f8ea6e3d5e1fc0e1ce4cfc7fc7ffc5a9f1662a57744cdfb595265b72521e6ef64eec9d628037b61aca9bd2f91e4b30c054fd609ebbd1bf36db4a5e64d3c1693d60bfd5b2a6b45df61de6a540644e82c6a9293d4bd85c26caf4d28ecdcce7905543347f97b2708f773e9c772726354b8f2e8d3f303156141bdaaf4acaff"}}, {0x37, &(0x7f0000002480)=@string={0x37, 0x3, "b03d15d6b54f8f18050e4d6af9db57dfaa29bb61c2618a1bd60fbb04ec84052f88af3789bc7efb02b2ad604d47421627fe6014f91f"}}, {0x36, &(0x7f00000024c0)=@string={0x36, 0x3, "ce4fb1d4585ff3b27a57e4d1ab29385fd12fb9e269bb27ba3d0cb6ab5060623c96d96947e3beb4cfa4d619f587afed7fa9192f66"}}, {0x102, &(0x7f0000002500)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000002640)=@lang_id={0x4}}, {0x4, &(0x7f0000002680)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f00000026c0)=@lang_id={0x4, 0x3, 0x418}}, {0xf6, &(0x7f0000002700)=@string={0xf6, 0x3, "09292c9a9d7844650833176c2d2ae9fa2407d38c074c41deb4960f2fd60b5c622fbe09bc0a5ba02bbf0fd69d7d5d59052853dfe894c8c2fc3e3a1985c766a988c80feae7a3f68db3cc72ed2a0eb8243a4a7c4293051c52841ce0c3bd06dfd0e405ebf250251ef51814ee2d71e666709c8478de1b5d65ebf9b3e54c96e030c9f6a1a1b2d43d1ab08153e0fbda0e60f36216a478f333eb65dea15b1cce6272a29b9ebabd8363dfcba4c3e35168650c0c464ecdc699040b406c55d558b312621eb68827d97290e02259686f93e8cc6e9b2100beb67389de26a8baa3d8b62d4fbd9eb883fb74b223a723598bafffc18ada04419aa207"}}]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000002a00)={0x14, &(0x7f00000028c0)={0x20, 0x11, 0xd3, {0xd3, 0xe, "630dbdcc0e864e2aad3481287275363c469416dd8b7660dfa541def5b2fdc4661d71979600cb5691496919da0f691f46f2799507f294514d02301e1dda8fd61472dc2ba54f7afb871405055bacc0825e95a9b7671ba2cfdea0e64bbb0f9eb8a1df2d38cb801182c36b6a441c70b097063a347a1fbb86c42dd66b940180893eb36af82951e3930ea8c14c684de27425686220ed29dfae64185ff15ba5f2622a65a86b92b5681130091a6fce0e128f7cfc2cb90c8bd851aeaa1d3845b59605298b6c074af5669cdfa68488b3429957501815"}}, &(0x7f00000029c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002c40)={0x44, &(0x7f0000002a40)={0x20, 0x5, 0x17, "03adc05b4ba58b841648c4fe45caf39a16823df3fc4792"}, &(0x7f0000002a80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002ac0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002b00)={0x20, 0x80, 0x1c, {0x4, 0x7fff, 0x6, 0x1, 0x7ff, 0x0, 0x6, 0x2, 0x81, 0x2, 0x54, 0x7ff}}, &(0x7f0000002b40)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000002b80)={0x20, 0x83, 0x2}, &(0x7f0000002bc0)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000002c00)={0x20, 0x89, 0x2, 0x1}}) r5 = syz_usb_connect$cdc_ecm(0x2, 0x6e, &(0x7f0000002cc0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x1, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x9b, {{0x6, 0x24, 0x6, 0x0, 0x0, "d7"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x19, 0x9, 0x2, 0x5}, [@country_functional={0xa, 0x24, 0x7, 0x0, 0xc000, [0x1, 0x7fff]}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x7, 0x5, 0x8}, @ncm={0x6, 0x24, 0x1a, 0xd, 0x30}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x14, 0xfa, 0x24}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xfe, 0x1, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xfe, 0xe, 0x7}}}}}]}}]}}, &(0x7f0000003080)={0xa, &(0x7f0000002d40)={0xa, 0x6, 0x310, 0x8, 0x8, 0x2, 0x0, 0xd8}, 0x30, &(0x7f0000002d80)={0x5, 0xf, 0x30, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0xbf, 0x100}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x10, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x8a7, 0xf00f, 0x0, [0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0xa, 0x3}]}, 0x7, [{0x4, &(0x7f0000002dc0)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000002e00)=@lang_id={0x4}}, {0x4, &(0x7f0000002e40)=@lang_id={0x4, 0x3, 0x180a}}, {0x9d, &(0x7f0000002e80)=@string={0x9d, 0x3, "333ccb70f63ee9a78f6063c0c0ec8e8adaa231ad0fa8d40cae72d02a9af08ef506730bda3d40d421869178cec24eb6604f8506b5daafe94b740483894a11199680f5914b452aff1fc8d1f9971356bc134704b070d23a5101617681ede73207346b921eff24d1ed9e192534de79c826ed3bb7e9e2c8652d391afdd71765b0c27886bdc1dbd259767cb3ab83870ef66aa347c267265881a64fbf81d2"}}, {0x1e, &(0x7f0000002f40)=@string={0x1e, 0x3, "91f1f51e10178a4e45e4582ea50359a08a266b1e42fa427c0e0d05e8"}}, {0x86, &(0x7f0000002f80)=@string={0x86, 0x3, "e6e67b4b71b3a7d2b9af56a3a490ef5988f2d640126b8df8ad9746bb9273adb303b38da1b84742aebb86771afe84ed432dec68db514c7da8a039a269f64adba6ce5ebcac9527ea19f16d6b8a2384d458f7948115467c2e70e3ebe01c9da5df1e8c494e8c46ff10587d3ff1497c255221185159a89146f05c02b361e567364ca061cfedbe"}}, {0x4, &(0x7f0000003040)=@lang_id={0x4, 0x3, 0x200a}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000003240)={0x14, &(0x7f0000003100)={0x20, 0x3d, 0xbf, {0xbf, 0x4, "ba90d02d5ed1a9f671256a553739836a36e8bc07008f673324a7477c549216df168c62a9f84286efae3814bc9df80f2f26e9f8babdb16c160c5398276a0f895e7aa954621698cad7e8fd7ff050cc56650282bb9a5eb2b87fc273012f4099e6820eefa460ddceb48d65f26781f5a496dd0ee7930b453f75178e755425066fb656dea6d046f8cbe090ceefd2f07f3d9834a4f93dd4738d1008d7ccd8821ca2e89d1dbdd55e89ffd8b8123155301b327fda0ceb1c986dcd3a0d067adf37e5"}}, &(0x7f0000003200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000033c0)={0x1c, &(0x7f0000003280)={0x20, 0x0, 0x99, "34ccc2af1bb0341058fd5a6d5f76474d309861de08343fbc3dc64d29af979201bc3e63326c25d7b73276bdb14c07e35ecd9f2bc38fa4ddbd7700f618e54daff46de4bf229db84886d6a169ace6364647f1e7af0846b9ed490c8d064442e20df3bc81d81c60f02f23e39f8a8ecb1aae57dd8d968f2385e3fd3fbf6d223f515d54fa9debfc709081dec0f43498eea9d69b991684abd02e296ff7"}, &(0x7f0000003340)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000003380)={0x0, 0x8, 0x1}}) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000003400), 0x2) ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000003440)={0x1, 0x1, [{r2, 0x0, 0x10000, 0x10000a000}]}) (async) ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000003440)={0x1, 0x1, [{r2, 0x0, 0x10000, 0x10000a000}]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000003580)={0x14, &(0x7f0000003480)={0x0, 0xb, 0xac, {0xac, 0xc, "a3bbd9d5718b5fe5ea0486bed60fca65740f6eaedfa59bff27777ea1b439d9d88fe0fd4b9b998e1e7f75ace6c03309f361fcc0d8abbadd1ee887d3025729e4da0d1af972e35099b0836f27c886b7407ecf4cb48b032e7a78c64aaebcc8696ec36a06c68d3d17f5a62d335f2d3c47efda60d73049fbf2d79248fa52cd173e92594e18f94c05799a7bbc8a87f8cb97acef681523f453888359ee1ee05b4ede562341c2aa9412fc2610d043"}}, &(0x7f0000003540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003880)={0x44, &(0x7f00000035c0)={0x20, 0x6, 0xd8, "7bb9292c6c01ad43f7c7d8957a616ca48f58bffb970b123ca8528ecc33488c3ac47221305c2f222f36e15d47544e5a06eec5f49a0e85839f13e61e49dee216f811937e4c831a7f6e8844135f6680898d62d67dc767e0a81d9ce4f65e71ba4ee4c56d1bef242ee734f793e0a91e88acdedb6a88600efeb2441b652c46c7d58ad0e18286b5a00429bb9f75e7b9389719d22af682efe09fa2a6a392a35d163c1aee990aa859afac6c75e8edf59b3313e917d9addbe4daf9f60e49ec7cff325e319ea9713a24c2e15c31d64c7d4e97146622fb9c0c9c37faedba"}, &(0x7f00000036c0)={0x0, 0xa, 0x1, 0xd9}, &(0x7f0000003700)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000003740)={0x20, 0x80, 0x1c, {0x1, 0x4, 0xb, 0x8000, 0xc, 0xe, 0x2, 0xfffffffe, 0xfc7, 0x81, 0x0, 0x3}}, &(0x7f0000003780)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000037c0)={0x20, 0x83, 0x2}, &(0x7f0000003800)={0x20, 0x87, 0x2, 0xdf34}, &(0x7f0000003840)={0x20, 0x89, 0x2}}) syz_usb_connect$cdc_ecm(0x0, 0x59, &(0x7f0000003900)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0xa3, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x8a, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x0, "85186b5a9f"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xa7a2, 0x4edc, 0x5, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x4, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x408, 0x0, 0x9, 0x9}}}}}]}}]}}, &(0x7f0000003b80)={0xa, &(0x7f0000003980)={0xa, 0x6, 0x300, 0x75, 0xc0, 0x6e, 0x40, 0x3}, 0x10d, &(0x7f00000039c0)={0x5, 0xf, 0x10d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0xb, 0x1, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x90, 0x4, 0x0, 0xc}, @generic={0xf0, 0x10, 0x1, "127899e7adfd09abc76306bdfa10292c41fec7e8a466a222f02d15f32af892518fdef629af8dd4454af8f4d00126503d92cac47a2d26d48efe1025fa3d304632da66c6608d4eca9195439bf7bf7cfef38892c0fe79ed5979597b1a9692a3f2b9e20bfea0cf61db51434d9c85fa5daccc6ad3bb69af67ae252efeb86245b58f6be40d290f3aef39c8da590ccbfb1b6e98a7b386c31860de3c3027d451822a42735f228263b13ff5842e2fae0566071603857acbc404e1ac1583de994a330003f4e93a0579a9a2b554e1d444ec2b2bd82d7abe910544136b80b77ab389b7e697c09a328113061951310f7f94294c"}, @ptm_cap={0x3}]}, 0x1, [{0x77, &(0x7f0000003b00)=@string={0x77, 0x3, "4f9aeed62a83805e6be33dccecba067a012958bba554bc31d83ed6285e631ed76d0f4d65b1dbe6e19da3e02c24007692e3022dbe0ade07df9711ef8ec9a8c9f1995894ec1e6f9a96312f5cdc4a858073f442f74ab9f82c459b0593823a24e9b85624e95bc5b94ec967018c8c33b9bc6d78707184e2"}}]}) (async) syz_usb_connect$cdc_ecm(0x0, 0x59, &(0x7f0000003900)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0xa3, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x8a, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x0, "85186b5a9f"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xa7a2, 0x4edc, 0x5, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x4, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x408, 0x0, 0x9, 0x9}}}}}]}}]}}, &(0x7f0000003b80)={0xa, &(0x7f0000003980)={0xa, 0x6, 0x300, 0x75, 0xc0, 0x6e, 0x40, 0x3}, 0x10d, &(0x7f00000039c0)={0x5, 0xf, 0x10d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0xb, 0x1, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x90, 0x4, 0x0, 0xc}, @generic={0xf0, 0x10, 0x1, "127899e7adfd09abc76306bdfa10292c41fec7e8a466a222f02d15f32af892518fdef629af8dd4454af8f4d00126503d92cac47a2d26d48efe1025fa3d304632da66c6608d4eca9195439bf7bf7cfef38892c0fe79ed5979597b1a9692a3f2b9e20bfea0cf61db51434d9c85fa5daccc6ad3bb69af67ae252efeb86245b58f6be40d290f3aef39c8da590ccbfb1b6e98a7b386c31860de3c3027d451822a42735f228263b13ff5842e2fae0566071603857acbc404e1ac1583de994a330003f4e93a0579a9a2b554e1d444ec2b2bd82d7abe910544136b80b77ab389b7e697c09a328113061951310f7f94294c"}, @ptm_cap={0x3}]}, 0x1, [{0x77, &(0x7f0000003b00)=@string={0x77, 0x3, "4f9aeed62a83805e6be33dccecba067a012958bba554bc31d83ed6285e631ed76d0f4d65b1dbe6e19da3e02c24007692e3022dbe0ade07df9711ef8ec9a8c9f1995894ec1e6f9a96312f5cdc4a858073f442f74ab9f82c459b0593823a24e9b85624e95bc5b94ec967018c8c33b9bc6d78707184e2"}}]}) r7 = syz_usb_connect$uac1(0x5, 0x133, &(0x7f0000003bc0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x121, 0x3, 0x1, 0x2, 0xa0, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0xd}, [@selector_unit={0x8, 0x24, 0x5, 0x1, 0x93, '.p\n'}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x1, 0x6, 0x3, 0x3, 0xc}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x301, 0x1, 0x5, 0xe}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x0, 0x5, 0x3, 0x2, 0x8, 0x3}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x3, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0xffff, 0xc, "a6fad30b97"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x40, 0x2, 0x1, 0x9b, "3a90dabf8a"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4, 0x4, 0x6, 0x1, "0f9da03900b0c2"}, @as_header={0x7, 0x24, 0x1, 0xaa, 0x7}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x4, 0x1, 0x9, "022b74152d075e197b"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7f, 0xf711, 0x7f, "0ece3c07d4b6009ee0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x73, 0xd, 0x6, {0x7, 0x25, 0x1, 0x83, 0x10, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x8f}, @as_header={0x7, 0x24, 0x1, 0x8, 0x7c, 0x2}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x2, 0x1, 0x1, 0x8, "4f0eecc1086b3bf2"}, @as_header={0x7, 0x24, 0x1, 0x9d, 0x7, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x7, 0xc1, "bdd9"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0x4, 0x3, "9e39f956f65e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xd7, 0x6, 0x5, {0x7, 0x25, 0x1, 0x0, 0x4, 0x7ff}}}}}}}]}}, &(0x7f0000003e80)={0xa, &(0x7f0000003d00)={0xa, 0x6, 0x711, 0xfe, 0x4, 0x6, 0x10, 0x7}, 0x10, &(0x7f0000003d40)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0xac, 0xf6, 0xd, 0x6, 0x4}]}, 0x3, [{0x57, &(0x7f0000003d80)=@string={0x57, 0x3, "290c77027607bdd678e674b3fa6ce992afad7309e959730240034d1c05b2383d4e1212836785dc35a42107ba9cbb182bd080a3a9599122bd9671c129ec5206d9b342aae9818a4926a72492b80467d9f465fe3eb33d"}}, {0x4, &(0x7f0000003e00)=@lang_id={0x4, 0x3, 0x415}}, {0x3c, &(0x7f0000003e40)=@string={0x3c, 0x3, "a720a0b78fdd9855bee5d5c258c79ef5e1c35bad15253e2a94c9aecb75710f7145910c552e9aca533dd32022f379c3c7a9d0443f98a130999641"}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000003f40)={0x14, &(0x7f0000003ec0)={0x40, 0x10, 0x4, {0x4, 0x11, "9d8e"}}, &(0x7f0000003f00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}}, &(0x7f0000004200)={0x44, &(0x7f0000003f80)={0x40, 0xe, 0xac, "7b4cbec6fd9736a3337d8aed2b6e5c0d1b60ca139536d11bab0cf054bfccb3f23229ee33838fae472797971f79e2920b0227f4469f1ba7b69fc7ce5a058dc4c50bf1561f55842fad6d6039f5e5880da1fa5566134bb876a59e679fcbe1f8a7fb539c2ccd081ad5cd1d11f2f9daa53847e7d87233048304cfdfc814da895989824bc9da46b5b1a80184e4fda4c31e041e48ad278c644af01dbe8d39f5d2e9cd90eaff8ea928e537bd16ae261a"}, &(0x7f0000004040)={0x0, 0xa, 0x1}, &(0x7f0000004080)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000040c0)={0x20, 0x81, 0x1, "c5"}, &(0x7f0000004100)={0x20, 0x82, 0x3, "37d2fd"}, &(0x7f0000004140)={0x20, 0x83, 0x2, "0005"}, &(0x7f0000004180)={0x20, 0x84, 0x3, "281cbe"}, &(0x7f00000041c0)={0x20, 0x85, 0x3, '\'p\x00'}}) syz_usb_control_io$hid(r3, &(0x7f0000004380)={0x24, &(0x7f0000004280)={0x0, 0x9, 0x8, {0x8, 0xd, "ae7fa5b8d611"}}, &(0x7f00000042c0)={0x0, 0x3, 0x28, @string={0x28, 0x3, "5152c1ba12430466960ca906a5f93b2c80d936ca4ec3217c35f929c2b933dccd3220a148b52f"}}, &(0x7f0000004300)={0x0, 0x22, 0x12, {[@global=@item_4={0x3, 0x1, 0x7, "a9ac53f3"}, @global=@item_4={0x3, 0x1, 0x4, "202e9b25"}, @global=@item_4={0x3, 0x1, 0x2, "0193efcf"}, @global=@item_012={0x2, 0x1, 0x7, "8dc2"}]}}, &(0x7f0000004340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x0, 0x1, {0x22, 0x138}}}}, &(0x7f0000004580)={0x2c, &(0x7f00000043c0)={0x20, 0x15, 0xa1, "72923234cf5e123ba7af5c14d8220c052591017490d6f5ba2e6ef29e64171b02320a8c47542429036c08c695a401edef3ed25f4097729793815939fd1afc431f684bd2f6c1d687839ac870303c5be614806df94271da7c57b634bdc971c6c91c538102d001e2f99c3a7096a7775193e4ae20b8ba2d72f9554fe65288a6ff38a6e76d17e162a20b61a86d657b7a2ed90c8744cc08ff68e7f83dd8cd1561821b1617"}, &(0x7f0000004480)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000044c0)={0x0, 0x8, 0x1}, &(0x7f0000004500)={0x20, 0x1, 0x23, "dcad1272b942784fc5e1917d6e7262432fb0a50c7f8d78db97e453a4b966bd35c5c761"}, &(0x7f0000004540)={0x20, 0x3, 0x1, 0x5}}) (async) syz_usb_control_io$hid(r3, &(0x7f0000004380)={0x24, &(0x7f0000004280)={0x0, 0x9, 0x8, {0x8, 0xd, "ae7fa5b8d611"}}, &(0x7f00000042c0)={0x0, 0x3, 0x28, @string={0x28, 0x3, "5152c1ba12430466960ca906a5f93b2c80d936ca4ec3217c35f929c2b933dccd3220a148b52f"}}, &(0x7f0000004300)={0x0, 0x22, 0x12, {[@global=@item_4={0x3, 0x1, 0x7, "a9ac53f3"}, @global=@item_4={0x3, 0x1, 0x4, "202e9b25"}, @global=@item_4={0x3, 0x1, 0x2, "0193efcf"}, @global=@item_012={0x2, 0x1, 0x7, "8dc2"}]}}, &(0x7f0000004340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x0, 0x1, {0x22, 0x138}}}}, &(0x7f0000004580)={0x2c, &(0x7f00000043c0)={0x20, 0x15, 0xa1, "72923234cf5e123ba7af5c14d8220c052591017490d6f5ba2e6ef29e64171b02320a8c47542429036c08c695a401edef3ed25f4097729793815939fd1afc431f684bd2f6c1d687839ac870303c5be614806df94271da7c57b634bdc971c6c91c538102d001e2f99c3a7096a7775193e4ae20b8ba2d72f9554fe65288a6ff38a6e76d17e162a20b61a86d657b7a2ed90c8744cc08ff68e7f83dd8cd1561821b1617"}, &(0x7f0000004480)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000044c0)={0x0, 0x8, 0x1}, &(0x7f0000004500)={0x20, 0x1, 0x23, "dcad1272b942784fc5e1917d6e7262432fb0a50c7f8d78db97e453a4b966bd35c5c761"}, &(0x7f0000004540)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$hid(r3, &(0x7f00000047c0)={0x24, &(0x7f00000045c0)={0x20, 0x23, 0x79, {0x79, 0x2, "f019c4934cb864b05f604bb2fe8a3b2d469b157cdf8094ba9ab6f27e94592916fe2ee35d4f24e233289ac9eb9df3cab02c79e9dcdb53d859fca410d305e2ae686fe27a11a62e346fe2e5963a26fc6d657bb2684f764bf013d6e858af32aa68f5da0a886aa7384417e43f9e03b8c31db88f2d00b7b9a1c7"}}, &(0x7f0000004640)={0x0, 0x3, 0xc0, @string={0xc0, 0x3, "c9aff78e47438c572e23e06d237cb13f0bb848d79bde8d0cfc01afc0b54b3c8f1cdbe57eb7f69c3588b9a7f2f42edaf83504dbfc8cf8f970d8d2b59284953e34fd0548f0b7f705a254b4773734e949d50be15889f02463c0ef0d471287385884d9c2d3d5d23bf88050bb65134ac9c6e3171a22d5f5e5c7084f6ed60df02c7f96f924925d25a36c8ea92033d9699b4178864aa1841820b9d3ee0953e7df0e31186da8368e21ff814b26fb59c28027d7201ababab5e3b0cb31739297e4c717"}}, &(0x7f0000004740)={0x0, 0x22, 0x16, {[@main=@item_4={0x3, 0x0, 0x9, "9d90cea7"}, @local=@item_012={0x1, 0x2, 0x5, "82"}, @main=@item_4={0x3, 0x0, 0x8, "8720bf79"}, @global=@item_012={0x2, 0x1, 0x5, 'H{'}, @local=@item_012={0x1, 0x2, 0x3, '~'}, @local=@item_4={0x3, 0x2, 0x3, "9a1272be"}]}}, &(0x7f0000004780)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x553}}}}, &(0x7f0000004940)={0x2c, &(0x7f0000004800)={0x20, 0x14, 0x2d, "6a1c37c70a17fdf3df1d960e85deb26c0251bf0c65c4148d07749bd43ba7df5754422db63a4a997eafd7174104"}, &(0x7f0000004840)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000004880)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000048c0)={0x20, 0x1, 0x25, "395451df400ab549950c7fb86fa66f663b65de377aa95efbcaea3f20d10e93ec16820ace33"}, &(0x7f0000004900)={0x20, 0x3, 0x1}}) (async) syz_usb_control_io$hid(r3, &(0x7f00000047c0)={0x24, &(0x7f00000045c0)={0x20, 0x23, 0x79, {0x79, 0x2, "f019c4934cb864b05f604bb2fe8a3b2d469b157cdf8094ba9ab6f27e94592916fe2ee35d4f24e233289ac9eb9df3cab02c79e9dcdb53d859fca410d305e2ae686fe27a11a62e346fe2e5963a26fc6d657bb2684f764bf013d6e858af32aa68f5da0a886aa7384417e43f9e03b8c31db88f2d00b7b9a1c7"}}, &(0x7f0000004640)={0x0, 0x3, 0xc0, @string={0xc0, 0x3, "c9aff78e47438c572e23e06d237cb13f0bb848d79bde8d0cfc01afc0b54b3c8f1cdbe57eb7f69c3588b9a7f2f42edaf83504dbfc8cf8f970d8d2b59284953e34fd0548f0b7f705a254b4773734e949d50be15889f02463c0ef0d471287385884d9c2d3d5d23bf88050bb65134ac9c6e3171a22d5f5e5c7084f6ed60df02c7f96f924925d25a36c8ea92033d9699b4178864aa1841820b9d3ee0953e7df0e31186da8368e21ff814b26fb59c28027d7201ababab5e3b0cb31739297e4c717"}}, &(0x7f0000004740)={0x0, 0x22, 0x16, {[@main=@item_4={0x3, 0x0, 0x9, "9d90cea7"}, @local=@item_012={0x1, 0x2, 0x5, "82"}, @main=@item_4={0x3, 0x0, 0x8, "8720bf79"}, @global=@item_012={0x2, 0x1, 0x5, 'H{'}, @local=@item_012={0x1, 0x2, 0x3, '~'}, @local=@item_4={0x3, 0x2, 0x3, "9a1272be"}]}}, &(0x7f0000004780)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x553}}}}, &(0x7f0000004940)={0x2c, &(0x7f0000004800)={0x20, 0x14, 0x2d, "6a1c37c70a17fdf3df1d960e85deb26c0251bf0c65c4148d07749bd43ba7df5754422db63a4a997eafd7174104"}, &(0x7f0000004840)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000004880)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000048c0)={0x20, 0x1, 0x25, "395451df400ab549950c7fb86fa66f663b65de377aa95efbcaea3f20d10e93ec16820ace33"}, &(0x7f0000004900)={0x20, 0x3, 0x1}}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000004a40)={0x14, &(0x7f0000004980)={0x10, 0xe, 0x3c, {0x3c, 0x7, "359d5c7885692d5e7addca273190b4365384b5c79e719381814df9325295dbaf82b62eaa1f7acedeeab22d285356b182c24d0514e12c4bd2e1cb"}}, &(0x7f0000004a00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004d40)={0x44, &(0x7f0000004a80)={0x0, 0x1, 0xe4, "0a0961b383ebe5f66e9342fac68b5c9b77452d77b587288ff890688742030bc6f282224307b3f49c750eed08a793d36cad12fa2ad4db38cdc8b9edd38c778abb6745aadcf9cda6785497585f6f8554f9e75801612367d149e0f0fb8d3085194997bf2b392988ce2115bbd911ef306d4d07b7f856c1cbf4fec34b4bba1cd5d3af3117a3bdde6dfbca4397c7130f02c7a49768d3437486623b695117c0e45bf86af915a33942c0a8bf83d0e382f4086028d5a7ac7dffffa2a717a4914ffaffff7de72105defe89469904b9a40a9341408db89b3488cdf6a6c78ad9c9b0aa59342c1ab4b55b"}, &(0x7f0000004b80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000004bc0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000004c00)={0x20, 0x80, 0x1c, {0x0, 0x3, 0x7, 0x0, 0x8, 0x4, 0xa0, 0x100, 0xa5, 0x1, 0x4, 0x52c}}, &(0x7f0000004c40)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000004c80)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000004cc0)={0x20, 0x87, 0x2, 0xd8}, &(0x7f0000004d00)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000004e40)={0x14, &(0x7f0000004dc0)={0x40, 0x5, 0x18, {0x18, 0x8, "7f03ffc41d1ee4d16d366ae4f9978bd8e0a1b8e6ba7c"}}, &(0x7f0000004e00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000005140)={0x44, &(0x7f0000004e80)={0x0, 0xf, 0xdc, "b7bc6e94e015f62b30c55309d005ea761f6851307ddee10251f24c9ea33f6839594dd6c393b5c61bae5525caab50bd243562351316716bb32c366fa5120d53096f8674a85d78b20b44ffd097da851b3baed9c600d5ab698c25acd562f2975a062da372fe95581cc38bbaa00c6255142935043634fd59d551f81bb5793a2a3d817c576b9cfccb1dfaeb24021bef081667fb3b8021a2a4cd7a6a6dab2c0af609a01e8825358c558662ce2e718e14885602fba402a5550e36a77d139e00176ee6e4d37bb58349f89a8b863704e467a8bfe2ca121aee3c799b9b25e6defa"}, &(0x7f0000004f80)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000004fc0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000005000)={0x20, 0x80, 0x1c, {0x3, 0x5, 0x1, 0x8, 0x4, 0x7, 0x5, 0x9, 0x6, 0x3, 0xff, 0x1}}, &(0x7f0000005040)={0x20, 0x85, 0x4}, &(0x7f0000005080)={0x20, 0x83, 0x2}, &(0x7f00000050c0)={0x20, 0x87, 0x2, 0x160}, &(0x7f0000005100)={0x20, 0x89, 0x2, 0x1}}) syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000051c0)={{0x12, 0x1, 0x211, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0xfffc, 0xd3, 0x1, {0x22, 0x9b4}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x65, 0x8, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x3, 0xff}}]}}}]}}]}}, &(0x7f0000005340)={0xa, &(0x7f0000005200)={0xa, 0x6, 0x250, 0x2e, 0x0, 0x0, 0x8, 0x5}, 0xa2, &(0x7f0000005240)={0x5, 0xf, 0xa2, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "a57b439edc656931a75af6b84044f895"}, @generic={0xb, 0x10, 0x2, "4b7531d5c50fe8a6"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x9, 0x2}, @ssp_cap={0x18, 0x10, 0xa, 0xf8, 0x3, 0xb, 0x0, 0x9e5d, [0xc0f0, 0xf, 0x3f18]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x8, 0x9, 0x101}, @generic={0x52, 0x10, 0x4, "4e576ef953527bd075583289c09cd06ae4e82b13f025b561372914fcc90d45223ce55cfbc13d51b943c9fd021dc4060b11eaee5dbc7652aa6c04969bb9700592bf630f62087e0550e37f3923ee32a7"}]}, 0x1, [{0x4, &(0x7f0000005300)=@lang_id={0x4, 0x3, 0x410}}]}) (async) r8 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000051c0)={{0x12, 0x1, 0x211, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0xfffc, 0xd3, 0x1, {0x22, 0x9b4}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x65, 0x8, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x3, 0xff}}]}}}]}}]}}, &(0x7f0000005340)={0xa, &(0x7f0000005200)={0xa, 0x6, 0x250, 0x2e, 0x0, 0x0, 0x8, 0x5}, 0xa2, &(0x7f0000005240)={0x5, 0xf, 0xa2, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "a57b439edc656931a75af6b84044f895"}, @generic={0xb, 0x10, 0x2, "4b7531d5c50fe8a6"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x9, 0x2}, @ssp_cap={0x18, 0x10, 0xa, 0xf8, 0x3, 0xb, 0x0, 0x9e5d, [0xc0f0, 0xf, 0x3f18]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x8, 0x9, 0x101}, @generic={0x52, 0x10, 0x4, "4e576ef953527bd075583289c09cd06ae4e82b13f025b561372914fcc90d45223ce55cfbc13d51b943c9fd021dc4060b11eaee5dbc7652aa6c04969bb9700592bf630f62087e0550e37f3923ee32a7"}]}, 0x1, [{0x4, &(0x7f0000005300)=@lang_id={0x4, 0x3, 0x410}}]}) syz_usb_control_io$hid(r8, &(0x7f0000005480)={0x24, &(0x7f0000005380)={0x40, 0x3, 0xc, {0xc, 0x1, "050f53844ec1ed4695ba"}}, &(0x7f00000053c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000005400)={0x0, 0x22, 0xe, {[@main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x2, 0x0, 0xd, "9072"}, @local=@item_4={0x3, 0x2, 0x4950366d8c81757c, "ed8a85db"}, @global=@item_4={0x3, 0x1, 0x3, "7eeea2aa"}]}}, &(0x7f0000005440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6b6c, 0x80, 0x1, {0x22, 0x62b}}}}, &(0x7f0000005740)={0x2c, &(0x7f00000054c0)={0x40, 0x2, 0xce, "97e44a2b840c1d660283eb627fe43f12bdd462faa3c64ba2081a33ff10ce1154e8faf42abc658862e4c9478c2ae8e8d0e1a68273bf0be1cf72f673da1d6bd3c8d56d493a37cd2ab52d052dc3f20e6f6e15ff2b7da713c7f764e8b76f6c300e9b2cd59038f0caaa112d904aba2cd576f8996ffda5c10ae2fe190138cb56814dc76789aa5636d030e14bc386ef8d6e20e6a8f92b7ef08384cd77f12141fe937f3a6d7e68de659ce56235a329567413d8379742bd613528944949f8f4ddf873231162e52aaa359978c4a0599b0d681c"}, &(0x7f00000055c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000005600)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000005640)={0x20, 0x1, 0x7d, "cd74f6c9764ae193afde49d4d4cee1b750b14caa0bf18f366fd7dcb7032e6c6d922097ef2d06f46bb89b994441b16eedbf7c11c9b9103b6cb23b9962786b3dfa7da0ca21b72bb56fefe854c418cdc92ce2d6578218dcef7a6b9ba47e47a0e53e3699a5376bb94e56dbf0d45b8fc0bd698aa1ccafa8cc902f2383e41f0f"}, &(0x7f0000005700)={0x20, 0x3, 0x1, 0xc}}) (async) syz_usb_control_io$hid(r8, &(0x7f0000005480)={0x24, &(0x7f0000005380)={0x40, 0x3, 0xc, {0xc, 0x1, "050f53844ec1ed4695ba"}}, &(0x7f00000053c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000005400)={0x0, 0x22, 0xe, {[@main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x2, 0x0, 0xd, "9072"}, @local=@item_4={0x3, 0x2, 0x4950366d8c81757c, "ed8a85db"}, @global=@item_4={0x3, 0x1, 0x3, "7eeea2aa"}]}}, &(0x7f0000005440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6b6c, 0x80, 0x1, {0x22, 0x62b}}}}, &(0x7f0000005740)={0x2c, &(0x7f00000054c0)={0x40, 0x2, 0xce, "97e44a2b840c1d660283eb627fe43f12bdd462faa3c64ba2081a33ff10ce1154e8faf42abc658862e4c9478c2ae8e8d0e1a68273bf0be1cf72f673da1d6bd3c8d56d493a37cd2ab52d052dc3f20e6f6e15ff2b7da713c7f764e8b76f6c300e9b2cd59038f0caaa112d904aba2cd576f8996ffda5c10ae2fe190138cb56814dc76789aa5636d030e14bc386ef8d6e20e6a8f92b7ef08384cd77f12141fe937f3a6d7e68de659ce56235a329567413d8379742bd613528944949f8f4ddf873231162e52aaa359978c4a0599b0d681c"}, &(0x7f00000055c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000005600)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000005640)={0x20, 0x1, 0x7d, "cd74f6c9764ae193afde49d4d4cee1b750b14caa0bf18f366fd7dcb7032e6c6d922097ef2d06f46bb89b994441b16eedbf7c11c9b9103b6cb23b9962786b3dfa7da0ca21b72bb56fefe854c418cdc92ce2d6578218dcef7a6b9ba47e47a0e53e3699a5376bb94e56dbf0d45b8fc0bd698aa1ccafa8cc902f2383e41f0f"}, &(0x7f0000005700)={0x20, 0x3, 0x1, 0xc}}) syz_usb_control_io$uac1(r7, &(0x7f0000005840)={0x14, &(0x7f0000005780)={0x40, 0x33, 0x5c, {0x5c, 0x0, "35f90bca508f3950d49f4237fe0288c090cdb1b6a86e1aa15e459c0a305493ed4d9112992e079ef954bd8c27c231dc68b9aa6840b51444d1d04f8942afc1f7d1e2044edbb757ed5a7ba217b2c9a9e35988ab6bd45a8eb1f7dbdc"}}, &(0x7f0000005800)={0x0, 0x3, 0xd, @string={0xd, 0x3, "6b13d1490d2d4f66601372"}}}, &(0x7f0000005b00)={0x44, &(0x7f0000005880)={0x10, 0x13, 0x97, "223643bd91e052a50776d9681d001c8dc44b024ec67f760a41e03728107e941a5c835a3cc074814fb62a8f053dfa213519581a1393e0b2af618a77be34e799b28b21dadf00f6844c015e7b2f0e6be7dedcd678d34ec8d3e89aee05228516db2cd8ad952606d0828f6c14cf5f1d0c4974921580599ef603bf6ded57b5ebaea00b3591f1fcbd0b0af0b0ac667868a99fedcf303ba7ef7fa4"}, &(0x7f0000005940)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000005980)={0x0, 0x8, 0x1, 0x4f}, &(0x7f00000059c0)={0x20, 0x81, 0x2, "8a0f"}, &(0x7f0000005a00)={0x20, 0x82, 0x3, "d8685a"}, &(0x7f0000005a40)={0x20, 0x83, 0x3, "099a37"}, &(0x7f0000005a80)={0x20, 0x84, 0x3, "1c5fb2"}, &(0x7f0000005ac0)={0x20, 0x85, 0x3, "3ab2fb"}}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000005b80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x500, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0xf5, 0x0, 0x1, {0x22, 0x1c7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x2, 0x7}}}}}]}}]}}, &(0x7f0000005e80)={0xa, &(0x7f0000005bc0)={0xa, 0x6, 0x110, 0xef, 0x0, 0x3, 0x10, 0x2}, 0x5c, &(0x7f0000005c00)={0x5, 0xf, 0x5c, 0x4, [@generic={0x24, 0x10, 0x2, "dc4a947212178f7941d65a6a17eb3f2616988ae82f887f3bbf89e9b49981d438ff"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "50c4af38038b9085a12d967a04acf02f"}, @generic={0x1c, 0x10, 0x3, "aa210f027f3f62d785aee559b5570265f43559dce2664f571e"}]}, 0x7, [{0x31, &(0x7f0000005c80)=@string={0x31, 0x3, "b6b8dda8b62969e69e049e4ff7e0ed6842147a3e65007abe76817df196ec4b37dd00d3dbc65617df5eacda641a29c4"}}, {0x10, &(0x7f0000005cc0)=@string={0x10, 0x3, "8a1760de895b177a8e0612eb1180"}}, {0x7b, &(0x7f0000005d00)=@string={0x7b, 0x3, "ed2538a328a8b338b7a71f5efaccf56379d582571ed635acfb0626bbcf686dddaaa594cc9fee17f18eaaafe87b7802f03fd60286f73c9be3b009662e9ce0bac7fe8318f63e81a77f13321e655b437605ddf063f66a66685afb5f2cb88b96e9aa2c6793fc9c133bca36274ce239928d9abb220d837a96805982"}}, {0x4, &(0x7f0000005d80)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000005dc0)=@lang_id={0x4, 0x3, 0x73}}, {0x4, &(0x7f0000005e00)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000005e40)=@lang_id={0x4, 0x3, 0x43e}}]}) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f0000005f40)={0x2, 0x8, '\x00', 0x0, &(0x7f0000005f00)=[0x0]}) 7.139249488s ago: executing program 5 (id=4793): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f00000000c0)=0x1, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 5.057102423s ago: executing program 1 (id=4882): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60b5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="600105"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000021c0)={0x4c, 0x0, &(0x7f0000001fc0)=[@transaction_sg={0x400c6313, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 4.915303767s ago: executing program 5 (id=4793): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f00000000c0)=0x1, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2.810597774s ago: executing program 6 (id=4885): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r0, &(0x7f0000002080)={0x60, 0x0, r1, {{0x4af0, 0x37, 0xfb, 0xa842, 0x5, 0x9, 0x8, 0x7}}}, 0x60) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000002100)={0x30, 0x5, 0x0, {0x0, 0x2, 0x6b88, 0x5}}, 0x30) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000002140)={{r0}, "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"}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000003140)={0x28, 0x2, 0x0, {0x5, 0x3, 0x48c7}}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000031c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000003340)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003300)={&(0x7f0000003200)={0xe4, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x78}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xa8, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x2a, 0x2, "eb0f55424461e1437838c547a2068769fcd344c1413ad23cce699c80e82f9f9c0a4428d3c990"}}, {0x74, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x6f, 0x1, "1daec9264a1419ffd54d016798ce546734f6541ce0149d2a411f1f2bc9af8a5c43d7477c7eeae82ac9c8e82f794576c1d55b8cc65689c449751d5741ef4798391a9ed988f397fdc2d080d02fb7e162f71bbc51e80a818a5c020de29d718229ebdab66e5e202590920a6be5"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xff36}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x400c045) write$FUSE_STATX(r0, &(0x7f0000003380)={0x130, 0x0, r1, {0x2, 0x1, 0x0, '\x00', {0x8000, 0xab, 0xfffffffffffffffb, 0xb, 0xffffffffffffffff, r2, 0x4000, '\x00', 0x1, 0x3, 0x5, 0x5, {0x7, 0x7}, {0xffffffffffff1fb2, 0x1}, {0x8, 0x9}, {0x4, 0x10}, 0x80, 0x7, 0xe, 0x4}}}, 0x130) socketpair(0x29, 0x800, 0x401, &(0x7f00000034c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000003680)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003640)={&(0x7f0000003540)={0xe0, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4800}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3f}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffeffff}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f00000036c0)) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000003700)=0x3, 0x4) write$FUSE_INIT(r0, &(0x7f0000003740)={0x50, 0x0, r1, {0x7, 0x2b, 0xa, 0xffffffffa0000044, 0xf800, 0x6c19, 0x1da, 0xfff, 0x0, 0x0, 0x8, 0x5}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000037c0)='./file0\x00', 0x2) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000003840), r3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000003940)={'syztnl2\x00', &(0x7f0000003880)={'erspan0\x00', 0x0, 0x7800, 0x80, 0x9, 0x1, {{0x1d, 0x4, 0x2, 0x36, 0x74, 0x67, 0x0, 0x0, 0x2f, 0x0, @local, @broadcast, {[@noop, @timestamp={0x44, 0x8, 0xf0, 0x0, 0x3, [0x6]}, @generic={0x7, 0xc, "fcca65e2553bb42471ee"}, @generic={0x94, 0x3, '.'}, @timestamp_addr={0x44, 0x2c, 0x8d, 0x1, 0xb, [{@remote, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x1}, {@empty, 0x101}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x1}, {@private=0xa010100}]}, @lsrr={0x83, 0xf, 0xe1, [@multicast2, @broadcast, @loopback]}, @generic={0x94, 0xd, "8f5a808a81fe1955456de2"}]}}}}}) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000003a00)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x1c, r7, 0x800, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x28000010) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000003ac0)={'syztnl1\x00', &(0x7f0000003a40)={'ip6_vti0\x00', r8, 0x4, 0xd5, 0x0, 0xb209, 0x2, @mcast1, @remote, 0x8000, 0x8000, 0xe, 0x5}}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000003b00)={@local, 0x5f, r10}) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000003b40), 0x0, 0x0) ioctl$BLKALIGNOFF(r11, 0x127a, &(0x7f0000003b80)) ioctl$UI_SET_PROPBIT(r11, 0x4004556e, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x0) r13 = syz_io_uring_complete(r12) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000003bc0), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000003c00), r6) ioctl$PTP_EXTTS_REQUEST2(r13, 0x40103d0b, &(0x7f0000003c40)={0x9}) 2.809783664s ago: executing program 1 (id=4886): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) rt_sigpending(&(0x7f0000000000), 0x8) r2 = socket(0x5, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) tee(r4, r3, 0x9, 0x8) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, 0x10008) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRES32=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) dup3(r8, r6, 0x0) fstatfs(r8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) open(&(0x7f0000000140)='./file0\x00', 0x210002, 0xa1) ioctl$KVM_CAP_MAX_VCPU_ID(r9, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x8}) 2.807014674s ago: executing program 4 (id=4887): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) getsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r0, 0xffffb000) 2.7399836s ago: executing program 4 (id=4888): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setuid(0xee00) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setuid(0xee00) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) (async) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) (async) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) (async) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) (async) 2.739355051s ago: executing program 6 (id=4889): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x5}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/154, 0x9a}, {&(0x7f00000000c0)=""/13, 0xd}], 0x2) 2.714100033s ago: executing program 1 (id=4890): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet(0x2, 0x5, 0x9) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f00000000c0)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000140)=0x800000e9, 0x4) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r1) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r4) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f0000000040)={0xe, 0x3}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) socket$inet(0x2, 0x5, 0x9) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f00000000c0)) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000140)=0x800000e9, 0x4) (async) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r1) (async) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) (async) close(r4) (async) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f0000000040)={0xe, 0x3}) (async) 2.660975348s ago: executing program 4 (id=4891): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) write$binfmt_register(0xffffffffffffffff, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xfe, 0x3a, '/_', 0x3a, ':$@K-^{', 0x3a, './file0'}, 0x30) (async) write$binfmt_register(0xffffffffffffffff, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xfe, 0x3a, '/_', 0x3a, ':$@K-^{', 0x3a, './file0'}, 0x30) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0xeeee8000, 0x4000}) fadvise64(r0, 0x81, 0xc, 0x2) (async) fadvise64(r0, 0x81, 0xc, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000500)={0xed, 0x0, 0x1000000000005}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') sendfile(0xffffffffffffffff, r5, &(0x7f0000000280)=0xffffffffffffffff, 0x3595d79e) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f00000002c0)={0x9a00000000000000, 0x5000, 0x5, 0x4, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x108044}], 0x1) 2.527798561s ago: executing program 4 (id=4892): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, 0x0, 0x8400, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, 0x0) close(0x3) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x22842, 0x8d) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000003c0)) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) write$binfmt_script(r0, 0x0, 0x6f4000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000340)={[0xffff2000, 0x2000, 0x3000, 0x10000], 0x4, 0x44, 0xfffffffffffffffb}) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x78, 0x0, &(0x7f00000002c0)=[@acquire={0x40046305, 0x1}, @request_death={0x400c630e, 0x2}, @exit_looper, @free_buffer={0x40086303, r5}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/201, 0xc9, 0x0, 0x17}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/115, 0x73, 0x2, 0xc}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}}, @enter_looper], 0x0, 0x0, 0x0}) 2.527367511s ago: executing program 1 (id=4893): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000002240)) r1 = syz_open_procfs(0x0, &(0x7f0000001a80)='mounts\x00') finit_module(r1, 0x0, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r2, 0x2000, 0x0) socket(0xa, 0x3, 0x3a) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r3], 0x20}}, 0x0) socket$inet6(0xa, 0x2, 0x6c5) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000009880), 0x380, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r6, 0x7706, 0x0) 2.522335872s ago: executing program 5 (id=4793): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f00000000c0)=0x1, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2.515945473s ago: executing program 4 (id=4894): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async, rerun: 32) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x2}}, 0x10, 0x0}, 0x20) (rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) (async, rerun: 32) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$ptp(r5, &(0x7f0000000180)=""/101, 0x65) (async, rerun: 32) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@private2, @in=@initdev}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xff41) (async, rerun: 64) getegid() (rerun: 64) userfaultfd(0x80801) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x580}) userfaultfd(0x80801) (async, rerun: 32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async, rerun: 64) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0xe, @local, 0x1}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "78cb6e6d9d2574d4"}, 0x28) recvfrom(r7, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) 248.699746ms ago: executing program 6 (id=4895): r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000003c80), 0x1000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') setrlimit(0x40000000000008, &(0x7f0000000000)) mlockall(0x2) pread64(r1, &(0x7f00000000c0)=""/105, 0x69, 0xfff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @dev={0xac, 0x14, 0x14, 0x18}, @random="7b9da74ec1dd", @empty}}}}}, 0x2e) ioctl$FIBMAP(r0, 0xaa00, 0x0) 244.050256ms ago: executing program 1 (id=4896): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x8, @none, 0x80, 0x1}, 0xe) 243.639766ms ago: executing program 4 (id=4897): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001d002100dfff0000000000000700000005000000ea0007000a0002"], 0x30}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\x01\x00\x00\x00;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xff\xfe\xff\xff\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\x948P\xe4\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x9) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f00000002c0)=0x8004004c, 0x4) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r5, &(0x7f0000000480)="532e87ac770767f7429748", 0xb) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x4008001, 0x1, 0x0, 0x4, 0xfffffffe, 0x2}}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r7, 0x8008976) 126.159538ms ago: executing program 6 (id=4898): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000200)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x119900, 0x0) write$eventfd(r1, &(0x7f0000000180)=0x5, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x6c, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34fc19caa5d8bcabb64f47a3db15181446bc1a93ee07d37"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 91.668411ms ago: executing program 1 (id=4899): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{}, 0x2}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 0s ago: executing program 5 (id=4793): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f00000000c0)=0x1, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): lure EINVAL in pid:496 [ 340.717189][ T590] usb 5-1: 0:2 : does not exist [ 340.731402][ T590] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 340.775952][ T590] usb 5-1: USB disconnect, device number 49 [ 340.824064][T12345] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 340.838746][T12345] SELinux: failed to load policy [ 340.855159][ T423] usb 2-1: USB disconnect, device number 75 [ 340.962738][ T4230] udevd[4230]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 341.488267][T12363] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 341.488292][T12363] rust_binder: Read failure Err(EFAULT) in pid:865 [ 341.826186][ T36] kauditd_printk_skb: 427 callbacks suppressed [ 341.826209][ T36] audit: type=1400 audit(2000000140.653:53897): avc: denied { create } for pid=12367 comm="syz.4.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.872155][ T36] audit: type=1400 audit(2000000140.653:53898): avc: denied { create } for pid=12367 comm="syz.4.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.895299][ T36] audit: type=1400 audit(2000000140.653:53899): avc: denied { create } for pid=12367 comm="syz.4.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.941053][ T36] audit: type=1400 audit(2000000140.653:53900): avc: denied { create } for pid=12367 comm="syz.4.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.971639][ T36] audit: type=1400 audit(2000000140.653:53901): avc: denied { create } for pid=12367 comm="syz.4.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.999958][ T36] audit: type=1400 audit(2000000140.653:53902): avc: denied { create } for pid=12367 comm="syz.4.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.021216][ T36] audit: type=1400 audit(2000000140.653:53903): avc: denied { create } for pid=12367 comm="syz.4.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.053106][ T36] audit: type=1400 audit(2000000140.653:53904): avc: denied { create } for pid=12367 comm="syz.4.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.076506][ T36] audit: type=1400 audit(2000000140.653:53905): avc: denied { create } for pid=12367 comm="syz.4.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.098091][ T36] audit: type=1400 audit(2000000140.653:53906): avc: denied { create } for pid=12367 comm="syz.4.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.306334][T12386] netlink: 'syz.4.4070': attribute type 1 has an invalid length. [ 342.456085][T12389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:872 [ 342.513045][T12391] rust_binder: Read failure Err(EAGAIN) in pid:596 [ 342.670050][ T340] usb-storage 6-1:9.49: USB Mass Storage device detected [ 342.701718][ T340] usb-storage 6-1:9.49: Quirks match for vid c251 pid 4003: 80 [ 342.795268][ T340] usb 6-1: USB disconnect, device number 32 [ 342.810739][ T4629] udevd[4629]: setting mode of /dev/bus/usb/006/032 to 020664 failed: No such file or directory [ 342.836935][T12408] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 342.836960][T12408] rust_binder: Error while translating object. [ 342.846820][ T4629] udevd[4629]: setting owner of /dev/bus/usb/006/032 to uid=0, gid=0 failed: No such file or directory [ 342.858193][T12408] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 342.885560][T12408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:608 [ 343.676510][T12430] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 343.703559][T12430] rust_binder: Error while translating object. [ 343.719376][T12430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 343.726748][T12430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:876 [ 343.914882][T12433] rust_binder: 615: no such ref 0 [ 344.011760][T12441] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 344.012505][T12441] rust_binder: Error while translating object. [ 344.019030][T12441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 344.025419][T12441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:500 [ 344.181164][ T31] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 344.332439][T12455] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 344.371220][ T31] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 344.385668][ T31] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 344.415663][ T31] usb 5-1: config 220 has no interface number 2 [ 344.429998][ T31] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 344.444012][ T31] usb 5-1: config 220 interface 0 has no altsetting 0 [ 344.451663][ T31] usb 5-1: config 220 interface 76 has no altsetting 0 [ 344.459758][ T31] usb 5-1: config 220 interface 1 has no altsetting 0 [ 344.474854][ T31] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 344.485307][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.494447][ T31] usb 5-1: Product: syz [ 344.498737][ T31] usb 5-1: Manufacturer: syz [ 344.504306][ T31] usb 5-1: SerialNumber: syz [ 344.737311][T12433] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 344.744788][T12433] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 344.744960][T12463] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4094'. [ 344.761418][T12463] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4094'. [ 344.762944][ T31] usb 5-1: selecting invalid altsetting 0 [ 344.790046][ T31] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 344.803702][ T31] usb 5-1: No valid video chain found. [ 344.816075][ T31] usb 5-1: USB disconnect, device number 50 [ 345.075313][T12468] cgroup: fork rejected by pids controller in /syz1 [ 345.479622][T12510] binder: Unknown parameter 'contextÌðÔð[7’' [ 345.665604][T12517] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 224) [ 345.665638][T12517] rust_binder: Error while translating object. [ 345.676475][T12517] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 345.682952][T12517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:904 [ 345.993171][ T845] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 346.110445][ T340] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 346.166581][ T845] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 346.174861][ T845] usb 6-1: config 0 has no interface number 0 [ 346.181046][ T845] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 346.196545][ T845] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 346.205712][ T845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.213837][ T845] usb 6-1: Product: syz [ 346.218511][ T845] usb 6-1: Manufacturer: syz [ 346.223407][ T845] usb 6-1: SerialNumber: syz [ 346.237806][ T845] usb 6-1: config 0 descriptor?? [ 346.256694][T12525] rust_binder: Write failure EINVAL in pid:924 [ 346.256758][T12526] rust_binder: Write failure EINVAL in pid:924 [ 346.279650][ T340] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 346.296677][ T340] usb 5-1: config 1 has no interface number 0 [ 346.303227][T12526] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 346.303493][ T340] usb 5-1: config 1 interface 105 has no altsetting 0 [ 346.322085][ T340] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 346.331285][ T340] usb 5-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 346.339952][ T340] usb 5-1: Product: syz [ 346.344487][ T340] usb 5-1: Manufacturer: syz [ 346.349189][ T340] usb 5-1: SerialNumber: syz [ 346.405727][T12530] random: crng reseeded on system resumption [ 346.471629][ T845] usb 6-1: invalid MIDI out EP 0 [ 346.488985][ T845] snd-usb-audio 6-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 346.504893][ T845] usb 6-1: USB disconnect, device number 33 [ 346.550620][ T3860] udevd[3860]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 347.092196][T12535] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4110'. [ 347.101633][ T340] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 347.127928][ T340] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 347.144822][ T340] usb 5-1: USB disconnect, device number 51 [ 347.175413][ T36] kauditd_printk_skb: 673 callbacks suppressed [ 347.175433][ T36] audit: type=1400 audit(2000000145.663:54580): avc: denied { read write } for pid=8721 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.238421][ T36] audit: type=1400 audit(2000000145.691:54581): avc: denied { read write open } for pid=8721 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.292256][ T36] audit: type=1400 audit(2000000145.691:54582): avc: denied { ioctl } for pid=8721 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.327114][ T36] audit: type=1400 audit(2000000145.719:54583): avc: denied { read } for pid=12542 comm="syz.1.4112" dev="nsfs" ino=4026532409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 347.351176][ T36] audit: type=1400 audit(2000000145.719:54584): avc: denied { read open } for pid=12542 comm="syz.1.4112" path="net:[4026532409]" dev="nsfs" ino=4026532409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 347.362060][T12550] tipc: Started in network mode [ 347.375256][ T36] audit: type=1400 audit(2000000145.719:54585): avc: denied { create } for pid=12542 comm="syz.1.4112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 347.388073][T12550] tipc: Node identity 00000000400500008, cluster identity 4711 [ 347.401260][ T36] audit: type=1400 audit(2000000145.766:54586): avc: denied { read write } for pid=8721 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.412797][T12550] rust_binder: Write failure EFAULT in pid:937 [ 347.432870][ T36] audit: type=1400 audit(2000000145.766:54587): avc: denied { read write open } for pid=8721 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.466274][ T36] audit: type=1400 audit(2000000145.766:54588): avc: denied { ioctl } for pid=8721 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.536870][ T36] audit: type=1400 audit(2000000145.813:54589): avc: denied { create } for pid=12549 comm="syz.5.4114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 347.581715][T12560] overlay: ./file0 is not a directory [ 347.733287][T12568] rust_binder: 629: no such ref 4 [ 347.738576][T12568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:629 [ 347.827086][T12572] binder: Bad value for 'max' [ 347.882994][T12572] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4120'. [ 347.992493][T12579] rust_binder: 12576 RLIMIT_NICE not set [ 348.096486][T12584] rust_binder: Write failure EFAULT in pid:520 [ 348.169541][T12588] SELinux: security_context_str_to_sid () failed with errno=-22 [ 348.239305][T12591] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2074 sclass=netlink_xfrm_socket pid=12591 comm=syz.6.4127 [ 348.707284][T12613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 348.707324][T12613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:950 [ 348.981909][T12626] 9pnet_fd: Insufficient options for proto=fd [ 349.737471][T12644] rust_binder: 12643 RLIMIT_NICE not set [ 350.107418][ T340] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 350.283489][ T340] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=63.01 [ 350.292663][ T340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.300732][ T340] usb 2-1: Product: syz [ 350.304949][ T340] usb 2-1: Manufacturer: syz [ 350.309729][ T340] usb 2-1: SerialNumber: syz [ 350.316250][ T340] usb 2-1: config 0 descriptor?? [ 350.544485][T12650] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4147'. [ 350.712520][ T340] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 350.722404][ T340] usb 2-1: USB disconnect, device number 76 [ 350.767875][ T4230] udevd[4230]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 350.985218][T12662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4151'. [ 351.327045][T12672] tmpfs: Bad value for 'nr_blocks' [ 351.817147][T12687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:670 [ 352.067044][T12694] netlink: 'syz.5.4165': attribute type 2 has an invalid length. [ 352.084144][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4165'. [ 352.197049][T12698] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 352.517058][ T36] kauditd_printk_skb: 620 callbacks suppressed [ 352.517078][ T36] audit: type=1400 audit(2000000663.680:55210): avc: denied { unmount } for pid=9630 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 352.549409][ T36] audit: type=1400 audit(2000000663.717:55211): avc: denied { read write } for pid=9630 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.573944][ T36] audit: type=1400 audit(2000000663.717:55212): avc: denied { read write open } for pid=9630 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.605319][ T36] audit: type=1400 audit(2000000663.717:55213): avc: denied { ioctl } for pid=9630 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.632519][ T36] audit: type=1400 audit(2000000663.783:55214): avc: denied { read } for pid=12716 comm="syz.6.4172" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 352.655482][ T36] audit: type=1400 audit(2000000663.783:55215): avc: denied { read open } for pid=12716 comm="syz.6.4172" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 352.679313][ T36] audit: type=1400 audit(2000000663.783:55216): avc: denied { ioctl } for pid=12716 comm="syz.6.4172" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 352.707701][ T36] audit: type=1400 audit(2000000663.848:55217): avc: denied { read write } for pid=12716 comm="syz.6.4172" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 352.731299][ T36] audit: type=1400 audit(2000000663.848:55218): avc: denied { read write open } for pid=12716 comm="syz.6.4172" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 352.755978][ T36] audit: type=1400 audit(2000000663.867:55219): avc: denied { ioctl } for pid=12716 comm="syz.6.4172" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 353.030117][T12724] random: crng reseeded on system resumption [ 353.299711][T12724] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12724 comm=syz.4.4174 [ 353.359643][T12724] rust_binder: Error while translating object. [ 353.359695][T12724] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 353.365934][T12724] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:678 [ 354.295946][T12794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=12794 comm=syz.6.4194 [ 354.324055][T12794] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.571602][T12806] serio: Serial port ptm0 [ 354.631737][T12807] loop2: detected capacity change from 0 to 7 [ 354.648374][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.657592][ C0] buffer_io_error: 855 callbacks suppressed [ 354.657612][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 354.672085][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.681305][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 354.689160][T12807] loop2: unable to read partition table [ 354.697577][T12807] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 354.730030][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.739236][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 354.754117][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.763328][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 354.772005][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.781233][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 354.790526][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.799860][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 354.810651][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.819884][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 354.875314][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.884554][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 354.894851][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.904150][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 354.913150][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.922615][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 355.013798][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4203'. [ 355.043296][ T31] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 355.215927][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.230746][ T31] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 355.241394][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.250183][ T31] usb 5-1: Product: syz [ 355.254551][ T31] usb 5-1: Manufacturer: syz [ 355.260176][ T31] usb 5-1: SerialNumber: syz [ 355.268392][ T31] usb 5-1: config 0 descriptor?? [ 355.289740][ T31] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 355.374231][ T4230] udevd[4230]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 355.508345][T12811] rust_binder: got new transaction with bad transaction stack [ 355.508378][T12811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:689 [ 355.516970][ T31] usb 5-1: USB disconnect, device number 52 [ 356.009745][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.033428][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.060333][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.078010][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.110644][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.133760][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.155487][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.176847][T12856] __vm_enough_memory: pid: 12856, comm: syz.4.4217, bytes: 18014402804453376 not enough memory for the allocation [ 356.184419][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.245421][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.268584][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.300363][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.319909][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.342921][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.365645][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.392439][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.393261][T12866] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 356.400330][T12867] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 356.414215][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.431556][T12866] rust_binder: Error while translating object. [ 356.431599][T12866] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 356.439441][T12867] rust_binder: Read failure Err(EFAULT) in pid:693 [ 356.442256][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.450211][T12866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:984 [ 356.465803][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.486873][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.518571][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.531078][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.559566][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.568636][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.577962][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.587081][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.596330][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.625025][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.645405][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.668805][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.691435][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.718920][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.754966][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.777607][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.802364][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.834260][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.843443][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.853851][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 356.893789][T12852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 357.226745][T12900] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 357.235809][T12900] overlayfs: missing 'lowerdir' [ 357.721996][T12906] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4236'. [ 357.856321][ T36] kauditd_printk_skb: 660 callbacks suppressed [ 357.856343][ T36] audit: type=1400 audit(2000000668.690:55880): avc: denied { ioctl } for pid=8721 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.954360][ T36] audit: type=1400 audit(2000000668.765:55881): avc: denied { read write } for pid=9630 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.996181][ T36] audit: type=1400 audit(2000000668.765:55882): avc: denied { read write open } for pid=9630 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 358.054082][ T36] audit: type=1400 audit(2000000668.765:55883): avc: denied { ioctl } for pid=9630 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 358.130759][ T36] audit: type=1326 audit(2000000668.858:55884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12910 comm="syz.6.4239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f673298efc9 code=0x0 [ 358.172928][T12914] binder: Bad value for 'defcontext' [ 358.185457][ T36] audit: type=1400 audit(2000000668.905:55885): avc: denied { read write } for pid=12911 comm="syz.1.4238" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 358.210945][ T36] audit: type=1400 audit(2000000668.905:55886): avc: denied { read write open } for pid=12911 comm="syz.1.4238" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 358.238397][ T36] audit: type=1400 audit(2000000668.943:55887): avc: denied { ioctl } for pid=12911 comm="syz.1.4238" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 358.263991][ T36] audit: type=1400 audit(2000000668.943:55888): avc: denied { read write } for pid=12911 comm="syz.1.4238" name="binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 358.290099][ T36] audit: type=1400 audit(2000000668.943:55889): avc: denied { read write open } for pid=12911 comm="syz.1.4238" path="/dev/binderfs/binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 358.861588][T12935] 9pnet_fd: Insufficient options for proto=fd [ 358.996304][T12943] netlink: 21 bytes leftover after parsing attributes in process `syz.6.4250'. [ 359.227333][T12957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 359.249063][T12957] rust_binder: 998: no such ref 1 [ 359.266280][T12957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:998 [ 359.452531][T12968] fuse: Unknown parameter '000000000000000000040x0000000000000004' [ 359.697888][T12976] bridge0: port 3(ip6gretap0) entered blocking state [ 359.704661][T12976] bridge0: port 3(ip6gretap0) entered disabled state [ 359.725934][T12976] ip6gretap0: entered allmulticast mode [ 359.750724][T12976] ip6gretap0: entered promiscuous mode [ 359.767192][T12976] bridge0: port 3(ip6gretap0) entered blocking state [ 359.774010][T12976] bridge0: port 3(ip6gretap0) entered forwarding state [ 360.201499][ T31] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 360.316756][T13006] rust_binder: Error while translating object. [ 360.316806][T13006] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 360.323958][T13006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1011 [ 360.373102][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 360.400643][ T31] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 360.409932][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.421072][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.435103][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.452779][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.468982][ T31] usb 5-1: Product: syz [ 360.474576][ T31] usb 5-1: Manufacturer: syz [ 360.480278][ T31] usb 5-1: SerialNumber: syz [ 360.554130][T13023] incfs: Options parsing error. -22 [ 360.559409][T13023] incfs: mount failed -22 [ 360.565240][T13023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4283'. [ 360.574139][T13023] erspan0: default FDB implementation only supports local addresses [ 360.757411][T13033] random: crng reseeded on system resumption [ 360.927494][ T31] usb 5-1: 0:2 : does not exist [ 360.949160][T13037] __vm_enough_memory: pid: 13037, comm: syz.6.4288, bytes: 18014402804453376 not enough memory for the allocation [ 361.212370][T13046] syzkaller0: entered promiscuous mode [ 361.218014][T13046] syzkaller0: entered allmulticast mode [ 361.639841][T13058] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4295'. [ 362.034483][ T45] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 362.215671][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 362.233158][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.262174][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 362.276974][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 362.296398][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.313782][ T45] usb 2-1: Product: syz [ 362.316574][T13088] syzkaller0: entered promiscuous mode [ 362.322708][ T45] usb 2-1: Manufacturer: syz [ 362.325055][T13088] syzkaller0: entered allmulticast mode [ 362.328104][ T45] usb 2-1: SerialNumber: syz [ 362.661481][T13094] bridge0: port 3(ip6gretap0) entered blocking state [ 362.668319][T13094] bridge0: port 3(ip6gretap0) entered disabled state [ 362.676032][T13094] ip6gretap0: entered allmulticast mode [ 362.682239][T13094] ip6gretap0: entered promiscuous mode [ 362.688097][T13094] bridge0: port 3(ip6gretap0) entered blocking state [ 362.694832][T13094] bridge0: port 3(ip6gretap0) entered forwarding state [ 362.840121][T13098] netlink: 'syz.5.4310': attribute type 16 has an invalid length. [ 363.177928][ T31] usb 5-1: 1:0: cannot get min/max values for control 2 (id 1) [ 363.211136][ T36] kauditd_printk_skb: 821 callbacks suppressed [ 363.211154][ T36] audit: type=1400 audit(2000000673.709:56711): avc: denied { read write } for pid=10263 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.222509][ T31] usb 5-1: USB disconnect, device number 53 [ 363.255041][ T45] usb 2-1: 0:2 : does not exist [ 363.304401][ T45] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 363.319776][ T36] audit: type=1400 audit(2000000673.765:56712): avc: denied { read write open } for pid=10263 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.347898][ T45] usb 2-1: USB disconnect, device number 77 [ 363.382486][ T36] audit: type=1400 audit(2000000673.765:56713): avc: denied { ioctl } for pid=10263 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.409072][ T36] audit: type=1400 audit(2000000673.775:56714): avc: denied { mount } for pid=13112 comm="syz.1.4315" name="/" dev="ramfs" ino=74603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 363.455120][ T36] audit: type=1400 audit(2000000673.793:56715): avc: denied { read write } for pid=8721 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.513304][ T4230] udevd[4230]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 363.519500][ T4629] udevd[4629]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 363.545178][ T36] audit: type=1400 audit(2000000673.793:56716): avc: denied { read write open } for pid=8721 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.612357][ T36] audit: type=1400 audit(2000000673.793:56717): avc: denied { ioctl } for pid=8721 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.672546][ T36] audit: type=1400 audit(2000000673.850:56718): avc: denied { create } for pid=13115 comm="syz.4.4316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 363.698362][ T36] audit: type=1400 audit(2000000673.850:56719): avc: denied { read write } for pid=13115 comm="syz.4.4316" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 363.767051][ T36] audit: type=1400 audit(2000000673.850:56720): avc: denied { read write open } for pid=13115 comm="syz.4.4316" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 363.981894][T13135] netlink: 'syz.4.4324': attribute type 4 has an invalid length. [ 364.187573][ T45] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 364.240866][ T845] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 364.347427][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 364.357557][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.368315][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.381551][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 364.391119][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.399160][ T45] usb 2-1: Product: syz [ 364.403905][ T45] usb 2-1: Manufacturer: syz [ 364.408558][ T45] usb 2-1: SerialNumber: syz [ 364.414591][ T845] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.426150][ T845] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.439709][ T845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 364.447062][ T845] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 364.456844][ T845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.468527][ T845] usb 5-1: config 0 descriptor?? [ 364.653270][ T45] usb 2-1: 0:2 : does not exist [ 364.669326][ T45] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 364.694029][ T45] usb 2-1: USB disconnect, device number 78 [ 364.701020][T13145] __vm_enough_memory: pid: 13145, comm: syz.4.4324, bytes: 18014402804453376 not enough memory for the allocation [ 364.739234][ T845] wacom 0003:056A:00C5.001E: hidraw0: USB HID v0.00 Device [HID 056a:00c5] on usb-dummy_hcd.4-1/input0 [ 364.817576][ T4230] udevd[4230]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 364.952802][ T845] usb 5-1: USB disconnect, device number 54 [ 364.983326][T13153] bridge0: port 3(ip6gretap0) entered blocking state [ 364.990325][T13153] bridge0: port 3(ip6gretap0) entered disabled state [ 364.998633][T13153] ip6gretap0: entered allmulticast mode [ 365.004811][T13153] ip6gretap0: entered promiscuous mode [ 365.011525][T13153] bridge0: port 3(ip6gretap0) entered blocking state [ 365.018265][T13153] bridge0: port 3(ip6gretap0) entered forwarding state [ 365.401687][T13182] binder: Bad value for 'stats' [ 365.536733][T13192] /dev/rnullb0: Can't open blockdev [ 365.751929][T13202] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4346'. [ 366.179026][T13216] /dev/rnullb0: Can't open blockdev [ 366.484392][T13228] netlink: 'syz.1.4356': attribute type 4 has an invalid length. [ 366.492436][T13228] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4356'. [ 367.115300][T13262] overlayfs: failed to resolve './file1': -2 [ 367.279083][T13270] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1067 [ 367.549595][T13289] binder: Unknown parameter '0x000000000000000300000000000000000003ÿÿÿÿÿÿÿÿ' [ 367.678707][T13292] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 367.739648][T13293] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 368.146324][T13314] syzkaller0: entered promiscuous mode [ 368.160204][T13314] syzkaller0: entered allmulticast mode [ 368.550602][ T36] kauditd_printk_skb: 696 callbacks suppressed [ 368.550624][ T36] audit: type=1400 audit(2000000678.710:57417): avc: denied { ioctl } for pid=13325 comm="syz.1.4390" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 368.635217][ T36] audit: type=1400 audit(2000000678.719:57418): avc: denied { read write } for pid=10263 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 368.715368][ T36] audit: type=1400 audit(2000000678.719:57419): avc: denied { read write open } for pid=10263 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 368.745860][ T36] audit: type=1400 audit(2000000678.719:57420): avc: denied { ioctl } for pid=10263 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 368.775224][ T36] audit: type=1400 audit(2000000678.719:57421): avc: denied { mounton } for pid=13333 comm="syz.5.4393" path="/446/file0" dev="tmpfs" ino=2439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 368.826859][ T36] audit: type=1400 audit(2000000678.719:57422): avc: denied { mount } for pid=13333 comm="syz.5.4393" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 368.851115][ T36] audit: type=1400 audit(2000000678.766:57423): avc: denied { ioctl } for pid=13325 comm="syz.1.4390" path="/dev/binderfs/binder1" dev="binder" ino=41 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 368.877614][ T36] audit: type=1400 audit(2000000678.775:57424): avc: denied { read write } for pid=13325 comm="syz.1.4390" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 368.923167][ T36] audit: type=1400 audit(2000000678.775:57425): avc: denied { read write open } for pid=13325 comm="syz.1.4390" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 368.948881][ T36] audit: type=1400 audit(2000000678.775:57426): avc: denied { ioctl } for pid=13325 comm="syz.1.4390" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 369.525427][T13365] futex_wake_op: syz.1.4403 tries to shift op by 144; fix this program [ 369.548436][T13365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1097 [ 369.632162][T13372] overlayfs: missing 'lowerdir' [ 369.710542][T13372] netlink: 'syz.1.4405': attribute type 46 has an invalid length. [ 369.786860][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4409'. [ 369.904378][T13388] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 369.904431][T13388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:756 [ 369.927026][T13384] netlink: 'syz.1.4408': attribute type 2 has an invalid length. [ 370.000026][T13384] rust_binder: Write failure EFAULT in pid:1103 [ 370.084375][T13394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1105 [ 370.117043][T13394] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 370.126394][T13394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1105 [ 370.200710][T13400] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 370.210497][T13399] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 370.227852][T13399] rust_binder: Error in use_page_slow: ESRCH [ 370.227880][T13399] rust_binder: use_range failure ESRCH [ 370.235393][T13399] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 370.240969][T13399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 370.250269][T13399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1108 [ 370.308905][T13404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 370.319736][T13404] rust_binder: Error while translating object. [ 370.326961][ T1840] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 370.331164][T13404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 370.340882][T13404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1112 [ 370.403553][T13406] /dev/nullb0: Can't lookup blockdev [ 370.476218][ T1840] usb 5-1: device descriptor read/64, error -71 [ 370.499293][T13408] binder: Bad value for 'max' [ 370.695265][T13424] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 370.695740][T13424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1124 [ 370.753351][ T1840] usb 5-1: device descriptor read/64, error -71 [ 371.042717][ T1840] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 371.105037][ T45] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 371.125632][T13439] netlink: 'syz.6.4430': attribute type 9 has an invalid length. [ 371.134029][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4430'. [ 371.190304][ T1840] usb 5-1: device descriptor read/64, error -71 [ 371.281799][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 371.302064][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 371.323823][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 371.339991][ T45] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 371.352901][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.371707][ T45] usb 2-1: config 0 descriptor?? [ 371.384416][ T45] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 371.488757][ T1840] usb 5-1: device descriptor read/64, error -71 [ 371.606068][ T1840] usb usb5-port1: attempt power cycle [ 371.631223][ T45] usb 2-1: USB disconnect, device number 79 [ 371.937931][T13473] netlink: 'syz.5.4445': attribute type 27 has an invalid length. [ 371.979105][ T1840] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 372.003436][ T1840] usb 5-1: device descriptor read/8, error -71 [ 372.141452][ T1840] usb 5-1: device descriptor read/8, error -71 [ 372.394738][ T1840] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 372.433182][ T1840] usb 5-1: device descriptor read/8, error -71 [ 372.458751][T13485] rust_binder: 1134: no such ref 3 [ 372.485081][T13485] rust_binder: 1134: no such ref 1 [ 372.500743][T13485] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 372.510718][T13485] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 372.511156][T13490] loop2: detected capacity change from 0 to 7 [ 372.518886][T13485] rust_binder: 1134: no such ref 0 [ 372.579149][ T1840] usb 5-1: device descriptor read/8, error -71 [ 372.704407][ T1840] usb usb5-port1: unable to enumerate USB device [ 373.234811][ T340] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 373.417959][ T340] usb 2-1: Using ep0 maxpacket: 16 [ 373.426534][ T340] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.438966][ T340] usb 2-1: config 0 interface 0 has no altsetting 0 [ 373.445645][ T340] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 373.454814][ T340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.464777][ T340] usb 2-1: config 0 descriptor?? [ 373.904550][ T36] kauditd_printk_skb: 705 callbacks suppressed [ 373.904570][ T36] audit: type=1400 audit(2016778128.743:58132): avc: denied { read } for pid=13505 comm="syz.1.4456" dev="nsfs" ino=4026532409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 373.915574][ T340] wacom 0003:056A:0094.001F: unknown main item tag 0x0 [ 373.936135][ T36] audit: type=1400 audit(2016778128.743:58133): avc: denied { read open } for pid=13505 comm="syz.1.4456" path="net:[4026532409]" dev="nsfs" ino=4026532409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 373.954812][ T340] wacom 0003:056A:0094.001F: unknown main item tag 0x0 [ 373.963940][ T36] audit: type=1400 audit(2016778128.743:58134): avc: denied { create } for pid=13505 comm="syz.1.4456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 373.971854][ T340] wacom 0003:056A:0094.001F: unknown main item tag 0x0 [ 373.990038][ T36] audit: type=1400 audit(2016778128.752:58135): avc: denied { setopt } for pid=13505 comm="syz.1.4456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 374.017120][ T36] audit: type=1400 audit(2016778128.752:58136): avc: denied { read } for pid=13505 comm="syz.1.4456" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 374.027602][ T340] wacom 0003:056A:0094.001F: unknown main item tag 0x0 [ 374.049475][ T340] wacom 0003:056A:0094.001F: unknown main item tag 0x0 [ 374.050234][ T36] audit: type=1400 audit(2016778128.752:58137): avc: denied { read open } for pid=13505 comm="syz.1.4456" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 374.056540][ T340] wacom 0003:056A:0094.001F: Using device in hidraw-only mode [ 374.081702][ T36] audit: type=1400 audit(2016778128.752:58138): avc: denied { ioctl } for pid=13505 comm="syz.1.4456" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 374.095450][ T340] wacom 0003:056A:0094.001F: hidraw0: USB HID v0.08 Device [HID 056a:0094] on usb-dummy_hcd.1-1/input0 [ 374.117565][ T36] audit: type=1400 audit(2016778128.752:58139): avc: denied { ioctl } for pid=13505 comm="syz.1.4456" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 374.153335][ T36] audit: type=1400 audit(2016778128.752:58140): avc: denied { ioctl } for pid=13505 comm="syz.1.4456" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 374.166930][ T340] usb 2-1: USB disconnect, device number 80 [ 374.217083][ T36] audit: type=1400 audit(2016778128.987:58141): avc: denied { ioctl } for pid=13505 comm="syz.1.4456" path="socket:[76716]" dev="sockfs" ino=76716 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 374.245810][T13561] fido_id[13561]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 374.680158][T13586] loop5: detected capacity change from 0 to 7 [ 374.906876][T13596] rust_binder: 1150: no such ref 1 [ 374.912168][T13596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1150 [ 375.273067][T13605] rust_binder: Write failure EFAULT in pid:1159 [ 375.994529][T13646] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4495'. [ 376.115802][T13657] netlink: 'syz.5.4497': attribute type 4 has an invalid length. [ 376.130639][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4497'. [ 376.363532][T13660] overlayfs: overlapping lowerdir path [ 376.799174][T13668] rust_binder: Write failure EFAULT in pid:1187 [ 377.150143][T13697] netlink: 'syz.1.4511': attribute type 11 has an invalid length. [ 377.749502][T13724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4522'. [ 378.013853][ T508] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 378.037863][T13746] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4528'. [ 378.046995][T13746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4528'. [ 378.056030][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4528'. [ 378.193083][ T508] usb 2-1: Using ep0 maxpacket: 16 [ 378.201464][ T508] usb 2-1: config 0 interface 0 has no altsetting 0 [ 378.209858][ T508] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 378.219838][ T508] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.230925][ T508] usb 2-1: config 0 descriptor?? [ 378.463198][T13725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.480993][T13725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.519005][ T508] hid (null): unknown global tag 0xd [ 378.542894][ T508] uclogic 0003:28BD:0042.0020: interface is invalid, ignoring [ 378.728669][ T31] usb 2-1: USB disconnect, device number 81 [ 378.899871][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4541'. [ 379.272949][ T36] kauditd_printk_skb: 731 callbacks suppressed [ 379.272969][ T36] audit: type=1400 audit(2016778133.781:58873): avc: denied { read write } for pid=8721 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.301444][T13797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1219 [ 379.313354][ T36] audit: type=1400 audit(2016778133.781:58874): avc: denied { read write open } for pid=8721 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.348946][ T36] audit: type=1400 audit(2016778133.781:58875): avc: denied { ioctl } for pid=8721 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.375531][ T36] audit: type=1400 audit(2016778133.800:58876): avc: denied { read } for pid=13796 comm="syz.1.4546" name="binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 379.399416][ T36] audit: type=1400 audit(2016778133.800:58877): avc: denied { read open } for pid=13796 comm="syz.1.4546" path="/dev/binderfs/binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 379.423439][T13798] audit: audit_backlog=65 > audit_backlog_limit=64 [ 379.425331][ T36] audit: type=1400 audit(2016778133.800:58878): avc: denied { ioctl } for pid=13796 comm="syz.1.4546" path="/dev/binderfs/binder1" dev="binder" ino=41 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 379.431581][T13798] audit: audit_lost=57 audit_rate_limit=0 audit_backlog_limit=64 [ 379.457645][ T36] audit: type=1400 audit(2016778133.819:58879): avc: denied { ioctl } for pid=13796 comm="syz.1.4546" path="/dev/binderfs/binder1" dev="binder" ino=41 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 379.463953][T13798] audit: backlog limit exceeded [ 379.661399][T13804] 9pnet_fd: Insufficient options for proto=fd [ 379.779550][T13811] bridge0: port 3(ip6gretap0) entered blocking state [ 379.798801][T13811] bridge0: port 3(ip6gretap0) entered disabled state [ 379.823860][ T508] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 379.826050][T13811] ip6gretap0: entered allmulticast mode [ 379.842962][T13811] ip6gretap0: entered promiscuous mode [ 379.848649][T13811] bridge0: port 3(ip6gretap0) entered blocking state [ 379.855475][T13811] bridge0: port 3(ip6gretap0) entered forwarding state [ 379.983727][ T508] usb 2-1: Using ep0 maxpacket: 16 [ 380.006194][ T508] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.020315][ T508] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.037921][ T508] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 380.041976][T13842] overlayfs: missing 'lowerdir' [ 380.047106][ T508] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.060219][ T508] usb 2-1: Product: syz [ 380.064429][ T508] usb 2-1: Manufacturer: syz [ 380.089433][ T508] usb 2-1: SerialNumber: syz [ 380.327870][ T508] usb 2-1: 0:2 : does not exist [ 380.334942][ T508] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 380.362265][ T508] usb 2-1: USB disconnect, device number 82 [ 380.438849][ T4230] udevd[4230]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 380.868207][T13879] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4574'. [ 381.097542][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4578'. [ 381.409179][T13903] fuse: Bad value for 'fd' [ 382.274347][T13944] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 382.531203][ T31] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 382.701709][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 382.709583][ T31] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 382.717751][ T31] usb 2-1: config 0 has no interface number 0 [ 382.726889][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 382.736013][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.744023][ T31] usb 2-1: Product: syz [ 382.748223][ T31] usb 2-1: Manufacturer: syz [ 382.752831][ T31] usb 2-1: SerialNumber: syz [ 382.760039][ T31] usb 2-1: config 0 descriptor?? [ 382.768286][ T31] smsc95xx v2.0.0 [ 383.150843][T13955] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 383.159497][T13955] random: crng reseeded on system resumption [ 383.200205][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 383.216058][T13944] tap0: tun_chr_ioctl cmd 1074025677 [ 383.221457][T13944] tap0: linktype set to 1 [ 383.225875][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 383.396356][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 383.424423][ T31] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 383.443621][ T31] usb 2-1: USB disconnect, device number 83 [ 383.681105][T13977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4610'. [ 384.258132][T14001] usb usb9: check_ctrlrecip: process 14001 (syz.6.4619) requesting ep 01 but needs 81 [ 384.267770][T14001] usb usb9: usbfs: process 14001 (syz.6.4619) did not claim interface 0 before use [ 384.471543][T14011] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 384.471579][T14011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:802 [ 384.625187][ T36] kauditd_printk_skb: 1019 callbacks suppressed [ 384.625209][ T36] audit: type=1400 audit(2016778138.801:59899): avc: denied { create } for pid=14033 comm="syz.6.4630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 384.696591][ T36] audit: type=1400 audit(2016778138.838:59900): avc: denied { setopt } for pid=14033 comm="syz.6.4630" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 384.726855][ T31] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 384.731215][ T36] audit: type=1400 audit(2016778138.838:59901): avc: denied { ioctl } for pid=14017 comm="syz.1.4625" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 384.745022][T14036] netlink: 'syz.5.4631': attribute type 16 has an invalid length. [ 384.763860][T14039] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 384.778204][ T36] audit: type=1400 audit(2016778138.838:59902): avc: denied { create } for pid=14033 comm="syz.6.4630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 384.798118][ T36] audit: type=1400 audit(2016778138.838:59903): avc: denied { connect } for pid=14033 comm="syz.6.4630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 384.819352][ T36] audit: type=1400 audit(2016778138.866:59904): avc: denied { read write } for pid=9630 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.845089][ T36] audit: type=1400 audit(2016778138.866:59905): avc: denied { read write open } for pid=9630 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.886773][ T36] audit: type=1400 audit(2016778138.866:59906): avc: denied { ioctl } for pid=9630 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.895811][T14042] overlayfs: conflicting options: nfs_export=on,index=off [ 384.920515][ T36] audit: type=1400 audit(2016778138.932:59907): avc: denied { remount } for pid=14038 comm="syz.6.4632" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 384.963644][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.987690][ T31] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 384.996184][ T36] audit: type=1400 audit(2016778138.951:59908): avc: denied { ioctl } for pid=14017 comm="syz.1.4625" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 385.014630][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.047396][T14047] fuse: Unknown parameter '' [ 385.069833][ T31] usb 2-1: config 0 descriptor?? [ 385.530267][ T31] chicony 0003:04F2:1236.0021: hidraw0: USB HID v0.00 Device [HID 04f2:1236] on usb-dummy_hcd.1-1/input0 [ 385.685033][T14075] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 385.748856][T14018] fuse: Bad value for 'group_id' [ 385.760434][T14018] fuse: Bad value for 'group_id' [ 385.772365][ T31] usb 2-1: USB disconnect, device number 84 [ 385.877465][T14085] netlink: 'syz.5.4649': attribute type 4 has an invalid length. [ 385.885368][T14085] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.4649'. [ 387.061115][ T31] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 387.138959][T14118] rust_binder: Error while translating object. [ 387.139007][T14118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 387.145235][T14118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:835 [ 387.198048][T14120] cgroup: none used incorrectly [ 387.236903][ T31] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 387.284074][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.302994][ T31] usb 2-1: config 0 descriptor?? [ 387.505658][T14138] __vm_enough_memory: pid: 14138, comm: syz.6.4668, bytes: 18014402804453376 not enough memory for the allocation [ 387.552334][T14105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.594218][T14105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.759304][T14145] netlink: 'syz.6.4672': attribute type 1 has an invalid length. [ 387.785883][T14145] netlink: 'syz.6.4672': attribute type 3 has an invalid length. [ 387.793702][T14145] netlink: 296 bytes leftover after parsing attributes in process `syz.6.4672'. [ 387.809599][T14145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 387.835770][T14145] rust_binder: Write failure EINVAL in pid:849 [ 388.034030][T14159] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 388.066008][T14105] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 388.068246][T14105] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 388.078061][T14159] kvm: pic: non byte read [ 388.093189][T14105] rust_binder: Error while translating object. [ 388.093255][T14105] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 388.099551][T14105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1261 [ 388.109387][T14159] kvm: pic: single mode not supported [ 388.118669][T14159] kvm: pic: level sensitive irq not supported [ 388.124427][T14159] kvm: pic: non byte read [ 388.136199][ T31] usb 2-1: Cannot set autoneg [ 388.146924][ T31] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 388.174223][T14159] kvm: pic: level sensitive irq not supported [ 388.174297][T14159] kvm: pic: non byte read [ 388.176126][ T31] usb 2-1: USB disconnect, device number 85 [ 388.213689][T14159] kvm: pic: non byte read [ 388.519336][T14184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4686'. [ 388.802073][T14190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 388.802117][T14190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1263 [ 388.962920][T14194] binder: Bad value for 'defcontext' [ 389.463420][T14221] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 389.469434][T14221] rust_binder: Error while translating object. [ 389.476530][T14221] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 389.483792][T14221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1275 [ 389.639161][T14225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 389.682844][T14225] rust_binder: Error in use_page_slow: ESRCH [ 389.690274][T14225] rust_binder: use_range failure ESRCH [ 389.697595][T14225] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 389.710489][T14225] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 389.720329][T14225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1277 [ 389.961155][ T36] kauditd_printk_skb: 508 callbacks suppressed [ 389.961175][ T36] audit: type=1400 audit(2016778143.811:60417): avc: denied { create } for pid=14248 comm="syz.1.4711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 389.999050][ T36] audit: type=1400 audit(2016778143.848:60418): avc: denied { read } for pid=14248 comm="syz.1.4711" dev="nsfs" ino=4026532409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 390.026676][ T36] audit: type=1400 audit(2016778143.848:60419): avc: denied { read open } for pid=14248 comm="syz.1.4711" path="net:[4026532409]" dev="nsfs" ino=4026532409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 390.075505][ T36] audit: type=1400 audit(2016778143.848:60420): avc: denied { create } for pid=14248 comm="syz.1.4711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 390.096988][ T36] audit: type=1400 audit(2016778143.857:60421): avc: denied { setopt } for pid=14248 comm="syz.1.4711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 390.136056][ T36] audit: type=1400 audit(2016778143.857:60422): avc: denied { create } for pid=14248 comm="syz.1.4711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 390.137596][T14265] random: crng reseeded on system resumption [ 390.190589][ T36] audit: type=1400 audit(2016778143.857:60423): avc: denied { write } for pid=14248 comm="syz.1.4711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 390.216445][ T36] audit: type=1400 audit(2016778143.857:60424): avc: denied { read } for pid=14248 comm="syz.1.4711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 390.238239][ T36] audit: type=1400 audit(2016778143.857:60425): avc: denied { read } for pid=14248 comm="syz.1.4711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 390.260251][ T36] audit: type=1400 audit(2016778143.895:60426): avc: denied { read write } for pid=8721 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.414929][T14285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 390.419552][T14285] rust_binder: Write failure EINVAL in pid:1291 [ 390.430498][T14285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 390.437715][T14285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1291 [ 390.568146][T14293] futex_wake_op: syz.5.4724 tries to shift op by -1; fix this program [ 390.651266][T14306] rust_binder: Write failure EFAULT in pid:1293 [ 391.777183][T14338] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4736'. [ 391.778737][T14344] fuse: Bad value for 'fd' [ 391.864450][T14349] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 392.113334][ T31] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 392.375725][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 392.392014][ T31] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 392.410272][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.422671][ T31] usb 2-1: config 0 descriptor?? [ 392.432575][ T31] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 392.459204][ T31] usb 2-1: Detected FT4232H [ 392.639742][T14368] netlink: 'syz.6.4745': attribute type 6 has an invalid length. [ 392.721584][T14349] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 392.730219][ T31] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 392.753309][ T31] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 392.774324][ T31] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 392.837056][ T31] usb 2-1: USB disconnect, device number 86 [ 392.850620][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 392.881065][ T31] ftdi_sio 2-1:0.0: device disconnected [ 393.041340][T14378] netlink: 'syz.5.4749': attribute type 46 has an invalid length. [ 393.091230][T14378] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4749'. [ 393.166072][T14378] x_tables: duplicate underflow at hook 1 [ 393.214735][T14385] netlink: 'syz.4.4751': attribute type 3 has an invalid length. [ 393.624254][T14399] __vm_enough_memory: pid: 14399, comm: syz.6.4756, bytes: 18014402804453376 not enough memory for the allocation [ 393.673337][T14403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 393.682161][T14403] deleting an unspecified loop device is not supported. [ 393.866741][T14409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1301 [ 394.207986][T14307] syz.5.4728 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 394.230673][T14415] batadv_slave_1: entered promiscuous mode [ 394.237757][T14307] CPU: 0 UID: 0 PID: 14307 Comm: syz.5.4728 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 394.237794][T14307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 394.237813][T14307] Call Trace: [ 394.237821][T14307] [ 394.237835][T14307] __dump_stack+0x21/0x30 [ 394.237878][T14307] dump_stack_lvl+0x10c/0x190 [ 394.237910][T14307] ? __cfi_dump_stack_lvl+0x10/0x10 [ 394.237940][T14307] ? ___ratelimit+0x3f7/0x5a0 [ 394.237974][T14307] dump_stack+0x19/0x20 [ 394.238003][T14307] dump_header+0xd7/0x490 [ 394.238026][T14307] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 394.238055][T14307] oom_kill_process+0x35d/0x640 [ 394.238083][T14307] ? sched_clock_cpu+0x75/0x400 [ 394.238114][T14307] out_of_memory+0x659/0xa80 [ 394.238142][T14307] ? __cfi_out_of_memory+0x10/0x10 [ 394.238169][T14307] ? mutex_lock_killable+0x92/0x1c0 [ 394.238192][T14307] ? __cfi_mutex_lock_killable+0x10/0x10 [ 394.238217][T14307] mem_cgroup_out_of_memory+0x279/0x350 [ 394.238239][T14307] ? drain_obj_stock+0xed0/0xed0 [ 394.238262][T14307] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 394.238284][T14307] try_charge_memcg+0x8f7/0xde0 [ 394.238315][T14307] ? __cfi_try_charge_memcg+0x10/0x10 [ 394.238345][T14307] ? __alloc_pages_noprof+0x31f/0x7b0 [ 394.238377][T14307] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 394.238410][T14307] __mem_cgroup_charge+0xf6/0x410 [ 394.238442][T14307] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 394.238474][T14307] ? do_pte_missing+0x2bdb/0x4240 [ 394.238505][T14307] shmem_alloc_and_add_folio+0x86d/0x1050 [ 394.238536][T14307] ? put_swap_device+0x130/0x130 [ 394.238562][T14307] ? shmem_huge_global_enabled+0x2da/0x360 [ 394.238589][T14307] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 394.238614][T14307] ? __kasan_check_write+0x18/0x20 [ 394.238648][T14307] ? _raw_spin_lock+0x8c/0x120 [ 394.238677][T14307] shmem_get_folio_gfp+0x5f0/0x1380 [ 394.238706][T14307] ? shmem_get_folio+0xc0/0xc0 [ 394.238729][T14307] ? follow_page_pte+0xa5c/0xb90 [ 394.238758][T14307] ? inode_to_bdi+0x6d/0x100 [ 394.238790][T14307] shmem_write_begin+0xf4/0x270 [ 394.238818][T14307] generic_perform_write+0x330/0x960 [ 394.238960][T14307] ? __cfi_generic_perform_write+0x10/0x10 [ 394.239024][T14307] ? down_write+0xe9/0x2a0 [ 394.239050][T14307] ? file_update_time+0xa3/0x220 [ 394.239081][T14307] shmem_file_write_iter+0x105/0x130 [ 394.239112][T14307] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 394.239142][T14307] __kernel_write_iter+0x41a/0x8e0 [ 394.239163][T14307] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 394.239194][T14307] ? __cfi___kernel_write_iter+0x10/0x10 [ 394.239215][T14307] ? get_dump_page+0x160/0x220 [ 394.239243][T14307] ? __asan_memset+0x39/0x50 [ 394.239264][T14307] ? iov_iter_bvec+0xc0/0x180 [ 394.239293][T14307] dump_user_range+0xb06/0xdf0 [ 394.239316][T14307] ? __cfi_dump_emit+0x10/0x10 [ 394.239336][T14307] ? __cfi_dump_user_range+0x10/0x10 [ 394.239358][T14307] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 394.239393][T14307] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 394.239426][T14307] ? elf_core_dump+0x2368/0x3800 [ 394.239453][T14307] elf_core_dump+0x2ccc/0x3800 [ 394.239484][T14307] ? __cfi_elf_core_dump+0x10/0x10 [ 394.239519][T14307] ? dump_interrupted+0xf0/0xf0 [ 394.239552][T14307] ? filp_open+0x182/0x1d0 [ 394.239582][T14307] ? 0xffffffffff600000 [ 394.239602][T14307] do_coredump+0x1bfa/0x2bd0 [ 394.239639][T14307] ? __cfi_do_coredump+0x10/0x10 [ 394.239672][T14307] ? asm_exc_page_fault+0x2b/0x30 [ 394.239705][T14307] ? __kasan_slab_free+0x6a/0x80 [ 394.239730][T14307] ? kmem_cache_free+0x1c1/0x510 [ 394.239752][T14307] ? get_signal+0xa75/0x14f0 [ 394.239782][T14307] get_signal+0x11fd/0x14f0 [ 394.239814][T14307] arch_do_signal_or_restart+0x96/0x720 [ 394.239850][T14307] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 394.239889][T14307] irqentry_exit_to_user_mode+0x4e/0xb0 [ 394.239914][T14307] irqentry_exit+0x16/0x60 [ 394.239936][T14307] exc_page_fault+0x66/0xc0 [ 394.239960][T14307] asm_exc_page_fault+0x2b/0x30 [ 394.239982][T14307] RIP: 0033:0x0 [ 394.240009][T14307] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 394.240022][T14307] RSP: 002b:00002000000001c8 EFLAGS: 00010217 [ 394.240044][T14307] RAX: 0000000000000000 RBX: 00007fe74ade6090 RCX: 00007fe74ab8efc9 [ 394.240061][T14307] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000200 [ 394.240078][T14307] RBP: 00007fe74ac11f91 R08: 0000200000000280 R09: 0000200000000280 [ 394.240094][T14307] R10: 0000200000000240 R11: 0000000000000206 R12: 0000000000000000 [ 394.240110][T14307] R13: 00007fe74ade6128 R14: 00007fe74ade6090 R15: 00007ffc27bc4a98 [ 394.240130][T14307] [ 394.240147][T14307] memory: usage 307200kB, limit 307200kB, failcnt 25704 [ 394.247118][T14415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14415 comm=syz.6.4760 [ 394.251848][T14307] memory+swap: usage 432068kB, limit 9007199254740988kB, failcnt 0 [ 394.251871][T14307] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 394.286970][T14414] batadv_slave_1: left promiscuous mode [ 394.287640][T14307] Memory cgroup stats for [ 394.660055][T14418] binder: Bad value for 'stats' [ 394.666599][T14307] /syz5: [ 394.734922][T14307] cache 314200064 [ 394.742867][T14307] rss 135168 [ 394.746735][T14307] rss_huge 0 [ 394.749966][T14307] shmem 314200064 [ 394.753610][T14307] mapped_file 0 [ 394.758251][T14307] dirty 0 [ 394.761216][T14307] writeback 0 [ 394.764517][T14307] workingset_refault_anon 39 [ 394.770295][T14307] workingset_refault_file 0 [ 394.774982][T14307] swap 127864832 [ 394.779543][T14307] swapcached 131072 [ 394.783408][T14307] pgpgin 270875 [ 394.799308][T14307] pgpgout 194110 [ 394.802903][T14307] pgfault 124168 [ 394.806468][T14307] pgmajfault 34 [ 394.818683][T14307] inactive_anon 143499264 [ 394.825637][T14307] active_anon 170930176 [ 394.829838][T14307] inactive_file 0 [ 394.836532][T14307] active_file 0 [ 394.840117][T14307] unevictable 0 [ 394.844499][T14307] hierarchical_memory_limit 314572800 [ 394.849889][T14307] hierarchical_memsw_limit 9223372036854771712 [ 394.863097][T14307] total_cache 314200064 [ 394.867987][T14307] total_rss 135168 [ 394.872909][T14307] total_rss_huge 0 [ 394.877658][T14307] total_shmem 314200064 [ 394.881883][T14307] total_mapped_file 0 [ 394.887038][T14307] total_dirty 0 [ 394.894301][T14307] total_writeback 0 [ 394.901609][T14307] total_workingset_refault_anon 39 [ 394.907652][T14307] total_workingset_refault_file 0 [ 394.912780][T14307] total_swap 127864832 [ 394.921941][T14307] total_swapcached 131072 [ 394.926295][T14307] total_pgpgin 270875 [ 394.935955][T14307] total_pgpgout 194110 [ 394.944808][T14307] total_pgfault 124168 [ 394.956903][T14307] total_pgmajfault 34 [ 394.961860][T14307] total_inactive_anon 143499264 [ 394.966732][T14307] total_active_anon 170930176 [ 394.972300][T14307] total_inactive_file 0 [ 394.976482][T14307] total_active_file 0 [ 394.991164][T14307] total_unevictable 0 [ 394.995185][T14307] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3278,pid=10030,uid=0 [ 395.020299][T14307] Memory cgroup out of memory: Killed process 10030 (syz.5.3278) total-vm:94004kB, anon-rss:1180kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 395.053765][T14308] syz.5.4728 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 395.066092][T14308] CPU: 0 UID: 0 PID: 14308 Comm: syz.5.4728 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 395.066130][T14308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 395.066145][T14308] Call Trace: [ 395.066153][T14308] [ 395.066162][T14308] __dump_stack+0x21/0x30 [ 395.066196][T14308] dump_stack_lvl+0x10c/0x190 [ 395.066227][T14308] ? __cfi_dump_stack_lvl+0x10/0x10 [ 395.066257][T14308] ? ___ratelimit+0x3f7/0x5a0 [ 395.066291][T14308] dump_stack+0x19/0x20 [ 395.066319][T14308] dump_header+0xd7/0x490 [ 395.066342][T14308] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 395.066381][T14308] oom_kill_process+0x35d/0x640 [ 395.066408][T14308] ? sched_clock_cpu+0x75/0x400 [ 395.066440][T14308] out_of_memory+0x659/0xa80 [ 395.066467][T14308] ? __cfi_out_of_memory+0x10/0x10 [ 395.066493][T14308] ? mutex_lock_killable+0x104/0x1c0 [ 395.066516][T14308] ? __cfi_mutex_lock_killable+0x10/0x10 [ 395.066552][T14308] mem_cgroup_out_of_memory+0x279/0x350 [ 395.066575][T14308] ? drain_obj_stock+0xed0/0xed0 [ 395.066597][T14308] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 395.066617][T14308] try_charge_memcg+0x8f7/0xde0 [ 395.066646][T14308] ? __cfi_try_charge_memcg+0x10/0x10 [ 395.066675][T14308] ? __alloc_pages_noprof+0x31f/0x7b0 [ 395.066711][T14308] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 395.066741][T14308] ? __folio_batch_add_and_move+0x2ab/0x370 [ 395.066771][T14308] __mem_cgroup_charge+0xf6/0x410 [ 395.066802][T14308] ? _raw_spin_lock+0x8c/0x120 [ 395.066829][T14308] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 395.066863][T14308] shmem_alloc_and_add_folio+0x86d/0x1050 [ 395.066893][T14308] ? put_swap_device+0x130/0x130 [ 395.066919][T14308] ? shmem_huge_global_enabled+0x2da/0x360 [ 395.066945][T14308] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 395.066969][T14308] ? __kasan_check_write+0x18/0x20 [ 395.067002][T14308] ? _raw_spin_lock+0x8c/0x120 [ 395.067029][T14308] shmem_get_folio_gfp+0x5f0/0x1380 [ 395.067056][T14308] ? shmem_get_folio+0xc0/0xc0 [ 395.067078][T14308] ? follow_page_pte+0xa5c/0xb90 [ 395.067107][T14308] ? inode_to_bdi+0x6d/0x100 [ 395.067134][T14308] shmem_write_begin+0xf4/0x270 [ 395.067158][T14308] generic_perform_write+0x330/0x960 [ 395.067189][T14308] ? __cfi_generic_perform_write+0x10/0x10 [ 395.067220][T14308] ? down_write+0xe9/0x2a0 [ 395.067240][T14308] ? file_update_time+0xa3/0x220 [ 395.067266][T14308] shmem_file_write_iter+0x105/0x130 [ 395.067294][T14308] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 395.067322][T14308] __kernel_write_iter+0x41a/0x8e0 [ 395.067342][T14308] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 395.067369][T14308] ? __cfi___kernel_write_iter+0x10/0x10 [ 395.067389][T14308] ? get_dump_page+0x160/0x220 [ 395.067416][T14308] ? __asan_memset+0x39/0x50 [ 395.067435][T14308] ? iov_iter_bvec+0xc0/0x180 [ 395.067463][T14308] dump_user_range+0xb06/0xdf0 [ 395.067486][T14308] ? __cfi_dump_emit+0x10/0x10 [ 395.067506][T14308] ? __cfi_dump_user_range+0x10/0x10 [ 395.067527][T14308] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 395.067559][T14308] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 395.067592][T14308] ? elf_core_dump+0x2368/0x3800 [ 395.067619][T14308] elf_core_dump+0x2ccc/0x3800 [ 395.067648][T14308] ? __cfi_elf_core_dump+0x10/0x10 [ 395.067681][T14308] ? dump_interrupted+0xf0/0xf0 [ 395.067722][T14308] ? filp_open+0x182/0x1d0 [ 395.067750][T14308] ? 0xffffffffff600000 [ 395.067769][T14308] do_coredump+0x1bfa/0x2bd0 [ 395.067805][T14308] ? __cfi_do_coredump+0x10/0x10 [ 395.067836][T14308] ? asm_exc_page_fault+0x2b/0x30 [ 395.067867][T14308] ? __kasan_slab_free+0x6a/0x80 [ 395.067892][T14308] ? kmem_cache_free+0x1c1/0x510 [ 395.067914][T14308] ? get_signal+0xa75/0x14f0 [ 395.067941][T14308] get_signal+0x11fd/0x14f0 [ 395.067972][T14308] arch_do_signal_or_restart+0x96/0x720 [ 395.068005][T14308] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 395.068042][T14308] irqentry_exit_to_user_mode+0x4e/0xb0 [ 395.068067][T14308] irqentry_exit+0x16/0x60 [ 395.068088][T14308] exc_page_fault+0x66/0xc0 [ 395.068110][T14308] asm_exc_page_fault+0x2b/0x30 [ 395.068132][T14308] RIP: 0033:0x0 [ 395.068148][T14308] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 395.068160][T14308] RSP: 002b:00002000000001c8 EFLAGS: 00010217 [ 395.068181][T14308] RAX: 0000000000000000 RBX: 00007fe74ade6090 RCX: 00007fe74ab8efc9 [ 395.068198][T14308] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000200 [ 395.068214][T14308] RBP: 00007fe74ac11f91 R08: 0000200000000280 R09: 0000200000000280 [ 395.068230][T14308] R10: 0000200000000240 R11: 0000000000000206 R12: 0000000000000000 [ 395.068246][T14308] R13: 00007fe74ade6128 R14: 00007fe74ade6090 R15: 00007ffc27bc4a98 [ 395.068265][T14308] [ 395.068275][T14308] memory: usage 307200kB, limit 307200kB, failcnt 25794 [ 395.309054][ T36] kauditd_printk_skb: 429 callbacks suppressed [ 395.309075][ T36] audit: type=1400 audit(2016778148.820:60856): avc: denied { mounton } for pid=14438 comm="syz.6.4769" path="/298/bus" dev="tmpfs" ino=1643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 395.543367][T14308] memory+swap: usage 431880kB, limit 9007199254740988kB, failcnt 0 [ 395.587919][T14308] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 395.607292][T14308] Memory cgroup stats for /syz5: [ 395.607448][T14308] cache 314200064 [ 395.622577][T14444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 395.624339][T14308] rss 278528 [ 395.641627][T14444] rust_binder: Write failure EINVAL in pid:1307 [ 395.645602][T14444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 395.652577][T14308] rss_huge 0 [ 395.664966][ T36] audit: type=1400 audit(2016778148.830:60857): avc: denied { execmem } for pid=14438 comm="syz.6.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 395.688053][T14444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1307 [ 395.700401][T14308] shmem 314200064 [ 395.708012][ T36] audit: type=1400 audit(2016778148.933:60858): avc: denied { execmem } for pid=14438 comm="syz.6.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 395.732795][T14308] mapped_file 0 [ 395.736294][T14308] dirty 0 [ 395.752873][T14308] writeback 0 [ 395.756221][T14308] workingset_refault_anon 39 [ 395.785110][T14308] workingset_refault_file 0 [ 395.789675][T14308] swap 127672320 [ 395.797180][ T36] audit: type=1400 audit(2016778148.999:60859): avc: denied { read write } for pid=8721 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.809555][T14308] swapcached 131072 [ 395.847033][T14308] pgpgin 270910 [ 395.850961][T14308] pgpgout 194110 [ 395.857774][T14308] pgfault 124282 [ 395.864762][ T36] audit: type=1400 audit(2016778148.999:60860): avc: denied { read write open } for pid=8721 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.866648][T14308] pgmajfault 34 [ 395.918480][T14308] inactive_anon 143499264 [ 395.921158][ T36] audit: type=1400 audit(2016778148.999:60861): avc: denied { ioctl } for pid=8721 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.924706][T14308] active_anon 171073536 [ 395.955166][T14308] inactive_file 0 [ 395.958657][T14454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 395.959875][T14308] active_file 0 [ 395.972163][T14308] unevictable 0 [ 395.979931][T14308] hierarchical_memory_limit 314572800 [ 395.982433][ T36] audit: type=1400 audit(2016778149.102:60862): avc: denied { read write } for pid=9630 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.986930][T14308] hierarchical_memsw_limit 9223372036854771712 [ 396.015925][ T36] audit: type=1400 audit(2016778149.102:60863): avc: denied { read write open } for pid=9630 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.041085][ T36] audit: type=1400 audit(2016778149.102:60864): avc: denied { ioctl } for pid=9630 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.045589][T14308] total_cache 314200064 [ 396.066888][ T36] audit: type=1400 audit(2016778149.111:60865): avc: denied { wake_alarm } for pid=14443 comm="syz.1.4771" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 396.072544][T14308] total_rss 278528 [ 396.097770][T14308] total_rss_huge 0 [ 396.101583][T14308] total_shmem 314200064 [ 396.105766][T14308] total_mapped_file 0 [ 396.109828][T14308] total_dirty 0 [ 396.113339][T14308] total_writeback 0 [ 396.117190][T14308] total_workingset_refault_anon 39 [ 396.122376][T14308] total_workingset_refault_file 0 [ 396.127421][T14308] total_swap 127672320 [ 396.131495][T14308] total_swapcached 131072 [ 396.135869][T14308] total_pgpgin 270910 [ 396.139867][T14308] total_pgpgout 194110 [ 396.144844][T14308] total_pgfault 124282 [ 396.148960][T14308] total_pgmajfault 34 [ 396.153081][T14308] total_inactive_anon 143499264 [ 396.158125][T14308] total_active_anon 171073536 [ 396.162823][T14308] total_inactive_file 0 [ 396.167659][T14308] total_active_file 0 [ 396.171674][T14308] total_unevictable 0 [ 396.175718][T14308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3743,pid=11404,uid=0 [ 396.190713][T14308] Memory cgroup out of memory: Killed process 11404 (syz.5.3743) total-vm:93872kB, anon-rss:1152kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 396.227616][ T1840] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 396.273563][T14312] syz.5.4728 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 396.288197][T14312] CPU: 0 UID: 0 PID: 14312 Comm: syz.5.4728 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 396.288236][T14312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 396.288252][T14312] Call Trace: [ 396.288259][T14312] [ 396.288269][T14312] __dump_stack+0x21/0x30 [ 396.288305][T14312] dump_stack_lvl+0x10c/0x190 [ 396.288337][T14312] ? __cfi_dump_stack_lvl+0x10/0x10 [ 396.288369][T14312] ? ___ratelimit+0x3f7/0x5a0 [ 396.288405][T14312] dump_stack+0x19/0x20 [ 396.288434][T14312] dump_header+0xd7/0x490 [ 396.288458][T14312] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 396.288490][T14312] oom_kill_process+0x35d/0x640 [ 396.288519][T14312] ? sched_clock_cpu+0x75/0x400 [ 396.288551][T14312] out_of_memory+0x659/0xa80 [ 396.288580][T14312] ? __cfi_out_of_memory+0x10/0x10 [ 396.288615][T14312] ? mutex_lock_killable+0x92/0x1c0 [ 396.288638][T14312] ? __cfi_mutex_lock_killable+0x10/0x10 [ 396.288664][T14312] mem_cgroup_out_of_memory+0x279/0x350 [ 396.288688][T14312] ? drain_obj_stock+0xed0/0xed0 [ 396.288712][T14312] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 396.288735][T14312] try_charge_memcg+0x8f7/0xde0 [ 396.288768][T14312] ? __cfi_try_charge_memcg+0x10/0x10 [ 396.288800][T14312] ? __alloc_pages_noprof+0x31f/0x7b0 [ 396.288829][T14312] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 396.288858][T14312] ? __folio_batch_add_and_move+0x2ab/0x370 [ 396.288896][T14312] __mem_cgroup_charge+0xf6/0x410 [ 396.288924][T14312] ? _raw_spin_lock+0x8c/0x120 [ 396.288950][T14312] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 396.288986][T14312] shmem_alloc_and_add_folio+0x86d/0x1050 [ 396.289013][T14312] ? put_swap_device+0x130/0x130 [ 396.289037][T14312] ? shmem_huge_global_enabled+0x2da/0x360 [ 396.289061][T14312] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 396.289083][T14312] ? __kasan_check_write+0x18/0x20 [ 396.289114][T14312] ? _raw_spin_lock+0x8c/0x120 [ 396.289139][T14312] shmem_get_folio_gfp+0x5f0/0x1380 [ 396.289164][T14312] ? shmem_get_folio+0xc0/0xc0 [ 396.289185][T14312] ? follow_page_pte+0xa5c/0xb90 [ 396.289212][T14312] ? inode_to_bdi+0x6d/0x100 [ 396.289240][T14312] shmem_write_begin+0xf4/0x270 [ 396.289264][T14312] generic_perform_write+0x330/0x960 [ 396.289296][T14312] ? __cfi_generic_perform_write+0x10/0x10 [ 396.289325][T14312] ? down_write+0xe9/0x2a0 [ 396.289346][T14312] ? file_update_time+0xa3/0x220 [ 396.289374][T14312] shmem_file_write_iter+0x105/0x130 [ 396.289401][T14312] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 396.289428][T14312] __kernel_write_iter+0x41a/0x8e0 [ 396.289446][T14312] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 396.289475][T14312] ? __cfi___kernel_write_iter+0x10/0x10 [ 396.289494][T14312] ? get_dump_page+0x160/0x220 [ 396.289519][T14312] ? __asan_memset+0x39/0x50 [ 396.289536][T14312] ? iov_iter_bvec+0xc0/0x180 [ 396.289562][T14312] dump_user_range+0xb06/0xdf0 [ 396.289582][T14312] ? __cfi_dump_emit+0x10/0x10 [ 396.289606][T14312] ? __cfi_dump_user_range+0x10/0x10 [ 396.289625][T14312] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 396.289655][T14312] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 396.289684][T14312] ? elf_core_dump+0x2368/0x3800 [ 396.289708][T14312] elf_core_dump+0x2ccc/0x3800 [ 396.289735][T14312] ? __cfi_elf_core_dump+0x10/0x10 [ 396.289765][T14312] ? dump_interrupted+0xf0/0xf0 [ 396.289793][T14312] ? filp_open+0x182/0x1d0 [ 396.289819][T14312] ? 0xffffffffff600000 [ 396.289836][T14312] do_coredump+0x1bfa/0x2bd0 [ 396.289869][T14312] ? __cfi_do_coredump+0x10/0x10 [ 396.289898][T14312] ? asm_exc_page_fault+0x2b/0x30 [ 396.289927][T14312] ? __kasan_slab_free+0x6a/0x80 [ 396.289949][T14312] ? kmem_cache_free+0x1c1/0x510 [ 396.289968][T14312] ? get_signal+0xa75/0x14f0 [ 396.289994][T14312] get_signal+0x11fd/0x14f0 [ 396.290024][T14312] arch_do_signal_or_restart+0x96/0x720 [ 396.290055][T14312] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 396.290088][T14312] irqentry_exit_to_user_mode+0x4e/0xb0 [ 396.290110][T14312] irqentry_exit+0x16/0x60 [ 396.290131][T14312] exc_page_fault+0x66/0xc0 [ 396.290151][T14312] asm_exc_page_fault+0x2b/0x30 [ 396.290171][T14312] RIP: 0033:0x0 [ 396.290184][T14312] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 396.290196][T14312] RSP: 002b:00002000000001c8 EFLAGS: 00010217 [ 396.290214][T14312] RAX: 0000000000000000 RBX: 00007fe74ade6090 RCX: 00007fe74ab8efc9 [ 396.290229][T14312] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000200 [ 396.290243][T14312] RBP: 00007fe74ac11f91 R08: 0000200000000280 R09: 0000200000000280 [ 396.290258][T14312] R10: 0000200000000240 R11: 0000000000000206 R12: 0000000000000000 [ 396.290272][T14312] R13: 00007fe74ade6128 R14: 00007fe74ade6090 R15: 00007ffc27bc4a98 [ 396.290290][T14312] [ 396.290298][T14312] memory: usage 307200kB, limit 307200kB, failcnt 27072 [ 396.419437][ T1840] usb 2-1: Using ep0 maxpacket: 8 [ 396.425690][T14312] memory+swap: usage 431932kB, limit 9007199254740988kB, failcnt 0 [ 396.436317][ T1840] usb 2-1: unable to get BOS descriptor or descriptor too short [ 396.440804][T14312] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 396.449002][ T1840] usb 2-1: config 143 has an invalid interface number: 213 but max is 1 [ 396.451313][T14312] Memory cgroup stats for [ 396.459347][ T1840] usb 2-1: config 143 has an invalid interface number: 2 but max is 1 [ 396.463292][T14312] /syz5 [ 396.482476][ T1840] usb 2-1: config 143 has an invalid descriptor of length 53, skipping remainder of the config [ 396.483135][T14312] : [ 396.491304][ T1840] usb 2-1: config 143 has no interface number 0 [ 396.492741][T14312] cache 314077184 [ 396.509359][ T1840] usb 2-1: config 143 has no interface number 1 [ 396.513138][T14312] rss 262144 [ 396.519378][ T1840] usb 2-1: config 143 interface 213 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 396.523430][T14312] rss_huge 0 [ 396.530703][ T1840] usb 2-1: config 143 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 396.534448][T14312] shmem 314077184 [ 396.541670][ T1840] usb 2-1: config 143 interface 213 has no altsetting 0 [ 396.545938][T14312] mapped_file 0 [ 396.551736][ T1840] usb 2-1: config 143 interface 2 has no altsetting 0 [ 396.555214][T14312] dirty 0 [ 396.555226][T14312] writeback 0 [ 396.555234][T14312] workingset_refault_anon 39 [ 396.555244][T14312] workingset_refault_file 0 [ 396.567250][ T1840] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=aa.f8 [ 396.569597][T14312] swap 127725568 [ 396.576686][ T1840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.581383][T14312] swapcached 270336 [ 396.589212][ T1840] usb 2-1: Product: syz [ 396.592994][T14312] pgpgin 270946 [ 396.598269][ T1840] usb 2-1: Manufacturer: syz [ 396.602803][T14312] pgpgout 194146 [ 396.609961][ T1840] usb 2-1: SerialNumber: syz [ 396.612267][T14312] pgfault 124283 [ 396.947331][T14312] pgmajfault 34 [ 396.950847][T14312] inactive_anon 185749504 [ 396.955251][T14312] active_anon 128823296 [ 396.959424][T14312] inactive_file 0 [ 396.963100][T14312] active_file 0 [ 396.966583][T14312] unevictable 0 [ 396.970055][T14312] hierarchical_memory_limit 314572800 [ 396.975493][T14312] hierarchical_memsw_limit 9223372036854771712 [ 396.981665][T14312] total_cache 314077184 [ 396.985880][T14312] total_rss 262144 [ 396.989637][T14312] total_rss_huge 0 [ 396.993368][T14312] total_shmem 314077184 [ 396.995722][T14454] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 396.997597][T14312] total_mapped_file 0 [ 397.002454][T14454] rust_binder: Error while translating object. [ 397.009815][T14312] total_dirty 0 [ 397.023536][T14312] total_writeback 0 [ 397.025813][T14454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 397.028329][T14454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1312 [ 397.032203][T14312] total_workingset_refault_anon 39 [ 397.065105][T14312] total_workingset_refault_file 0 [ 397.071290][T14312] total_swap 127725568 [ 397.075464][T14312] total_swapcached 270336 [ 397.079897][T14312] total_pgpgin 270946 [ 397.085996][T14312] total_pgpgout 194146 [ 397.092399][T14312] total_pgfault 124283 [ 397.096579][T14312] total_pgmajfault 34 [ 397.100690][T14312] total_inactive_anon 185749504 [ 397.105680][T14312] total_active_anon 128823296 [ 397.112461][T14312] total_inactive_file 0 [ 397.116667][T14312] total_active_file 0 [ 397.120712][T14312] total_unevictable 0 [ 397.129856][T14312] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4728,pid=14307,uid=0 [ 397.154488][T14312] Memory cgroup out of memory: Killed process 14307 (syz.5.4728) total-vm:90296kB, anon-rss:1172kB, file-rss:57904kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 397.171614][ T1840] asix 2-1:143.213 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 397.176995][T14471] netlink: 1143 bytes leftover after parsing attributes in process `syz.4.4781'. [ 397.192829][ T1840] asix 2-1:143.213: probe with driver asix failed with error -71 [ 397.211494][ T1840] asix 2-1:143.2 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 397.251960][ T1840] asix 2-1:143.2: probe with driver asix failed with error -71 [ 397.285556][T14422] 9pnet_fd: Insufficient options for proto=fd [ 397.334398][ T1840] usb 2-1: USB disconnect, device number 87 [ 398.394716][T14515] binder: Bad value for 'max' [ 398.673264][ T128] ip6gretap0: left allmulticast mode [ 398.678634][ T128] ip6gretap0: left promiscuous mode [ 398.689857][ T128] bridge0: port 3(ip6gretap0) entered disabled state [ 398.708691][ T128] bridge_slave_1: left allmulticast mode [ 398.721710][ T128] bridge_slave_1: left promiscuous mode [ 398.727398][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.741710][ T128] bridge_slave_0: left allmulticast mode [ 398.753283][ T128] bridge_slave_0: left promiscuous mode [ 398.765591][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.926022][ T128] veth1_macvtap: left promiscuous mode [ 398.931580][ T128] veth0_vlan: left promiscuous mode [ 398.946462][T14542] 9pnet_fd: Insufficient options for proto=fd [ 399.353556][T14552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 399.361357][T14552] rust_binder: Error in use_page_slow: ESRCH [ 399.377128][T14552] rust_binder: use_range failure ESRCH [ 399.385254][T14552] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 399.391825][T14552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 399.399957][T14552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1323 [ 399.725118][T14560] FAULT_INJECTION: forcing a failure. [ 399.725118][T14560] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 399.747680][T14560] CPU: 1 UID: 0 PID: 14560 Comm: syz.1.4805 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 399.747720][T14560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 399.747736][T14560] Call Trace: [ 399.747745][T14560] [ 399.747755][T14560] __dump_stack+0x21/0x30 [ 399.747794][T14560] dump_stack_lvl+0x10c/0x190 [ 399.747827][T14560] ? __cfi_dump_stack_lvl+0x10/0x10 [ 399.747862][T14560] ? cgroup_rstat_updated+0x132/0x7f0 [ 399.747898][T14560] dump_stack+0x19/0x20 [ 399.747929][T14560] should_fail_ex+0x3d9/0x530 [ 399.747955][T14560] should_fail_alloc_page+0xeb/0x110 [ 399.747985][T14560] __alloc_pages_noprof+0x19b/0x7b0 [ 399.748019][T14560] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 399.748053][T14560] ? handle_mm_fault+0x169b/0x1b90 [ 399.748085][T14560] __folio_alloc_noprof+0x14/0x80 [ 399.748118][T14560] shmem_alloc_and_add_folio+0x452/0x1050 [ 399.748152][T14560] ? put_swap_device+0x130/0x130 [ 399.748181][T14560] ? shmem_huge_global_enabled+0x2da/0x360 [ 399.748210][T14560] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 399.748239][T14560] shmem_get_folio_gfp+0x5f0/0x1380 [ 399.748265][T14560] ? core_kernel_text+0x61/0xa0 [ 399.748299][T14560] ? shmem_get_folio+0xc0/0xc0 [ 399.748323][T14560] ? fault_in_readable+0xeb/0x160 [ 399.748363][T14560] ? fault_in_readable+0xd4/0x160 [ 399.748394][T14560] shmem_write_begin+0xf4/0x270 [ 399.748425][T14560] generic_perform_write+0x330/0x960 [ 399.748464][T14560] ? __cfi_generic_perform_write+0x10/0x10 [ 399.748500][T14560] ? down_write+0xe9/0x2a0 [ 399.748526][T14560] ? mnt_get_write_access_file+0x1af/0x3b0 [ 399.748558][T14560] ? mnt_put_write_access_file+0xc2/0x100 [ 399.748590][T14560] ? file_update_time+0x1ef/0x220 [ 399.748624][T14560] shmem_file_write_iter+0x105/0x130 [ 399.748658][T14560] vfs_write+0x718/0xf30 [ 399.748680][T14560] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 399.748714][T14560] ? __cfi_vfs_write+0x10/0x10 [ 399.748737][T14560] ? __cfi_mutex_lock+0x10/0x10 [ 399.748762][T14560] ksys_write+0x141/0x250 [ 399.748785][T14560] ? xfd_validate_state+0x68/0x150 [ 399.748816][T14560] ? __cfi_ksys_write+0x10/0x10 [ 399.748840][T14560] ? __kasan_check_read+0x15/0x20 [ 399.748877][T14560] __x64_sys_write+0x7f/0x90 [ 399.748899][T14560] x64_sys_call+0x271c/0x2ee0 [ 399.748936][T14560] do_syscall_64+0x58/0xf0 [ 399.748968][T14560] ? clear_bhb_loop+0x50/0xa0 [ 399.748996][T14560] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 399.749022][T14560] RIP: 0033:0x7ff4f4f8efc9 [ 399.749049][T14560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.749069][T14560] RSP: 002b:00007ff4f5e20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 399.749096][T14560] RAX: ffffffffffffffda RBX: 00007ff4f51e5fa0 RCX: 00007ff4f4f8efc9 [ 399.749115][T14560] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000007 [ 399.749131][T14560] RBP: 00007ff4f5e20090 R08: 0000000000000000 R09: 0000000000000000 [ 399.749148][T14560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.749163][T14560] R13: 00007ff4f51e6038 R14: 00007ff4f51e5fa0 R15: 00007ffdc54f83b8 [ 399.749184][T14560] [ 400.512414][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 400.672284][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 400.678081][ T36] kauditd_printk_skb: 1247 callbacks suppressed [ 400.678099][ T36] audit: type=1400 audit(2016778153.859:62113): avc: denied { ioctl } for pid=14563 comm="syz.1.4807" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 400.680456][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.685122][ T36] audit: type=1400 audit(2016778153.859:62114): avc: denied { ioctl } for pid=14563 comm="syz.1.4807" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 400.710105][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.722174][ T36] audit: type=1400 audit(2016778153.859:62115): avc: denied { ioctl } for pid=14563 comm="syz.1.4807" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 400.749608][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.754897][ T36] audit: type=1400 audit(2016778153.859:62116): avc: denied { ioctl } for pid=14563 comm="syz.1.4807" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 400.780067][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.789289][ T36] audit: type=1400 audit(2016778153.859:62117): avc: denied { ioctl } for pid=14563 comm="syz.1.4807" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 400.814113][ T9] usb 2-1: Product: syz [ 400.823259][ T36] audit: type=1400 audit(2016778153.896:62118): avc: denied { ioctl } for pid=14563 comm="syz.1.4807" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 400.847258][ T9] usb 2-1: Manufacturer: syz [ 400.851449][ T36] audit: type=1400 audit(2016778153.934:62119): avc: denied { ioctl } for pid=14563 comm="syz.1.4807" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 400.875550][ T9] usb 2-1: SerialNumber: syz [ 400.881770][ T36] audit: type=1400 audit(2016778153.934:62120): avc: denied { ioctl } for pid=14563 comm="syz.1.4807" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 400.934768][ T36] audit: type=1400 audit(2016778153.934:62121): avc: denied { ioctl } for pid=14563 comm="syz.1.4807" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 400.959967][ T36] audit: type=1400 audit(2016778153.934:62122): avc: denied { ioctl } for pid=14563 comm="syz.1.4807" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.084244][T14573] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 401.153798][ T9] usb 2-1: 0:2 : does not exist [ 401.164860][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 401.187614][ T9] usb 2-1: USB disconnect, device number 88 [ 401.306615][ T4230] udevd[4230]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 401.891737][T14579] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 401.900074][T14579] rust_binder: Write failure EINVAL in pid:1333 [ 403.101847][T14600] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 404.306963][ T508] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 404.477459][ T508] usb 2-1: Using ep0 maxpacket: 16 [ 404.485071][ T508] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.495493][ T508] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.507337][ T508] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 404.516450][ T508] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.524634][ T508] usb 2-1: Product: syz [ 404.528811][ T508] usb 2-1: Manufacturer: syz [ 404.533488][ T508] usb 2-1: SerialNumber: syz [ 404.758593][ T508] usb 2-1: 0:2 : does not exist [ 404.770868][ T508] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 404.785189][ T508] usb 2-1: USB disconnect, device number 89 [ 404.833596][ T4230] udevd[4230]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 405.168044][T14614] netlink: 'syz.6.4822': attribute type 4 has an invalid length. [ 405.181631][T14614] netlink: 'syz.6.4822': attribute type 4 has an invalid length. [ 405.194591][T14614] 9pnet_fd: Insufficient options for proto=fd [ 405.202061][T14614] tmpfs: Too few inodes for current use [ 405.681881][ T1840] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 405.844292][ T1840] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 405.854117][ T1840] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 405.867186][ T1840] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 405.876298][ T1840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.884313][ T1840] usb 2-1: Product: syz [ 405.888521][ T1840] usb 2-1: Manufacturer: syz [ 405.893131][ T1840] usb 2-1: SerialNumber: syz [ 405.899699][ T1840] usb 2-1: config 0 descriptor?? [ 405.906305][T14625] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 405.913983][T14625] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 406.137191][ T36] kauditd_printk_skb: 244 callbacks suppressed [ 406.137211][ T36] audit: type=1400 audit(2016778158.981:62367): avc: denied { ioctl } for pid=14623 comm="syz.1.4825" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.138559][T14625] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 406.144139][ T36] audit: type=1400 audit(2016778158.981:62368): avc: denied { ioctl } for pid=14623 comm="syz.1.4825" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.169104][T14625] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 406.177916][ T36] audit: type=1400 audit(2016778158.981:62369): avc: denied { ioctl } for pid=14623 comm="syz.1.4825" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.232961][ T36] audit: type=1400 audit(2016778158.981:62370): avc: denied { ioctl } for pid=14623 comm="syz.1.4825" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.258136][ T36] audit: type=1400 audit(2016778159.019:62371): avc: denied { ioctl } for pid=14623 comm="syz.1.4825" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.283226][ T36] audit: type=1400 audit(2016778159.047:62372): avc: denied { ioctl } for pid=14623 comm="syz.1.4825" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.418249][ T36] audit: type=1400 audit(2016778159.253:62373): avc: denied { ioctl } for pid=14623 comm="syz.1.4825" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.443407][ T36] audit: type=1400 audit(2016778159.253:62374): avc: denied { ioctl } for pid=14623 comm="syz.1.4825" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.556953][ T36] audit: type=1400 audit(2016778159.375:62375): avc: denied { execmem } for pid=14626 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 406.612604][ T36] audit: type=1400 audit(2016778159.432:62376): avc: denied { read write } for pid=9630 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 406.650890][T14637] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 406.663737][ T1840] Error reading MAC address [ 406.702729][ T845] usb 2-1: USB disconnect, device number 90 [ 408.133436][T14651] GUP no longer grows the stack in syz.1.4834 (14651): 200000001000-200000c01000 (200000000000) [ 408.154732][T14651] CPU: 1 UID: 0 PID: 14651 Comm: syz.1.4834 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 408.154770][T14651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 408.154785][T14651] Call Trace: [ 408.154792][T14651] [ 408.154802][T14651] __dump_stack+0x21/0x30 [ 408.154838][T14651] dump_stack_lvl+0x10c/0x190 [ 408.154872][T14651] ? __cfi_dump_stack_lvl+0x10/0x10 [ 408.154902][T14651] ? find_vma+0xcd/0x110 [ 408.154933][T14651] dump_stack+0x19/0x20 [ 408.154961][T14651] __get_user_pages+0x1e34/0x22d0 [ 408.154991][T14651] ? __kasan_check_write+0x18/0x20 [ 408.155027][T14651] ? down_read_killable+0x79/0xf0 [ 408.155051][T14651] ? populate_vma_page_range+0x230/0x230 [ 408.155078][T14651] ? kernel_text_address+0xa9/0xe0 [ 408.155107][T14651] ? unwind_get_return_address+0x51/0x90 [ 408.155135][T14651] __gup_longterm_locked+0xcb1/0x1580 [ 408.155169][T14651] ? stack_depot_save_flags+0x38/0x800 [ 408.155195][T14651] gup_fast_fallback+0x12ae/0x14a0 [ 408.155225][T14651] ? kasan_save_track+0x3e/0x80 [ 408.155248][T14651] ? kasan_save_alloc_info+0x40/0x50 [ 408.155280][T14651] ? __kmalloc_cache_noprof+0x24c/0x490 [ 408.155301][T14651] ? futex_lock_pi+0x77a/0xa10 [ 408.155328][T14651] ? __x64_sys_futex+0xe9/0x110 [ 408.155352][T14651] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 408.155392][T14651] ? get_user_pages_fast_only+0xc0/0xc0 [ 408.155425][T14651] get_user_pages_fast+0x73/0xb0 [ 408.155455][T14651] get_futex_key+0x24d/0x930 [ 408.155477][T14651] ? __cfi_get_futex_key+0x10/0x10 [ 408.155498][T14651] ? futex_lock_pi+0x77a/0xa10 [ 408.155523][T14651] ? futex_setup_timer+0xb4/0xd0 [ 408.155545][T14651] futex_lock_pi+0x1c0/0xa10 [ 408.155569][T14651] ? futex_unqueue+0x136/0x160 [ 408.155592][T14651] ? should_fail+0xf/0x20 [ 408.155613][T14651] ? __cfi_futex_lock_pi+0x10/0x10 [ 408.155640][T14651] ? __cfi_futex_wake_mark+0x10/0x10 [ 408.155670][T14651] ? futex_setup_timer+0xb4/0xd0 [ 408.155693][T14651] ? __cfi_futex_wake_mark+0x10/0x10 [ 408.155732][T14651] ? __kasan_slab_free+0x6a/0x80 [ 408.155757][T14651] do_futex+0x25c/0x500 [ 408.155779][T14651] ? __cfi_do_futex+0x10/0x10 [ 408.155801][T14651] ? getname_flags+0x438/0x710 [ 408.155821][T14651] ? build_open_flags+0x487/0x600 [ 408.155851][T14651] __se_sys_futex+0x28f/0x300 [ 408.155876][T14651] ? __x64_sys_futex+0x110/0x110 [ 408.155902][T14651] ? __kasan_check_write+0x18/0x20 [ 408.155937][T14651] __x64_sys_futex+0xe9/0x110 [ 408.155962][T14651] x64_sys_call+0x227f/0x2ee0 [ 408.155997][T14651] do_syscall_64+0x58/0xf0 [ 408.156025][T14651] ? clear_bhb_loop+0x50/0xa0 [ 408.156050][T14651] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 408.156073][T14651] RIP: 0033:0x7ff4f4f8efc9 [ 408.156092][T14651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.156112][T14651] RSP: 002b:00007ff4f5e20038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 408.156138][T14651] RAX: ffffffffffffffda RBX: 00007ff4f51e5fa0 RCX: 00007ff4f4f8efc9 [ 408.156156][T14651] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000200000000b00 [ 408.156173][T14651] RBP: 00007ff4f5011f91 R08: 0000000000000000 R09: 0000000000000002 [ 408.156189][T14651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.156203][T14651] R13: 00007ff4f51e6038 R14: 00007ff4f51e5fa0 R15: 00007ffdc54f83b8 [ 408.156223][T14651] [ 408.458277][T14663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 408.654986][T14669] tmpfs: Unknown parameter '0x0000000000000007' [ 410.114248][T14680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 410.116598][T14680] rust_binder: Write failure EINVAL in pid:1356 [ 410.154924][T14680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 410.170697][T14680] rust_binder: Write failure EINVAL in pid:1356 [ 411.730868][ T36] kauditd_printk_skb: 216 callbacks suppressed [ 411.730890][ T36] audit: type=1400 audit(2016778164.235:62593): avc: denied { execmem } for pid=14687 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 411.799945][ T36] audit: type=1400 audit(2016778164.282:62594): avc: denied { read } for pid=14689 comm="syz.1.4849" name="binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 411.825831][T14693] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 411.861706][ T36] audit: type=1400 audit(2016778164.282:62595): avc: denied { read open } for pid=14689 comm="syz.1.4849" path="/dev/binderfs/binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 411.924719][ T36] audit: type=1400 audit(2016778164.291:62596): avc: denied { execmem } for pid=14688 comm="syz.4.4850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 411.958174][ T36] audit: type=1400 audit(2016778164.291:62597): avc: denied { execute } for pid=14688 comm="syz.4.4850" path="/dev/rnullb0" dev="tmpfs" ino=1744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 411.982904][ T36] audit: type=1400 audit(2016778164.291:62598): avc: denied { read } for pid=14689 comm="syz.1.4849" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 412.017792][ T36] audit: type=1400 audit(2016778164.291:62599): avc: denied { read open } for pid=14689 comm="syz.1.4849" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 412.042509][ T36] audit: type=1400 audit(2016778164.291:62600): avc: denied { read write } for pid=9630 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 412.068796][ T36] audit: type=1400 audit(2016778164.291:62601): avc: denied { read write open } for pid=9630 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 412.130383][ T45] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 412.137036][ T36] audit: type=1400 audit(2016778164.291:62602): avc: denied { ioctl } for pid=9630 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 412.268939][ T45] usb 2-1: device descriptor read/64, error -71 [ 412.524792][ T45] usb 2-1: device descriptor read/64, error -71 [ 412.780612][ T45] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 412.929827][ T45] usb 2-1: device descriptor read/64, error -71 [ 413.185645][ T45] usb 2-1: device descriptor read/64, error -71 [ 413.303352][ T45] usb usb2-port1: attempt power cycle [ 413.665604][ T45] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 413.711565][ T45] usb 2-1: device descriptor read/8, error -71 [ 413.850604][ T45] usb 2-1: device descriptor read/8, error -71 [ 414.112925][ T45] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 414.136766][ T45] usb 2-1: device descriptor read/8, error -71 [ 414.275211][ T45] usb 2-1: device descriptor read/8, error -71 [ 414.390189][ T45] usb usb2-port1: unable to enumerate USB device [ 415.607260][T14723] rust_binder: Write failure EFAULT in pid:934 [ 416.057123][T14745] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 416.066626][T14745] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 416.075524][T14745] rust_binder: Error in use_page_slow: ESRCH [ 416.081961][T14745] rust_binder: use_range failure ESRCH [ 416.088018][T14745] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 416.093578][T14745] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 416.101704][T14745] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1370 [ 416.120036][T14745] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 416.131053][T14745] rust_binder: validate_parent_fixup: new_min_offset=60, sg_entry.length=0 [ 416.137499][T14745] rust_binder: Error while translating object. [ 416.146172][T14745] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 416.152406][T14745] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1370 [ 417.758155][ T36] kauditd_printk_skb: 355 callbacks suppressed [ 417.758179][ T36] audit: type=1400 audit(2016778169.883:62958): avc: denied { execmem } for pid=14749 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 417.800150][ T36] audit: type=1400 audit(2016778169.911:62959): avc: denied { create } for pid=14751 comm="syz.1.4869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 417.833068][T14753] rust_binder: 945: no such ref 2 [ 417.838641][T14753] rust_binder: Error while translating object. [ 417.838672][T14753] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 417.839737][ T36] audit: type=1400 audit(2016778169.911:62960): avc: denied { create } for pid=14751 comm="syz.1.4869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 417.864757][T14753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:945 [ 417.892615][ T36] audit: type=1400 audit(2016778169.911:62961): avc: denied { write } for pid=14751 comm="syz.1.4869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 417.976239][ T36] audit: type=1400 audit(2016778169.911:62962): avc: denied { read } for pid=14751 comm="syz.1.4869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 418.001530][ T36] audit: type=1400 audit(2016778169.911:62963): avc: denied { read } for pid=14751 comm="syz.1.4869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 418.054269][ T36] audit: type=1400 audit(2016778169.911:62964): avc: denied { write } for pid=14751 comm="syz.1.4869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 418.164864][ T36] audit: type=1400 audit(2016778169.930:62965): avc: denied { read } for pid=14751 comm="syz.1.4869" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 418.210651][ T36] audit: type=1400 audit(2016778169.930:62966): avc: denied { read open } for pid=14751 comm="syz.1.4869" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 418.280006][ T36] audit: type=1400 audit(2016778169.930:62967): avc: denied { ioctl } for pid=14751 comm="syz.1.4869" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 420.093070][T14772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.125631][T14772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.725128][ T1840] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 422.895671][ T1840] usb 2-1: Using ep0 maxpacket: 8 [ 422.904084][ T1840] usb 2-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 422.914952][ T1840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.925971][ T1840] usb 2-1: config 0 descriptor?? [ 423.148169][ T36] kauditd_printk_skb: 228 callbacks suppressed [ 423.148188][ T36] audit: type=1400 audit(2016778174.940:63196): avc: denied { ioctl } for pid=14795 comm="syz.1.4882" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 423.180745][ T36] audit: type=1400 audit(2016778174.940:63197): avc: denied { ioctl } for pid=14795 comm="syz.1.4882" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 423.205876][T14805] audit: audit_backlog=65 > audit_backlog_limit=64 [ 423.205895][T14805] audit: audit_lost=58 audit_rate_limit=0 audit_backlog_limit=64 [ 423.205912][T14805] audit: backlog limit exceeded [ 423.206167][T14805] audit: audit_backlog=65 > audit_backlog_limit=64 [ 423.212892][T14796] audit: audit_backlog=65 > audit_backlog_limit=64 [ 423.223901][T14805] audit: audit_lost=59 audit_rate_limit=0 audit_backlog_limit=64 [ 423.225592][ T36] audit: type=1400 audit(2016778174.940:63198): avc: denied { ioctl } for pid=14795 comm="syz.1.4882" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 423.233260][T14805] audit: backlog limit exceeded [ 423.285117][ T1840] usbhid 2-1:0.0: can't add hid device: -71 [ 423.291160][ T1840] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 423.311947][ T1840] usb 2-1: USB disconnect, device number 95 [ 424.683876][T14813] fuse: Bad value for 'fd' [ 424.742739][T14816] overlayfs: regular lower layers cannot follow data lower layers [ 427.208741][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4897'. [ 427.231696][T14844] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.233594][T14844] rust_binder: Error in use_page_slow: ESRCH [ 427.249995][T14844] rust_binder: use_range failure ESRCH [ 427.260743][T14844] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 427.294839][T14844] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 427.308408][T14844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1409 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=5 req=4793 state=3 status=67 (errno 9: Bad file descriptor) [ 427.389495][T14853] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 427.628284][T10384] batadv_slave_1: left promiscuous mode [ 427.811483][ T128] ip6gretap0: left allmulticast mode [ 427.816896][ T128] ip6gretap0: left promiscuous mode [ 427.822268][ T128] bridge0: port 3(ip6gretap0) entered disabled state [ 427.829376][ T128] bridge_slave_1: left allmulticast mode [ 427.835091][ T128] bridge_slave_1: left promiscuous mode [ 427.840711][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.848443][ T128] bridge_slave_0: left allmulticast mode [ 427.854274][ T128] bridge_slave_0: left promiscuous mode [ 427.859898][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.016166][ T128] veth1_macvtap: left promiscuous mode [ 428.021699][ T128] veth0_vlan: left promiscuous mode [ 428.257735][ T128] ip6gretap0: left allmulticast mode [ 428.263066][ T128] ip6gretap0: left promiscuous mode [ 428.268407][ T128] bridge0: port 3(ip6gretap0) entered disabled state [ 428.275489][ T128] bridge_slave_1: left allmulticast mode [ 428.281174][ T128] bridge_slave_1: left promiscuous mode [ 428.286812][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.294669][ T128] bridge_slave_0: left allmulticast mode [ 428.300369][ T128] bridge_slave_0: left promiscuous mode [ 428.306006][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.398767][ T128] veth1_macvtap: left promiscuous mode [ 428.404397][ T128] veth0_vlan: left promiscuous mode