last executing test programs: 8m43.029996202s ago: executing program 32 (id=35): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) (async) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) (async) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8}) (async) close(0x4) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)=')}%!:\xb9+\x00') (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x121012, r0, 0x0) 8m18.695719657s ago: executing program 33 (id=203): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x94) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x10a2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x42f0a, &(0x7f0000000080)={0x0, 0x8552, 0x100, 0x3, 0x230}, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000080)={0xb0, 0x0, r1, [{{0x3, 0x2, 0x95, 0x100000000, 0x6, 0x5, {0x1, 0xec, 0x5, 0x7f, 0xfffffffffffffc03, 0xb, 0x0, 0x2, 0x5, 0x6000, 0xfffffd2a, r3, 0x0, 0x5, 0x800}}, {0x1, 0x8000000000000000, 0x2, 0x3, '^\\'}}]}, 0xb0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='affs\x00', 0x8000, 0x0) 8m11.976449778s ago: executing program 34 (id=116): syz_usb_connect(0x3, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="120100009880a420d00622065a3f0102030109022400"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x4004) socket$inet6(0xa, 0x2, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) timer_create(0x3, &(0x7f0000000140)={0x0, 0x1, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) timer_settime(r1, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x101000) r3 = userfaultfd(0x80001) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4910) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) r5 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8) read$FUSE(r5, &(0x7f0000000e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000080)='./file0\x00', r7, r8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) openat$ashmem(0xffffffffffffff9c, 0x0, 0xa00, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) 7m5.014653503s ago: executing program 0 (id=1390): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (async) mmap(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x200000e, 0xffffe, r0, 0x1000) 7m5.013664432s ago: executing program 0 (id=1391): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) io_setup(0x7, &(0x7f0000000080)=0x0) (async) clock_gettime(0x0, &(0x7f0000000140)) io_pgetevents(r1, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0x0, 0x25dfdbfe, {{@in6=@empty, @in6=@mcast2, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x87}, {@in=@remote, 0x0, 0x6c}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x4}, {0x0, 0x2000000000000000, 0x3}, {0x0, 0x0, 0xfffffffe}, 0x0, 0x3505, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x810}, 0x0) io_destroy(r1) syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xda, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x742, 0x25, 0x1, {0x22, 0x3db}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x53, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x80, 0x30}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0xfd, 0x4, 0xf9, 0x20, 0x6}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x4, [{0xc3, &(0x7f0000001000)=ANY=[@ANYBLOB="c303a8650f6ff7d55da389f23b3930e86b253f66063fb39db9b6d57cf845efd136a0ab4cb539a6d52cfb1bebed73b3ab813dfcc66bd9e3183e48b2cc03fbcbb99898bdf5ebb20a7bb9aae76730be743a12392c5b752fa40723cfbce4afa4b94d377903cca1006eeac17597c60e051a536ffaa9a3b3b463514f4067cb10d2c5f22a8aeb4ad0a70f03b54acc45651407b03f20740c7e20181132ace2ed5adf3be0179c3b1b8613ecb2da77d5c69949cac6a5d84da568eecb4358327d974dd4a9ef183ec91e181e8f988e3814cbf360262e4332af06bdd8f2d7f933008f8b0f3a40b8032c3d"]}, {0x98, &(0x7f0000000280)=@string={0x98, 0x3, "df70e7ae722b9f8d043827b828bcbb85175c5c9a6871fb5595c471615a5d3a719cb2941c51acbcf9c56c7aa53a8a03646cac94ff74c67efebba332761bcbd3c7a5524e03604b396c2830e58c1a72af14e434a0d5968e1b8eb146d19d5575a88531c968dcfef9ccd3994e5449c8650a8fc3abcd9ef4b92d9ba9ba9f13271be30cfecfc8f5841e61df44bc1586b8315f1e3b027d3bbaa0"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x809}}, {0xe0, &(0x7f0000000380)=@string={0xe0, 0x3, "c89937b47c01c4f0f4b3d69f4d7f8a0283144db5db560da2c6c45611b5e206b6b4edb92c018ac9718092cf61f0fb7321ca59794c23344c8cd7b486da0333a63d3051c2e279bb348b3842dc68d8404de915049c42edb364b0784986456c1720a661c43abccb0c005e63273f5b933cf6905f6dff69d743813c86851e6ae40c4d9fca7009f0ac47b6dec1147a6571e6282202c9af9a70b0cfa17f4ce14ca513f1253cec6ffd03d7d62ad533c8d471d601006307685a5905557e515dd1cb51139ea5e223ad4600a043de1d66e66227ad158dc916025b29442d848d272e46e0ef"}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x2}, @dead_binder_done, @release], 0x548, 0x0, &(0x7f0000000580)="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"}) 7m4.377583162s ago: executing program 0 (id=1395): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x1) socket(0x10, 0x3, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x4, 0x1, 0x401}) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x51c0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_clone3(&(0x7f0000000200)={0x2c4009c00, 0x0, 0x0, 0x0, {0x34}, 0x0, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, {r1}}, 0x58) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (rerun: 64) r4 = dup(r3) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x8, @loopback}, {0xa, 0x4e20, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1, {[0x80000000, 0xffffffff, 0x0, 0xfffffffc]}}, 0x5c) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000009004"]) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) (async) read$FUSE(r4, &(0x7f00000014c0)={0x2020}, 0x2020) (async, rerun: 64) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x121642, 0x0) (rerun: 64) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) write(r6, 0x0, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) 7m4.218311034s ago: executing program 0 (id=1397): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = inotify_init1(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @rand_addr=0x64010100}, 0xb}}, 0x26) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) read(r2, 0x0, 0x0) close(r2) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r1, 0x2034}, {r2, 0x803a}, {r0, 0x2}, {r1, 0x40}, {r1, 0x440}, {r0, 0x61}, {r0, 0x400}], 0x7, &(0x7f0000000140)={r8, r9+10000000}, &(0x7f0000000200)={[0xe]}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x111800, 0x0) ioctl$PTP_PIN_SETFUNC2(r10, 0x40603d10, &(0x7f00000002c0)={'\x00', 0x100, 0x2, 0xa}) pipe2$9p(&(0x7f0000000000), 0x4000) 7m3.926376919s ago: executing program 0 (id=1406): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1, &(0x7f0000000280)=[{0x0, 0xfffffffffffffd8f}, {&(0x7f0000000080)=""/200}, {&(0x7f0000000400)=""/147}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 7m3.816151651s ago: executing program 0 (id=1411): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000080)=0xff, 0x4) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) (async) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) 7m3.791728411s ago: executing program 35 (id=1411): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000080)=0xff, 0x4) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) (async) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) 5m45.24652467s ago: executing program 7 (id=2495): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa, 0x11}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mount$cgroup(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@name={'name', 0x3d, 'noprefix'}}, {@name={'name', 0x3d, 'cgroup\x00'}}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000140)={0xc0, 0x0, 0x10000}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x653, 0xc, 0x4b5b, 0x6, 0x8, 0x9, 0x7}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x1, &(0x7f0000003c80)={0x0, 0x989680}) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x7da) 5m45.2369554s ago: executing program 7 (id=2496): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x800, 0xb) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) creat(0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x2) r2 = socket$inet_icmp(0x2, 0x2, 0x1) write(r2, &(0x7f0000002a00)="26c7eaa8be2b008b7a", 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x81) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) close_range(r3, 0xffffffffffffffff, 0x0) 5m45.099351742s ago: executing program 7 (id=2497): madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/159, 0x9f}], 0x1, 0x7fff, 0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r1, 0x4010}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) ftruncate(r1, 0x7a19cdc8) 5m45.023265323s ago: executing program 7 (id=2498): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$invalidate(0x15, r2) request_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, r2) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) creat(&(0x7f00000001c0)='./file0\x00', 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setgroups(0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r5, 0x0, 0x1a, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x3b, 0x0, &(0x7f0000000040)) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) r7 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) process_vm_readv(r7, &(0x7f0000000140)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/122, 0x7a}], 0x1, 0x0) capset(&(0x7f0000000080)={0x20080522, r7}, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x0, 0x5, 0x2c2}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 5m44.949564144s ago: executing program 7 (id=2499): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_wait(r3, &(0x7f0000004140)=[{}], 0x1, 0x4000005) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000180)={0x0, 'veth1_virt_wifi\x00', {0x2}, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) io_setup(0xb, &(0x7f0000000080)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffda4, 0x3, 0x0, 0x2}]) getresgid(&(0x7f0000001340)=0x0, &(0x7f0000001380), &(0x7f00000013c0)) sendmmsg$unix(r2, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000440)="b0561d475b47687ef6bf8e78b67d4e4f186c43365e4b3e1fa6dacd0f6c8a4efc3bd53641b55c711935bfe2cc26ec40c1e36617cf8db78f64395aecfae3ea12ce7733d606bfa148cd6e0c6ee9ddf340078c4f8824df0196c1668df3a90630aee0f75ce9d7fb02b79285d543b34bc0fcb2d38fbb269f73c0c95c", 0x79}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f0000000580)="913450455158768365f34b8c50431d6c0aa7b4a387ba789f3ac718ad7c855c31d14544700a2982224d5ee608d88129b382641af0dd2392ea81b9e835f5f1e95ca15b37725d29d6102093466d4d1ca2504d8ee16f81583e82abcf82fbd33c8e4624be153abafede2d2255783985b19fa86a427c613632c829e004e9dceab510aac01970217663cd02939211e61a7f6c640bf9296ed9b5912e7e12be45573b531a4f15b1eaaec18cf5cdee673f40ba3cbbc3073b7adec2b2d19b16af33f8210a6c8c7fe8377e478a7859cc05c1f427de0a914dc669a0681af4845fe975ce1579d1b18f84d8c4fdbeddc53b2f27651f9bf93399", 0xf2}, {&(0x7f00000004c0)="89587c01d0d4850b9c6126b1579add40dbf3f411ee67f4b70bb0ffa01b2c82624afddfb81238a2c8eae55dfc8c672318933a4b002dcecc4d9ca331095e2e78fe29b3e7d60e400d626f17f20d92d40086fb9a152ec7c7969e32bc169fcb04d9d29eacccda5002fc046ebbb2909b5b6a37695d", 0x72}, {&(0x7f0000000680)="824ed6a0c6d2ef6fe32783ceddd65b7f0721ae5b20684c86bae242e617d35992912d94f82a9f922ae7da2757db35fa692df0dac12f6ee874962eb97d050780c367638fb752568bd884f9d863475883357e60fd074c1169b8438ed15864e97041582a0c5a1d6a12825ecf931c7e6ee0f89ea6dc750224443761dacb1fdfb4408aac98259a9a", 0x85}, {&(0x7f0000000740)="e9576628024434e485e1ff4451f9cc4a5e1dfb91a2e34d0734d4abc42ea6a6ae7a89262347b0588357dc56a78d6b567fd4d68024bd0ed04b4e2882d0af75daf3610701f2baf963c0bbd8db51199009827ffb17b5f00d681f746538f15fe9d8cd760540a043eca6e072d84687254e4bef105632", 0x73}, {&(0x7f00000003c0)="bf25dc533f21dbc659453fe225b00997b6ea", 0x12}], 0x7, &(0x7f0000000c40)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [r4, r1, r3, r6, r1, r3, r6, r1, r5, r6]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, r0, r0, r6, 0xffffffffffffffff, r2, r1]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108, 0x4048014}}, {{&(0x7f0000000d80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000e00)="8ffc070eb4c460de3e74031bf3bad579e3a896aafaa57c5d276a19545ddf4dd7285f00dce68f4d5d09d51b03a50d7685ebfc715e6a7d4555cbd18f0c7f48fd0b7072bedcfa78d202388075d7fa6f193f9ffe1fccf2c8f8fe41d6b55874e2dfef6814ccbeac23c9ebff19b631f192c765038e11dbaa708c5187213260cb839bce700f623f7d2c1629b8f8396b2f4137c8d9081f79a8e07f9119748e5cc1e7faa693980860ba0fd92a98abe6298490b4e1acdd14d2e29e4e0a384be18fe876685b08004698", 0xc4}, {&(0x7f0000000f00)="ef88403658a2771802a0cc43b580f538eaae3f44c5d724cf4910abdf12556d14f3e603bae818a6fae60d35dafeb5d3", 0x2f}, {&(0x7f0000000f40)="8b12be19348e71d0cfc7c18baa4f285bec432a8800ed14b01c13c4d9038494ab26cf0b57078f53889fbe3a45543b5d24cca353f3e0a0", 0x36}, {&(0x7f0000000f80)="525b41602c02ffb9a1a79eb7c71f8de98a115691df7a04c976d61f404502381b33077489024a6e1016901a65f1f3cf09a407f33d3ae2d3d4929f98c97c2b0c1f069b25da3f577f3d52a28c4edbbba8725b3688883b95925a2cb2f296f17f509e2bac6ab49e183c76752f2c53a8bf08c54f26513ce1fce6e487e7950ef9cbe499ac5f33b977f7d925dedef5ecaf8db1c1ac43a0303e8c6a7baef3026b0c277735416fe3", 0xa3}, {&(0x7f0000001040)}, {&(0x7f00000010c0)="345bd9c1aeb4557f147558325b196aea822b22711defdccd9d775e8b6d61cd", 0x1f}], 0x6, &(0x7f0000001480)=[@rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r6, r4, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x48, 0x10}}], 0x2, 0x20004944) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r9, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001080)="76b334d9d128ebcc", 0x8}], 0x1}, 0x40001) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x4008004) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r10) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r11, 0x829, 0x4070bd2d, 0x25dfdbfe, {0x1e}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101542, 0x0) fcntl$setlease(r12, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x7985050f417d3788}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r13, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) 5m44.882294275s ago: executing program 7 (id=2500): mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x218000, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0xd, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x800) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x52, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000001c0)=""/33) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f00000002c0)=0x3000) 5m44.838058725s ago: executing program 36 (id=2500): mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x218000, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0xd, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x800) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x52, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000001c0)=""/33) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f00000002c0)=0x3000) 3m10.263960946s ago: executing program 6 (id=4445): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1c02, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "8072df658da1c81af5d3f97465184ff8"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x80000002}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2040, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x4}) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000180)=""/184) close_range(r0, 0xffffffffffffffff, 0x0) 3m10.202580637s ago: executing program 6 (id=4446): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) unshare(0x24060400) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)=')}%!:\xb9+\x00') madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x8044, &(0x7f00000003c0)={0x11, 0x8864, r3, 0x1, 0x7, 0x6, @local}, 0x14) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) capset(&(0x7f0000000040)={0x39900612, r5}, &(0x7f0000000080)={0x70800, 0xf, 0xffff, 0x1, 0x5, 0x7}) 3m10.200161417s ago: executing program 6 (id=4447): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x60000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x40000) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x5, "f315aeeed74891208b0a11d0e4e2fa67a410c4dbdbf115f4b1193e62587da81c055f680ecb10aafdea2be0249c4499c5060986fd21398b688f02e27b74323769", "4e95e62016b34dff6e07b0bc1c7252b6ed45e97e72c087169c3f60e58229943b04b35ba063bdccecce9bf9c2af7630ccc306d2c423be9f1fb3a874c1f3f8d7b8", "6bd71209ddd8e9e0a489356bcc5b238e9990e7f38dd67023b3c52b99b1335444", [0x2, 0x6]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x11f0, r1, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1164, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1004, 0x3, "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"}, @NL80211_BAND_5GHZ={0x9a, 0x1, "6a908ea42108f05e84ca1f713576d5998059518f4250dbf4f161e8eb0818437726106199a6e29a87be72d582c67a962da9924c8a8c43f541cc273062369f3b8f8691134e3d6c40f070ad8992f1380a1f0ed0c7db33ab5273410bdcfa44c79541421ca9306972e4d3c7c8792151035502c9066f54fe92cbb5c35a3f6f6b08564ba0db141be7791410e2e6f313a5f011cf1d33cf713074"}, @NL80211_BAND_6GHZ={0x2e, 0x3, "edef9e61d1d15c8781863fdad353fcbd67a27925dc445032e6f9336a2a176b7a58542db9153ab5f9501f"}, @NL80211_BAND_60GHZ={0x8e, 0x2, "e619c5b56296642a50aea7aeb8bde530b93084864634e9e855516e34ee4c6747c037bc6cf52d9d94e8e74c0f74b5822c9ed6b2be384d1b6a80b1c3eb9e4731ebe5591f291ad8805385bf2c25182d51f6b60537e057983a37d322932be6b6a26ce40920ee4d537a93902a68f0ca58e390c1a186521645c6e75bb94e6c4a1649b87580e2b559120658edc4"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xe5ad}, @NL80211_ATTR_IE={0x41, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x40}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x7c}}, @mic={0x8c, 0x10, {0x9b1, "a8af95058f3a", @short="380852a28c22b7bd"}}, @supported_rates={0x1, 0x7, [{0x2}, {0x4}, {0xb, 0x1}, {0x18}, {0x30, 0x1}, {0x2, 0x1}, {0xb, 0x1}]}, @gcr_ga={0xbd, 0x6}]}]}, 0x11f0}, 0x1, 0x0, 0x0, 0x841}, 0x8000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, 0x0) timerfd_create(0x8, 0x80000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, 0xfffffffffffffffc, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 3m10.194011957s ago: executing program 6 (id=4448): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4, 0x0, &(0x7f0000000000)=[@exit_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 3m10.158946987s ago: executing program 6 (id=4449): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='/dev/audio#\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="dd", 0x1}], 0x1}}], 0x1, 0x24004c41) close_range(r0, r1, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 3m10.066526658s ago: executing program 6 (id=4450): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000022c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000022c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}], [], 0x6b}}) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8400, 0x0) 2m54.979463195s ago: executing program 37 (id=4450): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000022c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000022c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}], [], 0x6b}}) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8400, 0x0) 2m49.749378513s ago: executing program 8 (id=4729): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x10}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) (async) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x400ac0, 0x0) faccessat(r3, &(0x7f00000004c0)='./file0\x00', 0x180) (async) lseek(r2, 0x401, 0x2) (async) write$selinux_validatetrans(r2, &(0x7f00000005c0)={'system_u:object_r:system_dbusd_var_run_t:s0', 0x20, 'system_u:object_r:public_content_t:s0', 0x20, 0x81, 0x20, '/usr/sbin/ntpd\x00'}, 0x76) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x3fff}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x2c}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020) (async) io_setup(0x6, &(0x7f0000000180)) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x6c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x100}, @fda={0x66646185, 0x6, 0x0, 0xa}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @increfs={0x40046304, 0x2}, @enter_looper, @increfs, @enter_looper, @exit_looper, @enter_looper], 0x3e, 0x0, &(0x7f0000000040)="d2a900ace927fe55a767d0b1d601cf5feed3972eac2bc8b4981d3fba076a52dffe8029e17d97839edb293a2fed76e0bdb8201d8587a1424eae51c7536481"}) (async) setresuid(0x0, 0xee00, 0x0) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) (async) close(r1) 2m47.666250225s ago: executing program 8 (id=4761): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x6, 0xfffffffe, 0x0, 0xffffffff}) setrlimit(0x8, 0x0) (async) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c844, 0x0, 0x0) (async) setuid(0xee01) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000080)) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) socket$inet6(0xa, 0x400000000001, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x112}) (async) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) (async) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000000)=0x1) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) (async) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0xffffffffffffffda, 0x1003, {0x7733, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x6, 0xffffffff, 0x7, 0x21, 0x8000, 0xff, r4, r5, 0x3, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110}}], 0x18, 0x4c00}, 0x10) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m47.665795605s ago: executing program 8 (id=4762): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a"], 0x20}, 0xc804) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)={0x2e, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xb9}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x6}, {0x6}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)={0x2, 0x18, 0x72, 0xc, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x4004002) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2m46.856808877s ago: executing program 8 (id=4764): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000373000/0x3000)=nil, 0x3000}}) sendmmsg$inet(r0, &(0x7f00000013c0)=[{{&(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000002dc0)='D', 0x1}], 0x1}}], 0x2, 0x40080c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req3={0x7, 0x5c, 0x6, 0x929, 0xae9, 0x6}, 0x1c) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x40106726, &(0x7f00000000c0)) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m46.794399638s ago: executing program 8 (id=4765): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@loopback, @empty}, 0x8) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x2e, 0x1, 0x6, 0x0, 0x3, 0xbf, 0x7, 0x2, 0xf9, 0x7, 0x0, 0x1, 0x0, 0x8, 0xffffff82, 0x3, 0x6, 0x7, 0x2e, '\x00', 0x9, 0x100000000}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000100)={0x4800000000000000, 0x8000000, 0x5, 0x9, 0x1c}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) flock(r7, 0x2) close(r7) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_socket_connect_nvme_tcp() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r9}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x33}, @fd={0x66642a85, 0x0, r10}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 2m46.713174379s ago: executing program 8 (id=4766): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x4, 0x2110, r0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x4, 0x0, [{0x2, 0x3, 0x1, 0x0, @irqchip={0x0, 0xef0}}, {0x1, 0x1, 0x0, 0x0, @irqchip={0x4, 0xb24}}, {0x401, 0x4, 0x1, 0x0, @sint={0x8, 0x8c}}, {0xff, 0x1, 0x1, 0x0, @irqchip={0x5, 0x2}}]}) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x6000, 0x100, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x102002, &(0x7f0000000300)={[{@default_permissions}, {@redirect_dir_on}, {@uuid_off}, {@volatile}, {@metacopy_on}, {@uuid_null}], [{@obj_type={'obj_type', 0x3d, '/dev/vsock\x00'}}, {@fowner_lt={'fowner<', r2}}, {@appraise}, {@dont_appraise}, {@audit}, {@smackfsroot={'smackfsroot', 0x3d, '&}/\x18'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000400)=0x9, 0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000e, 0x80010, r3, 0x91dc7000) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x1, 0x0, @ioapic={0xffff0000, 0x5, 0x4, 0x3, 0x0, [{0x4, 0x7, 0xf7, '\x00', 0x9}, {0x1, 0x6, 0x6, '\x00', 0x8}, {0x0, 0x3, 0x1, '\x00', 0x4}, {0x9f, 0x3f, 0x80, '\x00', 0xf}, {0x4, 0x57, 0x18, '\x00', 0xda}, {0x9, 0xb, 0x0, '\x00', 0x9}, {0xf, 0x6, 0x92, '\x00', 0x5}, {0x0, 0xf8, 0x8, '\x00', 0x7}, {0x0, 0xb4, 0x0, '\x00', 0x4}, {0x0, 0x2, 0xb2, '\x00', 0x80}, {0x8, 0x40, 0xfb, '\x00', 0x86}, {0x6, 0x2, 0x80, '\x00', 0x8a}, {0xd, 0x9, 0x0, '\x00', 0x5}, {0x37, 0x80, 0x64, '\x00', 0x5}, {0x9, 0xc, 0x2}, {0x1, 0x9, 0x5, '\x00', 0x7}, {0x7, 0x9, 0x2, '\x00', 0xc}, {0x9, 0x13, 0x5, '\x00', 0x9f}, {0x41, 0x4, 0xc, '\x00', 0x8}, {0x1, 0x0, 0x1, '\x00', 0x2}, {0x1, 0xf, 0x0, '\x00', 0x9}, {0x40, 0xf, 0x9, '\x00', 0x80}, {0x9, 0x4, 0x7, '\x00', 0x8}, {0x6, 0x3, 0x3, '\x00', 0x5}]}}) sendmsg$key(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000700)={0x2, 0x1, 0x1, 0x5, 0x38, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_key={0x15, 0x9, 0x4f0, 0x0, "cf8b5626f168e64e2b06bcaf439446955461e693083185a90252ffd403fe31ec88dddcb2d3ed7b965f0050a66982a9e6c195f28ee55614a5d8a248013c7ac3983ebe181bb92a4001f6c0c826e05d7a9fd816bd388471e0b9ac26aca67c6e589a5ce93a0c6d94902ae66208bdaec424093b373548e7f151436e0c4f1c4c295db46c5e89e17b302177a00ba82bf56d848fe18daf0c78ae9ac63e80f45f1b5d"}, @sadb_key={0x11, 0x8, 0x3f0, 0x0, "c902b4a6a8f54200bb6ea1f0ed7dcac85c91e4aea96baedfbfe2fff65ffee3fa37cd170f25471a4403f9a465ae9da3ae925283ba358e5008403e3f8565468ed4f9240040d7fde58c27a2869be1c913dbc368b023ee802b1c81480074a99cf7dfaf3de6a8197d2b645bacd4de6bf4a389007619cc920f48272adab1ad83e3"}, @sadb_lifetime={0x4, 0x3, 0xf13, 0x7, 0x600000000000, 0xffff}, @sadb_lifetime={0x4, 0x4, 0x5, 0x4, 0x8, 0x10000}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x7, @loopback, 0x2}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x1c0}}, 0x40) writev(r1, &(0x7f00000010c0)=[{&(0x7f0000000940)="dc5bc69c2c04623d7e726121cdfc25aeb4407adad450991f657373aade097d29898f3d6e77882d8ec494934c0d3bf7fecd8da218a2f42af9d616e20f2385c001525e8760c7ae5e6512bc0e2af8856dfffb165c74ac2c811db75c4dfa85d12b0fefba8623a517b6b36ba75457bf406d604bbd50597a81af5139c80f547b477243813e0d5b0939983d6de5ac2ed5fe9c", 0x8f}, {&(0x7f0000000a00)="f74e31e042e4b1a0526007259ddc1cd77a0904f9d6ca4cd57c14a3d969d65a5e3764eac9708db6d9b20a14e3dca6e90b78521bc75ed2082f204b579769c151bdf690cc33a4dd138295a136b3b75ea42d06d419985a9568f66ed897c056fe8263690e6647a2b0c780016a6d3572f2ca6243ea96ca4573e9ce83", 0x79}, {&(0x7f0000000a80)="7a8650a482a6faa7a43b533cabe593adb6d2d560e6f7492ceaf5089f80e13f6e34638c924dec329b9269c5f9dd7b3d5e7f660b1daaee", 0x36}, {&(0x7f0000000ac0)="97585ff75e3f44fc600cfa8a7ccd4b3d40f3c2c887d9934cac7ff07678d2df0f6feabecfccc38885d1b7e4fd86df14b9a6a0e9711db451251b09b66b30195c80a6b138ab0a8c485e8169c958525f03ddfeeb0b885bc02782569ed5c9008e6f20c84af72e27592c25ddb31abd0731a78072ab15e858d80b898dc5da8954e632cae53652d092b951c984c06737dcadc79c3d3efdd2a94bceb0355461061dbaa7e45260f76bf02cb5e5", 0xa8}, {&(0x7f0000000b80)="2c615d88a2b088c12817ef6b040345353103bde9c2caabfbc246c1836adfb65ff81aaa99471e6c43be35d7b7817bcc9ddc6eb58359403ded40d9f3efffe303a67b4d6556b704b20d49c4a0ddf147263175eba721cd1fdc4a10fe48588599a8b839b19b772b5eff5b56edd7cfd4d8bcd297b6803089bcb354e39583ff4100ecfacb4ac86bff74e25e69aed540b10f61f553740f0ca27d3b34357e58ac4ff2a9abcf0d24435657bc9447ce8f4c4ab1e0f0292001be69f0bafa3680e02e277d6dfb4a752c0f8dd72497f2b4f8843b1598393d621ee75aec19ff6da898456cd54a163304d5968403ad45", 0xe8}, {&(0x7f0000000c80)="2b954ac3cec3411546050a22eb2ba7a7e837f8ae4cb037fdfd8b95f3b3577315c99101113af1315b3452ee8504d5cbf158425e617c9a1ccd2e7678a45d05d7299d2a54eb2eb114e2096c504d8d8e15cd4079d339c22da9a15a616dc3d38e768daa4da411097b95e6c0ec20fa20e6e084f7db74ab9040dc3249d1959fdeb47d33bb4a50fceca3d07be1eb152d831777235255247d3e79915d256bddf85e3a764339d11761d3f11477b3610714623fa81d09a43ea1aee18610a176687718af72ddd8125a10549a120dcddaaeb6b3f286138cad56ab6a6cf66c3efe", 0xda}, {&(0x7f0000000d80)="8110142cdaa76de4731c553c7f7896f363b63c7e56f3f996c01c77d88efad58a1c21fabe61758bb5474c61563c363b5950339438adff131b212244f344f015ab46ecce2a3fd6cd784c3fa71dc5d58d22dab19f3aa7451bce4123d8dba6fd036e5cadd77be60739ebd1804f9714accb74f0bf29f222ebbb220b5fdb7e47aa4e1f36dae4", 0x83}, {&(0x7f0000000e40)="343fdfe85086adc1642fc3bb2c72e50e8c3d6bd91d887175e12238d54b88fa20a9dd93fec5f5147c91622476019d9b01aff5074d6ac3ff5858ebb8ee2fa4ce22c25aac2f15b765a8ca38382d65421dd4bddd21576b2eb813155d27e0850e51cb70169989a7dec052b28716f8ca6271bb134906358a392bda090da1c956e76569284221ed26f5fbb2b19619050f552dc7a1382e3b8854b162d6ffa239f7ee8db7e84d0bcf291a56c92e0b0975cd4ab10b205bc36c90b7adf8ca8227e07fdee98eef3c3b22e0ade4ffeb4c2c261a", 0xcd}, {&(0x7f0000000f40)="d118ee794f35f5e96d80d6d236da4f407f5931600a32c8bffc7117f5f34350301e6defa716d49ac2f172bfcaebbf3de5ba7e6320a5e188699579c7dec21c76251ae577dde5dc1ba175bba2d984be74f7497e6ec60d6f77f67ab7ee292d8de75c9d43f9602c3b6db8da973a4d132cf1862f6109e957d6144de5e701852fa97707e5ef044e8a7624297c59afc5d7b3e62ede39720718584fb234fb3eacd76182fc5bb0f3ccd27874603166054a", 0xac}, {&(0x7f0000001000)="6da8b61a8116754e595d2185c51bab0be3a7a1d37f1291d2f311eb0d5c3ee06c8e9a934da5efe95cc5c516a8bf439c2d2e66cad31b709f82cde2de7de64de0a5c15fba6dd1396b6664acbc093a6c2d3495f95b33a761df0a97826c5c4053f59d1590453443b5cead8bddd13613508ccd49d63f76a939982d9d4a199211b355b8dce665ba50fd520ad51b42a5540398be5001dba0a714ead29e15dc65960801f3449d66241ffaaab2a9c34f6d41132c0390c68b", 0xb3}], 0xa) link(&(0x7f0000001180)='./file0/file0\x00', &(0x7f00000011c0)='./file0\x00') mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x37) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000001200)={[0xa496, 0x36b, 0x4ac9, 0x6, 0x9, 0x7, 0x8, 0x1c00000000, 0x8, 0x7, 0x5, 0x2, 0x8000000000000000, 0x4, 0x7fff, 0x8], 0x8080000, 0xe04}) writev(r0, &(0x7f00000013c0)=[{&(0x7f00000012c0)="64456f724e865f21d296", 0xa}, {&(0x7f0000001300)="49599d5c91bb2e9c726c9680bc3f4ebf81bd976731848a7f0b2e", 0x1a}, {&(0x7f0000001340)="b696e10fa0c38f625ca9538e605b6460d937a9d14a08ab4bd45843222533ec27ad8d3dfe8155f9e9bdeb4102808cb0aec45c8bdf7354ef9420299a21a31c636c82e9f7eb", 0x44}], 0x3) bind$bt_hci(r1, &(0x7f0000001400)={0x1f, 0x1, 0x7}, 0x6) io_setup(0xfffffff9, &(0x7f0000001440)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001480), 0x10800, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001500)={0x0, 0x50, 0x4, 0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001900)={{r4}, r5, 0x10, @unused=[0x64a07003, 0x5, 0x790, 0x38000000000000], @devid=r6}) pipe2(&(0x7f0000002900)={0xffffffffffffffff}, 0x80) recvmmsg(r3, &(0x7f0000004080)=[{{&(0x7f0000002940)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002c00)=[{&(0x7f00000029c0)=""/98, 0x62}, {&(0x7f0000002a40)=""/82, 0x52}, {&(0x7f0000002ac0)=""/32, 0x20}, {&(0x7f0000002b00)=""/228, 0xe4}], 0x4, &(0x7f0000002c40)=""/144, 0x90}, 0x3}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000002d00)=""/10, 0xa}, {&(0x7f0000002d40)=""/149, 0x95}, {&(0x7f0000002e00)=""/123, 0x7b}, {&(0x7f0000002e80)=""/96, 0x60}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)}, {&(0x7f0000003f40)=""/161, 0xa1}], 0x7}, 0x800}], 0x2, 0x20, &(0x7f0000004100)) openat$cgroup_ro(r7, &(0x7f0000004140)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$BLKROSET(r7, 0x125d, &(0x7f0000004180)=0xf1e) r8 = openat$cgroup(r7, &(0x7f00000041c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000004200)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000004280)={@dev={0xfe, 0x80, '\x00', 0x27}, 0x17}) 2m46.67867994s ago: executing program 38 (id=4766): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x4, 0x2110, r0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x4, 0x0, [{0x2, 0x3, 0x1, 0x0, @irqchip={0x0, 0xef0}}, {0x1, 0x1, 0x0, 0x0, @irqchip={0x4, 0xb24}}, {0x401, 0x4, 0x1, 0x0, @sint={0x8, 0x8c}}, {0xff, 0x1, 0x1, 0x0, @irqchip={0x5, 0x2}}]}) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x6000, 0x100, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x102002, &(0x7f0000000300)={[{@default_permissions}, {@redirect_dir_on}, {@uuid_off}, {@volatile}, {@metacopy_on}, {@uuid_null}], [{@obj_type={'obj_type', 0x3d, '/dev/vsock\x00'}}, {@fowner_lt={'fowner<', r2}}, {@appraise}, {@dont_appraise}, {@audit}, {@smackfsroot={'smackfsroot', 0x3d, '&}/\x18'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000400)=0x9, 0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000e, 0x80010, r3, 0x91dc7000) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x1, 0x0, @ioapic={0xffff0000, 0x5, 0x4, 0x3, 0x0, [{0x4, 0x7, 0xf7, '\x00', 0x9}, {0x1, 0x6, 0x6, '\x00', 0x8}, {0x0, 0x3, 0x1, '\x00', 0x4}, {0x9f, 0x3f, 0x80, '\x00', 0xf}, {0x4, 0x57, 0x18, '\x00', 0xda}, {0x9, 0xb, 0x0, '\x00', 0x9}, {0xf, 0x6, 0x92, '\x00', 0x5}, {0x0, 0xf8, 0x8, '\x00', 0x7}, {0x0, 0xb4, 0x0, '\x00', 0x4}, {0x0, 0x2, 0xb2, '\x00', 0x80}, {0x8, 0x40, 0xfb, '\x00', 0x86}, {0x6, 0x2, 0x80, '\x00', 0x8a}, {0xd, 0x9, 0x0, '\x00', 0x5}, {0x37, 0x80, 0x64, '\x00', 0x5}, {0x9, 0xc, 0x2}, {0x1, 0x9, 0x5, '\x00', 0x7}, {0x7, 0x9, 0x2, '\x00', 0xc}, {0x9, 0x13, 0x5, '\x00', 0x9f}, {0x41, 0x4, 0xc, '\x00', 0x8}, {0x1, 0x0, 0x1, '\x00', 0x2}, {0x1, 0xf, 0x0, '\x00', 0x9}, {0x40, 0xf, 0x9, '\x00', 0x80}, {0x9, 0x4, 0x7, '\x00', 0x8}, {0x6, 0x3, 0x3, '\x00', 0x5}]}}) sendmsg$key(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000700)={0x2, 0x1, 0x1, 0x5, 0x38, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_key={0x15, 0x9, 0x4f0, 0x0, "cf8b5626f168e64e2b06bcaf439446955461e693083185a90252ffd403fe31ec88dddcb2d3ed7b965f0050a66982a9e6c195f28ee55614a5d8a248013c7ac3983ebe181bb92a4001f6c0c826e05d7a9fd816bd388471e0b9ac26aca67c6e589a5ce93a0c6d94902ae66208bdaec424093b373548e7f151436e0c4f1c4c295db46c5e89e17b302177a00ba82bf56d848fe18daf0c78ae9ac63e80f45f1b5d"}, @sadb_key={0x11, 0x8, 0x3f0, 0x0, "c902b4a6a8f54200bb6ea1f0ed7dcac85c91e4aea96baedfbfe2fff65ffee3fa37cd170f25471a4403f9a465ae9da3ae925283ba358e5008403e3f8565468ed4f9240040d7fde58c27a2869be1c913dbc368b023ee802b1c81480074a99cf7dfaf3de6a8197d2b645bacd4de6bf4a389007619cc920f48272adab1ad83e3"}, @sadb_lifetime={0x4, 0x3, 0xf13, 0x7, 0x600000000000, 0xffff}, @sadb_lifetime={0x4, 0x4, 0x5, 0x4, 0x8, 0x10000}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x7, @loopback, 0x2}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x1c0}}, 0x40) writev(r1, &(0x7f00000010c0)=[{&(0x7f0000000940)="dc5bc69c2c04623d7e726121cdfc25aeb4407adad450991f657373aade097d29898f3d6e77882d8ec494934c0d3bf7fecd8da218a2f42af9d616e20f2385c001525e8760c7ae5e6512bc0e2af8856dfffb165c74ac2c811db75c4dfa85d12b0fefba8623a517b6b36ba75457bf406d604bbd50597a81af5139c80f547b477243813e0d5b0939983d6de5ac2ed5fe9c", 0x8f}, {&(0x7f0000000a00)="f74e31e042e4b1a0526007259ddc1cd77a0904f9d6ca4cd57c14a3d969d65a5e3764eac9708db6d9b20a14e3dca6e90b78521bc75ed2082f204b579769c151bdf690cc33a4dd138295a136b3b75ea42d06d419985a9568f66ed897c056fe8263690e6647a2b0c780016a6d3572f2ca6243ea96ca4573e9ce83", 0x79}, {&(0x7f0000000a80)="7a8650a482a6faa7a43b533cabe593adb6d2d560e6f7492ceaf5089f80e13f6e34638c924dec329b9269c5f9dd7b3d5e7f660b1daaee", 0x36}, {&(0x7f0000000ac0)="97585ff75e3f44fc600cfa8a7ccd4b3d40f3c2c887d9934cac7ff07678d2df0f6feabecfccc38885d1b7e4fd86df14b9a6a0e9711db451251b09b66b30195c80a6b138ab0a8c485e8169c958525f03ddfeeb0b885bc02782569ed5c9008e6f20c84af72e27592c25ddb31abd0731a78072ab15e858d80b898dc5da8954e632cae53652d092b951c984c06737dcadc79c3d3efdd2a94bceb0355461061dbaa7e45260f76bf02cb5e5", 0xa8}, {&(0x7f0000000b80)="2c615d88a2b088c12817ef6b040345353103bde9c2caabfbc246c1836adfb65ff81aaa99471e6c43be35d7b7817bcc9ddc6eb58359403ded40d9f3efffe303a67b4d6556b704b20d49c4a0ddf147263175eba721cd1fdc4a10fe48588599a8b839b19b772b5eff5b56edd7cfd4d8bcd297b6803089bcb354e39583ff4100ecfacb4ac86bff74e25e69aed540b10f61f553740f0ca27d3b34357e58ac4ff2a9abcf0d24435657bc9447ce8f4c4ab1e0f0292001be69f0bafa3680e02e277d6dfb4a752c0f8dd72497f2b4f8843b1598393d621ee75aec19ff6da898456cd54a163304d5968403ad45", 0xe8}, {&(0x7f0000000c80)="2b954ac3cec3411546050a22eb2ba7a7e837f8ae4cb037fdfd8b95f3b3577315c99101113af1315b3452ee8504d5cbf158425e617c9a1ccd2e7678a45d05d7299d2a54eb2eb114e2096c504d8d8e15cd4079d339c22da9a15a616dc3d38e768daa4da411097b95e6c0ec20fa20e6e084f7db74ab9040dc3249d1959fdeb47d33bb4a50fceca3d07be1eb152d831777235255247d3e79915d256bddf85e3a764339d11761d3f11477b3610714623fa81d09a43ea1aee18610a176687718af72ddd8125a10549a120dcddaaeb6b3f286138cad56ab6a6cf66c3efe", 0xda}, {&(0x7f0000000d80)="8110142cdaa76de4731c553c7f7896f363b63c7e56f3f996c01c77d88efad58a1c21fabe61758bb5474c61563c363b5950339438adff131b212244f344f015ab46ecce2a3fd6cd784c3fa71dc5d58d22dab19f3aa7451bce4123d8dba6fd036e5cadd77be60739ebd1804f9714accb74f0bf29f222ebbb220b5fdb7e47aa4e1f36dae4", 0x83}, {&(0x7f0000000e40)="343fdfe85086adc1642fc3bb2c72e50e8c3d6bd91d887175e12238d54b88fa20a9dd93fec5f5147c91622476019d9b01aff5074d6ac3ff5858ebb8ee2fa4ce22c25aac2f15b765a8ca38382d65421dd4bddd21576b2eb813155d27e0850e51cb70169989a7dec052b28716f8ca6271bb134906358a392bda090da1c956e76569284221ed26f5fbb2b19619050f552dc7a1382e3b8854b162d6ffa239f7ee8db7e84d0bcf291a56c92e0b0975cd4ab10b205bc36c90b7adf8ca8227e07fdee98eef3c3b22e0ade4ffeb4c2c261a", 0xcd}, {&(0x7f0000000f40)="d118ee794f35f5e96d80d6d236da4f407f5931600a32c8bffc7117f5f34350301e6defa716d49ac2f172bfcaebbf3de5ba7e6320a5e188699579c7dec21c76251ae577dde5dc1ba175bba2d984be74f7497e6ec60d6f77f67ab7ee292d8de75c9d43f9602c3b6db8da973a4d132cf1862f6109e957d6144de5e701852fa97707e5ef044e8a7624297c59afc5d7b3e62ede39720718584fb234fb3eacd76182fc5bb0f3ccd27874603166054a", 0xac}, {&(0x7f0000001000)="6da8b61a8116754e595d2185c51bab0be3a7a1d37f1291d2f311eb0d5c3ee06c8e9a934da5efe95cc5c516a8bf439c2d2e66cad31b709f82cde2de7de64de0a5c15fba6dd1396b6664acbc093a6c2d3495f95b33a761df0a97826c5c4053f59d1590453443b5cead8bddd13613508ccd49d63f76a939982d9d4a199211b355b8dce665ba50fd520ad51b42a5540398be5001dba0a714ead29e15dc65960801f3449d66241ffaaab2a9c34f6d41132c0390c68b", 0xb3}], 0xa) link(&(0x7f0000001180)='./file0/file0\x00', &(0x7f00000011c0)='./file0\x00') mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x37) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000001200)={[0xa496, 0x36b, 0x4ac9, 0x6, 0x9, 0x7, 0x8, 0x1c00000000, 0x8, 0x7, 0x5, 0x2, 0x8000000000000000, 0x4, 0x7fff, 0x8], 0x8080000, 0xe04}) writev(r0, &(0x7f00000013c0)=[{&(0x7f00000012c0)="64456f724e865f21d296", 0xa}, {&(0x7f0000001300)="49599d5c91bb2e9c726c9680bc3f4ebf81bd976731848a7f0b2e", 0x1a}, {&(0x7f0000001340)="b696e10fa0c38f625ca9538e605b6460d937a9d14a08ab4bd45843222533ec27ad8d3dfe8155f9e9bdeb4102808cb0aec45c8bdf7354ef9420299a21a31c636c82e9f7eb", 0x44}], 0x3) bind$bt_hci(r1, &(0x7f0000001400)={0x1f, 0x1, 0x7}, 0x6) io_setup(0xfffffff9, &(0x7f0000001440)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001480), 0x10800, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001500)={0x0, 0x50, 0x4, 0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001900)={{r4}, r5, 0x10, @unused=[0x64a07003, 0x5, 0x790, 0x38000000000000], @devid=r6}) pipe2(&(0x7f0000002900)={0xffffffffffffffff}, 0x80) recvmmsg(r3, &(0x7f0000004080)=[{{&(0x7f0000002940)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002c00)=[{&(0x7f00000029c0)=""/98, 0x62}, {&(0x7f0000002a40)=""/82, 0x52}, {&(0x7f0000002ac0)=""/32, 0x20}, {&(0x7f0000002b00)=""/228, 0xe4}], 0x4, &(0x7f0000002c40)=""/144, 0x90}, 0x3}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000002d00)=""/10, 0xa}, {&(0x7f0000002d40)=""/149, 0x95}, {&(0x7f0000002e00)=""/123, 0x7b}, {&(0x7f0000002e80)=""/96, 0x60}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)}, {&(0x7f0000003f40)=""/161, 0xa1}], 0x7}, 0x800}], 0x2, 0x20, &(0x7f0000004100)) openat$cgroup_ro(r7, &(0x7f0000004140)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$BLKROSET(r7, 0x125d, &(0x7f0000004180)=0xf1e) r8 = openat$cgroup(r7, &(0x7f00000041c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000004200)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000004280)={@dev={0xfe, 0x80, '\x00', 0x27}, 0x17}) 1m37.357762554s ago: executing program 5 (id=5756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x1, 0x7, 0xe51, 0xffffffffffffffff, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x0, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m37.271843605s ago: executing program 5 (id=5757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffe4002, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0x400448e0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x1, 0x7, 0xe51, 0xffffffffffffffff, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x0, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m37.210091906s ago: executing program 5 (id=5759): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x2008b22, 0x0, 0x5, 0x15, 0x1c, "fee8a2ab78fc979fd1e0fb950720b7fb810000000000b26b000000000000000000000000002300000000000000000000000000000000000000000800", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b520a1a93c060000000000027a8f3d45cdd4992861ac000000000000000000000000000000000400", "f422741b13103e52f40000ed06000000000200989d8d4200", [0x0, 0x2000000000001]}}) (async) rt_sigqueueinfo(0x0, 0x39, &(0x7f0000000340)={0x2b, 0xfffffffd, 0x400}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4, 0x2, 0x3, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x6, 0x0, [{0x2b1, 0x0, 0x9}, {0x3a8, 0x0, 0x6}, {0x1dd, 0x0, 0x7}, {0x296, 0x0, 0x4}, {0xab2, 0x0, 0x9b5}, {0x948, 0x0, 0x7f}]}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000ff000000000000100000000000000000"]) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000001c40)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "f873d2f8"}]}}, 0x0}, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) syz_open_dev$evdev(0x0, 0x0, 0x822b01) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020de2805120000000000010902240001000000090904000101030000000921000000012205000905810300000000"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000005840)={0xff, 0x19, 0x0, 0xf0, "69ab5df13861ea47c11086f8417c4e2fb4365414eb5bea72d2155a41d669cda1"}) (async) syz_usb_control_io(r6, &(0x7f0000000080)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001500)={0x44, 0x0, &(0x7f0000001380)=[@release={0x40046306, 0x2}], 0x56, 0x0, 0x0}) 1m36.466577018s ago: executing program 5 (id=5766): stat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="eb0736cecf9e8fedddcab80fbcc5581c93ad0b41efea6c4d27be72fc4011fe77c52d9564a5e1748b172a15b23db331eb0d6e849cdf4878e8e29edce7f551877e23807c7f9d03a165b3a8adab64ce83da4bad1ca8cc0bf5f4004beecc234e36"]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r0) r4 = getpid() r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x13, 0x0, 0x0) r6 = syz_pidfd_open(r4, 0x0) setns(r6, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) 1m36.464223767s ago: executing program 5 (id=5768): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7f) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7f) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) 1m36.3106695s ago: executing program 5 (id=5771): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async, rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="00222200000096231b06e53f070c0000002a66ff8374"], 0x0}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000080)) (async, rerun: 64) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000140), 0x158c21a, &(0x7f0000000040)=ANY=[@ANYBLOB="646f6e745f6d65617380617572659cd2b4c9f6298b77358292b1d9985cca87a46487b38644eec27592b0330087b42c89f8ad0cfdf4"]) (rerun: 64) 1m36.304285109s ago: executing program 39 (id=5771): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async, rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="00222200000096231b06e53f070c0000002a66ff8374"], 0x0}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000080)) (async, rerun: 64) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000140), 0x158c21a, &(0x7f0000000040)=ANY=[@ANYBLOB="646f6e745f6d65617380617572659cd2b4c9f6298b77358292b1d9985cca87a46487b38644eec27592b0330087b42c89f8ad0cfdf4"]) (rerun: 64) 16.866606901s ago: executing program 3 (id=6816): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000020325a86ed22a00ffffffff03000004080005400000000a00"/44], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 16.865959621s ago: executing program 3 (id=6818): linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3400) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x141800, 0xd4) getdents(r0, &(0x7f0000000100)=""/32, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(r1, &(0x7f0000011b80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$netlink(0x10, 0x3, 0xb) socket$key(0xf, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000003040)={0x1, &(0x7f0000003000)=[{0x8, 0x3, 0x3, 0x405}]}, 0x10) r6 = socket$netlink(0x10, 0x3, 0xf) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$netlink(r6, &(0x7f0000002fc0)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfe, 0x2000}, 0xc, &(0x7f0000000700)=[{&(0x7f0000000800)={0x223c, 0x13, 0x2, 0x70bd2b, 0x25dfdbff, "", [@nested={0x121, 0x6f, 0x0, 0x1, [@generic="711a18a58a3dab6ce6e5bcbae65a61a1ec16dfedced546284a6aba70d855174f0cc4429ce4a4f710f0cafb3bc870316616a47426d44fa33b6137c94240fd06997a7f09b1fdae18d5e31f2fc2ba3a7103cfde88663778efcfe26154bd72e887f341d16184984bb6d3a103643114540815c1306b42903d6f51053d81b1444089ec9afe4d2b99585f1cbc4a765844b530aae479cfea3b5ebd2ec6fcd09d5d7e3e2fc7ee7c69f09a54f501e2", @nested={0x4, 0x38}, @typed={0x14, 0xc7, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x9d}, @generic="5b6e2d19e35b68da9e4915f47b7ec69ff7b1281fdae11cc9c85869f816dbfe2956d77230695d7080fbdf13dc4343dabe375903f0e61921b9bff3c0fe65b934ffd7a3a6e87d5a9e1dcc9344e9861180b8e91c25cab931f7"]}, @nested={0x78, 0x82, 0x0, 0x1, [@nested={0x4, 0xd9}, @nested={0x4, 0x96}, @typed={0x6c, 0xc1, 0x0, 0x0, @binary="cbfa9fdd36920791a07b0e42d8ce9deeeb1a27ac64f03e8111779db8c8e7b1276cbcc0514e0f0581c4785eb134f58f1b7535f1af71c87f47800a6560d91f75e0f2d5bf61702fd35723832a608150c3978b55d374040405181a2355f139f889bf86116efb9938c402"}]}, @typed={0x4, 0xcf}, @nested={0x68, 0xce, 0x0, 0x1, [@generic="ea41ff33d821dffe9833abd123d7f1ce25015802212cabf2df2d7f83b44ba20fe076bca6a52bc5a219403a824ed73c06d5a2540e7473f937dc2e9930aa7296d585787e4de835fa2788381e2e4996d9e20b90721b000e4449ee246b82a9b36ce0e05ab29f"]}, @generic="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", @generic="af939071154fced538d92314cedc738ad283ba471e67e999517e5c3a831079", @nested={0x1004, 0x1f, 0x0, 0x1, [@generic="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"]}]}, 0x223c}, {&(0x7f00000001c0)={0x230, 0x23, 0x300, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x21f, 0x117, 0x0, 0x1, [@nested={0x4, 0x67}, @generic="7d70040202484f7c029b12efad52f7b98ca04f19880a9170036224bf9b1ee0b11c11ab945490ba786db455e6ad46a05cf42c2f70bf6e44b473dce4d8f485d80d03ac19ce830a009a463e2644bb12b43cb442e9eabefe4f60286056e3303c5c4f31cdd4ae8915e52f28eeee170095df3734494e39d99ad93aa9b146f49e593c5b9e73d0d45b563f2f694c55ac8dd87af90172bdbd40715a09f70a4ddcd53d00301e0a078ff65eed8ffd58353bb75e8cb75d7052020150c08cfbf93d12aee5b138", @nested={0x4, 0x117}, @nested={0x4, 0x145}, @typed={0x63, 0x133, 0x0, 0x0, @binary="89e794cd990ece16ed46d55e941d86ac7d1e669c8527c4bdd2cc294a2eef7038e6babfe471e5912e5951b65a1532a590d642209d7e0237e58a5a1cc48d0a27f71ab7033f8b72424e5605513ecadd2b309236adc04c0a1e87195525218093c1"}, @generic="8d4c853bb87a94d8317b8c2ab9b2c5b9559d78e6412f2e08fbd4355d32cee91d3cea910e7f1d463691623344a3960668c8a6fff685f4cf737842a7199f5b6baa5b1bedb389559775e53c7a3a1237ed40de839a77d006a941a8b1f90ee8ca03b9c2411d7370279af4f99ba98f8b17e33d83a00d7288e067f292a28fc171bb15ef1cd44373899f0a59a84647dce29045802e77bbc0feb04daa7c1b57fd5691b513726d11bcc83edb08a9940bca489bf3410f0a348969dfc845e4f6d903942b1638dbf79b05add9462cf8adc91f79f9442bc2afaefec022b28a8cebb485aa7e10a8a84d3df910afa9", @nested={0x4, 0x4b}]}]}, 0x230}, {&(0x7f0000000400)={0x190, 0x33, 0x4, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x8, 0x57, 0x0, 0x0, @uid=r2}, @generic="3c6059209f0f51a99dfdf853a20dc89834517fd67dfce5a3cb942b68a57118d90da01f1d3700c5a70e2ea579915649be1c3788861caadf33e3bbe5f5ea9be3cde61964e1229701a4ac84e926c7705818a1fd1266728e24731dc09f27dbf0c99b0c954f99ce1b3812e2dc66f71b171c3839d075e97acd684dd62a46abefd8143dc7ecbf0b7cbaed91053f0c27b49b9ac1a788823f683f7041c86c80a25548dc04e5eca234d535aeb4938b7e7330f7321390896f606173c660306a66fce0ba9ef60cc93fdffc2a57c4d3a7f11d01e37570948e60698d314e3499ddf5f961c07718af1ca7e02b", @nested={0xc, 0x42, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @u32=0x7ff}]}, @nested={0x75, 0x3b, 0x0, 0x1, [@nested={0x4, 0xf1}, @nested={0x4, 0x48}, @generic="96510bc54b27eda80c250dbaf42e6ca273b9403ce7602006bb0ffb83d68d25ff02eb0e61ebb7ba2a47cdb2b604564f7231161eeae3154b5a0b13ef1f09c6b965681318429139e1cff58f2506b6f06b8681a48eaa58c1a372562a532679", @typed={0x4, 0x2e}, @nested={0x4, 0x110}, @nested={0x4, 0x104}]}, @typed={0xc, 0x9e, 0x0, 0x0, @u64=0x2}]}, 0x190}, {&(0x7f00000005c0)={0x3c, 0x39, 0x300, 0x70bd2d, 0x25dfdbfc, "", [@generic="1163d69e6a9e169b2efddec2ebd36555a22ee8f89f7c319b41c202d742eb6711291d615fc9a493dd670ae6f1"]}, 0x3c}, {&(0x7f0000000600)={0x98, 0x35, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@generic="5b1c1e7c3548dbf775ee7839b02201b0765ad964c15d51411e5af15f447408a8913c03a195e911fdc5917ed567967f354a8053de792d0a121024f55ec3dbb41ce336b85923a347419edf43b54b0cdfac6ef9de53e7cf9dc626d3286c4b29b3bc4fd252f9bc14478aae00caa36325812adb0dbc9388caa7f9a662d1", @nested={0xc, 0xa2, 0x0, 0x1, [@nested={0x4, 0x5f}, @nested={0x4, 0x37}]}]}, 0x98}, {&(0x7f0000002a40)={0x128, 0x2a, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@generic="f8d5ac020420c38dd499e61606aa0e58639b7d801734af693a8ed01ccdd52ae52ecc4176073a1e7ba2b38cc2c03d6bf40ed171e3d2404d622f0bff53257c0d5e5f601e81c56f13d71260", @generic="48f202ca3b70557ddff34df8f89f561965a12df9df4598a272949992ee5b14ef0fa49bd06d428b237c6445b491023e32f9dfebefa166590c0abbcb52d1e5ac94eb7266c31bf707baed9d9afcc89e3c3cda0656d12ad45ca1eb78f48a92f492759c258c669a1d70d80e09b7981d17d4ffcd8f72876ce1953804613a81ab4ff5d403ae487fbaaf617c0a2c197bd1746fb0e6c58991764a29b1d0a321b87b1ed4f458363e05f9eac957a6072a6c8c41c87f2552f4656074ed2cd31b485d59ca6c54a993f476f30d55d348487531"]}, 0x128}, {&(0x7f0000002b80)={0x3ec, 0x15, 0x300, 0x70bd26, 0x25dfdbfd, "", [@generic="e2afe2a2eab8f337b0507d0f4f46ac43de6fa4fe3ab1a4aa919b243be9fe6fc8e3e421ffa8fd5c28e234967ce1f13ed34a00e3f0fcb688840a84beb7f44e25b882ed0ca5b75fc83a8f9fa50428bb54f5cb8598195264f1f773888c6e1210fc50621cd0e11f371583f036799172b61675edfd07064785aec06248c936a8ece6f2b9112d34f7d720116ef71bb55eaf96aa66630ea7d1ec3474b1316b4d91d0455398de626563f167ba9fae745a1ab1b825fcf2a436ff70297c99a041e8de4f47413f81e9fb54cb3dc313ba4eb41a8d0b6ce24ad31e416e3181b49ec34203bb", @generic="3e6a8e8b150d6dfda41023e80424bad4305770470075b5afdfb476ed7d6dd9457235a2cb0050e4085b2673a5af9e276351f88497718e4da0cc28997b7bff1421286779ab3db6c46d1f6fbe22ff051ad63b47bc7d291491d84c6f244cfebe13fe302faf3172bec2a386267243b60e622376fcdd169a310987f2cfb0047be0", @generic="e5f938d42a610a4b9bec733cdd454364e70b5274b5f5773d2f7230c8cf7b171af6e74ce0282054fcdbb8", @typed={0x4, 0x9e}, @nested={0x4d, 0x145, 0x0, 0x1, [@generic="323e6431c6ffa27e5c6aac555839ab3cf856ee922b52c3cf0a5b1114f58e2ad3dc71c4e466cbe88318c4a44bcdcb536cccef8dd8fc55d14000d7a636e2", @typed={0xa, 0x108, 0x0, 0x0, @str='exfat\x00'}]}, @generic="9858b50a7f5dc1cebb70b24659d0973095c271c60f84772e8c9557f6ec32c7b3b56e2ec37958b758f9849e6169e92a8264e7cfa8a7159e5a870011fe0ce25028632b62e78c363b65571edc427f20d07ebc9493d5a776d54bb039a4d4d6845bdadeb694f1120618e69609d2e25904021ff7b1bebe40a7291fabdc7ebcfd2f8784ebe204c02964638f09af9d98290dba10636e9c1a7cfa0af29dd46532a413b3cf06b7755ee3a3fb99fa3fbc8a3c1bb8d4680c92ad16226ba614ff226cc8bcec964d2e8ec64e97e1c1b672ed9c8bd2cb1df30fccdb8f32590b54b81b745dbfc5d3c0c2", @typed={0x11, 0x3, 0x0, 0x0, @str='/dev/rnullb0\x00'}, @nested={0x4, 0x141}, @nested={0x108, 0xce, 0x0, 0x1, [@generic="152b2016a5a731c70e703994507db1fd2493c13ee5ed4ce79ab8767fdc03b148f97fccfaca596ab13ae7e240c0da110d4d77f9c72b0652ff2c2b2e3e00eb4de612a32970946e0ea31d06392d88e63618e4a78366ccd38b213396befb296ed947dd18a14b001dac2ffdf8008a7cddf8430a8baf58245773af829e7d9af7", @nested={0x4, 0x6e}, @generic="f1fcdbfb7120e1b91d4075e59832060e22829a4aabaa3c655c9708b9cb86f785151a98d4df8112342b48447d0bcbbc4f48dd95d7fb1ba37a3f612db863a95fd32b74d12b35a233366b6765daba44fbe6c38ae4f68619a5ec7dd97071387757909cb8fbd4d72e766255d54bc6ee95384efcf3234690ba0ace26747bd5ec8a6eefa40814"]}]}, 0x3ec}, {&(0x7f00000006c0)={0x18, 0x20, 0x4, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0x4, 0x0, 0x0, @uid=r2}]}, 0x18}], 0x8, &(0x7f0000002f80)=[@cred={{0x1c, 0x1, 0x2, {r4, r2, r3}}}], 0x20, 0x80}, 0x24000080) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='exfat\x00', 0x201005, 0x0) 16.854345841s ago: executing program 3 (id=6819): r0 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x1000011, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000b40)=0xc, 0x4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"/1447], 0x5a2) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000005c0), 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000002380)={&(0x7f0000000780), 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "0000000000fe00"}, 0x10}}, 0x24048011) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000100)={@empty, @dev={0xac, 0x14, 0x14, 0x40}, r3}, 0xc) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190003000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000fbdbdf25010000000c0002800800060001000080480003801400062300000000000000000000000000000001080003000100000008000300040000000800030001000000060007004e240000060007004e2100000800030003000000080006000100000008000500f3ffffff"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x40040) lseek(r4, 0x3, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x2020) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0x406f413, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000300), 0x10) 15.933677995s ago: executing program 3 (id=6821): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000100)="e5", 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r6, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) sendfile(r0, r0, 0x0, 0x7ffff000) ptrace$cont(0x7, r6, 0x1, 0x2a81) 15.933045295s ago: executing program 3 (id=6823): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x9, {0xff00000000000002, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x1, 0x8000, 0x0, r3, r4, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_LSEEK(r5, &(0x7f0000000400)={0x18, 0x0, r2, {0x91b}}, 0x18) dup2(r5, r1) close_range(r0, 0xffffffffffffffff, 0x0) 15.803654797s ago: executing program 3 (id=6824): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x800, 0xb) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) creat(0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x2) r4 = socket$inet_icmp(0x2, 0x2, 0x1) write(r4, &(0x7f0000002a00)="26c7eaa8be2b008b7a", 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x81) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x10, 0x7fff0022}]}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r6, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r6, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3, 0x0, 0xfffffffffffffdc3}}], 0x4, 0x4048841) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x6000000}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xc, 0x0, 0x0) 15.702386208s ago: executing program 40 (id=6824): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x800, 0xb) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) creat(0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x2) r4 = socket$inet_icmp(0x2, 0x2, 0x1) write(r4, &(0x7f0000002a00)="26c7eaa8be2b008b7a", 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x81) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x10, 0x7fff0022}]}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r6, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r6, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3, 0x0, 0xfffffffffffffdc3}}], 0x4, 0x4048841) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x6000000}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xc, 0x0, 0x0) 5.273318552s ago: executing program 2 (id=6921): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/41, 0x0}) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@subsystem='cpu'}]}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)=0x8000000) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffb, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "b4"}, @main=@item_4={0x3, 0x0, 0xb, "46fcfc81"}]}}, 0x0}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f00000001c0), 0x10) setsockopt$sock_int(r6, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) recvmmsg(r6, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000004340)=""/49, 0x31}, {&(0x7f0000001680)=""/47, 0x2f}], 0x2}, 0x40}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000900)={0x2, 0x0, [{0x8000000, 0x18, &(0x7f0000000400)=""/24}, {0x8000000, 0x43, &(0x7f0000000480)=""/67}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000002c0)=0x4000000) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)=0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1101}) 2.266729356s ago: executing program 2 (id=6954): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c9130001", 0x1f}], 0x1}, 0x0) socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2.194005457s ago: executing program 1 (id=6955): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd(0x0) r3 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x5) fchdir(r4) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = eventfd(0x6c8f) io_submit(r1, 0x5, &(0x7f0000000600)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xe, r0, &(0x7f0000000100)="1cffb2cb8c2b1aabadcbeda1131b45fb7decd47fe351a16f7d7ffff0aebb4178d41bb4729fb98d7191d38cf2ae9324a44715ea67898d8922ec51242ab47e379f37fc716f3b6c17a32e0e955fb8a9144b29f825bc3fa829f9e0331f80ad5fcd11abbc3f7d0b81e81d0af83967778f0ca7c9c644908c7113138edc41eae28eb554e5692efbc786c2c72eee3e735a205e7be41c53e83c6faced5ef8c11871e9ff850ec6635352080d053f8e80ed131b0f748c7caf1642ead9c0a16652817e900f8aa48e8d5bed35ddc3f79bdfc5af95072dd5195a8a63777e806d0b6b997e801d4c794239", 0xe3, 0x5, 0x0, 0x2, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0xf, r0, &(0x7f0000000200)="98e34ce3af2fda623e939344ef68049ac985f749e1e6682b725eedb3963f5c119d1e9867eac4b5461121d9fb7c1242f1006bfd14bbb2c5630b10bd07bd0fcc9446", 0x41, 0x80000001, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x1ff, r0, &(0x7f0000000300)="2c84a83ff74e5ae9c3f76a4cec90d1421a4d3c8506a66fc28d5c565b850680aad9f514039c21e5087fed4137a04132b39c92de6d5659550abd816186637528e808597432c1e7eb275e3acff3419152dd183f8f9ac87f580f7166ae95a2d4268130c0109ea2e6aead0d1fa47894", 0x6d, 0x9, 0x0, 0x1, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f00000003c0)="a0f4a7c6ac933a08b1623d1faceeec6fab9398eacb7ceb9c7134f0d0a32f6d76427fb0aba820adaffde243c51ea1ebac8de1fb073efb73e49f634313ffefdb97ec108fe37079054af025587389a8e2d3e1c75305c5bef040ff3d421493f0e25e131770d4239fccb942e6de84d2d36955d2173550cc096bc01c62d5f06ae8a93e0f2a4f3e8ad82edd6c407a0967ad9c3385f8f080abc30c2e9bdb5d38f76c530bdbe8ea4a36630f0b8ba46dffa5759bfdcedddb6572ed2a1bddda92ca6cbac98fdf1994045cb98535edb3a351c0735a303590be03cd87a0536d30b96699bf2938325b", 0xe2, 0x6, 0x0, 0x2, r5}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x0, r6, &(0x7f0000000540)="3a6dc2e19231ed368acd03430b73a3bf54f65161fb2f7055132a9370fdcc305cc69c29fe30e3d3c729cf1a616b1db896f98dd9c4c65764ff5ca0fe0c36002289efb0cd79", 0x44, 0x80000001, 0x0, 0x2, r7}]) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r8, &(0x7f0000000080)=""/93, 0xffffff6c) 2.190340968s ago: executing program 1 (id=6960): r0 = gettid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0xfffffffffffffff7) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local}, 0x1c) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) dup2(r1, r1) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="03191900", @ANYRES16=r4, @ANYBLOB="010000000000fedbdf250500000005000200fc000000180001801400020073797a5f74756e0000000000000000000800090008000000"], 0x3c}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f0000000000)=@keyring={'key_or_keyring:', r2}) keyctl$search(0xa, 0x0, &(0x7f00000003c0)='asymmetric\x00', 0x0, r2) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='asymmetric\x00', r2) mmap(&(0x7f00002d0000/0x2000)=nil, 0x2000, 0x200000b, 0x2010, r1, 0x70791000) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$KDSKBENT(r6, 0x4b47, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r7, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 2.159263918s ago: executing program 1 (id=6962): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000940)=""/4101, 0x1005}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000140)=""/220, 0xdc}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x81}], 0x3, 0x2100, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x10010, r0, 0x3000) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') r3 = timerfd_create(0x9, 0x800) close(r3) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000040)=r8) 2.077912279s ago: executing program 1 (id=6966): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDADDIO(r1, 0x4b34, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x4542, 0x1ba) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_io_uring_setup(0x23a, &(0x7f0000000400)={0x0, 0x80d7, 0x10, 0x5, 0x2cd}, &(0x7f0000000380)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x0, &(0x7f0000000100)=0xff, 0x0, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/29, 0x1d}], 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x3, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x110a, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x3}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/238, 0xee, 0x1, 0x14}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x1, 0x39}}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}, 0x400}], 0x29, 0x0, &(0x7f00000003c0)="4b23945744540cd18a169a48d7956b57b11349b14dbdc7bb5ad7458f409afb5da293fa642f344545a0"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x3, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x110a, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x3}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/238, 0xee, 0x1, 0x14}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x1, 0x39}}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}, 0x400}], 0x29, 0x0, &(0x7f00000003c0)="4b23945744540cd18a169a48d7956b57b11349b14dbdc7bb5ad7458f409afb5da293fa642f344545a0"}) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x2}, 0x1) (async) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x2}, 0x1) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) setfsgid(0x0) (async) setfsgid(0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.372946379s ago: executing program 2 (id=6969): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x2, 0x0, 0x1000, &(0x7f0000006000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f00000000c0)=0x4, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x72, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.372562609s ago: executing program 4 (id=6970): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, &(0x7f0000000200)=[{0x0, 0x100000be63, 0x9}], 0x1, 0x8000e5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25010000000000000007410000004c001800001008657468"], 0x68}, 0x1, 0x0, 0x0, 0x200488d0}, 0x50040) open$dir(&(0x7f0000000000)='./file0\x00', 0x105240, 0xac) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000006, 0x1010, r3, 0x38bf6000) pwritev(r3, &(0x7f0000000100), 0x0, 0x1, 0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=@rnullb, &(0x7f0000000380)='./file0\x00', &(0x7f0000000600)='erofs\x00', 0x1000400, 0x0) 1.3700683s ago: executing program 2 (id=6971): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) io_submit(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x3c0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0xfffffffffffffffe, 0x4, 0x10000, 0x100, 0x1004, 0x0, 0x8, 0x5, 0x5, 0x9, 0x9, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0xf0, 0xffffffff00000000, 0x4, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0xffffffff, 0x8, 0x6, 0x6, 0x3, 0x4, 0x20000000006, 0x8, 0x9, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xea, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x5, 0x1, 0x47bc, 0xd, 0x6, 0xbbdc, 0x80000000, 0xfffffffffffffc00, 0x2, 0xb, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0x2, 0x6, 0x0, 0x3403, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x61d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x4, 0x5, 0x0, 0xd, 0x2, 0x80000001, 0x981, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x9, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000580)={0x7, "ea6cab97b50ba3855d5069f2b5fb958787cc4de4421f956dd09f2a67e832d082b0b8eef523a0185e8322d1041dcb72b5c4326f001615de4183db9a388ad5d42c"}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000040)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) mmap(&(0x7f00002b7000/0x2000)=nil, 0x2000, 0x2000000, 0x4000010, r0, 0x7427c000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f00007fc000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000700)="66b99b0200000f320f01ca646126660fc7b60945b88f058ec866b8960000000f23c80f21f86635000000000f23f8de76c0f466b9e00100000f3266b9090a00000f32", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xb, 0x9, 0x5, '\x00', 0x381d5667}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x90) 1.306627051s ago: executing program 4 (id=6973): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000d40)={0x2020}, 0x2020) r1 = socket$tipc(0x1e, 0x5, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="0f2142440f20c0663503000000440f22c0efb800008ee0baf80c66b8a42b568866efbafc0c66ed66b9800000c00f326635004000000f30060f01cba60f01c3", 0x3f}], 0x1, 0x19, &(0x7f0000000140), 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8040}, 0x1881) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001500)={0x44, 0x0, &(0x7f0000001380)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.205959562s ago: executing program 4 (id=6975): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}], 0x1}, 0x0) modify_ldt$read(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x15}, {0x6}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) r2 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x20, 0x7, 0xf335, 0x6}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000000)={0xa0f8}) setfsgid(0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 890.893167ms ago: executing program 1 (id=6976): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0xb) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20200) close_range(r0, 0xffffffffffffffff, 0x0) 834.523927ms ago: executing program 1 (id=6977): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010101d1b74350eb0302201801010203010902120001f705c02d09044fe900baf6d56ccf54420aa5378f4d12b04a7adec98a2d01b2caf1614095d436c9419956195d909227585629deab339b0bb242ab6abc27af6c641f92b2bd9a2233a148d35fa9f3f111e1bcc4c31754df74991511b013ebe5522b923f256acca7"], 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x1000000, 0x11, r0, 0x0) 790.232418ms ago: executing program 9 (id=6978): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioprio_set$uid(0x3, r1, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x80a) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae09, &(0x7f0000000000)) r4 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) setrlimit(0xa, &(0x7f0000000040)={0x380000000000000, 0x1}) mount(0x0, 0x0, 0x0, 0x8, 0x0) syz_open_procfs(r4, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) 771.573448ms ago: executing program 9 (id=6979): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4018aee3, &(0x7f0000000140)=@arm64_core={0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x1) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_pid(r4, &(0x7f0000000180), 0x12) r5 = getpgrp(0xffffffffffffffff) write$cgroup_pid(r4, &(0x7f0000000080)=r5, 0x12) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f00000001c0)=""/129) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x10001}}, 0x30) ioctl$ASHMEM_SET_NAME(r3, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_GET_ONE_REG(r2, 0x4018aee3, &(0x7f0000000140)=@arm64_core={0x0, 0x0}) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xffffffc1) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) (async) futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x1) (async) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') (async) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') (async) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) (async) getpgrp(0xffffffffffffffff) (async) write$cgroup_pid(r4, &(0x7f0000000080)=r5, 0x12) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f00000001c0)=""/129) (async) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x10001}}, 0x30) (async) ioctl$ASHMEM_SET_NAME(r3, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') (async) 706.584959ms ago: executing program 9 (id=6980): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000300)=&(0x7f0000000240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000180)="3636670f01c52e6764f00fbab60000010000def30f3566c8781b980f3566b99900004066b85729000066ba000000000f300f22c30f0097fd000f01b60050", 0x3e}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xfffffff7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x48, 0x0, &(0x7f0000000140)=[@register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000080)={@flat=@weak_handle={0x77682a85, 0x100f, 0x2}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @flat=@binder={0x73622a85, 0xa}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d00)="f249c144"}) 706.378609ms ago: executing program 9 (id=6981): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x802400, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x60000000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r1, 0x293f000) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000040)={r0, 0x28, {0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0xa, 0x13, 0x1c, "f1cfa27e0d8d76603830117b23a2230fedaecf6961a86ec611e014deaab94e2ed667421cf3d4b4bc86ebd16e8c5a148ccbe927d7068a9295b7c31d150065ba38", "b234804e3866c32c890c6d7685366aeaa33242a65cb02564a18ec18229ee860b8ce998cf46bc962dc01a82845edf4b201ca215c54a3ed582096b26f09f258cc6", "b7357b4bd20e00e3b5fae669873150928ca85bb5e4b3fbebb699e50d308410c3", [0xc15e, 0x7fffffffffffffff]}}) 688.25348ms ago: executing program 9 (id=6982): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x640, 0x0, &(0x7f0000000580)="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"}) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000080000106a05310300000000000109022400010000800009040002010300010009210000000122f804090581034000040000746ca48f2c1e849085d062224931fd79fe76b9bd87fa65285d8d939d64dc5d1a5295c920c9007b721ae70c00adcc5317588bb4dcd915a6693598f8eb9f869c4b34c30d6a5d701337f11357e89d6179dc0560c791"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0xfffffff7) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x5411, 0x0) (async) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000001580)={0x44, &(0x7f0000001280)={0x40, 0xf, 0x1c, "6496c0a48ee343defcc6488415d24c99050013d26c54cd56039c771b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000c00)={0x20, 0x30, 0x5, "aa8208d2f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x40, 0xb, 0x2, "a6ea"}, &(0x7f0000000f00)={0x40, 0xf, 0x2, 0x2000}, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x40, 0x1a, 0x2, 0xc5}, &(0x7f0000001040)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001080)={0x40, 0x1e, 0x1}, 0x0}) (async, rerun: 64) syz_usb_control_io$uac1(r3, 0x0, 0x0) (rerun: 64) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x20, 0x9, 0x4, "e12995f2"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000480)={0x20, 0xe, 0x2, "a84c"}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x84, 0x1, '~'}, 0x0}) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r3, &(0x7f0000000040)={0x14, &(0x7f0000000180)={0x40, 0xc, 0xfe, {0xfe, 0x7, "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"}}, &(0x7f0000000480)={0x0, 0x3, 0xcd, @string={0xcd, 0x3, "00258ff8848a17935fa9446ab648e4f3e7c9f55c9ebda1cdd32eaca8b28ffc51cb5f52761ea7f355b29b66a04991f5e8cedc49617a87516fc9f9ad3177c12d38c8bada611600ad86361e2e96eb1f141359879513baa8a901bf07a7e6645c5cfe5802ca98770524d4a4d76c9a18f774150a6c1fba100949f8dc32df54c565d0423a7c99eea38a5415ddd24eca240effeb2638564f1103d3814e1a32356e167f8bf2abb9fe6972f81b55a03118c974ae35777d6fac82c9b412343b58f31750b1f77a2ce6fe9ea6618ccf6103"}}}, &(0x7f0000000c40)={0x34, &(0x7f0000000380)={0x0, 0xe, 0x91, "5b0a77200bbdfd42068e0a47b91be2c0344cc713ab80ae34f478d8886bd7ff34af2907ebb6b36360f89f1220380bc5535920098c535301861f21333f50ac81d9b4e8e6037e432ca6be102e40d455701fa2ba9cc0bb1da1012f5708ce52f7dd3319cfa99a4be4c21ab51e98c1725e933f71ca97e7f29925f2517b626bb477bdb508a7a617059ba5c085b662e20758000000"}, &(0x7f0000000080)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000100)={0x0, 0x8, 0x1, 0xbf}, &(0x7f00000002c0)={0x20, 0x0, 0x5b, {0x59, "167590f059d3b52586a839819adb229ece0b88d260193e99e5666b85bc2edcbcbbf9d6b739c3ce198473892cb6574e9589f4a931210044fba3e99ab4a78eea7cbe683c8f87ce8a4c8c41e1a9d325b1ec0b0e5cd3a60b4d2b76"}}, &(0x7f0000000bc0)={0x20, 0x1, 0x1, 0x9a}, &(0x7f0000000c00)={0x20, 0x0, 0x1, 0x1e}}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x81, 0x8304) read$usbmon(r4, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRES64=0x0], 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001500)={0x44, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}], 0x2c, 0x0, 0x0}) 448.022753ms ago: executing program 2 (id=6983): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x5, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x10, 0x3, 0xcd}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4480, 0x20) syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="2001380000003807ab61bed3b6c17ddc3fcb0bdbe9d03c5a0a88b5e3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x8}, 0x81}], 0x2, 0x2100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x5, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x10, 0x3, 0xcd}}]}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4480, 0x20) (async) syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="2001380000003807ab61bed3b6c17ddc3fcb0bdbe9d03c5a0a88b5e3"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x8}, 0x81}], 0x2, 0x2100, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async) 390.553884ms ago: executing program 2 (id=6984): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20480, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0x0) ioctl$KVM_CAP_XEN_HVM(r1, 0x4068aea3, &(0x7f0000000080)={0x26, 0x0, 0x50}) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000100)) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000301, r2, 0x0) recvmsg$can_bcm(r1, &(0x7f00000009c0)={&(0x7f0000000200)=@ax25={{}, [@null, @remote, @default, @remote, @bcast, @null, @netrom, @null]}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)=""/110, 0x6e}, {&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f0000000380)=""/219, 0xdb}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/187, 0xbb}, {&(0x7f0000000640)=""/11, 0xb}, {&(0x7f0000000680)=""/232, 0xe8}, {&(0x7f0000000780)=""/42, 0x2a}, {&(0x7f00000007c0)=""/20, 0x14}, {&(0x7f0000000800)=""/205, 0xcd}], 0xa}, 0x10000) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000a00)={0x0, 0x0, @ioapic}) statx(r0, &(0x7f0000000c40)='./file0\x00', 0x800, 0x20, &(0x7f0000000c80)) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x90, 0x0, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x6, 0x0, 0x8, 0x8, 0xfffffff6, 0xf9c, 0x6, 0x7, 0x3]}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xfff}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x40}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xf1}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x90}, 0x1, 0x0, 0x0, 0xa001}, 0x20008004) mount(&(0x7f0000000f00)=@md0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)='ecryptfs\x00', 0x92088, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000fc0)={0x2, 'ip6gre0\x00', {0x89}, 0x2e6b}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0x5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) setxattr$security_capability(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080), &(0x7f0000001140)=@v3={0x3000000, [{0x7f, 0x3}, {0x13f, 0x5}], r4}, 0x18, 0x3) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000001180)=0x9) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f00000011c0)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001200)={0x800, 0x17, 0x298d}) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000001240)={'\x00', 0x48000, 0x3, 0x6}) mknod$loop(&(0x7f00000012c0)='./file0\x00', 0x2000, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$TIOCCONS(r1, 0x541d) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000001300)={0x9, 0xffffffffffffffff, 0x1}) read(r3, &(0x7f0000001340)=""/4, 0x4) mkdir(&(0x7f0000001380)='./file0\x00', 0x31) syz_open_pts(r1, 0x101) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f00000013c0)={0x3000000000000000, 0x5000, 0x5, 0x1, 0xb}) socket$packet(0x11, 0x3, 0x300) 355.416474ms ago: executing program 4 (id=6985): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149d00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2c4bd6030ec57f91, 0x4021110, r0, 0x2000) r1 = socket$netlink(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f0000000380)={0x0, 0xfb, 0xcc, 0x7, 0x4, "d980c579033058e42e1f18ba5079bf82", "37706bca19c43c591f4bcee6392d51765d148bea92d39946696a1d06c7bc993f9b11197c969658e9515cd73396bf1aaf08f9992a88ed96c125b8504fec910590ed229b367fa6f28d796fc6f05a8b1eb823f2d3b086f21bcf7a2b9c6883f4bb7efe232b8ac0f3c18760d5dd50a348c46a1db5feb5cea6fdb670125a1e49c8d41215c7f5c20929cc67d104e587559c0dfcaef8ee0bd2dcb82f01f8686bb6879bbb7bc5284f7ebfb2833800522b594642cec36e5a31e506cc"}, 0xcc, 0x1) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001900)=ANY=[@ANYBLOB="280000005e000dc90ac21dc24e627958b0eae7e5d733e6e221"], 0x28}], 0x1}, 0x40) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x1d9}]}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r8 = socket$inet6(0xa, 0x3, 0x84) fsetxattr(r4, &(0x7f0000000200)=@known='trusted.syz\x00', &(0x7f0000000240)='{}{[\x00', 0x5, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x56, 0x2, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2400000, 0x1, 0xbc}, {0x7, 0x0, 0x4, 0xfffffffffffffffe}, 0x83, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x0, 0x6c}, 0xa, @in6=@empty, 0x3507, 0x4, 0x3, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 164.319178ms ago: executing program 9 (id=6986): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2d, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x100}}, {{0xa, 0x0, 0x2, @local}}}, 0x108) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24008044}, 0x4004) syz_usb_connect(0x6, 0x68f, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x69, 0x45, 0xfa, 0x10, 0xcde, 0x8, 0x6e46, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67d, 0x4, 0x6, 0x2, 0x0, 0x3, [{{0x9, 0x4, 0x66, 0x8, 0x2, 0xdf, 0x6e, 0x76, 0x5, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x2, 0x8, 0xd9, "4fe6e8", "b8"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x2, 0x7f, 0x9, "ab"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3ff, 0xb0, 0x5, "05b5935011f179"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x47, 0x3, 0xb, 0x8, "0f360749"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x1, 0x8, 0x80, "9c", 's.J'}]}], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x5, 0x0, 0x3, [@generic={0x9f, 0xf, "43431628e15cf5261d5f4b493e218908f7b648d7893458076b156d86f9e514452bb9750b604e03518784ba43eef5cd35658dedae6983f129df599baf1a7b8d1fbfbdb278dfec8e4284d5885dd950bc2e02a77e79dcca3974bed39fde2bc91e67d662658e36eaf817386f54065cc0919977c8c11b443c44068a3c09e7dda08c667e9d0c4fe40efcaa88a4c2b8af55dcb5b8a588bd3cea3ceda6dfaa343f"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x6}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x0, 0x4, 0x0, [@generic={0xe2, 0x11, "2c9a6c023157638acf4daec49dc285f7d6f61bdb7365bbcc6e9611facb945ac654c0d259b612478194c08860405eb202dbd8f3a0dc266710f13928b72ff6023e1396fa431e427597428e0443775bf214128f5b6520c9c61eefb02630b74fc816a246537d41ea1afe7f15c07ef113384b6198fab82b4c49399750a1c6a9ea9229063ebbc2ab29a0751c122d149a81d568b6eacde1809af4ea4fd2901dbd65183f48a9d8096482a35d1e29d385eb6934fed2088de7052c2f0bf4400bf77e0ed884480c3bc57b75e8e64053b9034b202cbc90bf0dff21779f2d7b6f405932d53f49"}, @generic={0xd3, 0x3, "48b539b40fb24b0b3f8e94ea613a5a3af9e008c546c4ce8633e6df9d26f2f5e45fc54ceecb56ca9084e0ffd68f3b37c2022aa8c1eba0d1ffa9b8ac0e6f1b71e65e5468e3587e3caba4f68fa90eddd3afd654968f17c85521d0dd6d565d0e18b1dd9d7055bba414efb5bd4e5104763894b718250c4aacd9fe060b707730c82367ae011394675d7d0ee9a8a003e6567b62897957ae516aa884e18fc34fb2e24971dec8ef1bb295b5e2a30b1328e0ac8edec24a1be5d12279a493c185ebf2cba62cf6135cfb8e61fdf9ce434f120a29f2b04b"}]}}]}}, {{0x9, 0x4, 0x5, 0x1, 0x7, 0xb3, 0x18, 0x17, 0x1, [], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x2, 0x5, 0x1}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x6, 0xf4, 0x8, [@generic={0x29, 0x1, "44b3eca378bb7376329e1f4acb939d55f85e8b5ae52a1dd37d8862136579cac529ff88253f04c1"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x0, 0x1, 0x0, [@generic={0x8, 0xf, "69443ab31de0"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x82}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x5, 0x80}}, {{0x9, 0x5, 0x0, 0x10, 0x5c, 0x0, 0x8d, 0x9, [@generic={0x82, 0xe, "5547158ce113b94c35624b568a8bab0313c6bf8248553518c34746d517bebe85942f9f6451ceb4331904f71aae79ef007792ec23ffe1119f8a66030b95b1e331fc74ef122c6c9ef205e8ecfe328f167a31f1656a8c9719bc6cf2482462ec1dbdb1402d9a2df631bebf975e5bb00ad892bfcc988c07ca268350a9bcd16f661b80"}, @generic={0x48, 0xe, "5b02bc1845e30b73e6a02ccf2ae3c79e44237cde7d0c3d14ae6eedae58269fc9d920015e289a786acf9a1e83d6f8429d50ea4d0dbe4f595754772b9916c327bc0f461f43dd7c"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x9, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xfe, 0xd1b}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x3, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xcbdca3c73a83b2eb, 0x2, 0x7}, @generic={0x51, 0xa, "f586aea146c45447f4dac75cf9b186f870c30be549b466c792a2978a7d31aa388bc43f2c8ad6ec0bfaafed051011dfaf7e7791f07aa26afddfb0756f1802c82725d523bca074e9204c75b5df718eed"}]}}]}}, {{0x9, 0x4, 0xc4, 0x3, 0x6, 0x10, 0xa7, 0x10, 0x4, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x62, 0x1, [@generic={0x21, 0xe, "615a9027139a15fb773f4c29bc38cd622e2679680016151ad84d607338191e"}, @generic={0xa5, 0x21, "8faa48bb9917aec81c6f2f49519ff0f668773aeee6a4f1d1159a3e38236d68b9295860041cbfb54da430e74a06d8085d460e8432823809c1e9fbccacf4ff190d400da0bbb9aa23a7bae4a696d13215a4590504ea1b0e3e5b81c7c68d49b4c3a3b3b9652170b3186de032919c992edb5d3777ef71a431972ff09039c79092561b6c3d869e97b8ff1a874216b7ffc547e44f50669c6a5b818b57affceabf33f873bcb6ed"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x4, 0x5, 0x9}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x7f, 0x0, 0xff}}, {{0x9, 0x5, 0xa, 0x4, 0x10, 0xd, 0xe0, 0x7}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0x6, 0xb0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0xfffb}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x4d, 0x3, 0x9}}]}}, {{0x9, 0x4, 0x8, 0x4, 0x3, 0x33, 0x1f, 0x65, 0xf5, [@hid_hid={0x9, 0x21, 0xee, 0x3, 0x1, {0x22, 0x379}}], [{{0x9, 0x5, 0xf, 0x0, 0x200, 0x1, 0x9, 0x40}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x0, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x2}, @generic={0x50, 0xb, "7d8e17739196b40a134b4943bb6379ada4ca6b1b569f2031c41d03ef93be701cd5fd0eb1cb3b4750be58d3daf017a2c8b7dbb7f282b59b8653c49c85bebd239f882f92343bac906466af7533dba0"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0xed, 0x7, 0x2, [@generic={0x7d, 0x23, "95f48f7b9bfa11b138666efef4634bd29b1ceb96e6b9697ee7a84fdc1dfdc281d7247542e4960f9307ff56b821c2f90b1f813fc6ab3b35c1f702dda331f8aa2369504eb1f29d79c7b22e0928f8d30e9f65c6cda2dd2d06eb7dc2a8e49860799c05f3332defcadffbb61661b7d847df194d07b5e9287b757e41b349"}, @generic={0x4, 0x30, "b744"}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0xd, 0x2, 0x10, 0x9}, 0xa0, &(0x7f0000000100)={0x5, 0xf, 0xa0, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x401, 0xff0f, 0x6, [0xff00, 0xfe80cf]}, @generic={0x69, 0x10, 0x1, "6d3c81ab41bf1d67dc51bb1e342d61c1c54519644ad4ae989529bc90207c22b2bd41d4681a5117a8d88e1f9afc85d512dc9e5f19f0639b25c2a820d4f03023f874b54526198a403e3facd22a4150d68e5c959d24e421266ff1e4febeeeede566e9baefaf3ea1"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x8, 0x301b}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "dd47103feb5a23bf3444f70b2e031c18"}]}, 0x3, [{0xda, &(0x7f00000001c0)=@string={0xda, 0x3, "4d9362305c7370dc17e48ec3c8c62a0bbb63dd0cfe260f1679c8b4acbb376efbe53fbb8e321633e5dd24d93642914e2ff0a4569f929c0480095a4d45134377e847be90e16942adbfa055b067fdad99bc380bb17d0f9201c654bca7fb4fc2340b1af718d72c1ec1d6ddc826b66ebf142a36f45d623341d20362a57fbabaeb1fe465cd48f77e105b28fa8f6b055457c37ed98ad32c686b6fe9f0bc5cc70f876fa54c4858f3231db59da3edf7367de3323591739e85a9bcd633cf286e2452010ef4ca93928830f4c28bdc7ae578586bcc0e38960cac0122d3d3"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4ff}}]}) close_range(r0, r0, 0x0) 74.516269ms ago: executing program 4 (id=6987): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) (async) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) getgroups(0x1, &(0x7f0000000180)=[0xee01]) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000000, &(0x7f00000005c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x2}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}, {@default_permissions}], [{@dont_measure}]}}) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x1002, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) (async) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) (async) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000000e3fef9150001c0"]) (async) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000000e3fef9150001c0"]) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000040)=0xdf8, 0x16) openat$rnullb(0xffffffffffffff9c, &(0x7f00000011c0), 0x65101, 0x0) (async) r13 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000011c0), 0x65101, 0x0) ioctl$IOC_PR_RELEASE(r13, 0x401070ca, 0x0) sendto$inet(r9, &(0x7f0000000580)="17", 0x59a, 0x10008034, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=6988): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@increfs={0x40046305}, @increfs={0x40046304, 0xfffffffe}, @decrefs], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ONTEXT_MGR already set [ 507.932240][T18872] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 507.945088][T18872] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 507.952351][T18872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:176 [ 507.952981][T18876] rust_binder: Error in use_page_slow: ESRCH [ 507.965260][T18872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:176 [ 507.971040][T18876] rust_binder: use_range failure ESRCH [ 507.986058][T18876] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 507.991738][T18876] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 507.999692][T18876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:857 [ 508.680995][T18937] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 508.691514][T18937] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 508.705181][T18937] rust_binder: Write failure EINVAL in pid:182 [ 509.035059][T18953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:873 [ 509.046921][T18952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:873 [ 509.107323][T18955] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 509.216772][T18966] fuse: Bad value for 'group_id' [ 509.226227][T18966] fuse: Bad value for 'group_id' [ 509.277438][T18968] rust_binder: Write failure EFAULT in pid:886 [ 509.875659][T18973] overlay: Unknown parameter './bus' [ 509.888708][T18977] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 509.904755][T18981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6364'. [ 510.178545][T19027] fuse: Unknown parameter 'g@j֗Zn2^`HqSVpiRqSιCgk5o&4uD0S/sZh%`P-hy [ 510.178545][T19027] G00000000000000000000' [ 529.796243][T19764] overlay: Unknown parameter 'fowner>00000000000000000000' [ 529.850453][ T63] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 530.000480][ T63] usb 4-1: Using ep0 maxpacket: 32 [ 530.006804][ T63] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 530.015238][ T63] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 530.023881][ T63] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 530.033097][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 530.042798][ T63] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 530.052499][ T63] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 530.065496][ T63] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 530.074563][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.083301][ T63] usb 4-1: config 0 descriptor?? [ 530.090486][ T8743] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 530.240463][ T8743] usb 2-1: Using ep0 maxpacket: 16 [ 530.246926][ T8743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.258254][ T8743] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 530.263041][T19800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 530.271321][ T8743] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 530.272613][T19800] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 530.277853][ T8743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.286972][T19800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:460 [ 530.298222][ T8743] usb 2-1: config 0 descriptor?? [ 530.309816][T19800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 530.319295][T19800] rust_binder: Read failure Err(EFAULT) in pid:460 [ 530.320917][ T63] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 530.359582][ T63] usb 4-1: USB disconnect, device number 52 [ 530.367855][ T63] usblp0: removed [ 530.386507][T19809] loop2: detected capacity change from 0 to 16384 [ 530.443943][T19809] I/O error, dev loop2, sector 2192 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 530.491476][T19812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 530.491976][T19812] serio: Serial port ttynull [ 530.518579][T19814] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:464 [ 530.544679][T19815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:410 [ 530.573460][T19816] rust_binder: Write failure EINVAL in pid:464 [ 530.612576][ T8743] usbhid 2-1:0.0: can't add hid device: -71 [ 530.625112][ T8743] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 530.634593][ T8743] usb 2-1: USB disconnect, device number 67 [ 531.452641][T19853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:467 [ 531.452883][T19853] rust_binder: Error while translating object. [ 531.473023][T19853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 531.482782][ T313] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 531.504253][T19853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:467 [ 531.528218][T19858] netlink: 112 bytes leftover after parsing attributes in process `syz.9.6656'. [ 531.562185][T19858] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 531.581456][T19858] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 531.630456][ T313] usb 2-1: device descriptor read/64, error -71 [ 531.654891][T19865] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 531.880474][ T313] usb 2-1: device descriptor read/64, error -71 [ 531.901446][ T306] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 532.061622][ T306] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.072051][ T306] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.083176][ T306] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 235, setting to 64 [ 532.094320][ T306] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.108942][ T306] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 532.118439][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.126710][ T306] usb 4-1: Product: syz [ 532.130963][ T313] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 532.138914][ T306] usb 4-1: Manufacturer: syz [ 532.143835][ T306] usb 4-1: SerialNumber: syz [ 532.280452][ T313] usb 2-1: device descriptor read/64, error -71 [ 532.530525][ T313] usb 2-1: device descriptor read/64, error -71 [ 532.553629][ T306] cdc_ncm 4-1:1.0: bind() failure [ 532.560077][ T306] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 532.571669][ T306] cdc_ncm 4-1:1.1: bind() failure [ 532.576725][T19890] overlayfs: failed to clone upperpath [ 532.640611][ T313] usb usb2-port1: attempt power cycle [ 532.697112][ T36] audit: type=1400 audit(2000032834.980:2618): avc: denied { create } for pid=19899 comm="syz.9.6670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 532.760197][T19912] netlink: 168 bytes leftover after parsing attributes in process `syz.9.6674'. [ 532.770274][T19912] SELinux: Context system_u:object_r:modules_conf_t:s0 is not valid (left unmapped). [ 532.780233][ T36] audit: type=1400 audit(2000032835.070:2619): avc: denied { relabelto } for pid=19911 comm="syz.9.6674" name="rnullb0" dev="tmpfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:modules_conf_t:s0" [ 532.807720][ T36] audit: type=1400 audit(2000032835.070:2620): avc: denied { associate } for pid=19911 comm="syz.9.6674" name="rnullb0" dev="tmpfs" ino=1173 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:modules_conf_t:s0" [ 532.980462][ T313] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 533.001575][ T313] usb 2-1: device descriptor read/8, error -71 [ 533.074976][ T8743] usb 4-1: USB disconnect, device number 53 [ 533.089046][T19915] rust_binder: Error in use_page_slow: ESRCH [ 533.089066][T19915] rust_binder: use_range failure ESRCH [ 533.095132][T19915] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 533.100657][T19915] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 533.108662][T19915] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:425 [ 533.129486][T19917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 533.141879][ T313] usb 2-1: device descriptor read/8, error -71 [ 533.170719][T19924] rust_binder: Write failure EINVAL in pid:434 [ 533.262974][T19927] rust_binder: Error in use_page_slow: ESRCH [ 533.269266][T19927] rust_binder: use_range failure ESRCH [ 533.275406][T19927] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 533.280961][T19927] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 533.289009][T19927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:437 [ 533.312339][T19931] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 533.384074][ T36] audit: type=1400 audit(2000032835.670:2621): avc: denied { mounton } for pid=19930 comm="syz.3.6680" path="/142/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 533.413526][ T313] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 533.441572][ T313] usb 2-1: device descriptor read/8, error -71 [ 533.521373][T19960] SELinux: security_context_str_to_sid (syte-_uGй :!]`Dn) failed with errno=-22 [ 533.544051][T19963] Unsupported ieee802154 address type: 0 [ 533.571561][ T313] usb 2-1: device descriptor read/8, error -71 [ 533.643786][T19974] rust_binder: Error in use_page_slow: ESRCH [ 533.643817][T19974] rust_binder: use_range failure ESRCH [ 533.649861][T19974] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 533.655400][T19974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 533.663271][T19974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:439 [ 533.672970][T19974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:439 [ 533.682324][ T313] usb usb2-port1: unable to enumerate USB device [ 534.144606][T19944] incfs_lookup_dentry err:-103 [ 534.149554][T19944] incfs: Can't find or create .index dir in ./file0 [ 534.156463][T19944] incfs: mount failed -103 [ 534.260745][T19983] fuse: Invalid rootmode [ 534.365054][T19995] rust_binder: Error while translating object. [ 534.365101][T19995] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 534.371462][T19995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1064 [ 534.584244][T20027] overlay: ./file0 is not a directory [ 534.620434][ T36] audit: type=1400 audit(2000032836.900:2622): avc: denied { accept } for pid=20028 comm="syz.3.6709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 534.644388][ T36] audit: type=1400 audit(2000032836.930:2623): avc: denied { read } for pid=20030 comm="syz.9.6707" name="rnullb0" dev="tmpfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:modules_conf_t:s0" [ 534.663544][T20038] rtc_cmos 00:00: Alarms can be up to one day in the future [ 534.671954][ T36] audit: type=1400 audit(2000032836.930:2624): avc: denied { open } for pid=20030 comm="syz.9.6707" path="/dev/rnullb0" dev="tmpfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:modules_conf_t:s0" [ 534.716359][ T36] audit: type=1400 audit(2000032836.930:2625): avc: denied { map } for pid=20030 comm="syz.9.6707" path="/dev/rnullb0" dev="tmpfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:modules_conf_t:s0" [ 534.762597][T20050] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@q [ 534.794100][T20050] rust_binder: Write failure EINVAL in pid:1097 [ 534.794213][T20050] rust_binder: Read failure Err(EAGAIN) in pid:1097 [ 534.813237][T20054] rust_binder: Write failure EFAULT in pid:1099 [ 534.836817][T20057] binder: Unknown parameter 'contextsy"tem_uGй :`' [ 534.870468][ T313] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 534.902822][T20059] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 534.903751][T20059] rust_binder: Error in use_page_slow: ESRCH [ 534.910322][T20059] rust_binder: use_range failure ESRCH [ 534.916572][T20059] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 534.922179][T20059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 534.930195][T20059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1103 [ 534.953328][T20064] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 534.962851][T20064] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 534.969293][T20064] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 534.977343][T20064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1108 [ 534.999235][T20069] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 535.021672][ T313] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.038298][ T313] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 535.048126][ T313] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 535.057397][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 535.064504][T20069] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 535.065496][ T313] usb 4-1: SerialNumber: syz [ 535.066093][T20069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1113 [ 535.154155][T20078] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 535.164704][T20080] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 535.171200][T20080] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 535.179230][T20080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1122 [ 535.277519][T20029] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:455 [ 535.288207][ T313] usb 4-1: 0:2 : does not exist [ 535.302372][ T313] usb 4-1: unit 5 not found! [ 535.308751][ T313] usb 4-1: USB disconnect, device number 54 [ 535.317345][ T9189] udevd[9189]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 535.440495][ T45] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 535.590463][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 535.598184][T20088] fuse: Bad value for 'user_id' [ 535.598942][ T36] audit: type=1400 audit(2000032837.880:2626): avc: denied { write } for pid=20087 comm="syz.9.6728" name="rnullb0" dev="tmpfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:modules_conf_t:s0" [ 535.603314][T20088] fuse: Bad value for 'user_id' [ 535.636393][ T45] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 535.648758][ T45] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 535.652642][ T36] audit: type=1400 audit(2000032837.880:2627): avc: denied { ioctl } for pid=20087 comm="syz.9.6728" path="/dev/rnullb0" dev="tmpfs" ino=1173 ioctlcmd=0x1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:modules_conf_t:s0" [ 535.666058][ T45] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 535.702667][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 535.712834][ T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 535.719426][ T36] audit: type=1400 audit(2000032837.950:2628): avc: denied { execute } for pid=20087 comm="syz.9.6728" path="/dev/rnullb0" dev="tmpfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:modules_conf_t:s0" [ 535.723302][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 535.774546][ T45] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 535.784173][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.785485][T20093] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6730'. [ 535.793947][ T45] usb 2-1: config 0 descriptor?? [ 535.886845][T20115] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 535.907996][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6737'. [ 535.942941][T20125] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20125 comm=syz.3.6738 [ 535.971724][T20130] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 536.008436][ T45] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 536.074304][T20132] rust_binder: Error in use_page_slow: ESRCH [ 536.074326][T20132] rust_binder: use_range failure ESRCH [ 536.080655][T20132] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 536.086213][T20132] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 536.094289][T20132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:477 [ 536.104805][T20132] rust_binder: Error in use_page_slow: ESRCH [ 536.113928][T20132] rust_binder: use_range failure ESRCH [ 536.120048][T20132] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 536.125792][T20132] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 536.133615][T20132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:477 [ 536.210467][ T313] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 536.216497][T20082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.235783][T20082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.371826][ T313] usb 3-1: unable to get BOS descriptor or descriptor too short [ 536.380328][ T313] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x1 is Bulk; changing to Interrupt [ 536.390256][ T313] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x82 is Bulk; changing to Interrupt [ 536.400299][ T313] usb 3-1: config 1 interface 0 has no altsetting 0 [ 536.412001][ T313] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 536.421161][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.429214][ T313] usb 3-1: SerialNumber: Њ [ 536.435063][T20128] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 536.442580][T20128] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 536.657570][ T313] usb 3-1: USB disconnect, device number 43 [ 536.673336][T20137] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.680577][T20137] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.687726][T20137] bridge_slave_0: entered allmulticast mode [ 536.694515][T20137] bridge_slave_0: entered promiscuous mode [ 536.701185][T20137] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.708265][T20137] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.715730][T20137] bridge_slave_1: entered allmulticast mode [ 536.722131][T20137] bridge_slave_1: entered promiscuous mode [ 536.754868][ T63] usb 2-1: USB disconnect, device number 72 [ 536.765798][ T63] usblp0: removed [ 536.775849][T20142] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 536.775939][T20142] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 536.782731][T20142] rust_binder: Write failure EINVAL in pid:1128 [ 536.803548][T20144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 536.812257][T20144] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 536.820996][T20137] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.830859][T20144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 536.836158][T20137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.836187][T20144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1130 [ 536.845693][T20137] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.869198][T20137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.874165][T20147] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 536.879948][T20148] can: request_module (can-proto-0) failed. [ 536.900943][T15063] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.908485][T15063] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.919333][T15063] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.926435][T15063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.938663][ T2674] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.945770][ T2674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.993483][T20137] veth0_vlan: entered promiscuous mode [ 537.009838][T20137] veth1_macvtap: entered promiscuous mode [ 537.043310][T15063] Bluetooth: hci0: Frame reassembly failed (-84) [ 537.185257][T20156] 9pnet_fd: Insufficient options for proto=fd [ 537.210142][T20158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6749'. [ 537.219779][T20158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6749'. [ 537.240495][ T63] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 537.391682][ T63] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 537.399816][ T63] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.410012][ T63] usb 4-1: config 0 has no interface number 0 [ 537.417776][ T63] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 537.426953][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.435198][ T63] usb 4-1: Product: syz [ 537.439405][ T63] usb 4-1: Manufacturer: syz [ 537.444059][ T63] usb 4-1: SerialNumber: syz [ 537.449379][ T63] usb 4-1: config 0 descriptor?? [ 537.460473][ T306] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 537.613133][ T306] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 537.622408][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.630472][ T306] usb 3-1: Product: syz [ 537.634727][ T306] usb 3-1: Manufacturer: syz [ 537.639336][ T306] usb 3-1: SerialNumber: syz [ 537.646648][ T306] r8152-cfgselector 3-1: Unknown version 0x0000 [ 537.652972][ T306] r8152-cfgselector 3-1: config 0 descriptor?? [ 537.662021][T20152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.670616][T20152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.680937][ T63] usb 4-1: USB disconnect, device number 55 [ 537.784265][T20161] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 537.784303][T20161] rust_binder: Error while translating object. [ 537.796660][T20161] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 537.802919][T20161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1136 [ 537.840809][T20167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 538.036164][T20185] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6757'. [ 538.087279][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.105227][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.119912][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.130185][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.138116][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.145747][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.153484][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.161103][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.168676][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.169367][ T63] r8152-cfgselector 3-1: USB disconnect, device number 44 [ 538.178062][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.193426][T20190] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 538.194244][T20190] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 538.201376][T20190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 538.207453][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.210077][T20190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1162 [ 538.233370][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.250213][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.258350][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.265964][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.273427][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.280886][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.288390][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.296013][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.303654][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.311282][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.318738][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.326230][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.333701][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.341383][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.348939][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.356409][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.363857][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.371349][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.378745][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.386168][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.393953][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.401573][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.408974][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.416511][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.423959][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.431433][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.438850][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.446285][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.453741][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.461205][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.468606][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.476026][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.483445][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.490890][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.498328][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.505782][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.513232][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.520722][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.528129][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.535729][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.543198][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.550641][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.558041][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.565677][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.573183][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.580660][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.588062][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.595485][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.602943][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.610438][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.617907][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.625399][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.632887][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.640369][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x6 [ 538.647904][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x3 [ 538.655379][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.662853][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.670254][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.677683][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.685140][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.692619][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.700036][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.707491][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.714993][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.722444][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.729853][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.737347][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.744825][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.752537][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.760236][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.762084][T20197] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6761'. [ 538.767717][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.778109][T20198] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6761'. [ 538.784316][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.800882][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.808517][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.820270][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.828337][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.835910][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.843460][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.854837][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.867836][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.875394][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.883097][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.891458][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.898898][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.906480][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.913950][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.921435][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.929051][T20208] SELinux: Context o is not valid (left unmapped). [ 538.929088][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.937046][ T36] audit: type=1400 audit(2000032841.230:2629): avc: denied { create } for pid=20204 comm="syz.2.6764" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=C0B26F04FD [ 538.943774][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 538.966765][ T36] audit: type=1400 audit(2000032841.260:2630): avc: denied { associate } for pid=20204 comm="syz.2.6764" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=C0B26F04FD [ 538.973897][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.014437][ T36] audit: type=1400 audit(2000032841.290:2631): avc: denied { link } for pid=20204 comm="syz.2.6764" name="file1" dev="overlay" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=C0B26F04FD [ 539.026546][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.046398][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.054140][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.060526][T18467] Bluetooth: hci0: command 0x1003 tx timeout [ 539.061874][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.068688][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 539.075438][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.110741][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.118195][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.126647][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.135333][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.142880][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.150361][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.157840][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.165317][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.172770][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.180159][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.187948][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.195482][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.202931][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.210577][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.218053][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.225507][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.232969][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.240445][ T313] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 539.248180][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.255750][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.263453][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.271062][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.278741][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.286189][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.293671][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.301223][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.308847][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.312959][T20219] exFAT-fs (rnullb0): invalid boot record signature [ 539.316676][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.323417][T20219] exFAT-fs (rnullb0): failed to read boot sector [ 539.330328][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.337226][T20219] exFAT-fs (rnullb0): failed to recognize exfat type [ 539.344386][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.358369][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.365883][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.373713][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.381180][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.388574][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.396029][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.403484][ T313] usb 4-1: device descriptor read/64, error -71 [ 539.409937][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.417459][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.424936][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.432400][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.439813][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.447246][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.454678][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.462163][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.469586][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.477062][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.484542][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.491980][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.499387][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.506825][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.514301][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.521810][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.529338][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.536852][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.544489][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.552044][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.559623][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.567087][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.574509][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.581966][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.589560][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.597037][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.600455][ T8743] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 539.604476][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.619537][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.627177][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.634615][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.642059][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.649468][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.656921][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.664340][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.671763][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.679164][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.686600][ T313] usb 4-1: device descriptor read/64, error -71 [ 539.692922][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.700313][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.707776][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.715225][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.722670][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.730074][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.737542][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.744983][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.752474][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.759885][ T306] hid-generic 01FF:0004:0400.00A8: unknown main item tag 0x0 [ 539.768173][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 539.768189][ T36] audit: type=1400 audit(2000032842.060:2635): avc: denied { unlink } for pid=17199 comm="syz-executor" name="file0" dev="tmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=C0B26F04FD [ 539.781432][ T8743] usb 10-1: Using ep0 maxpacket: 8 [ 539.798721][ T306] hid-generic 01FF:0004:0400.00A8: hidraw0: HID v0.05 Device [syz0] on syz1 [ 539.812098][T20222] fuse: Unknown parameter '00000000000000000003' [ 539.843667][ T8743] usb 10-1: config 11 has an invalid interface number: 224 but max is 1 [ 539.853204][ T8743] usb 10-1: config 11 has an invalid interface number: 110 but max is 1 [ 539.861259][T20223] fido_id[20223]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 539.869319][ T8743] usb 10-1: config 11 has no interface number 0 [ 539.885587][T20228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 539.886858][ T8743] usb 10-1: config 11 has no interface number 1 [ 539.897937][T20228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 539.899992][ T8743] usb 10-1: config 11 interface 110 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 539.919384][ T8743] usb 10-1: config 11 interface 110 altsetting 4 endpoint 0x88 has an invalid bInterval 185, changing to 7 [ 539.931691][ T8743] usb 10-1: config 11 interface 110 altsetting 4 endpoint 0x88 has invalid maxpacket 18260, setting to 1024 [ 539.940480][ T313] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 539.943271][ T8743] usb 10-1: config 11 interface 110 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 539.962698][ T8743] usb 10-1: config 11 interface 110 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 539.973929][ T8743] usb 10-1: config 11 interface 110 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 539.985661][ T8743] usb 10-1: config 11 interface 110 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 539.985997][ T36] audit: type=1400 audit(2000032842.280:2636): avc: denied { remount } for pid=20230 comm="syz.1.6771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 539.996803][ T8743] usb 10-1: config 11 interface 110 altsetting 4 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 540.028092][ T8743] usb 10-1: config 11 interface 110 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 540.039024][ T8743] usb 10-1: config 11 interface 110 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 540.050037][ T8743] usb 10-1: config 11 interface 110 altsetting 4 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 540.052908][T20237] random: crng reseeded on system resumption [ 540.063543][ T8743] usb 10-1: config 11 interface 110 has no altsetting 0 [ 540.080449][ T313] usb 4-1: device descriptor read/64, error -71 [ 540.088159][ T8743] usb 10-1: Dual-Role OTG device on HNP port [ 540.094754][ T8743] usb 10-1: New USB device found, idVendor=0bb4, idProduct=0a5a, bcdDevice=d3.6e [ 540.104082][ T8743] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.112359][ T8743] usb 10-1: Product: গ맲미뾋앭䬞刂㤐候棯蚔陠䤉ꚾ괛潐ת씠抽ጳ㚈ርﻡ츋䜙ਝꛒ쯱홙䊏ꇥ뫥ꡮ䈉ᆉ⯞೙ꜳ돯猅쏪빼癒䋭붿ኴ傚嶂崄㉻됉꿣킺‮ⳳ퓪䯔鎜꧄꺴尤옔湉쟟䅎缅⺣푣Ὢ榡휌菷霽鼻ሔ滦蓐ꆭ괞愐ᦑﯡ櫫聩䐐步礭읆쇍卜鬅⣒⻓ [ 540.142731][ T8743] usb 10-1: Manufacturer: 娤넖犔ꎻ惗䁉ꀺ漢⤀ӗ䟎鎐୉멹ཆꥎ藹桝⧤롾␀沈垚푉펃䏭鴮鰈ꑽ縩錵됑ิ쯗練ᘃ虗廙Eꚬ鳮﻽ꂚ븣殙鯨ࢭ庘澈튌ꭦꪇᙿꡍ䮴牗쓔꽮罶褗땔噷⺼䁙⮞葮膞竄繶뢠╆즹⦞搝ꮵ溜ᮇ망쀇䏛混㈠̀ᇫ묄뎬뜵ꔒ੻棠蜤夂政볨ㄝ䒦︼胋䋑藂༬舤聋샭붊 [ 540.178693][ T8743] usb 10-1: SerialNumber: Ѕ [ 540.320458][ T313] usb 4-1: device descriptor read/64, error -71 [ 540.430582][ T313] usb usb4-port1: attempt power cycle [ 540.586736][T20219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.595399][T20219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.609907][ T8743] usb 10-1: USB disconnect, device number 35 [ 540.774624][T20249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 540.775288][T20249] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 540.775314][T20248] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 540.782022][T20248] rust_binder: Error while translating object. [ 540.790012][ T313] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 540.802453][T20248] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 540.808878][T20249] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 540.816449][T20248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1173 [ 540.826805][T20249] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1173 [ 540.849810][ T313] usb 4-1: device descriptor read/8, error -71 [ 540.861014][T20251] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 540.866491][T20251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1176 [ 540.873505][T20251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1176 [ 540.894102][T20253] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 540.903889][T20253] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 540.910447][T20253] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 540.918478][T20253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1178 [ 540.946414][T20255] binder: Unknown parameter 'stats5R_Xkg-%' [ 540.983522][T20257] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 540.991620][ T313] usb 4-1: device descriptor read/8, error -71 [ 541.029202][T20261] tc_dump_action: action bad kind [ 541.165391][T20275] binder: Unknown parameter 'fscontext?}' [ 541.201771][T20284] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 541.250486][ T313] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 541.281499][ T313] usb 4-1: device descriptor read/8, error -71 [ 541.411546][ T313] usb 4-1: device descriptor read/8, error -71 [ 541.440492][ T63] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 541.490505][ T8743] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 541.520516][ T313] usb usb4-port1: unable to enumerate USB device [ 541.590462][ T63] usb 10-1: Using ep0 maxpacket: 16 [ 541.596935][ T63] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.607967][ T63] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.617844][ T63] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 541.627026][ T8743] usb 2-1: device descriptor read/64, error -71 [ 541.633329][ T63] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.642160][ T63] usb 10-1: config 0 descriptor?? [ 541.880467][ T8743] usb 2-1: device descriptor read/64, error -71 [ 541.892739][T20288] overlayfs: workdir and upperdir must be separate subtrees [ 541.970818][T20297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 541.979504][T20299] random: crng reseeded on system resumption [ 542.004738][T20299] 9pnet_fd: Insufficient options for proto=fd [ 542.008437][T20296] rust_binder: Error in use_page_slow: ESRCH [ 542.011344][T20296] rust_binder: use_range failure ESRCH [ 542.017477][T20296] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 542.023297][T20296] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 542.032712][T20296] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:497 [ 542.052304][ T63] hid-multitouch 0003:1FD2:6007.00A9: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.9-1/input0 [ 542.091867][T20307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:500 [ 542.130488][ T8743] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 542.249791][T20282] rust_binder: Error while translating object. [ 542.249860][T20282] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 542.256399][T20282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:22 [ 542.268298][ T63] usb 10-1: USB disconnect, device number 36 [ 542.283592][ T8743] usb 2-1: device descriptor read/64, error -71 [ 542.520468][ T8743] usb 2-1: device descriptor read/64, error -71 [ 542.630601][ T8743] usb usb2-port1: attempt power cycle [ 542.648219][T20316] binder: Bad value for 'max' [ 543.118806][T20323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.127555][T20323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.150445][ T8743] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 543.167417][T20323] binder: Unknown parameter '9iŖ000p000100000000000' [ 543.201642][ T8743] usb 2-1: device descriptor read/8, error -71 [ 543.341549][ T8743] usb 2-1: device descriptor read/8, error -71 [ 543.350582][ T368] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 543.490449][ T368] usb 3-1: device descriptor read/64, error -71 [ 543.590455][ T8743] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 543.611618][ T8743] usb 2-1: device descriptor read/8, error -71 [ 543.661587][T20329] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 543.740466][ T368] usb 3-1: device descriptor read/64, error -71 [ 543.765699][ T8743] usb 2-1: device descriptor read/8, error -71 [ 543.890590][ T8743] usb usb2-port1: unable to enumerate USB device [ 544.030563][ T368] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 544.095611][T20351] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 544.160472][ T368] usb 3-1: device descriptor read/64, error -71 [ 544.224276][T20369] exFAT-fs (rnullb0): invalid boot record signature [ 544.230991][T20369] exFAT-fs (rnullb0): failed to read boot sector [ 544.237474][T20369] exFAT-fs (rnullb0): failed to recognize exfat type [ 544.244863][T20373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6816'. [ 544.259631][T20375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 544.259713][T20375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1201 [ 544.266950][T20375] rust_binder: Error while translating object. [ 544.276342][T20375] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 544.282699][T20375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1201 [ 544.304275][T20379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20379 comm=syz.3.6819 [ 544.327236][T20381] random: crng reseeded on system resumption [ 544.350454][ T8743] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 544.420565][ T368] usb 3-1: device descriptor read/64, error -71 [ 544.500430][ T8743] usb 10-1: Using ep0 maxpacket: 8 [ 544.506939][ T8743] usb 10-1: config 0 has an invalid interface number: 151 but max is 1 [ 544.515334][ T8743] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.525654][ T8743] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 544.534740][ T8743] usb 10-1: config 0 has no interface number 0 [ 544.541032][ T368] usb usb3-port1: attempt power cycle [ 544.546686][ T8743] usb 10-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 544.557689][ T8743] usb 10-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 544.569464][ T8743] usb 10-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 544.579492][ T8743] usb 10-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 544.589530][ T8743] usb 10-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.604113][ T8743] usb 10-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 544.613652][ T8743] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.621778][ T8743] usb 10-1: Product: syz [ 544.626054][ T8743] usb 10-1: Manufacturer: syz [ 544.630789][ T8743] usb 10-1: SerialNumber: syz [ 544.636175][ T8743] usb 10-1: config 0 descriptor?? [ 544.645224][ T8743] snd-usb-audio 10-1:0.151: probe with driver snd-usb-audio failed with error -12 [ 544.663639][ T9424] udevd[9424]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 544.844335][ T8743] usb 10-1: USB disconnect, device number 37 [ 544.880464][ T368] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 544.901476][ T368] usb 3-1: device descriptor read/8, error -71 [ 545.031504][ T368] usb 3-1: device descriptor read/8, error -71 [ 545.167896][ T36] audit: type=1400 audit(2000032847.450:2637): avc: denied { read write } for pid=20384 comm="syz.3.6821" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 545.189956][ T36] audit: type=1400 audit(2000032847.450:2638): avc: denied { open } for pid=20384 comm="syz.3.6821" path="/175/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 545.265126][ T2674] bridge_slave_1: left allmulticast mode [ 545.271459][ T368] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 545.280574][ T2674] bridge_slave_1: left promiscuous mode [ 545.286317][ T2674] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.301946][ T2674] bridge_slave_0: left allmulticast mode [ 545.302187][ T368] usb 3-1: device descriptor read/8, error -71 [ 545.313574][ T2674] bridge_slave_0: left promiscuous mode [ 545.329580][ T2674] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.444719][ T2674] veth1_macvtap: left promiscuous mode [ 545.450829][ T2674] veth0_vlan: left promiscuous mode [ 545.452178][ T368] usb 3-1: device descriptor read/8, error -71 [ 545.542701][T20399] binder: Unknown parameter '' [ 545.580988][ T368] usb usb3-port1: unable to enumerate USB device [ 545.715743][T20404] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.723671][T20404] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.732105][T20404] bridge_slave_0: entered allmulticast mode [ 545.740933][T20404] bridge_slave_0: entered promiscuous mode [ 545.762100][T20404] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.769780][T20404] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.781896][T20404] bridge_slave_1: entered allmulticast mode [ 545.788490][T20404] bridge_slave_1: entered promiscuous mode [ 545.884887][ T36] audit: type=1326 audit(2000032848.170:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20389 comm="syz.1.6822" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f7c1bd858e7 code=0x0 [ 545.950994][T20404] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.958087][T20404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.965472][T20404] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.972547][T20404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.002653][ T2674] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.010063][ T2674] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.020931][ T2676] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.028144][ T2676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.047736][ T2676] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.054864][ T2676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.083040][T20404] veth0_vlan: entered promiscuous mode [ 546.102554][T20404] veth1_macvtap: entered promiscuous mode [ 546.530477][ T45] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 546.681903][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 33101, setting to 64 [ 546.692894][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 546.705770][ T45] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 546.714896][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.723798][ T45] usb 2-1: config 0 descriptor?? [ 546.729795][ T45] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 546.860447][ T313] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 547.010453][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 547.017119][ T313] usb 3-1: config 6 has an invalid interface number: 204 but max is 0 [ 547.026289][ T313] usb 3-1: config 6 has no interface number 0 [ 547.036711][ T45] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 547.044642][ T313] usb 3-1: config 6 interface 204 altsetting 7 endpoint 0x9 has invalid maxpacket 20154, setting to 1024 [ 547.057268][ T313] usb 3-1: config 6 interface 204 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 1024 [ 547.067745][ T313] usb 3-1: config 6 interface 204 has no altsetting 0 [ 547.076268][ T313] usb 3-1: New USB device found, idVendor=0403, idProduct=ee18, bcdDevice=d0.44 [ 547.085525][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.093815][ T313] usb 3-1: Product: syz [ 547.098008][ T313] usb 3-1: Manufacturer: syz [ 547.102781][ T313] usb 3-1: SerialNumber: syz [ 547.111359][T20440] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 547.211951][ T45] usb 10-1: config 1 interface 0 has no altsetting 0 [ 547.220101][ T45] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 547.229324][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.237495][ T45] usb 10-1: Product: syz [ 547.241900][ T45] usb 10-1: Manufacturer: syz [ 547.246617][ T45] usb 10-1: SerialNumber: syz [ 547.320468][ T36] audit: type=1400 audit(2000032849.600:2640): avc: denied { setattr } for pid=20439 comm="syz.2.6838" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 547.324902][T20440] fuse: Unknown parameter 'gr_id' [ 547.352897][ T313] ftdi_sio 3-1:6.204: FTDI USB Serial Device converter detected [ 547.361225][ T313] ftdi_sio ttyUSB0: unknown device type: 0xd044 [ 547.372566][ T313] usb 3-1: USB disconnect, device number 49 [ 547.379216][ T313] ftdi_sio 3-1:6.204: device disconnected [ 547.463700][ T45] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 547.476855][ T45] usb 10-1: USB disconnect, device number 38 [ 547.484390][ T45] usblp0: removed [ 547.637936][T20477] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 548.110483][ T45] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 548.270487][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 548.276929][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.288433][ T45] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 548.297577][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.306525][ T45] usb 3-1: config 0 descriptor?? [ 548.570437][ T313] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 548.700443][ T313] usb 10-1: device descriptor read/64, error -71 [ 548.715697][ T45] kye 0003:0458:5016.00AA: control desc unexpectedly large [ 548.724220][ T45] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.00AA/input/input42 [ 548.738695][ T45] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.00AA/input/input43 [ 548.752200][ T45] kye 0003:0458:5016.00AA: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 548.916793][ T45] usb 3-1: USB disconnect, device number 50 [ 548.940456][ T313] usb 10-1: device descriptor read/64, error -71 [ 549.180460][ T313] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 549.310445][ T313] usb 10-1: device descriptor read/64, error -71 [ 549.341175][ T45] usb 2-1: USB disconnect, device number 77 [ 549.480133][T20508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13543 sclass=netlink_route_socket pid=20508 comm=syz.2.6858 [ 549.560441][ T313] usb 10-1: device descriptor read/64, error -71 [ 549.670562][ T313] usb usb10-port1: attempt power cycle [ 549.715746][ T36] audit: type=1400 audit(2000032852.000:2641): avc: denied { connect } for pid=20531 comm="syz.2.6865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 550.010692][ T313] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 550.041552][ T313] usb 10-1: device descriptor read/8, error -71 [ 550.171763][ T313] usb 10-1: device descriptor read/8, error -71 [ 550.290524][ T31] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 550.420474][ T313] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 550.441841][ T313] usb 10-1: device descriptor read/8, error -71 [ 550.448244][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 550.459315][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.469138][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 550.478294][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.487166][ T31] usb 2-1: config 0 descriptor?? [ 550.581468][ T313] usb 10-1: device descriptor read/8, error -71 [ 550.690547][ T313] usb usb10-port1: unable to enumerate USB device [ 550.901109][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 550.907150][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 550.915903][ T31] usb 2-1: USB disconnect, device number 78 [ 551.349588][T20569] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 551.428792][T20579] input: syz0 as /devices/virtual/input/input45 [ 551.554729][ T36] audit: type=1400 audit(2000032853.840:2642): avc: denied { remount } for pid=20580 comm="syz.1.6880" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 551.574900][ T36] audit: type=1400 audit(2000032853.840:2643): avc: denied { remount } for pid=20580 comm="syz.1.6880" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 551.740437][ T31] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 551.891849][ T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.902168][ T31] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 551.911292][ T31] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 551.920491][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.929531][ T31] usb 10-1: config 0 descriptor?? [ 552.380563][T20600] rust_binder: Write failure EINVAL in pid:1260 [ 552.394241][T20602] /dev/rnullb0: Can't open blockdev [ 552.421116][T20604] /dev/rnullb0: Can't open blockdev [ 552.760441][ T31] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 552.825731][T20614] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6890'. [ 552.921607][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.931877][ T31] usb 2-1: config 0 has no interfaces? [ 552.937375][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 552.946731][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.955585][ T31] usb 2-1: config 0 descriptor?? [ 553.026715][T20628] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 553.035525][T20628] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 553.044545][T20629] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6895'. [ 553.053609][T20628] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6895'. [ 553.080758][T20632] fuse: Unknown parameter 'f' [ 553.080758][T20633] fuse: Unknown parameter 'f' [ 553.092770][T20632] fuse: Bad value for 'rootmode' [ 553.310789][T20655] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 553.354008][ T36] audit: type=1326 audit(2000032855.640:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20656 comm="syz.2.6904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c4358e929 code=0x0 [ 554.378568][ T8743] usb 10-1: USB disconnect, device number 43 [ 554.503586][T20679] rust_binder: Write failure EINVAL in pid:116 [ 554.800455][ T31] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 554.946943][T20688] tipc: Enabling of bearer rejected, failed to enable media [ 554.961723][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.972997][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.983218][ T31] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 554.996392][ T31] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 554.997222][T20693] binder: Unknown parameter 'stts' [ 555.005614][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.019604][ T31] usb 10-1: config 0 descriptor?? [ 555.427152][ T31] plantronics 0003:047F:FFFF.00AB: unknown main item tag 0x0 [ 555.434804][ T31] plantronics 0003:047F:FFFF.00AB: unknown main item tag 0x0 [ 555.442302][ T31] plantronics 0003:047F:FFFF.00AB: unknown main item tag 0x0 [ 555.449735][ T31] plantronics 0003:047F:FFFF.00AB: unknown main item tag 0x0 [ 555.457244][ T31] plantronics 0003:047F:FFFF.00AB: unknown main item tag 0x0 [ 555.464717][ T31] plantronics 0003:047F:FFFF.00AB: unknown main item tag 0x0 [ 555.472166][ T31] plantronics 0003:047F:FFFF.00AB: unknown main item tag 0x0 [ 555.479592][ T31] plantronics 0003:047F:FFFF.00AB: unknown main item tag 0x0 [ 555.487034][ T31] plantronics 0003:047F:FFFF.00AB: unknown main item tag 0x0 [ 555.494481][ T31] plantronics 0003:047F:FFFF.00AB: unknown main item tag 0x0 [ 555.501918][ T31] plantronics 0003:047F:FFFF.00AB: unknown main item tag 0x0 [ 555.509341][ T31] plantronics 0003:047F:FFFF.00AB: unknown main item tag 0x0 [ 555.516777][ T31] plantronics 0003:047F:FFFF.00AB: unknown main item tag 0x0 [ 555.524478][ T31] plantronics 0003:047F:FFFF.00AB: unknown main item tag 0x0 [ 555.531974][ T31] plantronics 0003:047F:FFFF.00AB: unknown main item tag 0x0 [ 555.535543][ T368] usb 2-1: USB disconnect, device number 79 [ 555.539768][ T31] plantronics 0003:047F:FFFF.00AB: No inputs registered, leaving [ 555.559917][ T31] plantronics 0003:047F:FFFF.00AB: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 555.564816][T20696] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 555.582566][T20698] overlay: Unknown parameter 'mounts' [ 555.631771][T20686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.640598][T20686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.683390][ T63] usb 10-1: USB disconnect, device number 44 [ 555.920447][ T368] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 556.072101][ T368] usb 2-1: not running at top speed; connect to a high speed hub [ 556.080909][ T368] usb 2-1: config 0 has an invalid interface number: 181 but max is 3 [ 556.089097][ T368] usb 2-1: config 0 has an invalid interface number: 39 but max is 3 [ 556.097567][ T368] usb 2-1: config 0 has an invalid interface number: 191 but max is 3 [ 556.105980][ T368] usb 2-1: config 0 has an invalid interface number: 17 but max is 3 [ 556.114125][ T368] usb 2-1: config 0 has an invalid interface number: 225 but max is 3 [ 556.122345][ T368] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 556.131063][ T368] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 556.139765][ T368] usb 2-1: config 0 has an invalid interface number: 151 but max is 3 [ 556.147990][ T368] usb 2-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 556.157937][ T368] usb 2-1: config 0 has 6 interfaces, different from the descriptor's value: 4 [ 556.166949][ T368] usb 2-1: config 0 has no interface number 0 [ 556.180416][ T368] usb 2-1: config 0 has no interface number 1 [ 556.187880][ T2676] bridge_slave_1: left allmulticast mode [ 556.190608][ T368] usb 2-1: config 0 has no interface number 2 [ 556.199648][ T368] usb 2-1: config 0 has no interface number 3 [ 556.200637][ T2676] bridge_slave_1: left promiscuous mode [ 556.217877][ T368] usb 2-1: config 0 has no interface number 4 [ 556.219887][ T2676] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.230485][ T368] usb 2-1: config 0 has no interface number 5 [ 556.237850][ T368] usb 2-1: config 0 interface 181 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 556.237989][ T2676] bridge_slave_0: left allmulticast mode [ 556.249065][ T368] usb 2-1: config 0 interface 181 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 556.259177][ T2676] bridge_slave_0: left promiscuous mode [ 556.265989][ T368] usb 2-1: too many endpoints for config 0 interface 39 altsetting 243: 228, using maximum allowed: 30 [ 556.272488][ T2676] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.282494][ T368] usb 2-1: config 0 interface 39 altsetting 243 has 0 endpoint descriptors, different from the interface descriptor's value: 228 [ 556.302826][ T368] usb 2-1: config 0 interface 191 altsetting 8 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 556.313966][ T368] usb 2-1: config 0 interface 191 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 13 [ 556.327220][ T368] usb 2-1: config 0 interface 17 altsetting 40 has an invalid descriptor for endpoint zero, skipping [ 556.338279][ T368] usb 2-1: config 0 interface 17 altsetting 40 has an invalid descriptor for endpoint zero, skipping [ 556.349282][ T368] usb 2-1: config 0 interface 17 altsetting 40 has 11 endpoint descriptors, different from the interface descriptor's value: 0 [ 556.362627][ T368] usb 2-1: config 0 interface 225 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 556.373448][ T368] usb 2-1: config 0 interface 225 altsetting 7 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 556.384447][ T368] usb 2-1: config 0 interface 225 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 556.395398][ T368] usb 2-1: config 0 interface 225 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 556.406293][ T368] usb 2-1: config 0 interface 225 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 556.418583][ T368] usb 2-1: config 0 interface 225 altsetting 7 endpoint 0xD has an invalid bInterval 170, changing to 4 [ 556.429970][ T368] usb 2-1: config 0 interface 225 altsetting 7 endpoint 0xD has invalid wMaxPacketSize 0 [ 556.439925][ T368] usb 2-1: config 0 interface 225 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 556.451075][ T368] usb 2-1: config 0 interface 225 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 556.462383][ T368] usb 2-1: config 0 interface 151 altsetting 229 has an invalid descriptor for endpoint zero, skipping [ 556.473648][ T368] usb 2-1: config 0 interface 151 altsetting 229 has a duplicate endpoint with address 0xB, skipping [ 556.484763][ T368] usb 2-1: config 0 interface 151 altsetting 229 has a duplicate endpoint with address 0x9, skipping [ 556.495829][ T368] usb 2-1: config 0 interface 151 altsetting 229 has a duplicate endpoint with address 0x4, skipping [ 556.506829][ T368] usb 2-1: config 0 interface 151 altsetting 229 has a duplicate endpoint with address 0x3, skipping [ 556.517899][ T368] usb 2-1: config 0 interface 151 altsetting 229 has a duplicate endpoint with address 0x7, skipping [ 556.528907][ T368] usb 2-1: config 0 interface 151 altsetting 229 has a duplicate endpoint with address 0x6, skipping [ 556.539925][ T368] usb 2-1: config 0 interface 151 altsetting 229 has a duplicate endpoint with address 0xE, skipping [ 556.551002][ T368] usb 2-1: config 0 interface 151 altsetting 229 has a duplicate endpoint with address 0x4, skipping [ 556.562224][ T368] usb 2-1: config 0 interface 151 altsetting 229 has a duplicate endpoint with address 0x7, skipping [ 556.573381][ T368] usb 2-1: config 0 interface 151 altsetting 229 has an endpoint descriptor with address 0x4A, changing to 0xA [ 556.585426][ T368] usb 2-1: config 0 interface 151 altsetting 229 has a duplicate endpoint with address 0xA, skipping [ 556.598547][ T368] usb 2-1: config 0 interface 151 altsetting 229 has an invalid descriptor for endpoint zero, skipping [ 556.610819][ T368] usb 2-1: config 0 interface 151 altsetting 229 has a duplicate endpoint with address 0x2, skipping [ 556.621974][ T368] usb 2-1: config 0 interface 151 altsetting 229 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 556.633273][ T368] usb 2-1: config 0 interface 181 has no altsetting 0 [ 556.640131][ T368] usb 2-1: config 0 interface 39 has no altsetting 0 [ 556.646918][ T368] usb 2-1: config 0 interface 191 has no altsetting 0 [ 556.653953][ T368] usb 2-1: config 0 interface 17 has no altsetting 0 [ 556.660873][ T368] usb 2-1: config 0 interface 225 has no altsetting 0 [ 556.667752][ T368] usb 2-1: config 0 interface 151 has no altsetting 0 [ 556.676837][ T368] usb 2-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice=f0.a9 [ 556.686670][ T368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.695020][ T368] usb 2-1: Product: 㻧ᅶ砼陡᜶䲕䷳Ԃ憡ᥨ읆䊱⦏伻絵따梅檜믗冏❳欉䮫ꮼ鵙뮲⤿⥳ǭ㹄漅漤⎙⺠㊑󝪭궨⟍Ჴ뮃ꀁ揊쏊ᰧ풙 [ 556.712071][ T368] usb 2-1: Manufacturer: 泓䶲᧸큌歰븣쌩丳횅軜笗붖흝܋吓ᅏ鷃礈ﲫ誵劼蜙ꭀ餯웻⋑絵艹喿藕槵縜Ჱڶ멞痠脹檆魉ឰ鍀ˬ富ℱ묤䬂禾 [ 556.729656][ T368] usb 2-1: SerialNumber: ⒲蓶㧃ⵊ鉕엢쁆㣩胴ࡨꈔ討쎍⇙跞ᐙ়⇤ぃꃮ뇈퍶緑䄥ꈐ攀衢넋曫츆螜鷵쒚㙥耷뚷ἰ잢텬葁ᴞ밌欺嚸塖笇営욽ψ鯚溁Ѿ靈饼φ떅郏ᑗ뷉ᮃ௅娪풚鹐䱢싾諱잫✺樗휨覌跬쓲쏶鱀奭ῢ훻虐Ṍ귙㏡㼏挄烛㵙唼몙컄 [ 556.761772][ T368] usb 2-1: config 0 descriptor?? [ 556.767197][T20701] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 556.976479][T20701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.985095][T20701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.993706][T20701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.002307][T20701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.022278][ T368] usb 2-1: USB disconnect, device number 80 [ 557.218911][T20726] binder: Bad value for 'stats' [ 557.260189][T20728] netlink: 'syz.9.6929': attribute type 4 has an invalid length. [ 557.269591][T20728] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.6929'. [ 557.913156][T20740] binder: Unknown parameter '00000000000000000000004g|Y [ 557.913156][T20740] fJ.?SQxEZiW@~ZW c<Φ/b9' [ 558.289529][T20752] kvm: pic: non byte write [ 558.408822][T20756] rust_binder: 20755 RLIMIT_NICE not set [ 558.442725][T20758] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 558.448515][T20758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:159 [ 558.458412][T20758] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 558.474392][T20760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 558.474432][T20760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:159 [ 558.520624][T20766] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 558.529883][T20766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:167 [ 558.561476][T20768] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 558.581258][T20768] kvm: pic: level sensitive irq not supported [ 558.581335][T20768] kvm: pic: non byte read [ 558.592351][T20768] kvm: pic: level sensitive irq not supported [ 558.592401][T20768] kvm: pic: non byte read [ 558.779639][ T36] audit: type=1400 audit(2000032861.060:2645): avc: denied { setattr } for pid=20786 comm="syz.1.6948" path="socket:[110227]" dev="sockfs" ino=110227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 558.804508][ T36] audit: type=1400 audit(2000032861.060:2646): avc: denied { getopt } for pid=20786 comm="syz.1.6948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 558.830273][T20798] /dev/rnullb0: Can't lookup blockdev [ 558.927425][T20817] fuse: Bad value for 'fd' [ 558.945497][T20820] 9pnet_fd: Insufficient options for proto=fd [ 559.082427][T20844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1307 [ 559.082803][T20843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1307 [ 559.330424][ T368] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 559.490445][ T368] usb 2-1: Using ep0 maxpacket: 16 [ 559.497998][ T368] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 559.507267][ T368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.515333][ T368] usb 2-1: Product: syz [ 559.519514][ T368] usb 2-1: Manufacturer: syz [ 559.524198][ T368] usb 2-1: SerialNumber: syz [ 559.529472][ T368] usb 2-1: config 0 descriptor?? [ 559.535735][ T368] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 559.543635][ T368] usb 2-1: Detected FT-X [ 559.738582][ T368] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 559.755482][ T368] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 559.755528][T20853] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 559.766112][ T368] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 559.784288][ T368] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 559.803494][ T368] usb 2-1: USB disconnect, device number 81 [ 559.819312][ T368] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 559.834532][ T368] ftdi_sio 2-1:0.0: device disconnected [ 559.914100][T20863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:47 [ 559.950329][ T36] audit: type=1326 audit(2000032862.230:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.4.6975" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58b838e929 code=0x0 [ 560.053456][T20870] rust_binder: Write failure EFAULT in pid:50 [ 560.510437][ T368] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 560.651342][ T368] usb 2-1: device descriptor read/64, error -71 [ 560.804560][T20902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6985'. [ 560.890605][ T368] usb 2-1: device descriptor read/64, error -71 [ 561.130468][ T368] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 561.152369][T20925] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 561.152369][T20925] attempt to subtract with overflow [ 561.165507][T20925] ------------[ cut here ]------------ [ 561.171049][T20925] kernel BUG at rust/helpers/bug.c:7! [ 561.171803][ T36] audit: type=1400 audit(2000032863.470:2648): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 561.176937][T20925] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 561.199946][ T36] audit: type=1400 audit(2000032863.470:2649): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.205205][T20925] CPU: 0 UID: 0 PID: 20925 Comm: syz.4.6988 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 561.205239][T20925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 561.205256][T20925] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 561.227202][ T36] audit: type=1400 audit(2000032863.470:2650): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.240153][T20925] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 1d 17 7a 5b 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 57 d3 33 d7 90 90 90 90 90 90 90 90 90 [ 561.240178][T20925] RSP: 0018:ffffc90006bfda90 EFLAGS: 00010246 [ 561.240202][T20925] RAX: 0000000000000061 RBX: 1ffff92000d7fb54 RCX: 4df69d04d92d1100 [ 561.250986][ T36] audit: type=1400 audit(2000032863.470:2651): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.255545][T20925] RDX: ffffc90004e3f000 RSI: 0000000000002c34 RDI: 0000000000002c35 [ 561.255567][T20925] RBP: ffffc90006bfda90 R08: ffffc90006bfd787 R09: 1ffff92000d7faf0 [ 561.277699][ T36] audit: type=1400 audit(2000032863.470:2652): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 561.296624][T20925] R10: dffffc0000000000 R11: fffff52000d7faf1 R12: 0000000000000000 [ 561.296647][T20925] R13: dffffc0000000000 R14: ffffc90006bfdac0 R15: ffffc90006bfdaf0 [ 561.296672][T20925] FS: 00007f58b92a26c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 561.303437][ T36] audit: type=1400 audit(2000032863.470:2653): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 561.310986][T20925] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 561.311007][T20925] CR2: 0000000000000000 CR3: 000000014a450000 CR4: 00000000003526b0 [ 561.311028][T20925] DR0: 000000000000634b DR1: 0000000000000000 DR2: 0000000000000000 [ 561.332488][ T36] audit: type=1400 audit(2000032863.470:2654): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 561.339738][T20925] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 561.339759][T20925] Call Trace: [ 561.472449][T20925] [ 561.475394][T20925] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 561.482884][T20925] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 561.490902][T20925] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810 [ 561.501331][T20925] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 561.514900][T20925] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 561.525500][T20925] ? __kasan_check_write+0x18/0x20 [ 561.530632][T20925] ? _raw_spin_lock+0x8c/0x120 [ 561.535418][T20925] ? __cfi__raw_spin_lock+0x10/0x10 [ 561.540640][T20925] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 561.547857][T20925] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 561.555770][T20925] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 561.565673][T20925] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 561.576359][T20925] ? __asan_memcpy+0x5a/0x80 [ 561.580965][T20925] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 561.590701][T20925] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 561.600778][T20925] ? __kasan_check_write+0x18/0x20 [ 561.605913][T20925] ? _raw_spin_lock+0x8c/0x120 [ 561.610712][T20925] ? __cfi__raw_spin_lock+0x10/0x10 [ 561.615930][T20925] ? __kasan_check_write+0x18/0x20 [ 561.621065][T20925] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 561.630739][T20925] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 561.640704][T20925] ? is_bpf_text_address+0x17b/0x1a0 [ 561.646015][T20925] ? kernel_text_address+0xa9/0xe0 [ 561.651137][T20925] ? unwind_get_return_address+0x51/0x90 [ 561.656781][T20925] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 561.662953][T20925] ? arch_stack_walk+0x10b/0x170 [ 561.667916][T20925] ? stack_depot_save_flags+0x38/0x800 [ 561.673416][T20925] ? kasan_save_alloc_info+0x40/0x50 [ 561.678721][T20925] ? kasan_save_track+0x4f/0x80 [ 561.683588][T20925] ? kasan_save_track+0x3e/0x80 [ 561.688453][T20925] ? kasan_save_alloc_info+0x40/0x50 [ 561.693760][T20925] ? __kasan_kmalloc+0x96/0xb0 [ 561.698627][T20925] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 561.705319][T20925] ? krealloc_noprof+0x8d/0x130 [ 561.710189][T20925] ? rust_helper_krealloc+0x33/0xd0 [ 561.715397][T20925] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xb1/0x100 [ 561.724957][T20925] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 561.735474][T20925] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 561.744776][T20925] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 561.753650][T20925] ? __se_sys_ioctl+0x135/0x1b0 [ 561.758533][T20925] ? __x64_sys_ioctl+0x7f/0xa0 [ 561.763314][T20925] ? do_syscall_64+0x58/0xf0 [ 561.768010][T20925] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 561.774179][T20925] ? __kasan_kmalloc+0x96/0xb0 [ 561.779135][T20925] ? kasan_save_alloc_info+0x40/0x50 [ 561.784431][T20925] ? __kasan_kmalloc+0x96/0xb0 [ 561.789213][T20925] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 561.795817][T20925] ? __kasan_check_write+0x18/0x20 [ 561.800952][T20925] ? _raw_spin_lock+0x8c/0x120 [ 561.805735][T20925] ? __cfi__raw_spin_lock+0x10/0x10 [ 561.810954][T20925] ? __asan_memset+0x39/0x50 [ 561.815553][T20925] ? _raw_spin_unlock+0x45/0x60 [ 561.820418][T20925] ? rust_helper_spin_unlock+0x19/0x30 [ 561.825893][T20925] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0xdfc/0x1440 [ 561.836414][T20925] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 561.847188][T20925] ? kvm_sched_clock_read+0x15/0x30 [ 561.852428][T20925] ? sched_clock_noinstr+0xd/0x30 [ 561.857463][T20925] ? sched_clock+0x44/0x60 [ 561.861911][T20925] ? sched_clock_cpu+0x75/0x400 [ 561.866775][T20925] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 561.872856][T20925] ? xfd_validate_state+0x68/0x150 [ 561.877990][T20925] ? save_fpregs_to_fpstate+0x196/0x230 [ 561.883557][T20925] ? __cfi___switch_to+0x10/0x10 [ 561.888505][T20925] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 561.897654][T20925] ? finish_task_switch+0x13a/0x780 [ 561.902948][T20925] ? __switch_to_asm+0x3d/0x70 [ 561.907728][T20925] ? avc_has_extended_perms+0x7c7/0xdd0 [ 561.913289][T20925] ? __asan_memcpy+0x5a/0x80 [ 561.917896][T20925] ? avc_has_extended_perms+0x921/0xdd0 [ 561.923482][T20925] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 561.933054][T20925] ? do_vfs_ioctl+0xeda/0x1e30 [ 561.937840][T20925] ? __futex_queue+0x19a/0x340 [ 561.942624][T20925] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 561.948283][T20925] ? __cfi___futex_queue+0x10/0x10 [ 561.953410][T20925] ? futex_wait_setup+0x1bc/0x260 [ 561.958443][T20925] ? __futex_wait+0x218/0x2a0 [ 561.963168][T20925] ? ioctl_has_perm+0x384/0x4d0 [ 561.968037][T20925] ? has_cap_mac_admin+0xd0/0xd0 [ 561.972990][T20925] ? futex_wake+0x5fb/0x900 [ 561.977523][T20925] ? futex_setup_timer+0xb4/0xd0 [ 561.982478][T20925] ? futex_wait+0x288/0x540 [ 561.986986][T20925] ? __cfi_futex_wait+0x10/0x10 [ 561.991847][T20925] ? selinux_file_ioctl+0x6e0/0x1360 [ 561.997152][T20925] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 562.002717][T20925] ? do_futex+0x309/0x500 [ 562.007062][T20925] ? __cfi_do_futex+0x10/0x10 [ 562.011756][T20925] ? __fget_files+0x2c5/0x340 [ 562.016451][T20925] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 562.024964][T20925] ? __se_sys_ioctl+0x114/0x1b0 [ 562.029830][T20925] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 562.038966][T20925] __se_sys_ioctl+0x135/0x1b0 [ 562.043664][T20925] __x64_sys_ioctl+0x7f/0xa0 [ 562.048267][T20925] x64_sys_call+0x1878/0x2ee0 [ 562.052958][T20925] do_syscall_64+0x58/0xf0 [ 562.057391][T20925] ? clear_bhb_loop+0x50/0xa0 [ 562.062086][T20925] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 562.067983][T20925] RIP: 0033:0x7f58b838e929 [ 562.072406][T20925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.092022][T20925] RSP: 002b:00007f58b92a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.100445][T20925] RAX: ffffffffffffffda RBX: 00007f58b85b5fa0 RCX: 00007f58b838e929 [ 562.108423][T20925] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 562.116434][T20925] RBP: 00007f58b8410b39 R08: 0000000000000000 R09: 0000000000000000 [ 562.124412][T20925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.132390][T20925] R13: 0000000000000000 R14: 00007f58b85b5fa0 R15: 00007ffc65eb7798 [ 562.140375][T20925] [ 562.143412][T20925] Modules linked in: [ 562.148279][T20925] ---[ end trace 0000000000000000 ]--- [ 562.157275][T20925] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 562.163031][T20925] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 1d 17 7a 5b 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 57 d3 33 d7 90 90 90 90 90 90 90 90 90 [ 562.184174][T20925] RSP: 0018:ffffc90006bfda90 EFLAGS: 00010246 [ 562.190648][T20925] RAX: 0000000000000061 RBX: 1ffff92000d7fb54 RCX: 4df69d04d92d1100 [ 562.198813][T20925] RDX: ffffc90004e3f000 RSI: 0000000000002c34 RDI: 0000000000002c35 [ 562.207214][T20925] RBP: ffffc90006bfda90 R08: ffffc90006bfd787 R09: 1ffff92000d7faf0 [ 562.215367][T20925] R10: dffffc0000000000 R11: fffff52000d7faf1 R12: 0000000000000000 [ 562.215369][ T368] usb 2-1: device descriptor read/64, error -71 [ 562.215394][T20925] R13: dffffc0000000000 R14: ffffc90006bfdac0 R15: ffffc90006bfdaf0 [ 562.237788][T20925] FS: 00007f58b92a26c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 562.246940][T20925] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 562.253764][T20925] CR2: 0000001b2e91fffc CR3: 000000014a450000 CR4: 00000000003526b0 [ 562.261878][T20925] DR0: 0000000000000000 DR1: 0000000000000099 DR2: 0000000000000000 [ 562.269921][T20925] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 562.277966][T20925] Kernel panic - not syncing: Fatal exception [ 562.284412][T20925] Kernel Offset: disabled [ 562.288750][T20925] Rebooting in 86400 seconds..