last executing test programs: 9m24.427564108s ago: executing program 32 (id=2837): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x128, 0x0, &(0x7f0000000600)="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"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = fcntl$dupfd(r0, 0x406, r4) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f00000000c0)={0x4}, 0x2) ioprio_get$pid(0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000001580)='setgroups\x00') r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x4e22, 0x0, @local}}}, 0x32) writev(r6, &(0x7f0000000180)=[{&(0x7f00000002c0)="76ffe48ee64e6399c435319c5e7ecd874689db141aae82c241cdb3266bfebe537c59775250468805a2ac209a229832dce6ede7dc4309856ed41f64e943cef7bee69c2c6662b3bc6b9678e4bf0b0d45c77f328efd69c071beaf4218cd6cae7fb3b109f7361ef9df9b6ec094d9df4ff0c6b0c63fd005a2f0a8ed6952d75d4ae8b1aea2205440ec02619b17b3758fec2938f97c45359de600c4000000002b704d", 0xfffffe3b}], 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x6c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000940)={@ptr={0x70742a85, 0x0, &(0x7f0000000800)=""/153, 0x99, 0x0, 0x23}, @fda={0x66646185, 0x3, 0x0, 0x33}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x28, 0x48}}, 0x400}, @decrefs, @increfs_done, @register_looper], 0x0, 0x0, 0x0}) 7m53.919984107s ago: executing program 33 (id=4270): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 5m30.419191011s ago: executing program 1 (id=6694): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mlockall(0x1) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x0, 0x1012) getuid() r2 = socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r3, &(0x7f0000001300)=[{0x0}, {0x0}, {&(0x7f0000001580)=""/4101, 0x1005}], 0x3, 0x1, 0x3, 0x10) r4 = epoll_create(0x3) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) epoll_create(0x7) r6 = epoll_create(0x0) ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f0000000040)={r6}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r0, 0xffffa000) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000080)={r4, r4, 0x9}) 5m30.158124573s ago: executing program 1 (id=6698): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @rand_addr=0x64010102}, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x2b, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='macvtap0\x00', 0x2, 0x711e, 0x6d77}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='auto_da_alloc', &(0x7f0000000b00)='8\x00\xfa\xb8F\n9\xea\xbe\x92\x1eY\xbe\xd7\b\xa7\xc4\x19\'\xaaF\xc6< \x06\xccf\xa7\x10[1\xbc\xd5*\xb2\\\xa8\xb1p\x99X\xd0\x96\x87\xf9\x18\x94\xca-\xe9T\xf1\f4\x19\x9b\xda\xd0\x1fJ\xb4\xc8S\xadbo\x1b2\xfd\x1c6\x9c=\x89D\xafIhg\a\xae\x9cn{\x18\':\xf0\xbe\xa7\xedxm\xe2,\xe6\x01?\xe9DI\xecY\xb3~0h@\\\x91\xc13\x17T\xc7\xe0\xe2\x02\x15ur\xae\xdeB<\x16\x02\xebg\xd9x\xb1L\x82\xdcI~r\x85\xd5\x1d\xb18\x88\x1d\x11\xb3-AR]53n\n\x81K\x7fA\xb2x\x94\xa9\xfe\xa11\x12\x18l\x7f\xd5k\xb5$\xc7I\xbc\xf3\\\xe8\x16I\x95A\x05\xcd\xdf\xd2\x02e\xab/N\x9fb\x19O\\\x19w\xebW\xfb\xef\xcf\xd0\xa9\x98\x98\xc3H\xcf\xce\xaf\x9eERa\t\x92\x0e\xef\xbb9:\x81\xbf\xae\xe5n\x0eo\xbe\f\xe0\x96\x047\x15!\xff\xf4\xe7\xe7\xa6\xc6&$\x0e3\xa1z1n\xa3\xf9\xa0A\x85_\x98f\xae\xd3]f\x97\x80?\xaa\x80|b\t\x02\xd1a\xf2\xdf>\xea\v\xa5\"\xfeI\xcd\x87\xea\xde\xd6?)\x1bt\xbe\x11\x89\xb5+.\xf5E\x87\xf4\xb1tH,|\xa4\xba\x81\xa1\x88\xac\x1b\xa8U\xa2\xc1\x89XO\xccK\xcd\xa2Xo-\xcb\x11KQy\x8c\xb9\x9f \xf1\xce\x06\xc1\x89\xfe\x0fP\xbb\x8ee\x11\xdaA\xd8\x1f&\xe0\xd2\xb4ksA\xae\"$\x03wU\xfc\x96\xd2n\xcc\xc6\xb4\x05\xe6s\xe7G\x98\x88\x80\x82\xd9\x9e\xf2B\xb4I\xe0L\a\b_\x15\x14\\a\xbf\xf3\x02\x03\xdbF\x19\x0eQ\x1d\xdd\xfa1\v\xdc\x87\x17\x85\xd0bU', 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/42, 0xffffffffffffff54, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) memfd_create(&(0x7f00000000c0)='binder\x00', 0x3) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4000, &(0x7f0000000180)=ANY=[@ANYBLOB="f99409acc38f4834b7efb3df230b281dcb4518de146a5e06a4612788c120a15a4e959c42d3a867f3ec4d2fc817b9b2de44f008ff8481dc2becd696c7094914d7f82d8c6bfeb2a2923258ec650787c19cfee7bbee3698416770fdc90ed5009fae28029a9e6c989886346e434a561926d483e8a243504bed19186baa5e29822a380eb0e0a3b81163aec6da0c232fb8195658c16be2b5b53d0d306a245b69c02b8236e5a932565ba83df478bf7d92edf1cb673b11498ed321c6a9b67e3faba0da647a39d789fd50a9177c9115b293f57eadcb57550fb6195b3a49683672b200a4e8502e440e2bbeade6"]) 5m30.065059584s ago: executing program 1 (id=6699): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000280)={0x1, 0x1ff, 0x1, 0x3, 0x9d, 0x8c, 0x11}, 0xc) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xb0e, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xc, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x4, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[], [], 0x2f}) prctl$PR_SET_MM_EXE_FILE(0x38, 0xd, 0xffffffffffffffff) ioctl$BINDER_FREEZE(r1, 0x400c620e, 0x0) 5m28.916570523s ago: executing program 1 (id=6713): preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/130, 0x82}], 0x1, 0x5, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="4011af000000b7"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000002140)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@favordynmods}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) stat(&(0x7f0000000100)='./file0/../file0/../file0\x00', &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) creat(0x0, 0xc7) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) lstat(&(0x7f0000000080)='./file2\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, 0x0, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r4, 0x1) flock(r4, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, &(0x7f0000000180)) 5m25.877388497s ago: executing program 1 (id=6737): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 5m25.765671188s ago: executing program 1 (id=6738): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x20000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0) ftruncate(r3, 0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000068a000/0x1000)=nil, 0x1000, 0x2) syz_pidfd_open(0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000400)="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", 0xc01) 5m25.717939908s ago: executing program 34 (id=6738): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x20000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0) ftruncate(r3, 0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000068a000/0x1000)=nil, 0x1000, 0x2) syz_pidfd_open(0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa", 0xc01) 4m48.508278189s ago: executing program 4 (id=7289): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x6) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) (async) r2 = syz_open_pts(r1, 0xc0000) r3 = dup3(r2, r1, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) write$tun(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="00000a0162e0e95d038b2ffffe80000000000000000000000000003fff010000000000000000000000000001000000416800000000000971670000002b0802810000000000000120010000000000000000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000353b12020700000000000000000000000000000000000000012001000000000000000000000000000220010000000000000000000000000000fe8000000000000000000000000000aafe80000000000000000000000000002420010000000000000000000000000002fe800000000000000000000000000020ff020000000000000000000000000001fc010000000000000000000000000000060404020918090000000000000000000000000000000000fe8000000000000000000000000000bb0c21880b00f00000424b0cb6fb7ec8bf63fb8acfe6d02719ad6d264474a46d5f010507c7966b0713b19e74666c014c3b54ea162d18f1ead7aa1b014dd3604c4c9efd2b2b8b6c37459db3c47806959df7ff4922634af70cc75d8d33e07ece011f9b867af60f1cfbbdd4f6c38ff97cce9e9d6f094a4c1836ca0c76e23ab592dfed6c37c00be991ca0186ef02f829f80ec73fe1a3042575114084e36b5376a8eb184c0ba753bed492c7a3f1cff7941d8668fb6fc5ad7b18ab1020f5d9412ac9b41bc19632dc1587608f1187bf217ec67b31f4f320c7f2ddab6aff7a24be79457bbe48e2aa280921329caad47a39d13baf27dd2b04c870034b26080008006a5d7bc4786fc8a7314743f8bf560ba8c3bc84ca17d4764d50e7a00c0086dd000fcfef10004dd4c64d61939f8ceb39dda8d5819ddf6df9b020cbc506b18ccec94548a4df340ed1b452acf68dd62a12de26847422e6e10dfd664eb5ef09520edfdce663ec71acefe373992b002ed4d52c4964c6ef84220f0ae26c3c5b28ec5bd7d61739773dc05b7760944339138e8590a0ea27d9505f44ad965ef1747e06fe4108bd30e99caeb7c4357168b6080088be0000000312052f100100000000000003080022eb000000012305a30102000000000000550010871b080065580000000019ae1525f8edf355b9bea9303894ceeb218d54daebc17083c650d6975df5e2f2b6ca24a9b23e1454b1fd556d951af1d722e88952e35a38ba38cb1d2143f9b68701643a450d3c301296562bb9400d71e6188b688ab7ad01e1b65ebf73e4689f33a46c58bc8e5c96fb1abd2f23ab814e75e1ea684adb124b34cdfbbecb1f340c15341324524196b1a1a929c177cc8b7db19b217267799fb1"], 0x3b7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) (async) exit(0x21b) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xfffffffffbfffffc) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KDGKBSENT(r5, 0x4b48, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0xa) (async) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000040)=0xa, 0x4) bind$inet(r10, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x30, r0, 0x6ce45000) 4m48.47718638s ago: executing program 4 (id=7291): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x0, 0x7, &(0x7f0000000080)=0x4}) r5 = syz_open_pts(r1, 0x42) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, 0x0) dup3(r5, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m48.307098081s ago: executing program 4 (id=7297): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendto(r5, &(0x7f0000000140)="1a09d21635124c1f706c117b105f", 0xe, 0x4, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @multicast1}, 0x4, 0x3, 0x0, 0x801}}, 0x80) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000844}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_cmd={0x7, 0x1, 0xa, 0x6, 0xfb, 0x46, 0x7f, 0x8, 0x7, 0x10, 0x9, 0x0, 0x5, 0x1, 0x5, 0x7, [0x20001, 0x4]}}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x1, 0x1db57f03, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) sendto$inet6(r8, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r8, 0x0, 0xfdef) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4, 0x94aa, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r7, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) 4m48.262112782s ago: executing program 4 (id=7298): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000800)="3ba89b5705167f13fbfe66815bf33fc62296a46953", 0x15}], 0x1}}], 0x1, 0x4000000) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) (async, rerun: 64) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x3}) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 4m48.258939131s ago: executing program 4 (id=7301): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) lseek(0xffffffffffffffff, 0x7fa2, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000000280), 0x0, 0x20000844) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5b, 0x0, &(0x7f00000004c0)="4f84c5c9eef338537e76ad8a092e365ae98f929d26e5c4f567197d8b57101453f8135417d200c19d2b2b4b6c41325dc57f3950be7ef26962dc51794064ff0bb20ce3be242896d5bd7f5538798659d897714a236f8a8f8116967ded"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = socket$inet(0x2, 0x2, 0x6) getsockopt(r4, 0x200, 0xfb1, &(0x7f0000000040)=""/172, &(0x7f0000000140)=0xac) 4m48.116030563s ago: executing program 4 (id=7306): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x3100a, &(0x7f0000000140)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x6d, 0x38, 0x30, 0x2d, 0x35, 0x18, 0x30, 0x31]}}, {}, {@grpquota}, {@huge_always}, {@quota}, {@size={'size', 0x3d, [0x32, 0x31, 0x32]}}], [{@func={'func', 0x3d, 'PATH_CHECK'}}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_targets\x00') recvmsg$can_bcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/35, 0x23}, {&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/93, 0x5d}, {&(0x7f00000003c0)=""/230, 0xe6}, {&(0x7f00000004c0)=""/86, 0x56}, {&(0x7f0000000540)=""/131, 0x83}, {&(0x7f0000000600)=""/184, 0xb8}], 0x8, &(0x7f0000000740)=""/4096, 0x1000}, 0x2000) (async) recvmsg$can_bcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/35, 0x23}, {&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/93, 0x5d}, {&(0x7f00000003c0)=""/230, 0xe6}, {&(0x7f00000004c0)=""/86, 0x56}, {&(0x7f0000000540)=""/131, 0x83}, {&(0x7f0000000600)=""/184, 0xb8}], 0x8, &(0x7f0000000740)=""/4096, 0x1000}, 0x2000) 4m48.088046063s ago: executing program 35 (id=7306): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x3100a, &(0x7f0000000140)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x6d, 0x38, 0x30, 0x2d, 0x35, 0x18, 0x30, 0x31]}}, {}, {@grpquota}, {@huge_always}, {@quota}, {@size={'size', 0x3d, [0x32, 0x31, 0x32]}}], [{@func={'func', 0x3d, 'PATH_CHECK'}}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_targets\x00') recvmsg$can_bcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/35, 0x23}, {&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/93, 0x5d}, {&(0x7f00000003c0)=""/230, 0xe6}, {&(0x7f00000004c0)=""/86, 0x56}, {&(0x7f0000000540)=""/131, 0x83}, {&(0x7f0000000600)=""/184, 0xb8}], 0x8, &(0x7f0000000740)=""/4096, 0x1000}, 0x2000) (async) recvmsg$can_bcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/35, 0x23}, {&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/93, 0x5d}, {&(0x7f00000003c0)=""/230, 0xe6}, {&(0x7f00000004c0)=""/86, 0x56}, {&(0x7f0000000540)=""/131, 0x83}, {&(0x7f0000000600)=""/184, 0xb8}], 0x8, &(0x7f0000000740)=""/4096, 0x1000}, 0x2000) 3m44.265738173s ago: executing program 2 (id=8623): r0 = socket(0x2, 0x3, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x323}, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8927, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) bind$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{}, 0x4}}, 0x10) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2250841, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f6e74657874ccf0d4f0a0f6dfb097750ffd644b249703fe5b379200ee000000000000000007c92e93c31fddfe210a7dce7e4826fd7f4632b5d0e66a0a22fad0cb3ba2947304b0a836d8f38fef28bc5e678c991b93d8ebb9e0c7c4e4d47fb2ff277e82ab6b30e17d5da4ea582b8d3a4a935537b607561e05f979759f561ef6a964436c26d18a932c74b24cedb4b773b3d83da44b4384e2699dddf798792aaeaf1fb82d2ca650a920a19cf54a1d123b8c38c07cc67d36ca5596edf4af92d1bae16c90c15b75badd7409ece5e6fa7b6490a090"]) 3m44.263267843s ago: executing program 2 (id=8624): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x101a02, 0x190) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) fsopen(&(0x7f0000000300)='ext3\x00', 0x0) r2 = syz_usb_connect$cdc_ncm(0x4, 0x9c, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0x50, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "1662b435"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0xe}, {0x6, 0x24, 0x1a, 0x8, 0x10}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x800}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x49, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x420, 0x3, 0xd6}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xb, 0x10, 0xe0, 0x10, 0xc}, 0x4e, &(0x7f0000000140)={0x5, 0xf, 0x4e, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x28, 0x3, 0x0, 0x67, 0x29}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "43dddfd467a9a7477948ba3d0db17692"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x8, 0x0, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xc, 0x3, 0x8001}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x6, 0x7800, 0x7, [0xc0, 0xf, 0x0, 0xc0]}]}, 0x2, [{0x24, &(0x7f00000001c0)=@string={0x24, 0x3, "f11652a71a65f7fb3a24c890e60dd4be1cf9bd1e09a46e466144817bdc2b149f1015"}}, {0x101, &(0x7f0000000440)=@string={0x101, 0x3, "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"}}]}) syz_usb_disconnect(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 3m43.549741038s ago: executing program 2 (id=8631): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@cred={{0x18, 0x1, 0x2, {r1, r2, r3}}}], 0x18, 0x40804}}], 0x1, 0x14008004) (async) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x284200, 0x0) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000000400)) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r5, 0x12) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1) 3m43.520961978s ago: executing program 2 (id=8633): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x20140, 0x123, 0xe}, 0x18) (async) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x20140, 0x123, 0xe}, 0x18) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0xd) (async) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0xd) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f0000000100)="9d35b40b829f3e0d131033f2f5077844c59a80b0d2dc036fde1fd656bcc6adb659c6355c41d96e27e57a2b1958b5e66a2e6595b8ef03f83b98b680f1f45c7c66a69cd3afc5bcabc31df3cbadf02f07733c898c5604e8c29937da4dc515b07724e3fb824fcfa9849c7132544d9f1f235a61f5fffcc8d16e8362ad54d0796f", 0x7e, 0x50, &(0x7f0000000180)={0x11, 0x3b15889c4b720c87, r0, 0x1, 0x3, 0x6, @random="d2ca8af16bdc"}, 0x14) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$sock_buf(r3, 0x1, 0x37, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=0x1000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x20, r4, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffe9b, 0xc}}}}}, 0x20}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = syz_io_uring_setup(0x307f, &(0x7f0000001340)={0x0, 0x9dc9, 0x2, 0x1, 0x136}, &(0x7f00000013c0), &(0x7f0000001400)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x4000010, r5, 0x0) setrlimit(0xd, &(0x7f0000001440)={0x3ff, 0x9}) read$FUSE(0xffffffffffffffff, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000003500)={&(0x7f00000034c0)=""/61, 0x3d}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000003540)={0x10003, 0x1, 0xdddd0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000003540)={0x10003, 0x1, 0xdddd0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) openat(r1, &(0x7f0000003580)='./file0\x00', 0xe0801, 0x610a2eaeddcd0337) (async) r7 = openat(r1, &(0x7f0000003580)='./file0\x00', 0xe0801, 0x610a2eaeddcd0337) sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f00000036c0)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003680)={&(0x7f0000003600)={0x70, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x48) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f00000036c0)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003680)={&(0x7f0000003600)={0x70, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x48) r8 = openat$incfs(r1, &(0x7f0000003700)='.log\x00', 0x80002, 0x20) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000038c0)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003880)={&(0x7f0000003780)={0xf4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) fcntl$setpipe(r2, 0x407, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000003900)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000003900)) brk(0x3) lstat(&(0x7f0000003940)='./file0\x00', &(0x7f0000003980)) (async) lstat(&(0x7f0000003940)='./file0\x00', &(0x7f0000003980)) fchmodat(r7, &(0x7f0000003a00)='./file0\x00', 0x4) (async) fchmodat(r7, &(0x7f0000003a00)='./file0\x00', 0x4) brk(0x4) connect$inet(r7, &(0x7f0000003a40)={0x2, 0x4e21, @private=0xa010101}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), r8) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), r8) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003b00)={0x34, r9, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x28000001}, 0x24040000) 3m43.520253169s ago: executing program 2 (id=8636): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) write$tun(r1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x11, r3, 0xf648e000) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r4, r4, 0x22) (async) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x1, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x1000007fd) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x3f9, 0x400, 0x70bd28, 0x25dfdbfb, {0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x40008a4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}], 0x2, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000100), 0xffffffffffff945c, 0x183002) ioctl$LOOP_SET_STATUS(r11, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0x6f, 0x3, 0x4, 0x0, "a8c498f0829f306d6b73b88d047489033b615635567a97da72d94937cadd2cfd60ff99674e6a3be57ef2ede7094a08b6570ff40fdde5bae89670f3dfb78afa4b", "612cbb72f5504225e2e31fdff186c5a1a3803df85977b9ca6be480609d750551", [0x7, 0x1]}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000000000000004800", [0x0, 0x3]}}) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000280)={0x29, 0x4, 0x0, {0x6, 0x9, 0x1, 0x0, [0x0]}}, 0x29) (async) close_range(r9, 0xffffffffffffffff, 0x0) 3m43.465347169s ago: executing program 2 (id=8637): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_connect(0x5, 0x962, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xdf, 0x2, 0xf, 0x0, 0x1}, 0xf3, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41c}}, {0xb2, &(0x7f00000012c0)=@string={0xb2, 0x3, "a5541871b8883fe33dda11cc459c82f818acbc451222205711d13b2fe109f3ca851acbd9ac44726824dc56cc1fba769649484770a523c214be222e679232d065ca68fefe2cb6b2a93c203eb96f8cb00944f20a9aa55e54c885c263529972df54403026f38343c1bd162ddcded9ac64c6d123b50d879d64052b03a2b6634b9b7eaaf7352e99f17fe497d4450fda3a4ec95ed18404f627d6b538391239e1920624a9e5954e4c59636e9ebde9997d561a30"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x1007}}, {0xeb, &(0x7f0000001380)=@string={0xeb, 0x3, "41a33efa5fd0709764d5d381804f18ad95fc66d05fcbecd55a9445438b61d5297fd9ffa54743a4f69d630b8e4986cea9e9cb5cfee576f77c7a85e151ac8a3fe212cb28e2bcded0fa7e9be71e3b734d99ecae3b4a3f2b04081afc6363ccb949adf920f9612152348fe4cbb5daf7a117d183e70cff7e58b297cd94618c267b11be2ea26be9c8efa4663442f0e2fe19feb9be216ec945d38e86a869fe8cb72bfbb7d39b10e09020ab00b8d3f4651e90cb44c7adfc45ddebb6b4373de60dbe0c361a4df022b3a214514e1eadfd82f7ae1acc421b6b7cb91403c3e8f4b0ee27343c4caa0caa3f282d5f35c3"}}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000f00)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d8b8db0a8cf30b574493579f5aa8ac474685beeb1982fb7990b363256dacda9524b620f392459894d8d832ef63a4c2e9d1cc32a29d64ee350ec94d1e46f6f9b0578e02ee471066b4767f3dd71b3461d235eba041163281f43a1f7a545644b44e5300b854268a99d6194afcfad47cfdadbaced8e9e4ce6d9df9b31c4200a"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x8e, 0x5, 0x0, {0x0, 0x0, 0x0, 0xfffffffa}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x800) umount2(&(0x7f0000000680)='./file0\x00', 0xa) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000040)={0x2, 0x4}, 0x2) r8 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000680)=0xfeab) fchown(r6, r9, 0xee01) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) clock_adjtime(0x0, &(0x7f0000000200)={0x7fffffff, 0x8000000000000001, 0x80000001, 0xd6, 0x9c7, 0x2, 0x100, 0x400000000000d5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e8, 0x8000000000000001, 0x6, 0x8, 0x9, 0x1fc00000000, 0x100, 0x6, 0x2, 0x1, 0x8, 0x1ff, 0x8001, 0x4}) mount$bpf(0x0, 0x0, 0x0, 0x958028, &(0x7f00000003c0)=ANY=[@ANYBLOB="161a368f1e5e36c4847dd43dc0027be29a95f1ed5e0bf766601e0600f53440d7055286"]) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x132) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000080)={0x1060, 0x10000, 0x40000000, 0x20000, 0x4}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff67, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0}) 3m27.412511474s ago: executing program 36 (id=8637): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_connect(0x5, 0x962, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xdf, 0x2, 0xf, 0x0, 0x1}, 0xf3, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41c}}, {0xb2, &(0x7f00000012c0)=@string={0xb2, 0x3, "a5541871b8883fe33dda11cc459c82f818acbc451222205711d13b2fe109f3ca851acbd9ac44726824dc56cc1fba769649484770a523c214be222e679232d065ca68fefe2cb6b2a93c203eb96f8cb00944f20a9aa55e54c885c263529972df54403026f38343c1bd162ddcded9ac64c6d123b50d879d64052b03a2b6634b9b7eaaf7352e99f17fe497d4450fda3a4ec95ed18404f627d6b538391239e1920624a9e5954e4c59636e9ebde9997d561a30"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x1007}}, {0xeb, &(0x7f0000001380)=@string={0xeb, 0x3, "41a33efa5fd0709764d5d381804f18ad95fc66d05fcbecd55a9445438b61d5297fd9ffa54743a4f69d630b8e4986cea9e9cb5cfee576f77c7a85e151ac8a3fe212cb28e2bcded0fa7e9be71e3b734d99ecae3b4a3f2b04081afc6363ccb949adf920f9612152348fe4cbb5daf7a117d183e70cff7e58b297cd94618c267b11be2ea26be9c8efa4663442f0e2fe19feb9be216ec945d38e86a869fe8cb72bfbb7d39b10e09020ab00b8d3f4651e90cb44c7adfc45ddebb6b4373de60dbe0c361a4df022b3a214514e1eadfd82f7ae1acc421b6b7cb91403c3e8f4b0ee27343c4caa0caa3f282d5f35c3"}}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000f00)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d8b8db0a8cf30b574493579f5aa8ac474685beeb1982fb7990b363256dacda9524b620f392459894d8d832ef63a4c2e9d1cc32a29d64ee350ec94d1e46f6f9b0578e02ee471066b4767f3dd71b3461d235eba041163281f43a1f7a545644b44e5300b854268a99d6194afcfad47cfdadbaced8e9e4ce6d9df9b31c4200a"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x8e, 0x5, 0x0, {0x0, 0x0, 0x0, 0xfffffffa}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x800) umount2(&(0x7f0000000680)='./file0\x00', 0xa) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000040)={0x2, 0x4}, 0x2) r8 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000680)=0xfeab) fchown(r6, r9, 0xee01) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) clock_adjtime(0x0, &(0x7f0000000200)={0x7fffffff, 0x8000000000000001, 0x80000001, 0xd6, 0x9c7, 0x2, 0x100, 0x400000000000d5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e8, 0x8000000000000001, 0x6, 0x8, 0x9, 0x1fc00000000, 0x100, 0x6, 0x2, 0x1, 0x8, 0x1ff, 0x8001, 0x4}) mount$bpf(0x0, 0x0, 0x0, 0x958028, &(0x7f00000003c0)=ANY=[@ANYBLOB="161a368f1e5e36c4847dd43dc0027be29a95f1ed5e0bf766601e0600f53440d7055286"]) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x132) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000080)={0x1060, 0x10000, 0x40000000, 0x20000, 0x4}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff67, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0}) 2m25.237206672s ago: executing program 7 (id=9469): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/60, 0x328000, 0x1000}, 0x20) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/216, 0xd8}], 0x1, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000040)={0x0, 0x0, 0x98, &(0x7f00000001c0)={0x46, 0xfffffffffffff985, 0x14}}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x40000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000004c0)="01445b42b1c71723ca3f6ef7e2d6d22698196e7cee045655561afeb5e1450dbbb12782b5a9b8ed08d09eff79bf636a44e662", 0x32}, {&(0x7f0000000500)="6a102f0cc72bcf4bae54add8b5341a17dba5f0b313d1dbe57cc9d3f526c8d10fe425d2525c63624889682e81343f775a3fd0a350a14b0d7ade9a85658229a807c261679e5ac307da146f4f4ef0e185fa3bbd1c409c21e70fa6dd90d06ab570620b78ab660b45c9f0a0f2f7dd1a743f0873d91717e6be3557e245e593ca2fda025de30c2f143db9b2a5a26be31d2d48216b1ed174ac00"/163, 0xa3}, {&(0x7f00000018c0)="5658dcfe92291af3bfffeac421b5eb0c947167f7350f301a82d89332936e73d258c8a24809000000a8cc1383a6f367db9618b1cb06e8854829f2f22a6da79ab3407c1398e6b604ebf0017a883706cdc56a7af1739bf8ffffffffffff97a47394d25d06000000000000006f407780a44f95acd22d5307925251f1dce014dfa4b84fdb2e31cb3224119cc3353c7518694e33d93f4ebea39565e50bd88aea05c89ffbdf0700478a942be60eb5e2e3fa07850912e78a00009cf06b769fe9a095b33d8a173bb975b7debbbc89588c9f2c87876e787e36249a065b94d127a913cd7367bc8a06", 0xe3}, {&(0x7f00000003c0)="4bda39e57d605f6e5b37588670ab8603a1d3c992e4572e9c4b4b0871e837b2f114e134a6cd8afdf9d499e905e9e3e36ceaa76375811f2a949369baeba6d118d933bbbec91e961ff864ff3bdf8a0871e1c4b45648f37fb7d608469bfdde8868a82140ff36c6bfef5409f22a3510f57752aa0442d4d2cd563d6358549c677ec2f7d622a0b8da6ea056570df927e081882eb979cdd237a54cc12d46103647d03cb06c2f12d5d318041ef08dd5ea82cfeb4a7a874caea35fe7dfd471af4925c5e8a1c1742b97b474f136cf40f6", 0xcb}, {&(0x7f0000000780)="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"/4151, 0x1037}, {&(0x7f0000000080)="08011a855986a9420a411d90f440db9899ded1941fde601498169f03530c188d1b8380e77a608eb985bd0f", 0x2b}, {&(0x7f0000002000)="c3df6b44bf0000000000000000a58a46ae04c8481612a5909452b5b0ab8ab20df0de6a2a7b72d3e712eceb4a965e6d70b2b9305efa4150bd441e6672567880ab24e033be0403bdcbfd6b38f332edf516a81f784084b5cd530321eeb75bf20a84cbdd48fc74c7a3e3b4800af747cc33017247010000007cfdb48063f79bc3492b5c6e6566464480ffffffff06ffffeca2149da037aa9f996c271ec51afe1e16b96e345f96ec6350e5cc978a038dd2f505", 0xb0}, {&(0x7f00000005c0)="37d6396e2fb6d46211e88b2f4bfed89d81f99f2de944ed7f55e60c80b6768b9f1eec9123b122f3d7ce6b0a3ae78c0625b368f5fff58105172a40cff4742292bc82de9240473d6da86ce4523e1803a6ca15d4cba7edc41856af4830562aa0a7939ad29eff4096765de7802142bdb00800e3d18b74be75631ad3526883a315c36bb92e465e22ccc6239bf44af9753148963900000000000000000400000a0000000000000033c64bddd1190f000000275b56362cff", 0xb4}, {&(0x7f0000000680)="241263ce2f40d51a677c746efd7b47490598cb8067fb19260248bb9a3537cc7b8e1e8da4af10ad5e3ce14ee96625738727161826e96673a990efeb359e8964693bd7765572db5c623aff9afce4ce3ce54acd17c9a09378fa5a9157194f7ce8e796b64e8c5de1430ad8dd7edf90484d03ad1ddfa49e7ce57f427a75901abef7103b3cef42d10c7a1217386ed1a6e09083da49968bf81e6eaf535339c28e7517753e2797b5671a8bed3cd645", 0xab}], 0x9, 0x0, 0x0, 0x240088d4}}], 0x1, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r7, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002180)=""/123, 0x7b}, {&(0x7f0000002200)=""/147, 0x93}], 0x2}, 0x5e}], 0x1, 0x3, &(0x7f0000002300)={0x77359400}) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000002340)={{&(0x7f0000205000/0x1000)=nil, 0x1000}, 0x3}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000e0e2473bd36443b6eb1fe6ac000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) 2m24.433286778s ago: executing program 7 (id=9483): prctl$PR_SET_IO_FLUSHER(0x34, 0xfff7ffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x97, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000102505a1a440000102030109028500020105d0050904000001020d00000524060001052400ffff0d240f017fffffff020007000006241a0004300c241b09000000810d060009072414050000100c241b0002050007060600000524150e00052415090009058103000003dd070904010000020d000009040107"], 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000180)=0xfffffff6, 0x4) listen(r1, 0x5) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000020001c000000200ff"]) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r7 = gettid() r8 = getpid() rt_tgsigqueueinfo(r8, r7, 0x5, &(0x7f0000000280)={0x0, 0xa4, 0x6}) r9 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r9, &(0x7f0000000740)=""/384, 0x200008c0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) r10 = dup2(r6, r6) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x3) syz_fuse_handle_req(r10, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x0, 0x0, 0x0, 0x40) ioctl$BINDER_FREEZE(r0, 0xc0046209, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{0x0, 0x1, 0x8, 0x9, 0x800, 0x80000001, 0x31, 0x8, 0x0, 0x5, 0x0, 0x1, 0x88a1, 0xfffffffffffffffb}}) 2m24.254043619s ago: executing program 8 (id=9489): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r1) clock_gettime(0x9e77661b8e7af6c7, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ad91510cc1720109e400102030109021200010800800709048a0500a7fc6f07"], 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x2}, @clear_death={0x400c630f, 0x3}, @acquire, @exit_looper, @clear_death={0x400c630f, 0x1}, @clear_death, @exit_looper], 0x0, 0x0, 0x0}) 2m22.985057619s ago: executing program 8 (id=9491): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 2m22.97428683s ago: executing program 8 (id=9492): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x450}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) poll(&(0x7f0000000040), 0x0, 0x7) (async, rerun: 32) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) (rerun: 32) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, 0x0) (async) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, &(0x7f0000000380)) (async) sendfile(r0, r0, 0x0, 0x80000004) 2m22.86546674s ago: executing program 8 (id=9493): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x13, r0, 0x58f1a000) 2m22.86483182s ago: executing program 8 (id=9494): syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001ff000009090585cfa9"], 0x0) r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = eventfd2(0x800, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x7, 0x1, r2, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r3}]) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000080)=[{&(0x7f0000002040)="0cbeeaf0", 0x4}], 0x1, 0x3) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000197305e07af0300000000000000", @ANYBLOB="0400"], 0x1c}], 0x1}, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x11, &(0x7f0000000100)=0x8, 0x4) faccessat2(r5, &(0x7f00000000c0)='./file0/file0\x00', 0x1c0, 0x100) 2m21.65399691s ago: executing program 8 (id=9495): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xffffffff}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) write$FUSE_INIT(r2, &(0x7f0000001740)={0xb0, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}, {@noxattr}, {@version_L}], [], 0x6b}}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) read(r5, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x402, 0x5) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r8 = openat$incfs(r6, &(0x7f00000002c0)='.log\x00', 0x101400, 0x113) sendto$inet6(r8, &(0x7f0000000500)="dd39cfe737dddfb3d8fe311b9bda983918e49d04289ccdd0aae97fc790e9f95e7c4a1c9132a31b197fe77718e7ee82f073a04aeb2f42ee9fa62026c05d2a082ba21283cd3539b36e14df7b984f9e168be6268acf2665b9f0e164aa654f7e81d5873de2ebef076c1a58deb3415057d0e0d7f5d51a92be3ccf4eef8ece1a5b1e218c4a7d137a5c99d9bf4554f5c452ecebc7c3909f6a2b34ae6c01cdbd6fd9d184270c9152a1b1f44d26919cbac602e273fef615e9238c743d1627e865fa32ca3d8839d86d12f2", 0xc6, 0x24000400, 0x0, 0x0) r9 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r9, r7, 0x0, 0xffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r7) 2m21.120568664s ago: executing program 7 (id=9501): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) (async, rerun: 32) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000002, 0x1012, r0, 0xcc019000) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000008504"]) (async) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000000)=""/152, 0x98}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000000140)=""/138, 0x8a}, {&(0x7f0000000200)=""/76, 0x4c}, {&(0x7f0000000280)=""/245, 0xf5}], 0x6) 2m21.045270595s ago: executing program 7 (id=9502): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x75, 0x103901) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x5, "5a77bd318786aeb879ca62cdab2a02fa560186d85bf61681905db88235fc9a1bd77ff66f6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c8fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7b070000003635b2ee97c143f28def4b73905ca14d90d1f600"}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) r2 = syz_io_uring_setup(0x5d12, &(0x7f0000000040)={0x0, 0x9c0b, 0x8, 0x2, 0x228}, &(0x7f00000000c0), &(0x7f0000000100)) r3 = syz_io_uring_setup(0x16c7, &(0x7f0000000180)={0x0, 0x5dd4, 0x0, 0x1, 0x3c3, 0x0, r2}, &(0x7f0000000200), &(0x7f0000000240)) io_setup(0x7, &(0x7f0000000080)=0x0) io_pgetevents(r4, 0x7, 0x0, 0x0, 0x0, 0x0) r5 = eventfd2(0xabc2, 0x40801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) r7 = eventfd(0x3dc) io_submit(r4, 0x5, &(0x7f00000006c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x1, r3, &(0x7f0000000280)="6058a4b66d5a79b3fdd06bdf6742b9133d4a33c69376be6e9f133256c002d813a1fd8667083009616345cd541e27712b1c9b2201f271692f70cd9c92f7998cc12a7fdf2cfb98f2c599bbe51d58155dd98191ea6eaded383b47b45d88d0fecaf62b5132c1cc913484a6d8a694a27a5ed12e77f589e79e269de8175c1d947ee8cc97b25742fd33f91efce49bc9d8de1117a01518856e0d4ce5c2e633", 0x9b, 0x0, 0x0, 0x3, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0xdf, r0, &(0x7f0000000380)="42449881ec18722d7d87924e318a2455473860aad6b950523cb34468fa6cc1b0c7ed7f1b3045a42c1f325ee3c1a881ceafabe60a68a60b73f6faf7e534393d292548493c7782555b30f6b7f45f1dac4f7a3e1ea07f8458d2f99085f5b573cb3d91c527ad90b1fcb9a464cf4d5caa8a46158aa3d35be03cbdf1997089e73557d7ed472854f8d525edaa6be1930d5a83c86531084b5b623af609d8349f0579e0546702", 0xa2, 0x70e}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, &(0x7f0000000480)="f6aa7bdba08a4db89a466d806d51abbbd3cf1ca8ea77fe601e9b83fe9005a1a48734fe4f8e067dddaa957ee96ed18f508488c4c48761d45005fb74f608ac989489259e29e52139268c975e691ed2d01caf66216e2b3d7fc81fbff321ae34b654aa831fe88c06ecde234172fcc5dfe0116381f771521d4bb62d1b8a85749462edf4c6ec867182af50e56c0bc6b095f1de996ce025b7", 0x95, 0x6, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, r6, &(0x7f0000002740)="8ba6d32fe786202abc62004b6ed22201afc3cd8789d1c8765d2789d33f6b5ca3234a2a3b8bc3604a96479a2a2d35ec9f913040e7aceaad68ffa5653764825dad15ebb1219569276e2b4834a47d08ea3c2087ee9c40c09612af140c99af9e5654b3f299cb813f0592d39987d6aeae5585ad941b604d8dc649886b0c8116a69003c8feaee6278b6f4c8cf14d99d42f9eaba9d2625a6883841cc8de5fe7efe5e56a9a270a5791e49a9dd1d66802266e92d2a3b662343d0657ab9a9d3261a761b46ca1b02bb77729bd149e4b0857d6fb23d944d01d982b598852fca1a99696e64f28029747c680b4f218ff6c1dec961b0dac28c46648ed696ad217fea31335750dbeb6737253589a573aedc6d984e2b9703f80bc3d16fd49452498719c87c246fd5ef7788391e112bb60546b8a34c65474ecc154b60c2d6ef0a39a03e24dd691f1ba609d510ba26300058e94282591276a2eb7453a49268cecff8d444b95e30c47a858cc70613d98cc2a86e7b7e55f143658a9bcb16b42edd52fc0514df1751b8537daa4d99519ae8e66788a2e21e5be362fd2fbc478b9a9504a90891598bb837618468fbc72be122f49310dad98ad6a7207507cf671d5c2f20525d383973efe26ebe546ea7d8c3b8d2277aa946321aa58e9587dde9316879ae0f497e5d9a297f72b0c2d6ab6dda2614a6e38fb3e5b6055a90a0f23ab9e497a0e5ba0d3f2d8f096df56bcf702ebcd63710a986448588de939afd6072ae654d24da79c07f7e73857d71b1ab7725859f7b4ed50762e636b6753139c2568d9c014fc9978a2ddd2ca44281dcfdf37dbeaaf1c02d2b93a153f1b0296a2ee79b926611cb4d946972ac693f6d48a7522cf47b6a8618d8fba68050ef76c2653f932050f295210baf651bcb75aa3d4f83d2fa3386c765b7c7a2761ba17681b8b867fc7178e0bddc192a3426b4c1b831c5ae1e1187b93c42d92a1a5c096a0352bfd335524df5e3ea75d3604bf26fae94877b1db54c69eacaa31469384d47f01a6380b5385168d842cab0ab1ad21e80763051e86d426d14231ba084043a0fd6e87d33a62be2929cd20eb2341caf0d11467b48f38e74ce4c4a3fa616ac33996b9f135084378fe0f3cfa0ba90cf98be9da8d7f54a4687199aff4ddf30b119ca839b2e2cbe0acf45597e70d14b39369eb5b63a61dccd91468b76539f9df776ced8418cca045bcc61aa5e5eeb022fed17508f5471411604fe38e5e29519a0513b211a1726b156c4f1afe1451006564066fefb8350cee656495dc45814ac6a978ae59e025ab1f47d26f59a8520b181b1bb5b9272ee97fcca522340252ba0d71239155cd43e7cde0a5bfdf5a119fe84e186211966996007fabc6152307716d5c68e3ab558a65860a1517ec9e1f4ccccb5f785996bfe699bafda0bba5116941e17f1dac7f1daf6ed164afe6dbec3d7f59892fbae146e569acf037d765ce5696481a6dc7853d76823d0d1f685be1f98856a97f81377e709665f0a9a3a01cb502f65208c86da407ee845c087f899775ea361dca12f090852d2b1a2d51d5426d6a5c9d790e0601f098da35b53ca93d2a8fbfcd29e586049903b7c75f7eed3e7b995bada87d32dc9be65f08ecea864562a972212d6a83f9cc63c95aa0912d78bc67b978a2955891f620eafedd37ba174c8eefc6488e90bb105a3b49a52893bd91271bb2bda433e0544b9c817f69cc2d194d0346ad07789c8a9d7642334f99c316addfba3fb60bc86ea529d1bb810b75c429c7ff3cdbe8842e9df381709367c58107e4347b03df1687fd28c6db614e4954d48dfc033a0660ffc8ea6428dd797c91fd15fabf5bb8159b09480a2ede359cd215bd4304b53e3719cb48dcb9ca9aa1757d5cd5aa25b942d2f5adf274d54eaacd6324de596cce8c2bdb14569f393992d8b88b348c51e52af3445655e84d3df984385a2db1e0c29639d7e4bff958370ba8eec855871b1a8e471202c604598a974a7524458736fd86800357f9b7e1c8795173451b5ae04d4fda78581ff2879e412b50d1a4d3063c765ecf3553b54271b3f7c3fbdc4b605b3001cd2156ef8b1644df8ff890bab3eb48f2b59a800fdd931ec81e61b6574f79e4b2f7ed904047a099287bb34faaf7ec17b7d30abeae0002563b6da275591c0193a4757063da18e673dd9c2299eea232c99653a34bfadeb40857c5f81f52d07dee2ee06daa4383ee1865e016780b55c44e151ab40f2052e6a60a2f7da0ee5a40a3bd23e160c958e9e76d41ddd42f41e59fdc8cf34dae19e7b7ecafe2418bd88a7dfbfc40c33d7a2677113141baef6e98ca939f348e2c4e1c938fcc53c7f5371e391877e40427543a3094fe9748d6be998a25ac02ab69a4753f9941c72d0df5da04740560607841783d6487910f2d4b71d27c05938570c7ca0cac88ed4ab2da072c0e3804ea905f809c42b69125c1d164f534b89481d5dcc992de3b3ca10eed8f872e51bd876a9523f5c73a3f8f21db4845477b518d226dc05d00e1f356e50389e337a1d2e7f668174ee52b34ea04e9d711eee0be158c6ed5779af84fe03d2183861432d522b4c70bcd565b0ca626ca6d088ba522a0f9dc4605c5449b562f161e33f43fec6f902cc8aad0d12fb97cd7de6e41b1a551f4301d6bee517558d80f586d9d0452ceaffd633c8c79ace67b92398945e66069a1b6f7b875262b0016a78333d4dca9636d61ebeea84d0f577d336e370560549ecec1f6afaef1d4426e90016c80d29f7781b74f43a2bd1f209adb8206e0895bff99b1d350f5efbc1e6113756416d35a7bd3aec14e4406b69f2b74704004f2f7fe43c76b298a0b0c1841db60ab07367e99da5f7414070380c4d70c73108b864a7568320f74690c559a706e2a22be9f9b4315c0afecadd286c75c2179e7b26df5882a681c0e11e1077f4b5f19d8df1036ada0a2b2b507928909932969753bafb2e4ff48e5d3ecb71263f59fae1fff793662e89a766f807994464e1b2dd507fefe9b7093820418724788d67d6a82e4b1147f6adaa3fb0711eb63fa0bd8eec1404f4dac6305ba028499feb6f880686ab390a4ec8fce5c988c9f3656daf5994e89eccab55308f51e26edfeb2bdd72c5ae6c01df6b8a964f08bc60484542fddf873204e91686f3bf385ffabf924597d02204c987ac028e48137aaab8cf9de09034b6187caf041511b98ceabd749ae88b8e8f61f537df7ff272154e3d7db6685580ae2e83d509f0d55ce308eb9b210e815ebe6c3b6e07073fbfb1c83e5e140a62851250b0bdfcd5b759a1c38a1634d8820b75885e7ab055ec5a307c850b0544e9174910b8a6a3591f0443498f623b198c7f9361d79223eac0e2b47333f3de5f59b510758d0a9f7775173cf794ad7fe6577d9e6f50487e2682f4c5d4b71ae8f5962a2c7a0ed3f523df457f129857d92ed2196630414b8315c150e2abfc823010c0d8c548a81329493a033e2ce4d740ee9d83bf97cf67efed8c64ddf69d5902c19de0037b44d142397b665e49e13dcc1cde14b41cf4bf4a5fbb59f6c7a3d33ae9f636389ee4e71789e0bad38c052102db3e6adaecfe8b5deea9e2af04cdf4580b3e90c87c5e1492ca6f0fc64c373d847e658f78263a08d9441cb74efca6a3bb8f07170eb807489306562b71a7e975b45577983cdf9bacc2d12622b3a48ac11a4517a18b69b4c52d5906ad1bb48a4b15c5c85100d6c6bfe7e3c9471080ca46a333c1f126e9e508897a8b964c6b7a16960a39536941c187f95a549d73a2c9ac3bfb1d36c61115e2096f34a36cca8aa8b876e6999506843a0f559d07d608553eff3ce9dd37a634cfa8b1d142771205f7743008643ef3d24f7a2140d347a30ea7a4915e8d6d669107982164b0dd6b6e7401311caf27fa18ff00f2ba9a1c9dfaaecca820d3098ee3351aea77f4e9d2273be9c1852f407767d1ccd112aaae48e9b47a97c3cd2776422f0aafd108c29a20ab772db99a9297e7d8aad1d32b600e817a2b53f5a784613cc0fc987c7ca20e9efc4b9bb11be0965409d6eb29d0d62a777766449a2db0a97e9fc1d48aa31d711915b9a5d3a713709194452fdb2beb493240b36b46767f84abc0a0cd30bc400c1bfb552492805d5247fc0fc92a3d6e7ac99e21089f5bb429ffbe6db0a40650fdc90e84be0692bf249bc637f5b9752ff1d59ffda18e2fba5dbd27832e59d041657a90488bac7d4f1f4868ba799495b5ab15e456ddf528d9cbfe61c6ef388dcaec408e9e0c0eececcdaf1f2e1b163a8594864769976b391936de1e12e04829bcb4e5d3cdaeb187134ada664adc4b5aa0e664674caa9a5a67e88a912b06d440c793103a93181b7354f6de221c9704bf0f5fe3336d050dbd15e7692a0216483165514c4d86f978b9c489107710a7e2733455e1c9e631d1e9bac58d6b93c795fd5cdb5b7a5294af651aaf24cc8e6bc739a7db657120e8369c236195246ea43f91681276b6bf18face9cb99d8514cd848fb8f6afd77a6c4b913864aaeaf265f4abe547f08df398a0cc2b5fc6c29f83d367aaebced353ac6f81fc73f9c92f3e92c529ba3ceb55b6028ef6710d951b5c657a611bac2dd41a7cc3573417d1d3361fd1013fc1bbee80315e6a9b53f7cc1b7cac3094887c79bb32d50df2afa87e62ce82f5103d4ebe5031004fad70ed73bfe82e3211e3e500a77bf93d481a73281c1eb27ca6ddd8a7550ed94e4a3804b27bda2be3d64ac4dbe19588e9e5fe66537147e21a7dd3f46479b435b73ed67a2cccb064cf500008f5b7dc7238a7be3b6188acdc556b81cb8b6b61126112975a3ca6624446469fc6022661d6eb6cde3f6c5f7489c3c876ec9eda82d9240b4a300631cfafafe99ca21ab4c08f2fc98a8a1d914a269e47f2eb633b782c378c6e81c61c36cad65ccf66d28dc6516599ff88a71a26e0d8b3f17889274383028e083ee8fa5a8e1e6bfae056ac2c8213a241be625c18b5767d070142669aca15af20279afd737e5bcacde2b47debe5786a59b1a86011dda9f9930d3a705de1f999c8d7ae37d7ee74caa03af04c7feb5dfcc5040bcd903983aca23c60ad14cb1875a0c4fccca1d46d828b34b69c7de8954cabfef3eaf9a5083454d8c0eade724699051c8179abcd76a0b53d8bdfb2dd7c855ce96a74e66d19b523cdb7b74eefcd031df907ace34dc2b9c2de7625c5c90afbb3c26110f739e7567122ee2da9c6cdc99eeac6710e83e9b6fbe3f1ac87a8b09d355c564e633500ec3723ab836e850840409b3200047e8c7011d92d351532e1b4f7f2496c19839621c7220b81f2e1009a667df46e53debc4e251260bfb376e497b266e3288bb2a08522aa09417ac93bb127567be6ebc1ac2644816d8e07d32eb08a228d8fa958b65c58b18b654a07454f3ce9358bd7bcb968dcf6b9aa024a55e362e80630fd0198b1a605f0f2db765c6b91e0506147f1553fca7646dd707bff2047740b0cada3042f3e69c4e7eae883e934680a70973a4990a0de93f3bfec74e641737f500ca0ddb3ff739dccd0027aed72c0a95293187f0d9a346533a07c37d7864605266f5fe4a0927a33850f041332f0663e4b4cdb00222b5d1473a683bcbc2ff26c0e5328f1bdab606da5e24ed79717621906a3229500e53cdb8805a73cb67ba223deec69ea0e3bad448e477645891f2498aba06fda35f7c9486d58de4ddec9c2dd78f827a7332ac3ecf398e7722ec7c898b2c82bac3d273d6ed9c0aa82b64b44f7c60d7a199f11b7bcd5ba3f5f9d42404eb44a7fa575b32b3f41b6afa134d7d4036c6ca070bae1661dfd2d04d86e225bd260cf1b6d83a", 0x1000, 0x7fffffffffffffff, 0x0, 0x2, r7}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0xedb6, r1, &(0x7f00000005c0)="c16c51149fad179fec8e1d8ac8302b6facce26fd54906a16d9450bf21e45137e0550f550aec37f2f5fd1cb1d8b16c07cbd9d9b6fb373010836ec4348071d70f73ccd7c8ceace41a67c2ba5abf835f071caf23bcecb1d30a574262094b70458fd597c65b58d5e6e2241697ecc98043ec0cd1eea3171c70749c5984b77b2e06fbe7d907e360d2c0dd5ed8eac3517d54fc3499fa2b783eecc2089", 0x99, 0x453b, 0x0, 0x2}]) 2m21.043829514s ago: executing program 7 (id=9503): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) recvfrom(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x103, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x202, 0x40) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000800)=ANY=[], 0x28) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000008010000001400020077673100000000000000000000000000080005000120"], 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20000050) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000009, 0x32, 0xffffffffffffffff, 0x3000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1, 0xc10, 0x1, {0x77359400}, {0x77359400}, {}, 0x1, @canfd={{0x2, 0x1, 0x1, 0x1}, 0x14, 0x3, 0x0, 0x0, "fa7efc9b891e7fa191c62a9dda33ee9b37c8238ac55837db30d8f04a1417b4ee1a7f5a04e75d3c8ee5c25b21ca5f8782270b9673950de954657a186d30f16359"}}, 0x80}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r9 = socket(0x8000000010, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x804) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 2m21.012588105s ago: executing program 7 (id=9505): quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 2m5.201662929s ago: executing program 37 (id=9495): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xffffffff}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) write$FUSE_INIT(r2, &(0x7f0000001740)={0xb0, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}, {@noxattr}, {@version_L}], [], 0x6b}}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) read(r5, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x402, 0x5) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r8 = openat$incfs(r6, &(0x7f00000002c0)='.log\x00', 0x101400, 0x113) sendto$inet6(r8, &(0x7f0000000500)="dd39cfe737dddfb3d8fe311b9bda983918e49d04289ccdd0aae97fc790e9f95e7c4a1c9132a31b197fe77718e7ee82f073a04aeb2f42ee9fa62026c05d2a082ba21283cd3539b36e14df7b984f9e168be6268acf2665b9f0e164aa654f7e81d5873de2ebef076c1a58deb3415057d0e0d7f5d51a92be3ccf4eef8ece1a5b1e218c4a7d137a5c99d9bf4554f5c452ecebc7c3909f6a2b34ae6c01cdbd6fd9d184270c9152a1b1f44d26919cbac602e273fef615e9238c743d1627e865fa32ca3d8839d86d12f2", 0xc6, 0x24000400, 0x0, 0x0) r9 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r9, r7, 0x0, 0xffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r7) 2m4.978639681s ago: executing program 38 (id=9505): quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 50.189339696s ago: executing program 5 (id=10322): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xf, 0x0, &(0x7f0000000080)) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000000000000004800", [0x0, 0x3]}}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 50.189025216s ago: executing program 5 (id=10323): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x800, 0x0) setuid(0xee00) fstat(r0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x62400, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noxattr}], [{@subj_type={'subj_type', 0x3d, '#'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@uid_gt={'uid>', r1}}, {@appraise}, {@obj_role}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>', 0xee01}}, {@dont_hash}, {@euid_eq={'euid', 0x3d, r2}}, {@flag='nomand'}]}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = memfd_secret(0x80000) unshare(0x22020400) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x4) r7 = openat$cgroup_ro(r6, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) readv(r7, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) read$rfkill(r4, &(0x7f00000000c0), 0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4c24, @broadcast}, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x187, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2ff, 0x45, 0xd6}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x1d, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 50.185764216s ago: executing program 5 (id=10325): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001e00210000000000000000000700000005000000000004000a0002"], 0x28}}, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000380)={0x9a5, "aaa41a472088c4ce2d3878ce1e93dfdd7eb8190756adea8b433e4f053d616807df1c65c7d340421a5dbafec7c320f7b9453d70e62165eb6ed1d7ab5744426eff2dbfa501ace70bfa599c8ce3f62ed19b86fb878d7444e764b4922c4a3c84439c4b88d460840da4c9e1c16a43d6c28080473c6d52a33eba660a01d6324e44af2ac2cb51f08228c6e9788cbb9afc7280132d36ce779b647d73733d7f7b0ddf49a2f8a2d301b2213515b6df20d1827b871124fae0a01baa787570cb4d7ee69663f147dfd7d67c4d617fcdf6462931af423beefd138c222f019d745a2dbfe636da574b4990d15e434d96a2f8aadcfe549cf9904f170df52e6235b6d51650ec0f1f6e871f061ed7d09476f0180f010f6b096148f01127d5781cf0a2a98d905e578f0b2d5c96d42ce9b78e3692820562714b43b39cdf446d4ebe44429e74c9296b8939b96befefd6945ecbfee0f149726af9f28b6e161946c3184e648942fc58947cd8962290ab64390656ac0658a575da2397d7857644901c8292ea5f3d0878dcf8f535a17e9aee082270bb640e18d252fdec1c215088feda602597116b3a830992acf6f0236b1a22e9ed5b83616f15fcdbd3c55442d746948b2fefb73f753a1dfefcf1a948331633c356123e36418a2d7e3afff1e9c01cd7e1a2df949166a761861377fdda0a44d3470dce2dfde9947d1e43deab6e203e488447d64c513108fa6f2da6e19a60733356200b295b70fd8ec964dd944d266e6b77218f0019dfaa1e4e1380277fe1303b9c600f85df19e94974f91b9df7c8006137c08d5c0b2419a1dd1d5f2534ef49840d360b20c951f8edf9b3c999e51f831d75e3e8a9be5de99415a397a6b637a20a924686dd58608f3872fa90b029e7584fc44995fc0b9606dde102b33d4d4984d337df4de92601296f953e32a588a000d977f44766bc535b41512bacc222fd6f09d5bac123f5626855a419a87d7d98b001879d7f88ce9ef35898275c99b4c7e4ea5e6df05afb1537bb9d45395efbec71d19ace57e87184863957410551e16be9e3c0592f9a2e8ed82874b34a4575756fc147bb4b4da90ac9dd2016e5b2ad2041745e3b27f61dd3ad8f0b94278781b50beba8c6eb58a84207617f1143b46bca74d0ea4517d6294b8eed593c1193b3a21132d910bb3d45c54fc4a1c043ab6f550b4ef8d9b837380979b69b6e6c7633291dacb9c40c2270b660175c81d3cfb7bcf0179465fbf8abcdc8f3f55e94a8cd8cb0befb34ef146db6b81f43a057278455d010ddfbdc17016e075221959f9381ba974317797ec2b3506cb3a94faa22945e355fa476d438b02ebe5434dd99c3db69c188583a43041f4df6e52d3b3b3928e2d2b65734a4d82e437917ef70acd2dd45e4677c48cc2e6373f130b1d3e6b7f8eaf494415533660144d78426736256d9df464a09586b9ad5b2976bd46aa36eb18f9859afa23facbcbe07a4b1e56b2889f3b5cda34ef2666c58f0ab8cfc3d6fba98e9cf41bb04219a326f869b7f032c7488a15573cad9a93cd1ac1400d139eb9ef7765840a73eb927da436d077f6bb1ccae9e8f95cf2609684104e9e3424f06d7a65d74cdc4ed67926e442a7c391621f626286739246515d756eb160676851389fec74c1f0abace2d57002c185f3d4eef85b708d06a58e73c1b0fe56f80bbd383cb3ea57a229a4813ab3d666772e98f42187caa428d20929699c3d4f7cb8450fb7e7453cedf179c64af8569e0beeb652081319700ec30af6e35215b1aa3adf91c62181b47ca32f32f8ce3876fe3796f57f9c36c8888bcefba5d8528afd236855449e91c04ca7b61fc3d073c847ce82107619120f72e2b0d4bb0169fcb0d7e20ef6edd133b94a8ed7ca3138ef0c55b395b2b69839e99a376a6206bc6c7a1d1e4985e6b62afa264083714f920c84b16af600eb9bd138bf5e7c3f0b86384ed3118d10e22fccbbdc543dd15d1107d0bc9d1bbe291063ab81d95aa99cfc43cc0ed81eb6af713ac51fa8e6066434452180a39b69b31a05ddb47ff947c1ca1ec5b0bada4fad3b0e188a291f1b5d2ab53dcf7eefda178f86986440afe73c29ae83a42a04b3330100f3e85cb605e8cb9328c7451dcab3c6f88bdf384531dcec90937e570bbf1920f93dc04321e768742f0b9362fb3b4a63094c58ce5439c3f8cd719060dcd8d5868e25cc16d1e78b1ba06499611ee15d2415648ce9baef3233578c0b51103d917e8549b075a51c4c7061078e05c65d3d55a5b08c20b616ed4c462d77d542450bfabd9d100a5ba7da4913a2af8abc4dfa975ba1b3d39bbce7fce8b6cb9c73ff967685f5238b1a6cb946949ef15bb0c86dbc54abe24329bcec05d0dbb7b8369a4b2d3c13fdab8c8191f6b433fed62098cc06add86fa36600c7b44158c03a9312cf372489b946edad8ea2421580cd75b428a697f08920ad2f59eb5eda3e2ce945a1545bd57eed779439e3fd4fe5b38c7749a693475535d214b75932fb89ffe50a3f75c79428c21dc5449e7294786d4f572f9627aebc3404d2e5cf7c2ac8dbafaf25920522e0da0908102a6ffc0a8492549379bf502ef5806e24ca9868a99918f6269a0216ee5334b345c03f36426d693357117d5854b768f721fe2a9bd71fcbe7eee1c248efbf29744f543a8db46d54de7bd483395c1ba0240a6546470b04cf4aefcae3f367c3977c30b044b748ec029d0195f978b608361bd6a6077c80f0529e99a175af3aba0d5af5db12368f4d7aed328506d65b580d833e0e70d152485c175ee6f0d418f324a5a2d438f2c3c64b7ebe907fd3d83585f923c6e115271dee57e3f5526454b7020a3051cc1b6749eb126614ffedbec98714907daffc18047a3be8747bb2e04b3c36590c8ac3af1569982445537c142219ef9f6364234f42acec823dbeb1c7cb4f61fd9afd3b99b8b5b72eac2a797390c13531beae14261f47c565a47d97bcd4fb6939b7f35fadc753dccd2f15e15f338511afe653ad8d4e1c8254504f3d9b76aec17b4109be0ec25b064ae83e1b1733f8fd7d1cd5cafe81462a6509fa4f503df32b4faac9dfb829e62c7ef53f60ed22b2c9bf883c50186929a40b86efa9ee5b14729c37ad8572475d9ff44f51f1dfe0d0ea974bf89a1bc19286e7e01216e0a70fd7dc51b1105c0e8656aeaa98b4a7b4b01ca28b9b049f47b5e1f54495a36ef2a23f4fb855e270d7d65c1438a134a77e73ee10112d73c39de4363fa228fd893b4b291b54b19ec2489d3632964ceb66564bf3ea9a655b0e323828cf48cf0cc301cf9881d178e4f0b506c5832a2e37e274eaa94d5c653b6882fe670b8a819956fb34fb192efe93d7a286817bf8ebc2cd8ef9b2c27cb37d5f82d1935284b33eb36cf8d9a0127acc0adca54c188bfefb71a0598480f77bc299ae718098501b2ef5104c0917dd18d04f90e5d9a4245a1944d09c27f5e8137378c1201cb6811c1dc421d5f899eece7ebd719c70b578ef346147523670b6c384a53e3f4c81b"}) 46.971294442s ago: executing program 5 (id=10370): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x361142, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x14, r2, 0x801, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r3 = syz_open_dev$loop(&(0x7f0000000340), 0x5, 0x188862) ioctl$BLKFLSBUF(r3, 0x1261, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000100)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000080)='./file1/file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FS_IOC_RESVSP(r4, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x3}) fchmodat(r4, &(0x7f0000000000)='./bus\x00', 0x98) r5 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r5, 0x0) ftruncate(r5, 0x3) write(r0, &(0x7f0000000400)="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", 0xc01) mmap$IORING_OFF_CQ_RING(&(0x7f0000c57000/0x1000)=nil, 0x1000, 0x8, 0x13, r5, 0x8000000) 46.838057243s ago: executing program 5 (id=10371): r0 = getpid() lsm_list_modules(0x0, &(0x7f0000000040), 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000001a00)={{&(0x7f0000978000/0x3000)=nil, 0x3000}, 0x1}) prlimit64(r0, 0xd, &(0x7f0000000140)={0x1000, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000400), 0x34fd84714598ca51, 0x0) setpgid(r0, r0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1) ioprio_get$pid(0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_clone3(&(0x7f0000000440)={0x20000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x3c}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000001180)=""/4096, &(0x7f0000000200), 0x0, {r3}}, 0x58) ptrace$setregs(0xf, r4, 0x80000001, &(0x7f00000002c0)="95c46a055d86da09bca0f78cedeb000531e555914a9dd2fb8a660147947b3645fbd443d8774cb732b21ce9ff75670a19f07f9f79e84a4203012a5a356a4658ef159562c8ebf8c5cd85293da02d998fcabb2b7bae4aa18a2f3735a0162a121404c4d46520381ce848ae59ea46d60f59b93cd637b03ceeb7754d42b99045cd9edc3cce3d648a3af8e19e32bed42bfd04bad994493bed16bdf77a117c0e7a49f16db56dd54bcb8b58f7ffd37ec18a") 46.836280203s ago: executing program 5 (id=10372): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) r1 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_subtree(r5, 0x0, 0x7) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd700000000000020820"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7b000) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x0, 0x7, 0x1, 0x40, 0xd01, 0x10}, {0xf, 0x40, 0x6, 0x7, 0x7, 0x9}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) 46.836022653s ago: executing program 39 (id=10372): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) r1 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_subtree(r5, 0x0, 0x7) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd700000000000020820"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7b000) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x0, 0x7, 0x1, 0x40, 0xd01, 0x10}, {0xf, 0x40, 0x6, 0x7, 0x7, 0x9}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) 2.44081503s ago: executing program 9 (id=10927): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000021000907000000000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x24044880}, 0x4000) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x20000) lseek(r6, 0x40000000000003, 0x0) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r8, 0x8004af7a, &(0x7f00000001c0)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r9, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) setsockopt$packet_int(r7, 0x107, 0x3, &(0x7f0000000180)=0x57ed4886, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xa0, @mcast2, 0x9}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000006440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2400000000000000030000003200"/32, @ANYRES32, @ANYBLOB='RB'], 0x28}}], 0x1, 0x4000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0x4c, 0x1000000, 0x0}) 2.361433591s ago: executing program 9 (id=10929): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000001880)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x109000, 0x0) pwrite64(r1, 0x0, 0x0, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r3, 0x3a, 0x1, 0x0, &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000010040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x91, 0xa, 0x40, 0x0, 0x5, 0xbd1e}, {0x0, 0x2, 0x2, 0xb, 0x3, 0x8}], ['\x00', '\x00', '\x00', '\x00']}) set_robust_list(&(0x7f0000000100)={0x0, 0x4}, 0x18) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x20000000000000f5, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.097303531s ago: executing program 9 (id=10936): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4a40, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0xe4, &(0x7f0000000000)=0x0) io_destroy(r2) r3 = dup3(r0, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r3) io_submit(r2, 0x0, &(0x7f0000000500)) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001300)={&(0x7f00000011c0)={0x120, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x45}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "3b7640abc6c173ffd8a9bff021bf95c0fd4555392848b3"}}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x120}}, 0x20048051) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r5 = eventfd(0x0) io_cancel(r2, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x2, 0x7ff, r4, &(0x7f0000001040)="e1016553dc5f8a794a0738da84992dd80585d965979f5583b18f5980658871effbba8c5a2508c00de625cf0d403ae64c1331f4b490268fdd6e3ff45bda24694fdd4bbfb436dcf7073b8068a80a87b5cb3436368eb701d94be4776c9694cf0ad4450ddff021d5", 0x66, 0x7, 0x0, 0x3, r5}, &(0x7f0000001100)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xcf4e74310708dfc4, 0xc}) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f0000001380)={0xb6, 0x0, 0xb}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x23, 0x0, 0x101}}) preadv2(r0, &(0x7f0000001000)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x9, 0xf) 975.944572ms ago: executing program 9 (id=10938): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/power/wake_unlock', 0x42, 0x80) (async) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r2, &(0x7f0000000480)="532e2eac770767f7429748", 0xb) (async) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x7, 0x1, 0x3ff, 0x5, 0x9dc, 0x0, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) (async) fcntl$setlease(r3, 0x400, 0x0) (async) fcntl$setlease(r3, 0x400, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x24b12012, 0xed, 0x1005, 0x0, 0x3}}, 0x50) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}]}}) (async) write$binfmt_register(r1, &(0x7f0000000180)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'tr6=fdZ', 0x3a, './binderfs/binder1\x00', 0x3a, './file0'}, 0x41) (async) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000400000000000000000d001d000500070012000000050019"], 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a0000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 910.677233ms ago: executing program 6 (id=10939): timer_create(0x3, 0x0, &(0x7f0000000340)) timer_create(0x0, 0x0, &(0x7f0000000380)=0x0) timer_delete(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x4d}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040009}, 0x8000) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x130) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x28000015}, 0x20004001) 910.507503ms ago: executing program 9 (id=10940): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/fscreate\x00') fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='\\\x00', &(0x7f0000000080)='./file1\x00', r1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000300)) (async) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'ip6_vti0\x00'}) 833.505373ms ago: executing program 6 (id=10942): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x3000426) utime(&(0x7f0000000000)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) close_range(r1, r0, 0x2) 833.065723ms ago: executing program 9 (id=10943): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) (async) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x3, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xcf}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x9, 0x8}, {0x6, 0x24, 0x1a, 0xbb62, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0xbc, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x8, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x82, 0x6, 0x5}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0xc, &(0x7f00000001c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x22, 0x1, 0x5, 0x4f}]}}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x81, &(0x7f00000001c0)={0x20, 0x18, 0x17, 0x2}, 0x8, 0x100020, 0x1000003, 0x0, 0x4bf, 0x404, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x3f, &(0x7f0000000a00)={{0x12, 0x1, 0x250, 0xf, 0x82, 0xf, 0x10, 0x4dd, 0x8004, 0x9ce8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x9d, 0x7, 0x30, 0x6, [{{0x9, 0x4, 0x74, 0xf1, 0x2, 0x2, 0x6, 0x0, 0x8, [@hid_hid={0x9, 0x21, 0x3, 0xec, 0x1, {0x22, 0xb3a}}], [{{0x9, 0x5, 0xc, 0x3, 0x1e7, 0x4, 0x4, 0x80}}, {{0x9, 0x5, 0xe, 0x10, 0x1fe, 0x0, 0x8a}}]}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x2) (rerun: 32) 804.182123ms ago: executing program 6 (id=10945): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) clock_getres(0x2, &(0x7f00000009c0)) r1 = socket$packet(0x11, 0x3, 0x300) fstat(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) ioctl$BINDER_FREEZE(r0, 0xc0046209, &(0x7f0000000000)={0x0, 0x0, 0x1000}) 759.476094ms ago: executing program 6 (id=10946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x18, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2400c4b0}, 0x8881) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x132) pipe(&(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="d00000001e00090002000000ffdbdf2505"], 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x5412, &(0x7f0000000040)=0x12) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x1060, 0x0, 0x0, 0x20000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000900)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 759.339004ms ago: executing program 0 (id=10947): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) io_setup(0xf0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x55) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x20000, 0xf3) read$FUSE(r2, &(0x7f0000001540)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 759.162754ms ago: executing program 0 (id=10948): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x2c, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0xc000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/7, 0x7, 0x2, 0x21}, @fda={0x66646185, 0x9, 0x0, 0x29}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x1000}, @clear_death={0x400c630f, 0x1}], 0x56, 0x0, &(0x7f0000000380)="f22439c47e109c6096ea2bae1f7d03b8c44245ee48a8a255e0db445a21505ddddb4f9e2515db95a1de45d524bb52899f326bab2c88053f7a7475b3ec0373c50a7a4d67df5fde31db1a31325bebcf85b344c0596e65b8"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 759.010244ms ago: executing program 6 (id=10949): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, 0x0) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffff3) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (async) read(r1, &(0x7f0000000000)=""/183, 0xb7) 704.782774ms ago: executing program 6 (id=10950): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000380)={0x8, 0xfbfe, @empty}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000400)="08003b117c124057", 0x8}], 0x2}, 0x20008890) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x300) syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "cec4d921"}]}}, 0x0}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x20000, 0xcbfb, 0x0, {0x5, 0x0, 0x48b, 0xa, 0x40000000000000b, 0xd, 0xfff7ffff, 0x6, 0x101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x1ff) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x5, 0x12) shutdown(r3, 0x1) 704.572904ms ago: executing program 0 (id=10951): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="0c0100002d0001000000000000000000140073000000000000000000000000000000000009000080976b640868000000db0001"], 0x10c}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x84, 0x0, &(0x7f0000000180)=[@dead_binder_done, @release, @clear_death, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0xb}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper, @increfs], 0x8c, 0x0, &(0x7f0000000240)="1f4e60867a6b6e3e2b0fbe3062a1b6df9085567640b5d10804b76398771d9abb2778c1ad087f18ebc1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99e1cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699dc92e635dfe04d081660855e27931aa1f03febf3038a198b14796efb44103b42a"}) syz_clone3(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000040)='\x00') 670.073854ms ago: executing program 0 (id=10953): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, &(0x7f00000000c0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setreuid(0x0, r3) r4 = getgid() getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0) write$P9_RSTATu(r1, &(0x7f0000000140)={0x6e, 0x7d, 0x1, {{0x0, 0x4d, 0xf06e, 0x1, {0x8, 0x2, 0x8}, 0x41000000, 0xffffff9e, 0x9, 0x7, 0xc, '/dev/ashmem\x00', 0x2, '-\'', 0xc, '/dev/ashmem\x00'}, 0xc, '/dev/ashmem\x00', r3, r4, r5}}, 0x6e) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x66053000) 615.818485ms ago: executing program 0 (id=10955): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x16, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 581.413815ms ago: executing program 0 (id=10957): r0 = syz_usb_connect$rtl8150(0xa09e98fb23a564f0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x40, 0x7760c7f84722bb33, 0xe, {0xe, 0x10, "66e2b326445481bcfe382bbe"}}, &(0x7f0000000080)={0x0, 0x3, 0x70, @string={0x70, 0x3, "1138b99bef66476c3578a971e7670dfc5499da320b20a4d9bc001a60769dfd4bff4b5b42a128101017f8140b89d5ab7e3d3a7a5c5a4a195a7c0d3895267fbade50b3e0c9a0f132e228575e99bb4815b93250549cc9d943e4b5bd32a67f1783077bc3b8648590ece82e726d2dabd3"}}, &(0x7f0000000100)={0x0, 0xf, 0x5a, {0x5, 0xf, 0x5a, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "0b0f9a30cbadf7b020a86b3eabf4afce"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x81, 0x6, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xed, "fc9a75239fd92bed82dae768bdcd7c68"}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x2, 0x0, 0x4, [0x3ff0, 0xff0000, 0xc0cf, 0x3f00, 0x37]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x2, 0x10, 0xa, "5e7064b4", "ae1c01ab"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x2, 0x40, 0xc, 0x7, 0x1, 0x4}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x30, 0x99, "74c2de4a84974efd1bc015a0d4151dd48d766e0e80cd0c1f26a32d254ac075182d68eb2341f8e10e33eb5e11d15a9db8b2c5fde45c69fd6a4cbd5e6302ef19f2a9d54bd47880e6e60b1e19c6cec4c25ed9a26f26366f1407af2c6e24ef5750b53c31c9232c663c81c3e019301e4ec8cc48acda1d8af89826d8d80c09803715479d5cfbab7b1415223811589929fa6adb9cbb7d8853a17f7c34"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5a}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x40, 0x20}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x7f}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000480)={0x40, 0xb, 0x2, "6891"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0xd19}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="259179a5fdaa"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000580)={0x40, 0x19, 0x2, "f471"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x8d}}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000880)={0x14, &(0x7f0000000780)={0x0, 0x10, 0x43, {0x43, 0x30, "eeeeed0c0ccccd577a694556355ad76d2c38f2c0cfbf351c889046a82b2bd7aaf147ec7d9e3abab14b165e4f95e4187051429093e932b2363ba7e7f209b37a8091"}}, &(0x7f0000000800)={0x0, 0x3, 0x56, @string={0x56, 0x3, "ead7c013b2fe10d786c22269dd9c6a1ee2576c5d4ebe11579cd4dbe2dda6cb81a9b8ce4316b7fe3005304b84f6d716e629f04bfd1012f72e4d7c900cd41b4445212369e3d146c24ffd41cf3d708ec0854e95f9d9"}}}, &(0x7f0000000ac0)={0x2c, &(0x7f00000008c0)={0x20, 0x8, 0xd4, "14afc8f34af0feae41909af50cf6aa3694f27a1f28b34b34789625b886b41c84e3ad7370a1b8e5677d873185e0400a3b0d6d0dd8ed45aca0b0dcd217b0cb2857e9ebf7148177c3d83ebe0278de389750c27ea3111ec3438b3cf469495f3260699b05d9f914b64986e27b05c4a5b6aee0007eddc55f48b1f6ef99b8e2bdc0720a05a717ec227de2e33465b11a2bab16c45a421c7ddc9ab2348c332f8d152b3830cdf75047bc08268708f7ff8fa254b65d117bed38fcbf85f0b32b0e8c1e954c2c1643ca6f2019ae104e9ad9c73910c8ecf6762ca6"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000a40), &(0x7f0000000a80)={0x40, 0x5, 0x5, "330b8b584d"}}) (async) r1 = syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000b00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_read(r1, 0xb, 0x4c, &(0x7f0000000b40)=""/76) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000bc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000001040)={0x2c, &(0x7f0000000c40)={0x0, 0x4, 0xf3, {0xf3, 0x21, "febccd8238b3988fe39193c61b6779f02fcefdc2bbccfb0b2551a1a3f89ab0067c98d1da0e54780f93f753e65d56cc3448a1963d4ab3580a176d181920968d109b8e29cff0a1c97b18862804fe8bc458802588b9b2eac60696c2532dc719482d71de74e5951721081cc2868c6adb4476f7e50b9b6e220ed87ac0436e5797f31ceb1ece5cdeca69b4a689739a4cf059019686576574cb79370cd47c3cfdc08873f1962a42a10a3307dcf657cd92523b1ea84086dd4975300de402d5179724d627a25035cbbbd754726fc5d21cd9fd2fe0ac984ccbc33f1adc0e0273d0a4873691d093635b574afc186db65e0c78709ab8dd"}}, &(0x7f0000000d40)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "57019b453303027991f6a3e3e6c529656f6479b1f3591d02e16a7db659966a2ac74857d7dc83c4caa8098a24dbf36df160ed85457a55ef2c12472b341e85f69238258304990bccc5d45365cd82d74886c1c617ef5b5dc6c0466ae2b23ef4f8488bb4732c08a0c8d7c9825bf804c15103ad44aaa8e1177152563d96bb3da746feb226e116d63dd6f0bdc07bbb8ac14a4e228db53f1f8c1f4e868dd4cedc8ecee9d010cc92acf07c2f25beb2b1b2027b3825"}}, &(0x7f0000000e00)={0x0, 0xf, 0x1b7, {0x5, 0xf, 0x1b7, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x5, 0x7f, 0x8}, @ptm_cap={0x3}, @generic={0xad, 0x10, 0xa, "973ddfe5ebcae94cc9ba73d25d94af359009b51b1be8c6363b272a02bb58237f0b7c309535c70598b9b71013bb4b9d1aa7d9a205d11607b3048e0580dbc12f77e578843354b522cb9d117df8eff777f4b403294b5d890a164695d095fc003a6006389a8e9d7316fd455bd93f47b88f4bac12c3b7165bf32b46ac6b7299b0b3260ea7ded4dd30645c4526b03577a891d76f4606f3230741c7f95058bbbf8d4c0ed2964c4bd9b12158d2d5"}, @generic={0xf1, 0x10, 0x1, "35fc3493a225056112f8d575a25839fbce594023ad5e221bfe9ecc309864e997f497aa7b4088a5e43b6b64ed413ebc7ea7b777303860be9b1764416d9bdaf4eddfb01d3b399051182ad350fca37f016c3f8b572b90a4c320048c4e95819c9420b07931dc24eae35012d946280de6426485f119db713a28d2526ca4c68c2b5b02d4fe2787022440f93eee5d307babfeaaaeba9cf5ec2e5655c4d03bb315a2e7aa4aa00c52e40378365d48bb2f125302b777f9efe4bf9be7daf82ced47fd52cdbc96a7060e0eceda4e8bcc90910f91e6f145c7b990ece9cf2992319bff2017a0bf9b38f2df12ced9fb7f469fa170d9"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x2, 0x6c}]}}, &(0x7f0000000fc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x8, 0xb, 0x3, '\\6ip', "1f016917"}}, &(0x7f0000001000)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x48, 0x8, 0x6, 0x8, 0x6}}}, &(0x7f00000014c0)={0x84, &(0x7f0000001080)={0x0, 0x11, 0x4d, "0c0ca2ec1d9f1f3035418cccaaa5b21e7992fc925b3765926927cda0f66002e29d940214547f4dca3acc159ce04c272edda77da8e7769fb7837fb534f341e2354278dc188204b726a61baa4357"}, &(0x7f0000001100)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000001180)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000011c0)={0x20, 0x0, 0x8, {0x140, 0x80, [0xf00]}}, &(0x7f0000001200)={0x40, 0x7, 0x2, 0x400}, &(0x7f0000001240)={0x40, 0x9, 0x1}, &(0x7f0000001280)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f00000012c0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000001300)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001340)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001380)={0x40, 0x19, 0x2, "15aa"}, &(0x7f00000013c0)={0x40, 0x1a, 0x2, 0x324d}, &(0x7f0000001400)={0x40, 0x1c, 0x1}, &(0x7f0000001440)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001480)={0x40, 0x21, 0x1, 0x9}}) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000001580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f00000016c0)={0x14, &(0x7f00000015c0)={0x20, 0x3, 0x4f, {0x4f, 0x24, "94de09c39da1483e133c59a78a09766c1d34b03a6f4a22594a601024bc684e66dff107f8af2a33fe5b1f047861c0f8592b039bccef5803d4397730c8c3f39c4e295ebe771c37e8a8c6d8ff6702"}}, &(0x7f0000001640)={0x0, 0x3, 0x57, @string={0x57, 0x3, "848ccc19ace6c9f50bbe15825093a46330d3702cd2334d6c4b2d152583b992e6a6016fe8c8900f671214236ac036ce8f40c1138fe081fed0c54fe3ea51a707e2a8ec6d53f043cd167e817b113c210ba2fd79547131"}}}, &(0x7f0000001940)={0x34, &(0x7f0000001700)={0x40, 0xd, 0xf3, "e522086d5eb0dac5ff42d21923e63da0af9e516a97db53508164d25eecd1d84fa16f49b4e0b109d6adbb2320dd57502ad7cdb6ae10d13d1cbb5d89a5f5d83527e17cba0b2204ac87f0136d5337aabe38a9720b011972b668c1b24deb9b5d3f88825878430a842dd6eb4033b3a6603f4d9e03f04de0b19732d0f11720bfd23e0846d497296882822fbbcd587044a9936ac7dd80407564c9f31ef961facc46aed5bccf9c1da66ea9a0ac56538ea460a2b5b5fe35440c9e697fb7e16925df3ff05869cc3556b8fa1eb251a6220742230bfa6d4c89fc2a5d9b30372215727e1601e519cf30b58b741c7f89389581ceea4abe65f71a"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001880)={0xc0, 0xa1, 0x4, 0x81}, &(0x7f00000018c0)={0x40, 0xa0, 0x4, 0x515}, &(0x7f0000001900)={0xc0, 0xa2, 0x2f, "c4b64c25411131f4e180d70feff87d1903f3c74faee632377fcd22feae8dd5b2355283df03d644ba62eba6c9b99642"}}) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000001ac0)={0x14, &(0x7f0000001980)={0x40, 0xe, 0xd1, {0xd1, 0x0, "9c7405bd1d328e9e2d77c0082fdd7105377b84b745cbbe1167d5e56a6db6392bdbeb3c433d7804a77bf4bb2dd14436b364ce8c17c6c3b618bca33a56dc3ab780b68a3f2a07ae35b36406efc8acd4536e8d90bf42a00d08a05660c646093adb1ee310f779acd90471c7711e4d9c24fea6612fe1156880fe4468ba2ac48e81bc95eaa1aaaaf740b954d4be60e8d826881c134c6e0abe39561669e7b08c3bfe6df8a94ba3e57b4bc3f609d4e848ae6d23d193471d8d6af3e0aacbf38246e74c676d0dcc84806ac8ba3121eef9cafa84dc"}}, &(0x7f0000001a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001d40)={0x44, &(0x7f0000001b00)={0x40, 0x30, 0x41, "fbaaf89a538528c39a397c2f09e7ef565e26dc7d2ab5eb49ad6ba3780dd4e025d031dd5b60c56b3ac15a6f67c6231a5170760df7de461ee104702e4dccc82b9f0b"}, &(0x7f0000001b80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001bc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001c00)={0x20, 0x80, 0x1c, {0x1ff, 0x2, 0x37, 0x8000, 0x7, 0x3, 0x7f, 0x4, 0xfffa, 0x0, 0xe, 0x6}}, &(0x7f0000001c40)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000001c80)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001cc0)={0x20, 0x87, 0x2, 0xa}, &(0x7f0000001d00)={0x20, 0x89, 0x2, 0x1}}) (async) r3 = syz_usb_connect(0x0, 0x6a7, &(0x7f0000001dc0)={{0x12, 0x1, 0x201, 0xce, 0x61, 0x83, 0x40, 0xbb4, 0xa44, 0xce6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x695, 0x2, 0x3, 0xc, 0x347ef22c6a4fdd67, 0x1, [{{0x9, 0x4, 0x5d, 0x0, 0x1, 0xcb, 0xb9, 0xe2, 0x36, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "39149728d8ff"}, {0x5, 0x24, 0x0, 0x106a}, {0xd, 0x24, 0xf, 0x1, 0xfffff801, 0x4, 0xc, 0x7}, [@acm={0x4, 0x24, 0x2, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @dmm={0x7, 0x24, 0x14, 0x400, 0x3}, @mdlm_detail={0x21, 0x24, 0x13, 0x3, "3a7ebe59ce25fe718ada6776b2883eebc0c7f6f0f369ab67cfbcf3eeb9"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}, @obex={0x5, 0x24, 0x15, 0x1b23}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "fb"}, {0x5, 0x24, 0x0, 0xbb54}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x80, 0x8, 0xf9}, [@obex={0x5, 0x24, 0x15, 0xc9f}, @mbim_extended={0x8, 0x24, 0x1c, 0xff7b, 0xf9, 0x1}]}], [{{0x9, 0x5, 0xc, 0x10, 0x10, 0xb, 0x5, 0x5, [@generic={0x1c, 0x9, "55382a0a79ea76b1ab7c0bf94e4f76dfa53e8c9a7e8d080fc88b"}]}}]}}, {{0x9, 0x4, 0x77, 0x3, 0x10, 0x19, 0x28, 0x40, 0x1, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "6a8a19c36aee"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x89, 0x6}, {0x6, 0x24, 0x1a, 0x4, 0x3c}, [@country_functional={0x10, 0x24, 0x7, 0xf4, 0xfb2f, [0x200, 0x2, 0x800, 0x2, 0x9]}, @country_functional={0x12, 0x24, 0x7, 0x7, 0x1b7d, [0x3, 0x6, 0x7, 0x9, 0x80, 0x2fe2]}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0xf3, 0x401}, @mdlm_detail={0x1b, 0x24, 0x13, 0x3, "9e65ad497f4d0015aa5e86969a3a1aaac28b85a3646481"}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x1, 0x6, 0x8, 0x2, 0x9}]}], [{{0x9, 0x5, 0xd, 0x7c14bf034a4ff875, 0x10, 0x1c, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xa21c76701665046c, 0xc7, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0xe, 0x3, 0x4, [@generic={0x10, 0x3, "fd59b2a0b38d0bf8af3f087306fd"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x6}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x2e, 0xff, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x4}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x3, 0x31, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x8}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x5, 0x5, 0x8, [@generic={0x48, 0x21, "97f8c18d8717ef23d3a8a6746349c6ba9f0bb60d4309065a462a864dcc5c62f4e025eccee8f8d77a0a86e73404cd77d0ef7ec8b02dc5a68eb20d1bc85d78d6d107ab665ad3b4"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x6, 0xd, 0x2, [@generic={0x23, 0x30, "70ddd8cb08d39d1765398804a98e58eae5a39462fda18675deba4e90593b5f61d1"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x7, 0x81, 0xd, [@generic={0xcc, 0x1a, "cc8c3199da24a288bf9eedb61b3c0bf50f84cdaf9030b09e2b6c17da8f8152e43c3774556dd0f58e0c7d4507291c41e5ded7b020db555b8384505958da5df486587efac8069426d8f9a1155215012ab60c2088f56ac20a401ab1e3be309355c07fb65db4449cb85ad00f73a11d52a33324196ecbc9c6d8232c244c4735721f045c746b10e7f5658e0dbda1f8541440931a5eaf571ba06211dca36dd3f254f5b323482d8196925d9b8d7a356c800390e807022fa619d31343ee4ebba6ae556b81c8a270a1e6a08dfef2a0"}, @generic={0x68, 0x31, "d070579d7db8632a1265750fdd0cb03894e413e647aa540748bbf571131e55c8666b14a603f0b4f70fe0f69490d49abdab8c0f9f6f5251e424fa14cc8282d8c451508e5177cb80ecd062ea94a4ba5a6a07d4f6734a4ee9b4c14bf6beaaaf712a6853d3bf49cf"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x8, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7}, @generic={0x46, 0x22, "56dcd2e1d0419ecfc089468100489b5436f997ffe58862b663165c9edafb322615bc9b24a7bd570729baa04eb6e9934835fc6a8f6ad7a6136269714d7a60d885cbdfd3de"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x4, 0x1, 0xa8, [@generic={0x72, 0x30, "fd0d742a1b2b2359033e2b049f9c0d52b998ce3c1bf1f2dfcca49caaad7f0de2f5838af78e7620338a465e30c88eb045f58908ea9ecf550e6a63bb9a347e91de6ec66b0049c5762045529211cd491c0a9261bb60d2624f3316a7856bcdd959e04f0f81f71f60d25cccfd80e04b6492da"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x400, 0xe, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x4}]}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0x4, 0xda, 0xe5, [@generic={0x9c, 0x30, "5a4df50f36a0f1fd799822e93be719b47fbc14819f79465194a5ab02a7c742439ef6222b88b1f484f0c0da290d63b8cd5faa04cff5759d415659c796ff8d1c5d4f5102284e6459a5f0969cc7911ad179d2bc28b7441e2198f9a0b8e098fc3ab3914aee0cbf30e7c11a2bd35d23696468caa8777e54f19fc56608e074fe5e90f6537da378b181595a332b993d66d491d7000374d9b69bc9ba48bc"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x5}]}}, {{0x9, 0x5, 0xa, 0x2, 0x5df, 0x0, 0x2, 0x5, [@generic={0x98, 0x24, "d4efb13d5cc0de1cab464cee2d4aead686f5bdd33ea8774f47a7b4b3c90319d72d6e8b176f3615e85b2646bfad7f42f29f409765cc82e4643cdabdea2dd023237676eda07688cc8a20f76bc6dde7ed1cefa5638cc3c7ce29fe85ff021b8b59dd7a0184ee06b7d6fd9d08ecbc9699550f7f00736ea57c3bea20378890c9ea006cd71a5ad69465beb6b8772b953338b236b52b7a74f873"}, @generic={0x2b, 0x21, "5829ec2bcb2388bb8d04c8a8bea3d4db5c995f3039d974274a6fcf4090caa87b955fe56659f52da7de"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x8, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x9}]}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0xfc, 0x18, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x6, 0xeb, 0x7, [@generic={0xc1, 0x7, "848d04cb41e6b0536d1bbd370bd883dfc3f328cd1124f3ad3e8cad9412ed32693b5a875afcf8ffa2d602d61b7fa618dac22219d704b4d9e4ffdc8ab8297311df38de2dc6d3a530d67904098083b2f0822a593fe60ade07f0f622fd7accf23527c154abedfa06988684afeb41753517c6fe5530e13929ac6e9c5eb4742cc17928bf9fc54b40268d75d42b72066663ab2b488335da4659b4e4e0ac2cef5d2aed58647b9528d9a9ec122b744f62bcc1cb9a99fc7cbfabb75140a3b4e10cd459d0"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0x4, 0xe0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x101}]}}]}}]}}]}}, &(0x7f00000026c0)={0xa, &(0x7f0000002480)={0xa, 0x6, 0x201, 0x10, 0xd6, 0xaa, 0xe7, 0x7}, 0xc7, &(0x7f00000024c0)={0x5, 0xf, 0xc7, 0x3, [@generic={0x7, 0x10, 0x4, "067a38aa"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0x5, 0x5}, @generic={0xb1, 0x10, 0x4, "e7f3ac8dbb528a4bf2a99567d1e7d81b3e21164e99ecae4c50729d93baee98f1a0d704d09666abe2edf49cb813c07748aa1be21358cb2f528e774ed13fc2df0e027388b5888888bc5a2732d8a3e098a8e97cdcd4f0e5c1a2282490c7a45b7d0e937f0d55c577b19ff50652cae21b721d9dcc73eb6334374fa37afd9024a318c2a0c082bd791e34fe6526020031966fae16500841eec27b3d54062c03bde07ab87359a1664a4acd9a8b8017e95fc8"}]}, 0x4, [{0x4, &(0x7f00000025c0)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000002600)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000002640)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000002680)=@lang_id={0x4, 0x3, 0x44a}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000002880)={0x14, &(0x7f0000002740)={0x40, 0x7, 0xd2, {0xd2, 0x30, "d95364052253f46d23391518a8f992e1d54f8fd1e98513d6cd99274efc7607d6e8f3afe19e0170c7e7e2a124974b96cd9a3be1de77689afe223ad855267f5a21ce3fbcb52d041cc1cddfd7bd1424ed691893c7271294b66abfa272d69fb38f88bfdabcc125d2c97ee665a71e241feb93dc7e20d5b9d08db849a1e6fff995852f547bbee31c7bddc69de7302f6d2bc815651bd9682779c0a8dd84297c30ddc1caf2392bc8b5a518152242009371f7e6f1ca97e37aecfe326b6bfdcda6806cafacd6492156c9a198280b405bc042c558a3"}}, &(0x7f0000002840)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002980)={0x1c, &(0x7f00000028c0)={0x20, 0xf, 0x2f, "82721fa39d8c72ecb54585e601f938d0d789b27e005bb1c0b8606eeac66dbd23ebc87501fe526027dcd09e57259449"}, &(0x7f0000002900)={0x0, 0xa, 0x1, 0x53}, &(0x7f0000002940)={0x0, 0x8, 0x1, 0xf}}) (async) syz_usb_control_io$printer(r3, &(0x7f0000002b80)={0x14, &(0x7f00000029c0)={0x0, 0x3a, 0x85, {0x85, 0x4, "ce696ddcd382efd4aa91d7b48f8511c2128b4aa8806d868335e1898007b1934b18f7e7a80eb0cda14b3e9ccce44eb7817c76075cd8f3302d2179c56fb890d7f8baaf4ef1da329546eae1a39cf188d9ac8651d7b9a06e6778834cc49eb9255246bcc5b4c3b26b4c06ba34ae41cf25008100742775d42620646db8d88c6bed1c75844fb1"}}, &(0x7f0000002a80)={0x0, 0x3, 0xc8, @string={0xc8, 0x3, "be3df54a7a00402f36f5373592a44888a24478c1b32ad89d16b53e644dac6b68b4a70440772b4c066dd3fa23bf99a4de3dced0b8a383cd6c23340cc001217b5842e55c79308a86f07b9c0afd736624546159733f4d6e759d8af08627bc09282887c94137f4f9168237d5a0caf73714a9d4718ef8ea2b0037829518f9a999f238d67ab01c9f0644d2136003eb308552dbadd44886c73e0c181277659e0c8690da77a305c2961f598dddf9cc3637df9952b4210c36f4324b2e88535ffa0bba91329ee861a810dc"}}}, &(0x7f0000002e80)={0x34, &(0x7f0000002bc0)={0x20, 0x0, 0xa5, "e904de7447ae5906a8201776559b6c954419a4767739763425de478bd97ee0bd25f351b3a5c4b31088340131954cf32eec9f3e3489113c61182b2f41f2df2b57768796317af9d6b46549b3f376c0c46668e25ff2e39804652c1b593eb5d3e5295c858969f45b29c737c5344f874e49f652f112b837f4c45315fea3a47b0e798bad515a46d70bf39f2772531eca30c6ec8964b39b0eb13af62d9b0a6f94f62bd14b33d804ed"}, &(0x7f0000002c80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000002cc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002d00)={0x20, 0x0, 0xf0, {0xee, "f9e363d00e0b4797fa054bb3f136e99ae20dc467bddbd605e982e679b77e73a0ac5b880ddcbef61ac009099c3a34df8a7f77f0e4e3da5678cacacaab183eb3a9ca2e98c621d7faf35e5238f3698acad2181708f78cfc641c0cc28d548fb89d93638609c1e55050a185fcd8d14d1fc521550ac2526d1bcdecf8587bc91f59f2d7a06b27412a17e50df561c36d6cf45b58ce0c81cbebb0090662d739c90dfb13791f0b2680288c1fe9215bef44102b079c84442a54c91aefcdc58abc8d1ad89d54ae69765c9eefac9a5b70ecbc02cfdf5c00d5ac791404361cc9ff44ccb780f8cb5a870741e8d75c05f76752d20b65"}}, &(0x7f0000002e00)={0x20, 0x1, 0x1, 0xb}, &(0x7f0000002e40)={0x20, 0x0, 0x1, 0x5}}) (async) syz_usb_control_io$rtl8150(r1, &(0x7f0000002f80)={0x14, &(0x7f0000002ec0)={0x20, 0xf, 0x6, {0x6, 0xd, "051acc49"}}, &(0x7f0000002f00)={0x0, 0x3, 0x5f, @string={0x5f, 0x3, "4daf1a2569fe3f04c7d8496c0ed747d32abdc00f22f912fe62e6b224e93191667c6bd38495fa28b984a54dafdf739e1ca6379dd4ca651a5c3ad1a48d508a0e6d1aa769d85ce91b5790e894a15e9d3b29d83f64d26f9f1c394bef5d2716"}}}, &(0x7f00000031c0)={0x2c, &(0x7f0000002fc0)={0x40, 0x6, 0xe3, "05cc91ab2feb2c90e60aeb99af948911f1c786936255cd9c6c34f72e1052343adcbf0cd41ab311d987c0ce652d2849a4953fbdc785892acf7d13bebb5e79a7627ba6436b79b20e2951fa731d86e4d2f1de30a7631ba8a20d14e611110e914034780ea92b9c423e172945545ebba7318a507cb82bb93beec43dfc767811f30b8dd19e89c02608585ff59f6079bab5bd341d3c2b56583ac1428bd0ed8ba39d04be70c4c7efe83ae9a8f6f1315c9e66771bf7139cd4c4d138de59cec05def40996c55471a1503dc995470c095b9ffd2aec80dd059e0d2b8131b3180389b7426a4d2cba9d8"}, &(0x7f00000030c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000003100)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000003140)={0xc0, 0x5, 0x5, "1788d855b9"}, &(0x7f0000003180)}) (async) syz_usb_connect$cdc_ecm(0x6, 0x14b, &(0x7f0000003200)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139, 0x1, 0x1, 0x2, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x8, 0x24, 0x6, 0x0, 0x0, 'Lad'}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x2, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x366, 0x6, 0x7f, 0x4, 0x7, 0x4}, @mdlm={0x15, 0x24, 0x12, 0xfffe}, @mdlm_detail={0x50, 0x24, 0x13, 0x2, "c61babac6bfc3ce5428a498226cb412be3d9525b5a17dbfea6ad0d5f15bc17a962588f8d28e85827191e42607d669fa8d320886f0993a66933b5027ef8724475c37c125f666fdf291c50bccd"}, @mdlm_detail={0x7e, 0x24, 0x13, 0x6, "44c5e8d9684459c0b313b1ff9f62a61a3240b0018bad13f8d0c0a08ff2ed8b4007659cc9f571dbf375dcc86ecf7702e0eecfac7f775d870db96d7cdec1e28a9998c3188df02861f6cd5a4cff1ff062fc4335596aa63caa257abc0df6583409c0ce0ee718938979126d58464bf54bf3a53c888a3c12b577adade6"}, @dmm={0x7, 0x24, 0x14, 0x0, 0xa}, @call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x1, 0x1}}}}}]}}]}}, &(0x7f0000003480)={0xa, &(0x7f0000003380)={0xa, 0x6, 0x110, 0xff, 0x9, 0x7, 0x10, 0x7f}, 0x1a, &(0x7f00000033c0)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x80, 0x0, 0x8, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xb2, 0x6, 0x5}]}, 0x2, [{0x4, &(0x7f0000003400)=@lang_id={0x4}}, {0x12, &(0x7f0000003440)=@string={0x12, 0x3, "d1708b7b7244167e0183745da44d62b2"}}]}) (async) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000034c0), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000003500), r4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003580), r4) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000003640)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x89f7b3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4881}, 0x2000c811) (async) syz_usb_control_io$rtl8150(r0, &(0x7f0000003800)={0x14, &(0x7f0000003680)={0x0, 0x11, 0x66, {0x66, 0xa, "b3c934c33a6bc981817c4bc05296f5104e6d316d4a9226749b77a4d33c2d9cb891662b64fde091abc064c8c605ee5837dc73fe87b7603204ff7cc4cc6a73ef45bdf97751172bc7c24ac7bac9b294918677fc67231c31c5d5d2bbe6d65ad33a756a5b7e93"}}, &(0x7f0000003700)={0x0, 0x3, 0xd2, @string={0xd2, 0x3, "f20e94dcbc351a9ea7d0b8cd80986e486e6a987509f63c209d0a60cdcc5d6e48f3fc8e17781a99d08da3607ed59f5364e647611448b0a81175f29f8320ebe3a7524a2a11b9843c0c303fa70783db85b6d6070c08dc81a7dd4a17b49911f178e65f2c83ab67d438e31b4f7507b00d56e0ceb4cfead613b77261c507567c3274e553db8ec5482c675a9a295f79844dcd5858dafbf01b7e3dae67eb77c9cad8ded4b0f39d090afac0a80a9b7e93ea2670ee56d2b65dfe0724e39ee6619e430a2c17c0d9ca1dad0b14be2bff2834ea3dec14"}}}, &(0x7f00000039c0)={0x2c, &(0x7f0000003840)={0x0, 0xf, 0x60, "bfb29bc6508eb5936b97c63a96183cb26c4ff93b0b4bc4e7c395dae8885f02f97df4066c61bdbbdb3035cc47109809891bb568b112b962ca16824de3324c117e25b91a39da38d9ad67daf65a0bd3cf0089fc40b87f77005c8f989a54020105cb"}, &(0x7f00000038c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000003900)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000003940), &(0x7f0000003980)={0x40, 0x5, 0x2, "05eb"}}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003a00)) (async) r6 = syz_open_dev$evdev(&(0x7f0000003a40), 0x0, 0x80) ioctl$EVIOCRMFF(r6, 0x40044581, &(0x7f0000003a80)=0xf) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000003b80)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003b00)={0x3c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) syz_usb_control_io(r1, &(0x7f0000003d80)={0x2c, &(0x7f0000003bc0)={0x0, 0x8, 0x7a, {0x7a, 0x3c, "0533eecb44fb5ee1b9f811030b56d3f2296d196bab3f9eea5794c19cf7ac0e799a35dc1a307818a7ba02f2f54b6beaac44822535de0544abc8f325d46dac23ff97c3d4c4fa81320c91e2069402771e32caa10a0d8d6a31bc21fc9f6e33f4113c9caa0e6991f0e2a7448a2758552fa66d55c0e37394fee6b0"}}, &(0x7f0000003c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240c}}, &(0x7f0000003c80)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x3, 0x3, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0xe, 0x0, 0x1, [0xffff30]}, @ss_container_id={0x14, 0x10, 0x4, 0x60, "acffe97b9568735aaa0e576e74b69280"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "05a11c435f57d049c1a7ce01a248dd22"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x1, 0x3, 0x80}]}}, &(0x7f0000003d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x1, 0x9, 0x0, "dc2f6cf6", "6dbbd816"}}, &(0x7f0000003d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x10, 0x30, 0x6, 0x4, 0x4, 0x8}}}, &(0x7f0000004280)={0x84, &(0x7f0000003dc0)={0x20, 0x18, 0xdf, "4a53adbec6d80b8ba14125920fdb1c4dccd894188f1fb7137bbde6990a0f4025a852e922a3656321c009554017cacca968ecb585d1156612f6c9061dde9d47ed259d665fec3cc9ad65ea1e0a3825bed3bf16c7e03f7b6d5f557afc2e1c8c5ec81c72d05a9ceb4fc2d5abf478506f8f0dd3b3cae068201bd36c28362d1185cc587760889e11ae3c566a0cff3c78cda657015be5089d175960354929759ba4ff95fc14b9ca94983e44efd071c4d08df86cb23bf5bbe46e805857b5159a1dd4a12254b76aa7eec3a7fdb3bed0fbe2e655cf5aa184674d1d9b8be35dcc5c5d4b5d"}, &(0x7f0000003ec0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000003f00)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000003f40)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000003f80)={0x20, 0x0, 0x8, {0x10, 0x80, [0xf0]}}, &(0x7f0000003fc0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000004000)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000004040)={0x40, 0xb, 0x2, '7z'}, &(0x7f0000004080)={0x40, 0xf, 0x2, 0x76}, &(0x7f00000040c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000004100)={0x40, 0x17, 0x6}, &(0x7f0000004140)={0x40, 0x19, 0x2, "f64a"}, &(0x7f0000004180)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000041c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000004200)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000004240)={0x40, 0x21, 0x1, 0x9}}) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x40010, r7, 0x8c960000) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000004440)={0x14, &(0x7f0000004340)={0x0, 0x22, 0x2c, {0x2c, 0x21, "f0e5276921d940fa94dae5fe33a430c2e9e42924fb24b28110efa78034181e88764b3bc3689334a8afc4"}}, &(0x7f0000004380)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "488d42c42d574030ab02902f4b30ac26df5d80435c874eab8c5567205d7d5f42a0aaad756cd4a5059a5e00933b267f64868c5fbc2deef6b4642c9e50fc658a0fdcee9115353b0750f80ba36fc8145a2ce9f39b90df7486fb1f1946dcc2dd6648c0f1beaab353a5ba7cc6a3ca27dd6a8f01419dcf134c0de63b677d9d4f0872840c891855c95459a2939ec193a35de61166790cbf1458bd8bb8c5ebc3798b7d8ca7ca93d0333b79654ebb0af987944f87"}}}, &(0x7f00000046c0)={0x44, &(0x7f0000004480)={0x40, 0xf, 0x4a, "2100cdde6a5da01d89e37ccc5982f0aa43414c04d7ced4bf6fef60e7e5f7b6ad867cba928c5340e3782053aea414fb856f3d56437f9ef752ce0d6fb8c3f20472bb74c60e116f5c0b8518"}, &(0x7f0000004500)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000004540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000004580)={0x20, 0x81, 0x2, 'A0'}, &(0x7f00000045c0)={0x20, 0x82, 0x3, "b94a38"}, &(0x7f0000004600)={0x20, 0x83, 0x1, 'h'}, &(0x7f0000004640)={0x20, 0x84, 0x2, "fcbe"}, &(0x7f0000004680)={0x20, 0x85, 0x3, "dfb804"}}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000048c0)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004880)={&(0x7f0000004800)={0x50, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7f}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x20048000) 321.232957ms ago: executing program 3 (id=10966): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_names\x00') pread64(r1, &(0x7f0000000180)=""/208, 0xd0, 0x5) (async) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async) write(r0, &(0x7f0000000400)="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", 0xfffffcf1) 257.826637ms ago: executing program 3 (id=10967): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) getxattr(0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 195.529158ms ago: executing program 3 (id=10968): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = getpgrp(0x0) socket$inet6(0xa, 0x80003, 0x6) (async) r4 = socket$inet6(0xa, 0x80003, 0x6) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) sendmmsg(r4, &(0x7f0000003780)=[{{&(0x7f00000005c0)=@l2={0x1f, 0x400, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff}, 0x80, 0x0}}, {{&(0x7f0000001040)=@hci={0x1f, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000021c0)=[{0x10, 0x119, 0x401}], 0x10}}], 0x2, 0x9200000000000000) (async) sendmmsg(r4, &(0x7f0000003780)=[{{&(0x7f00000005c0)=@l2={0x1f, 0x400, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff}, 0x80, 0x0}}, {{&(0x7f0000001040)=@hci={0x1f, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000021c0)=[{0x10, 0x119, 0x401}], 0x10}}], 0x2, 0x9200000000000000) r5 = syz_pidfd_open(r3, 0x0) epoll_create(0x1) (async) r6 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) r7 = syz_clone(0xa5102000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r3, 0x7, r5, &(0x7f0000000180)={r6, r2, 0xfffffff8}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r9, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r9, 0x0) ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x6, 0x4}) sendmmsg$inet6(r8, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r6, &(0x7f0000000040)={0x80000002}) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r10, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r10, 0x3) setsockopt$bt_BT_VOICE(r10, 0x112, 0x13, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f00000000c0)={0xc0, 0x0, 0x4000}) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f00000000c0)={0xc0, 0x0, 0x4000}) 129.360339ms ago: executing program 3 (id=10969): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) dup(r1) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r3, &(0x7f0000000000)='.log\x00', 0x80040, 0x42) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x59, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x4, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f00000001c0)={0x6e, 0x70, 0x60000, {r3}}, 0x20) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f00000001c0)={0x6e, 0x70, 0x60000, {r3}}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (async) r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) (async) sendfile(r5, r4, 0x0, 0xffffffff) 129.227449ms ago: executing program 3 (id=10970): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000290021135286bb847b640000000000001800"], 0x30}, 0xc4) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{r1}, {@void, @actul_num={@val=0x2d, 0x3, 0x6d}}}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000080)=0x2) 0s ago: executing program 3 (id=10971): mkdir(&(0x7f0000000280)='./file0\x00', 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "3d8b00", "eb8e7ba12faf3700", "8000", "c16cb41f00bd22fc"}, 0x38) sendto$inet6(r1, &(0x7f00000004c0)="7b79db40dfbc4a1a2334a54a22ea953a83dfbbd42d7a3e176eac13c90d5f2ccd63f82f9f77fe0b4eaa82afa529f7571ebae10b5309e0fa28ec40ab625705393414d9bfeca5bef05dcfe346d9efd206e417b96c1563a8fb1eb8cb9fa3bd6ec5ac1aad7e9e23e1e0889922947538ce177d3594c5076019e4e8d841bce4bf89477b72e1c9fd1c01ced54ad078ece7a634fcb84c950ed1cbe0502797d2424c4ffa9723533413358cdda07f8655a8b8ca27461cf8caf1252131c83f2ca0bdae677bb30b9cf49ab5bc3f6765a9221057904b49aa78edfbf7ed48711477b5a97c5862c5568aad2b7e04bd5a6c772b34ce69377e68ef6cd2", 0xf4, 0x4000805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x200002, @remote}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00') lseek(r3, 0xffffffffffffffff, 0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0xfffffffc}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r2, &(0x7f0000000740)=[{&(0x7f00000002c0)="589224d2c334c1f63d8a621843f389412830dbab71374ae05f97e6e70c4963661dfdab277efd0f190d8751d9d425965e353e53940b202700ca7397ce47d12c2f1442b0af79f7afbc60261390920f78d8f8798aa12e3305b6400000020000000077148704b6cbfbb42d3228e32f061093a3e22906aed35e4407f6f2384f03957aa93423e7c21735d372423f3f1cc868b904373f127f13c5d68b907c74fdcc8d105e2e2538000000", 0xfeb7}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r2, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/60, 0x3c}], 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x20801, 0x1, 0x0, 0x8, 0xfffd, 0x3}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x6, 0xa4, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES8=r5, @ANYBLOB="db4f69f8c5b38b319b05"], 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), 0x2c20, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000001600)={0x2020}, 0x206f) kernel console output (not intermixed with test programs): [ 703.807010][ T495] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 703.827786][T30672] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 703.827807][T30672] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 703.847983][T30672] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1172 [ 703.857691][ T495] usb 1-1: Invalid ep0 maxpacket: 64 [ 704.031820][ T495] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 704.064372][T30679] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 704.085069][ T495] usb 1-1: Invalid ep0 maxpacket: 64 [ 704.097413][ T495] usb usb1-port1: unable to enumerate USB device [ 704.161994][T30679] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 704.162025][T30679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 704.163273][T30688] FAULT_INJECTION: forcing a failure. [ 704.163273][T30688] name failslab, interval 1, probability 0, space 0, times 1 [ 704.170574][T30679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1181 [ 704.180046][T30688] CPU: 1 UID: 0 PID: 30688 Comm: syz.9.10063 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 704.180081][T30688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 704.180096][T30688] Call Trace: [ 704.180104][T30688] [ 704.180114][T30688] __dump_stack+0x21/0x30 [ 704.180149][T30688] dump_stack_lvl+0x10c/0x190 [ 704.180183][T30688] ? __cfi_dump_stack_lvl+0x10/0x10 [ 704.180213][T30688] ? __asan_memcpy+0x5a/0x80 [ 704.180234][T30688] dump_stack+0x19/0x20 [ 704.180261][T30688] should_fail_ex+0x3d9/0x530 [ 704.180284][T30688] should_failslab+0xac/0x100 [ 704.180309][T30688] kmem_cache_alloc_noprof+0x42/0x430 [ 704.180330][T30688] ? kasan_save_alloc_info+0x40/0x50 [ 704.180361][T30688] ? alloc_empty_file+0xbf/0x280 [ 704.180388][T30688] alloc_empty_file+0xbf/0x280 [ 704.180413][T30688] ? __kasan_check_write+0x18/0x20 [ 704.180446][T30688] dentry_open+0x4b/0xb0 [ 704.180473][T30688] ovl_fileattr_get+0x110/0x3e0 [ 704.180497][T30688] ? __cfi_ovl_fileattr_get+0x10/0x10 [ 704.180519][T30688] ? make_vfsuid+0x4d/0xa0 [ 704.180549][T30688] ? inode_owner_or_capable+0xf1/0x1b0 [ 704.180581][T30688] vfs_fileattr_set+0x1cb/0xb20 [ 704.180605][T30688] ? __cfi_vfs_fileattr_set+0x10/0x10 [ 704.180629][T30688] ? is_bpf_text_address+0x17b/0x1a0 [ 704.180656][T30688] do_vfs_ioctl+0x1504/0x1e30 [ 704.180679][T30688] ? arch_stack_walk+0x10b/0x170 [ 704.180698][T30688] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 704.180725][T30688] ? _parse_integer_limit+0x195/0x1e0 [ 704.180759][T30688] ? _parse_integer+0x2e/0x40 [ 704.180798][T30688] ? kstrtoull+0x13b/0x1e0 [ 704.180816][T30688] ? kstrtouint+0x78/0xf0 [ 704.180853][T30688] ? avc_has_perm_noaudit+0x268/0x360 [ 704.180886][T30688] ? __asan_memcpy+0x5a/0x80 [ 704.180906][T30688] ? avc_has_perm_noaudit+0x286/0x360 [ 704.180941][T30688] ? avc_has_perm+0x144/0x220 [ 704.180971][T30688] ? __cfi_avc_has_perm+0x10/0x10 [ 704.181003][T30688] ? proc_fail_nth_write+0x17e/0x210 [ 704.181036][T30688] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 704.181070][T30688] ? selinux_file_ioctl+0xf1f/0x1360 [ 704.181099][T30688] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 704.181128][T30688] ? __cfi_vfs_write+0x10/0x10 [ 704.181148][T30688] ? __kasan_check_write+0x18/0x20 [ 704.181182][T30688] ? mutex_unlock+0x8b/0x240 [ 704.181205][T30688] ? __cfi_mutex_unlock+0x10/0x10 [ 704.181226][T30688] ? __fget_files+0x2c5/0x340 [ 704.181252][T30688] ? __fget_files+0x2c5/0x340 [ 704.181278][T30688] ? bpf_lsm_file_ioctl+0xd/0x20 [ 704.181310][T30688] ? security_file_ioctl+0x34/0xd0 [ 704.181336][T30688] __se_sys_ioctl+0x9f/0x1b0 [ 704.181361][T30688] __x64_sys_ioctl+0x7f/0xa0 [ 704.181386][T30688] x64_sys_call+0x1878/0x2ee0 [ 704.181420][T30688] do_syscall_64+0x58/0xf0 [ 704.181450][T30688] ? clear_bhb_loop+0x50/0xa0 [ 704.181476][T30688] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 704.181500][T30688] RIP: 0033:0x7f4af858f6c9 [ 704.181519][T30688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.181540][T30688] RSP: 002b:00007f4af9391038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.181566][T30688] RAX: ffffffffffffffda RBX: 00007f4af87e5fa0 RCX: 00007f4af858f6c9 [ 704.181585][T30688] RDX: 0000200000000140 RSI: 0000000040086602 RDI: 0000000000000004 [ 704.181602][T30688] RBP: 00007f4af9391090 R08: 0000000000000000 R09: 0000000000000000 [ 704.181618][T30688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.181633][T30688] R13: 00007f4af87e6038 R14: 00007f4af87e5fa0 R15: 00007fffe5850558 [ 704.181654][T30688] [ 704.280367][T30705] netlink: 80 bytes leftover after parsing attributes in process `syz.6.10070'. [ 704.687995][T30726] overlayfs: failed to clone upperpath [ 704.804606][T30751] overlayfs: failed to clone upperpath [ 704.845347][T30755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 704.845414][T30754] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 704.884084][T22291] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 704.914352][T30757] fuse: Unknown parameter 'id' [ 705.076036][T22291] usb 10-1: Using ep0 maxpacket: 16 [ 705.087840][T22291] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.109694][T22291] usb 10-1: config 0 interface 0 has no altsetting 0 [ 705.116413][T22291] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 705.150685][T22291] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.159548][T22291] usb 10-1: config 0 descriptor?? [ 705.161367][T30390] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 705.343811][T30390] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 705.363996][T30390] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 705.383867][T30390] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.406090][T30390] usb 6-1: config 0 descriptor?? [ 705.416348][T30759] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 705.539180][T30773] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=4623 sclass=netlink_tcpdiag_socket pid=30773 comm=syz.6.10090 [ 705.675483][T30788] overlayfs: failed to clone upperpath [ 705.765697][T30791] x_tables: duplicate entry at hook 2 [ 706.070553][T30390] usbhid 6-1:0.0: can't add hid device: -71 [ 706.076869][T30390] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 706.088179][T30390] usb 6-1: USB disconnect, device number 67 [ 706.334453][ T405] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 706.495488][ T405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 706.517139][ T405] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 706.526214][ T405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.534427][ T405] usb 1-1: Product: syz [ 706.538973][ T405] usb 1-1: Manufacturer: syz [ 706.543649][ T405] usb 1-1: SerialNumber: syz [ 706.549538][ T405] usb 1-1: config 0 descriptor?? [ 706.659535][T30805] 9pnet_fd: p9_fd_create_unix (30805): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 706.769065][T30799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 706.784591][ T405] usb 1-1: USB disconnect, device number 53 [ 707.343822][T30810] tmpfs: Bad value for 'nr_blocks' [ 707.566398][T30814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=30814 comm=syz.5.10106 [ 707.587913][T30814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=30814 comm=syz.5.10106 [ 707.620150][T30814] netlink: 'syz.5.10106': attribute type 22 has an invalid length. [ 707.664243][T30816] overlayfs: failed to clone upperpath [ 707.794584][T22291] usbhid 10-1:0.0: can't add hid device: -71 [ 707.806938][T22291] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 707.825815][T22291] usb 10-1: USB disconnect, device number 15 [ 707.845257][T30829] rust_binder: Write failure EINVAL in pid:398 [ 707.866715][T30833] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 707.880184][T30833] rust_binder: 1208: no such ref 2 [ 707.885316][T30833] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 707.916567][T30837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 707.952705][T30837] rust_binder: 1212: no such ref 3 [ 707.987911][T30846] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 707.988179][T30846] rust_binder: Write failure EINVAL in pid:1214 [ 708.075901][T30854] rust_binder: Error while translating object. [ 708.082233][T30854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 708.088879][T30854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1222 [ 708.110353][T30858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 708.121237][T30858] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 708.127701][T30858] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 708.135670][T30858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1226 [ 708.296725][T22291] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 708.446253][T30390] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 708.467312][T22291] usb 10-1: Using ep0 maxpacket: 8 [ 708.476260][T22291] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.486327][T22291] usb 10-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 708.495678][T22291] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.505003][T22291] usb 10-1: config 0 descriptor?? [ 708.617919][T30390] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 708.626182][T30390] usb 6-1: config 0 has no interface number 0 [ 708.632318][T30390] usb 6-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 708.643220][T30390] usb 6-1: config 0 interface 214 has no altsetting 0 [ 708.651550][T30390] usb 6-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 708.660879][T30390] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.669055][T30390] usb 6-1: Product: syz [ 708.673298][T30390] usb 6-1: Manufacturer: syz [ 708.678186][T30390] usb 6-1: SerialNumber: syz [ 708.683636][T30390] usb 6-1: config 0 descriptor?? [ 708.691769][T30866] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 708.731899][T22291] wacom 0003:056A:00B8.0043: ignoring exceeding usage max [ 708.743413][T22291] wacom 0003:056A:00B8.0043: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 708.753622][T22291] wacom 0003:056A:00B8.0043: hidraw0: USB HID v5.59 Device [HID 056a:00b8] on usb-dummy_hcd.9-1/input0 [ 708.766078][T22291] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:056A:00B8.0043/input/input47 [ 708.912728][T30864] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 708.962375][T22291] usb 10-1: USB disconnect, device number 16 [ 709.568763][T30927] loop7: detected capacity change from 0 to 7 [ 709.625604][ T36] audit: type=1400 audit(1812814185.488:98827): avc: denied { map } for pid=30921 comm="syz.5.10144" path="socket:[128027]" dev="sockfs" ino=128027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 709.668576][T30928] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 709.668702][T30928] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 208, size: 226) [ 709.715917][T30928] rust_binder: Error while translating object. [ 709.726755][T30928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 709.733021][T30928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1239 [ 709.888992][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 710.131102][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 710.142145][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 710.152950][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 710.163712][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 710.173559][ T405] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 710.174929][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 710.193289][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 710.204390][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 710.215486][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 710.226552][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 710.237788][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 710.248879][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 710.259930][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 710.271095][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 710.282071][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 710.293061][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 710.304178][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 710.315333][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 710.326491][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 710.337722][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 710.349067][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 710.360161][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 710.366633][ T405] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.371285][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 710.382230][ T405] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.394137][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 710.404582][ T405] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 710.414576][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 710.434047][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 710.445291][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 710.455566][ T405] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 710.456624][T30390] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 710.477273][T30390] ax88179_178a 6-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.5-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 5a:c7:4d:37:0d:75 [ 710.482560][ T405] usb 10-1: Manufacturer: syz [ 710.496586][T30390] usb 6-1: USB disconnect, device number 68 [ 710.504943][T30390] ax88179_178a 6-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.5-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 710.509626][ T405] usb 10-1: config 0 descriptor?? [ 710.630368][ T36] audit: type=1326 audit(1812814186.426:98828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30957 comm="syz.0.10155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f2e7e186567 code=0x0 [ 710.685028][T30960] rust_binder: Error while translating object. [ 710.685059][T30960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 710.691442][T30960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:375 [ 710.955284][T30945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.973303][T30945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.984719][ T405] usbhid 10-1:0.0: can't add hid device: -71 [ 710.991634][ T405] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 711.010231][ T405] usb 10-1: USB disconnect, device number 17 [ 711.558283][ T36] audit: type=1400 audit(1812814187.298:98829): avc: denied { ioctl } for pid=30988 comm="syz.9.10165" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 711.589165][T30993] loop7: detected capacity change from 0 to 7 [ 711.652851][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 711.662636][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 711.720648][T30998] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 712.082452][T30390] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 712.254052][T30390] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.264108][T30390] usb 10-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 712.273228][T30390] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.282010][T30390] usb 10-1: config 0 descriptor?? [ 712.402373][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 712.562340][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 712.568547][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 253: 251, using maximum allowed: 30 [ 712.579612][ T9] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.589542][ T9] usb 1-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 712.602697][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 712.609339][ T9] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 712.618391][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.627077][ T9] usb 1-1: config 0 descriptor?? [ 712.644536][T31020] overlayfs: failed to clone upperpath [ 712.715637][T30390] hid-picolcd 0003:04D8:C002.0044: item fetching failed at offset 5/7 [ 712.724169][T30390] hid-picolcd 0003:04D8:C002.0044: device report parse failed [ 712.731682][T30390] hid-picolcd 0003:04D8:C002.0044: probe with driver hid-picolcd failed with error -22 [ 712.780446][T31024] tmpfs: Unknown parameter 'nr_i~odes' [ 712.848809][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 712.855030][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 712.863694][ T9] usb 1-1: USB disconnect, device number 54 [ 712.929220][T31015] rust_binder: Error in use_page_slow: ESRCH [ 712.929239][T31015] rust_binder: use_range failure ESRCH [ 712.935245][T31015] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 712.940743][T31015] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 712.948812][T31015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:440 [ 712.958613][ T573] usb 10-1: USB disconnect, device number 18 [ 713.042308][T30390] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 713.203313][T30390] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.214258][T30390] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.224295][T30390] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 713.237193][T30390] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 713.246263][T30390] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.254762][T30390] usb 6-1: config 0 descriptor?? [ 713.508152][ T36] audit: type=1326 audit(1812814189.127:98830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31031 comm="syz.9.10182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af858f6c9 code=0x7ffc0000 [ 713.532490][ T36] audit: type=1326 audit(1812814189.127:98831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31031 comm="syz.9.10182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af858f6c9 code=0x7ffc0000 [ 713.556511][ T36] audit: type=1326 audit(1812814189.127:98832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31031 comm="syz.9.10182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4af858f6c9 code=0x7ffc0000 [ 713.580371][ T36] audit: type=1326 audit(1812814189.127:98833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31031 comm="syz.9.10182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af858f6c9 code=0x7ffc0000 [ 713.604435][ T36] audit: type=1326 audit(1812814189.127:98834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31031 comm="syz.9.10182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af858f6c9 code=0x7ffc0000 [ 713.628175][ T36] audit: type=1326 audit(1812814189.127:98835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31031 comm="syz.9.10182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4af858f6c9 code=0x7ffc0000 [ 713.652633][ T36] audit: type=1326 audit(1812814189.127:98836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31031 comm="syz.9.10182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af858f6c9 code=0x7ffc0000 [ 713.676432][ T405] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 713.843538][ T405] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 713.854590][ T405] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 713.865328][ T405] usb 1-1: config 0 interface 0 has no altsetting 0 [ 713.871936][ T405] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 713.881011][ T405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.889694][ T405] usb 1-1: config 0 descriptor?? [ 713.894930][T31030] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 713.901284][T31024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 713.903210][T31024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10179'. [ 713.919481][T31024] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 713.919504][T31024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 713.927550][T31024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1243 [ 713.937788][T30390] usbhid 6-1:0.0: can't add hid device: -71 [ 713.953040][T30390] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 713.961786][T30390] usb 6-1: USB disconnect, device number 69 [ 714.106248][T31044] overlayfs: failed to clone upperpath [ 714.119904][T31030] rust_binder: Error while translating object. [ 714.119954][T31030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 714.126200][T31030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:388 [ 714.143377][ T405] usb 1-1: string descriptor 0 read error: -71 [ 714.162958][ T405] usbhid 1-1:0.0: can't add hid device: -71 [ 714.176623][ T405] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 714.185779][ T405] usb 1-1: USB disconnect, device number 55 [ 714.198715][T31060] 9pnet: Could not find request transport: fv [ 714.215023][T31064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10193'. [ 714.224884][T31064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:399 [ 714.248944][T31067] rust_binder: 402: no such ref 3 [ 714.263399][T31067] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 714.270701][T31067] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 714.277789][T31067] rust_binder: Write failure EFAULT in pid:402 [ 714.393095][T31069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10195'. [ 714.538032][T22769] Bluetooth: hci0: Frame reassembly failed (-84) [ 714.595371][T31083] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 714.595561][T31084] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 714.602520][T31083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1253 [ 714.622627][T31083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31083 comm=syz.5.10202 [ 714.635363][T31083] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 714.635389][T31083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 714.643639][T31083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1253 [ 714.843970][T31104] rust_binder: 1262: no such ref 0 [ 714.858570][T31105] rust_binder: 1262: no such ref 6 [ 714.878349][T31105] rust_binder: 1262: no such ref 3 [ 714.884720][T31105] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 715.015680][T31117] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10214'. [ 715.144918][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 715.144936][ T36] audit: type=1400 audit(1812814190.674:98896): avc: denied { read } for pid=31123 comm="syz.5.10217" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 715.173301][T31124] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 715.181287][ T36] audit: type=1400 audit(1812814190.702:98897): avc: denied { open } for pid=31123 comm="syz.5.10217" path="/437/file0" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 715.205824][ T36] audit: type=1400 audit(1812814190.702:98898): avc: denied { search } for pid=31123 comm="syz.5.10217" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 715.228178][ T36] audit: type=1400 audit(1812814190.702:98899): avc: denied { read } for pid=31123 comm="syz.5.10217" name="saved_tgids" dev="tracefs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 715.251086][ T36] audit: type=1400 audit(1812814190.702:98900): avc: denied { getattr } for pid=31123 comm="syz.5.10217" name="saved_tgids" dev="tracefs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 715.350081][T31130] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 715.350214][T31130] rust_binder: 1281: no such ref 0 [ 715.361895][T31130] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 715.368935][T31130] rust_binder: 1281: no such ref 2 [ 715.374108][T31130] rust_binder: Error while translating object. [ 715.374142][T31130] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 715.380329][T31130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1281 [ 715.540396][T31140] kvm: kvm [31139]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x60000003 [ 715.558792][T31140] kvm: kvm [31139]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x60000307 [ 715.575122][T31140] kvm: kvm [31139]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x1000005d8 [ 715.584439][T31140] kvm: kvm [31139]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0xc1) = 0x100 [ 715.606104][T31140] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 715.769101][ T36] audit: type=1400 audit(1812814191.246:98901): avc: denied { mounton } for pid=31147 comm="syz.0.10225" path="/136/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 715.823698][T31155] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 715.823720][T31155] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 715.831768][T31155] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1295 [ 715.872255][T31160] 9pnet_fd: Insufficient options for proto=fd [ 715.920248][T31174] netlink: 92 bytes leftover after parsing attributes in process `syz.6.10233'. [ 715.925482][T31172] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 715.930339][T31172] rust_binder: Write failure EFAULT in pid:1303 [ 715.941887][T31170] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 716.001371][T31189] IPv6: NLM_F_CREATE should be specified when creating new route [ 716.017253][T31189] IPv6: NLM_F_REPLACE set, but no existing node found! [ 716.148098][T31200] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 716.148226][T31200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 716.154705][T31200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1308 [ 716.173969][T31203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 716.183220][T31203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:434 [ 716.258255][T31205] rust_binder: Error while translating object. [ 716.267570][T31205] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 716.273808][T31205] rust_binder: Failure BR_FAILED_REPLY { source: ENOENT } during reply - delivering BR_FAILED_REPLY to sender. [ 716.283249][T31205] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:436 [ 716.721410][ T1558] Bluetooth: hci0: command 0x1003 tx timeout [ 716.721405][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 716.999313][T31217] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 717.054449][T31219] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 717.060932][T31219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 717.069006][T31219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1311 [ 717.294120][T31230] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 717.303599][T31230] rust_binder: Error in use_page_slow: ESRCH [ 717.310301][T31230] rust_binder: use_range failure ESRCH [ 717.316303][T31230] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 717.321931][T31230] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 717.329875][T31230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:456 [ 717.351685][T31233] binder: Unknown parameter '0x0000000000000000' [ 717.355692][ T36] audit: type=1326 audit(1812814192.737:98902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.9.10253" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4af858f6c9 code=0x0 [ 717.405325][ T36] audit: type=1326 audit(1812814192.793:98903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.9.10253" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4af858f6c9 code=0x0 [ 717.452001][T31239] rust_binder: Write failure EFAULT in pid:465 [ 717.489288][T30390] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 717.513418][T31243] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 717.513538][T31243] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 717.519961][T31243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:469 [ 717.540409][T31245] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:471 [ 717.659855][T30390] usb 1-1: Using ep0 maxpacket: 16 [ 717.675380][T30390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.686582][T30390] usb 1-1: New USB device found, idVendor=056a, idProduct=006b, bcdDevice= 0.00 [ 717.695782][T30390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.704989][T30390] usb 1-1: config 0 descriptor?? [ 717.824212][T31251] netlink: 'syz.6.10260': attribute type 15 has an invalid length. [ 717.833584][ T36] audit: type=1326 audit(1812814193.187:98904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31250 comm="syz.6.10260" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4284b8f6c9 code=0x0 [ 717.927931][T30390] wacom 0003:056A:006B.0045: Unknown device_type for 'HID 056a:006b'. Assuming pen. [ 717.950277][T30390] wacom 0003:056A:006B.0045: hidraw0: USB HID v0.02 Device [HID 056a:006b] on usb-dummy_hcd.0-1/input0 [ 717.976204][T30390] input: Wacom Bamboo1 5x8 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:006B.0045/input/input52 [ 717.995616][T30390] usb 1-1: USB disconnect, device number 56 [ 718.203736][ T495] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 718.353023][T30390] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 718.363776][ T495] usb 10-1: Using ep0 maxpacket: 16 [ 718.370114][ T495] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 718.378414][ T495] usb 10-1: config 0 has no interface number 0 [ 718.384586][ T495] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 718.394576][ T495] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 718.406029][ T495] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 718.415171][ T495] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.423255][ T495] usb 10-1: Product: syz [ 718.427486][ T495] usb 10-1: Manufacturer: syz [ 718.432243][ T495] usb 10-1: SerialNumber: syz [ 718.437571][ T495] usb 10-1: config 0 descriptor?? [ 718.442911][T31257] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 718.450095][T31257] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 718.512999][T30390] usb 1-1: Using ep0 maxpacket: 32 [ 718.519929][T30390] usb 1-1: config 119 has an invalid interface number: 4 but max is 2 [ 718.528141][T30390] usb 1-1: config 119 has an invalid interface descriptor of length 4, skipping [ 718.537288][T30390] usb 1-1: config 119 has an invalid interface descriptor of length 5, skipping [ 718.546330][T30390] usb 1-1: config 119 has an invalid descriptor of length 1, skipping remainder of the config [ 718.556601][T30390] usb 1-1: config 119 has 1 interface, different from the descriptor's value: 3 [ 718.565626][T30390] usb 1-1: config 119 has no interface number 0 [ 718.571901][T30390] usb 1-1: config 119 interface 4 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 718.585052][T30390] usb 1-1: config 119 interface 4 has no altsetting 0 [ 718.593260][T30390] usb 1-1: New USB device found, idVendor=05c6, idProduct=9047, bcdDevice=39.02 [ 718.602451][T30390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.610449][T30390] usb 1-1: Product: 小 [ 718.614530][T30390] usb 1-1: Manufacturer: 鐐傦钉陞楆唴鎾ｅ洶畀冯尪峋勫П杓呾笚鉁￠棤鑵膏⒎贃喟娿剤鐑碱硻釛捐箯猡熁氍庫偄喁贬嫗閱撅挳韪夸炕鍢佹潱陳︻埧霕帮霘婇専璺夊贰鏂о反戤屼ō鍒歌挆餆掗垚罱傤潫楦婌厫閱 [ 718.633390][T30390] usb 1-1: SerialNumber: syz [ 718.671740][T31257] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 718.678985][T31257] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 719.069592][T31265] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0 [ 719.069623][T31265] rust_binder: Error while translating object. [ 719.078389][T31265] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 719.084645][T31265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:452 [ 719.094535][ T405] usb 1-1: USB disconnect, device number 57 [ 719.117820][ T495] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 719.128123][ T495] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 719.140293][ T495] asix 10-1:0.251: probe with driver asix failed with error -71 [ 719.149482][ T495] usb 10-1: USB disconnect, device number 19 [ 719.995333][ T495] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 720.187462][ T495] usb 1-1: Using ep0 maxpacket: 16 [ 720.200967][ T495] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.212075][ T495] usb 1-1: config 0 interface 0 has no altsetting 0 [ 720.220728][ T495] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 720.229769][ T495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.241072][ T495] usb 1-1: config 0 descriptor?? [ 720.460430][T31279] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 720.464585][ T573] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 720.635183][ T573] usb 10-1: Using ep0 maxpacket: 32 [ 720.642385][ T495] usbhid 1-1:0.0: can't add hid device: -71 [ 720.648417][ T573] usb 10-1: config 5 has an invalid interface number: 138 but max is 0 [ 720.656835][ T495] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 720.665340][ T573] usb 10-1: config 5 has no interface number 0 [ 720.671654][ T495] usb 1-1: USB disconnect, device number 58 [ 720.677837][ T573] usb 10-1: config 5 interface 138 has no altsetting 0 [ 720.689216][ T573] usb 10-1: New USB device found, idVendor=0421, idProduct=0444, bcdDevice= 1.00 [ 720.698343][ T573] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.706570][ T573] usb 10-1: Product: syz [ 720.710835][ T573] usb 10-1: Manufacturer: syz [ 720.715509][ T573] usb 10-1: SerialNumber: syz [ 720.939666][ T573] usb-storage 10-1:5.138: USB Mass Storage device detected [ 720.948470][ T573] usb-storage 10-1:5.138: Quirks match for vid 0421 pid 0444: 30 [ 721.009825][ T573] usb 10-1: USB disconnect, device number 20 [ 721.082716][T31296] fuse: Unknown parameter '0x00000000000000000x0000000000000005' [ 721.305128][ T36] audit: type=1107 audit(1812814196.441:98905): pid=31331 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='j欴G)8E靬h [ 721.305128][ T36] e诋很奤3)f邜歕$畜b#F?龐賟' [ 721.350937][T31334] netlink: 'syz.6.10287': attribute type 4 has an invalid length. [ 721.358938][T31334] netlink: 'syz.6.10287': attribute type 4 has an invalid length. [ 721.414016][T31338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 721.478884][T31339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 721.485335][T31339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1336 [ 721.514700][T31341] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 721.531092][ T495] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 721.531823][T31341] rust_binder: Write failure EINVAL in pid:493 [ 721.648095][T31348] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 721.656948][ T36] audit: type=1400 audit(1812814196.759:98906): avc: denied { setattr } for pid=31345 comm="syz.9.10292" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 721.702759][ T495] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 721.714363][T31349] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 721.714398][T31349] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 721.722445][ T495] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 721.741000][T31349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:498 [ 721.741450][ T495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.765329][ T495] usb 1-1: config 0 descriptor?? [ 721.773940][T31330] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 722.210722][ T495] usbhid 1-1:0.0: can't add hid device: -71 [ 722.216764][ T495] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 722.225423][ T495] usb 1-1: USB disconnect, device number 59 [ 722.410534][T31355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10295'. [ 722.547541][T31363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=31363 comm=syz.6.10298 [ 722.600723][T31371] overlayfs: failed to resolve './file0': -2 [ 722.617530][T31373] rust_binder: 1345: no such ref 1 [ 722.652301][T31380] rust_binder: 1350: no such ref 2 [ 722.670666][T31384] 9pnet_fd: Insufficient options for proto=fd [ 722.721782][T31386] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10307'. [ 722.736066][ T495] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 722.895993][ T495] usb 10-1: Using ep0 maxpacket: 32 [ 722.902269][ T495] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 722.914021][ T495] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 722.925019][ T495] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 722.934858][ T495] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 722.943984][ T495] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.952740][ T495] usb 10-1: config 0 descriptor?? [ 722.958707][ T495] hub 10-1:0.0: USB hub found [ 723.013300][T16429] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 723.172597][ T495] hub 10-1:0.0: 2 ports detected [ 723.178663][T16429] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 723.186894][T16429] usb 1-1: config 0 has no interface number 0 [ 723.192980][T16429] usb 1-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 723.203865][T16429] usb 1-1: config 0 interface 214 has no altsetting 0 [ 723.212048][T16429] usb 1-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 723.221333][T16429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.229349][T16429] usb 1-1: Product: syz [ 723.233502][T16429] usb 1-1: Manufacturer: syz [ 723.238110][T16429] usb 1-1: SerialNumber: syz [ 723.243356][T16429] usb 1-1: config 0 descriptor?? [ 723.248603][T31392] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 723.294670][T31394] overlayfs: failed to clone upperpath [ 723.469640][T31391] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 723.599673][T31359] binder: Bad value for 'max' [ 723.605065][ T495] hub 10-1:0.0: set hub depth failed [ 723.611678][ T495] usb 10-1: USB disconnect, device number 21 [ 723.635494][T31426] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 723.635722][T31426] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 723.642162][T31426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 723.650214][T31426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1355 [ 723.671012][T31431] loop2: detected capacity change from 0 to 8388607 [ 723.716769][T31437] binder: Bad value for 'max' [ 723.731642][T31441] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 723.962469][ T573] usb 6-1: new low-speed USB device number 70 using dummy_hcd [ 724.015971][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 724.122377][ T573] usb 6-1: Invalid ep0 maxpacket: 64 [ 724.157184][T31449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 724.157302][T31449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 724.163777][T31449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:505 [ 724.252013][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 724.272806][ T573] usb 6-1: new low-speed USB device number 71 using dummy_hcd [ 724.281606][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 724.315200][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 724.326237][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 724.339578][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 724.371224][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 724.410415][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 724.442332][ T573] usb 6-1: Invalid ep0 maxpacket: 64 [ 724.447845][ T573] usb usb6-port1: attempt power cycle [ 724.461043][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 724.510707][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 724.562758][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 724.621575][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 724.694171][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 724.754253][T31471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10337'. [ 724.783909][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 724.847083][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 724.858023][ T573] usb 6-1: new low-speed USB device number 72 using dummy_hcd [ 724.902693][ T573] usb 6-1: Invalid ep0 maxpacket: 64 [ 724.932136][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 725.013455][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 725.060844][ T573] usb 6-1: new low-speed USB device number 73 using dummy_hcd [ 725.093106][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 725.147766][ T573] usb 6-1: Invalid ep0 maxpacket: 64 [ 725.158137][ T573] usb usb6-port1: unable to enumerate USB device [ 725.173284][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 725.237474][T31485] binder: Unknown parameter 'context甜责[7' [ 725.255368][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 725.328981][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 725.370409][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 725.398267][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 725.431646][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 725.450146][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 725.461668][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 725.477482][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 725.488776][T16429] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 725.501566][T16429] ax88179_178a 1-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 4a:f1:72:c4:39:73 [ 725.521448][T16429] usb 1-1: USB disconnect, device number 60 [ 725.539692][T16429] ax88179_178a 1-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 725.547603][T31508] SELinux: security_context_str_to_sid () failed with errno=-22 [ 725.592044][T31530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10355'. [ 725.914039][T16429] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 726.052633][T16429] usb 1-1: device descriptor read/64, error -71 [ 726.187048][T31562] overlayfs: failed to clone upperpath [ 726.258523][T31570] No source specified [ 726.308583][T16429] usb 1-1: device descriptor read/64, error -71 [ 726.564535][T16429] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 726.585834][ T405] usb 10-1: new low-speed USB device number 22 using dummy_hcd [ 726.703196][T16429] usb 1-1: device descriptor read/64, error -71 [ 726.724474][ T405] usb 10-1: device descriptor read/64, error -71 [ 726.785573][T31588] overlayfs: failed to clone upperpath [ 726.959101][T16429] usb 1-1: device descriptor read/64, error -71 [ 726.980441][ T405] usb 10-1: device descriptor read/64, error -71 [ 727.076493][T16429] usb usb1-port1: attempt power cycle [ 727.118593][T31596] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.125676][T31596] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.132984][T31596] bridge_slave_0: entered allmulticast mode [ 727.139486][T31596] bridge_slave_0: entered promiscuous mode [ 727.145743][T31596] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.152805][T31596] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.159962][T31596] bridge_slave_1: entered allmulticast mode [ 727.166207][T31596] bridge_slave_1: entered promiscuous mode [ 727.208950][T31596] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.216005][T31596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.223258][T31596] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.230290][T31596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.237630][ T405] usb 10-1: new low-speed USB device number 23 using dummy_hcd [ 727.253279][T22762] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.260496][T22762] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.270998][T22769] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.278030][T22769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.285659][T22769] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.292697][T22769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.316706][T31596] veth0_vlan: entered promiscuous mode [ 727.326933][T31596] veth1_macvtap: entered promiscuous mode [ 727.375147][ T405] usb 10-1: device descriptor read/64, error -71 [ 727.403952][T31622] rust_binder: Write failure EFAULT in pid:12 [ 727.439390][T16429] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 727.482767][T16429] usb 1-1: device descriptor read/8, error -71 [ 727.632042][T16429] usb 1-1: device descriptor read/8, error -71 [ 727.641810][ T405] usb 10-1: device descriptor read/64, error -71 [ 727.759019][ T405] usb usb10-port1: attempt power cycle [ 727.886917][T16429] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 727.909224][T16429] usb 1-1: device descriptor read/8, error -71 [ 727.982863][T22291] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 728.057993][T16429] usb 1-1: device descriptor read/8, error -71 [ 728.121528][ T405] usb 10-1: new low-speed USB device number 24 using dummy_hcd [ 728.129242][T22291] usb 4-1: device descriptor read/64, error -71 [ 728.154992][ T405] usb 10-1: device descriptor read/8, error -71 [ 728.174893][T16429] usb usb1-port1: unable to enumerate USB device [ 728.293143][ T405] usb 10-1: device descriptor read/8, error -71 [ 728.388088][T22291] usb 4-1: device descriptor read/64, error -71 [ 728.558717][ T405] usb 10-1: new low-speed USB device number 25 using dummy_hcd [ 728.581533][ T405] usb 10-1: device descriptor read/8, error -71 [ 728.644054][T22291] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 728.725261][ T405] usb 10-1: device descriptor read/8, error -71 [ 728.741646][T31678] rust_binder: Failed to allocate buffer. len:4248, is_oneway:true [ 728.793360][T22291] usb 4-1: device descriptor read/64, error -71 [ 728.846761][ T405] usb usb10-port1: unable to enumerate USB device [ 729.042338][T31682] overlayfs: failed to clone upperpath [ 729.059973][T22291] usb 4-1: device descriptor read/64, error -71 [ 729.078773][T31689] netlink: 'syz.6.10399': attribute type 27 has an invalid length. [ 729.102614][T16429] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 729.177348][T22291] usb usb4-port1: attempt power cycle [ 729.263942][T31680] netlink: 37 bytes leftover after parsing attributes in process `syz.0.10395'. [ 729.273981][T16429] usb 1-1: unable to get BOS descriptor or descriptor too short [ 729.282622][T16429] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 729.290270][T16429] usb 1-1: can't read configurations, error -71 [ 729.539910][T22291] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 729.562216][T22291] usb 4-1: device descriptor read/8, error -71 [ 729.568934][T31698] binder: Unknown parameter 'context甜责[7' [ 729.700939][T22291] usb 4-1: device descriptor read/8, error -71 [ 729.872801][T31713] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10407'. [ 729.955743][T22291] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 729.978327][T22291] usb 4-1: device descriptor read/8, error -71 [ 730.116797][T22291] usb 4-1: device descriptor read/8, error -71 [ 730.190375][T16429] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 730.233071][T22291] usb usb4-port1: unable to enumerate USB device [ 730.351337][T16429] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 730.360458][T16429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.369026][T16429] usb 1-1: config 0 descriptor?? [ 730.535398][T31718] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 730.535532][T31718] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 730.554834][T31720] input: syz0 as /devices/virtual/input/input56 [ 730.599471][T16429] usb 1-1: Cannot read MAC address [ 730.604774][T31727] binder: Unknown parameter 'defcontext01777777777777777777777' [ 730.612495][T16429] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 730.627669][T16429] usb 1-1: USB disconnect, device number 66 [ 730.634788][T31732] netlink: 'syz.9.10414': attribute type 16 has an invalid length. [ 730.642747][T31732] netlink: 'syz.9.10414': attribute type 3 has an invalid length. [ 730.650681][T31732] netlink: 64054 bytes leftover after parsing attributes in process `syz.9.10414'. [ 730.704045][T31739] rust_binder: 530: no such ref 2 [ 730.814637][T31755] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10421'. [ 730.823745][T31755] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10421'. [ 730.879862][T31761] fuse: Bad value for 'fd' [ 730.932672][T31767] +$<: renamed from bridge0 (while UP) [ 730.947573][ T405] usb 10-1: new low-speed USB device number 26 using dummy_hcd [ 730.955717][T31769] IPv6: NLM_F_CREATE should be specified when creating new route [ 730.972585][T31769] rust_binder: Failed to allocate buffer. len:1144, is_oneway:false [ 731.058841][T31787] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10432'. [ 731.096818][ T405] usb 10-1: device descriptor read/64, error -71 [ 731.121587][T31779] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 731.130258][T31779] rust_binder: Write failure EINVAL in pid:551 [ 731.352882][ T405] usb 10-1: device descriptor read/64, error -71 [ 731.459457][T16429] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 731.619401][ T405] usb 10-1: new low-speed USB device number 27 using dummy_hcd [ 731.620562][T16429] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 731.635752][T16429] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 731.646032][T16429] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 731.655139][T16429] usb 4-1: config 1 has no interface number 0 [ 731.661235][T16429] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 731.671991][T16429] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 731.686325][T16429] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 731.695387][T16429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.703399][T16429] usb 4-1: Product: syz [ 731.707588][T16429] usb 4-1: Manufacturer: syz [ 731.712212][T16429] usb 4-1: SerialNumber: syz [ 731.718694][T16429] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 731.725490][T16429] cdc_ncm 4-1:1.1: bind() failure [ 731.758033][ T405] usb 10-1: device descriptor read/64, error -71 [ 731.934255][ T7050] usb 4-1: USB disconnect, device number 28 [ 732.013960][ T405] usb 10-1: device descriptor read/64, error -71 [ 732.131371][ T405] usb usb10-port1: attempt power cycle [ 732.486984][T31844] /dev/nullb0: Can't lookup blockdev [ 732.497510][ T405] usb 10-1: new low-speed USB device number 28 using dummy_hcd [ 732.505663][T31846] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 732.522973][T31848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10450'. [ 732.533469][ T405] usb 10-1: device descriptor read/8, error -71 [ 732.676438][ T405] usb 10-1: device descriptor read/8, error -71 [ 732.803087][ T7050] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 732.931315][ T405] usb 10-1: new low-speed USB device number 29 using dummy_hcd [ 732.941820][ T7050] usb 4-1: device descriptor read/64, error -71 [ 732.953405][ T405] usb 10-1: device descriptor read/8, error -71 [ 733.009573][ T36] audit: type=1326 audit(1812814207.421:98907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31864 comm="syz.6.10455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4284b8f6c9 code=0x7fc00000 [ 733.092087][ T405] usb 10-1: device descriptor read/8, error -71 [ 733.113595][T31886] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10461'. [ 733.197687][ T7050] usb 4-1: device descriptor read/64, error -71 [ 733.208553][ T405] usb usb10-port1: unable to enumerate USB device [ 733.453630][ T7050] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 733.592264][ T7050] usb 4-1: device descriptor read/64, error -71 [ 733.858852][ T7050] usb 4-1: device descriptor read/64, error -71 [ 733.976261][ T7050] usb usb4-port1: attempt power cycle [ 734.003189][T31901] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 734.003743][T31900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:570 [ 734.338754][ T7050] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 734.371839][ T7050] usb 4-1: device descriptor read/8, error -71 [ 734.510359][ T7050] usb 4-1: device descriptor read/8, error -71 [ 734.671920][T31923] tmpfs: Unknown parameter 'nrq瞈沔暥p' [ 734.688320][T31925] tipc: Started in network mode [ 734.693269][T31925] tipc: Node identity da0ce175955c, cluster identity 4711 [ 734.700455][T31925] tipc: Enabled bearer , priority 8 [ 734.765322][ T7050] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 734.787625][ T7050] usb 4-1: device descriptor read/8, error -71 [ 734.926260][ T7050] usb 4-1: device descriptor read/8, error -71 [ 735.042673][ T7050] usb usb4-port1: unable to enumerate USB device [ 735.300151][T31943] overlayfs: failed to clone upperpath [ 735.467563][T31962] /dev/md0: Can't lookup blockdev [ 735.609997][T31968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:586 [ 735.885730][T31978] fuse: Unknown parameter 'froup_iQ' [ 735.895731][ T495] tipc: Node number set to 1330700661 [ 736.300964][ T7050] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 736.341878][T32029] overlayfs: failed to clone upperpath [ 736.401823][T32039] fuse: Unknown parameter 'r00000000100000' [ 736.464216][T32041] cgroup: fork rejected by pids controller in /syz6 [ 736.473968][ T7050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.503569][ T7050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.514384][ T7050] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 736.531890][ T7050] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 736.542996][ T7050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.554195][ T7050] usb 4-1: config 0 descriptor?? [ 736.671368][T32184] tipc: Enabling of bearer rejected, failed to enable media [ 736.693375][T32186] overlayfs: failed to clone upperpath [ 736.766837][T32198] netlink: 'syz.6.10531': attribute type 64 has an invalid length. [ 736.780457][T32198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32198 comm=syz.6.10531 [ 736.993907][ T7050] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 737.001467][ T7050] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 737.008893][ T7050] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 737.016319][ T7050] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 737.023714][ T7050] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 737.031369][ T7050] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 737.038841][ T7050] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 737.046230][ T7050] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 737.053812][ T7050] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 737.061224][ T7050] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 737.068595][ T7050] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 737.076028][ T7050] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 737.083433][ T7050] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 737.090840][ T7050] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 737.098218][ T7050] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 737.105773][ T7050] plantronics 0003:047F:FFFF.0046: No inputs registered, leaving [ 737.115038][ T7050] plantronics 0003:047F:FFFF.0046: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 737.644682][T16429] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 737.816508][T16429] usb 10-1: config 0 has an invalid interface number: 189 but max is 0 [ 737.824851][T16429] usb 10-1: config 0 has no interface number 0 [ 737.831198][T16429] usb 10-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 737.842270][T16429] usb 10-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 737.854090][T16429] usb 10-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 737.865323][T16429] usb 10-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 737.875237][T16429] usb 10-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 737.889855][T16429] usb 10-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 737.899059][T16429] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.907151][T16429] usb 10-1: Product: syz [ 737.911422][T16429] usb 10-1: Manufacturer: syz [ 737.916106][T16429] usb 10-1: SerialNumber: syz [ 737.921379][T16429] usb 10-1: config 0 descriptor?? [ 737.926747][T32210] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 738.007245][ T7050] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 738.150016][T16429] ums-alauda 10-1:0.189: USB Mass Storage device detected [ 738.158089][T16429] scsi host1: usb-storage 10-1:0.189 [ 738.165207][T16429] usb 10-1: USB disconnect, device number 30 [ 738.177876][ T7050] usb 1-1: Using ep0 maxpacket: 16 [ 738.184044][ T7050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.195439][ T7050] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 738.208762][ T7050] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 738.217886][ T7050] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.226703][ T7050] usb 1-1: config 0 descriptor?? [ 738.353407][T32229] overlayfs: failed to clone upperpath [ 738.353676][T32230] overlayfs: failed to clone upperpath [ 738.365330][T32228] overlayfs: failed to clone upperpath [ 738.383282][T32232] 9pnet_fd: Insufficient options for proto=fd [ 738.421891][T32241] overlayfs: failed to clone upperpath [ 738.663842][ T7050] microsoft 0003:045E:07DA.0047: unbalanced delimiter at end of report description [ 738.673357][ T7050] microsoft 0003:045E:07DA.0047: parse failed [ 738.679485][ T7050] microsoft 0003:045E:07DA.0047: probe with driver microsoft failed with error -22 [ 738.713387][T32258] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 738.713477][T32258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:585 [ 738.877367][T32217] rust_binder: Write failure EFAULT in pid:603 [ 738.886857][ T495] usb 1-1: USB disconnect, device number 67 [ 738.977728][T16429] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 739.044489][T32264] overlayfs: failed to clone upperpath [ 739.137670][T16429] usb 10-1: Using ep0 maxpacket: 32 [ 739.144517][T16429] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 739.152815][T16429] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.162994][T16429] usb 10-1: config 0 has no interface number 0 [ 739.169148][T16429] usb 10-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 739.179056][T16429] usb 10-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 739.192191][T16429] usb 10-1: config 0 interface 196 has no altsetting 0 [ 739.200364][T16429] usb 10-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 739.209510][T16429] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.217608][T16429] usb 10-1: Product: syz [ 739.221847][T16429] usb 10-1: Manufacturer: syz [ 739.226533][T16429] usb 10-1: SerialNumber: syz [ 739.231688][T16429] usb 10-1: config 0 descriptor?? [ 739.425588][T30390] usb 4-1: reset high-speed USB device number 33 using dummy_hcd [ 739.453498][T32258] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 739.453525][T32258] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 739.461781][T32258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:585 [ 739.473388][T16429] ipheth 10-1:0.196: Unable to find endpoints [ 739.491047][T16429] usb 10-1: USB disconnect, device number 31 [ 739.559132][T32296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10567'. [ 739.577900][T32301] cgroup: Invalid name [ 739.764467][ T36] audit: type=1326 audit(1812814213.751:98908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32314 comm="syz.6.10574" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4284b8f6c9 code=0x0 [ 739.801732][ T405] usb 4-1: USB disconnect, device number 33 [ 739.839537][T32324] /dev/nbd3: Can't lookup blockdev [ 739.875079][T32322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 739.958253][T32324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 740.033831][T30390] hid (null): unknown global tag 0xe [ 740.033869][ T36] audit: type=1400 audit(1812814213.995:98909): avc: denied { setattr } for pid=32333 comm="syz.9.10581" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 740.042534][T30390] hid-generic 0005:007F:A479.0048: unknown main item tag 0xe [ 740.078877][T32336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.087413][T32336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.095236][T30390] hid-generic 0005:007F:A479.0048: unexpected long global item [ 740.103123][T22769] Bluetooth: hci0: Frame reassembly failed (-84) [ 740.103330][T30390] hid-generic 0005:007F:A479.0048: probe with driver hid-generic failed with error -22 [ 740.154413][T32341] /dev/nullb0: Can't lookup blockdev [ 740.160993][T32341] /dev/nullb0: Can't lookup blockdev [ 740.210566][ T36] audit: type=1400 audit(1812814214.173:98910): avc: granted { setsecparam } for pid=32356 comm="syz.0.10587" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 740.300094][ T405] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 740.310473][T32365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 740.513359][T30390] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 740.598669][ T65] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 740.685700][T30390] usb 1-1: unable to get BOS descriptor or descriptor too short [ 740.694234][T30390] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.704762][T30390] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 740.715814][T30390] usb 1-1: config 1 interface 1 has no altsetting 0 [ 740.724169][T30390] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 740.733455][T30390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.741735][T30390] usb 1-1: Product: syz [ 740.745959][T30390] usb 1-1: Manufacturer: syz [ 740.750711][T30390] usb 1-1: SerialNumber: syz [ 740.760705][ T65] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 740.769743][ T65] usb 10-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 740.780536][ T65] usb 10-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 740.793756][ T65] usb 10-1: config 1 interface 0 has no altsetting 0 [ 740.803577][ T65] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 740.812801][ T65] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.821675][ T65] usb 10-1: Product: 藵鎲掋憜喟犮穯涔栦霌栵ザ椴堜槇鑻繐顑堕垞陫愝溿効鈫﹁鑾￡壋畹板拞绾ャ壐寰炧璁ш笨猕斾簱雺杽鞀钁嬩牍楅銥橅喎娉ㄦ牬浜棗鈼у牨険摖鑾忚椃猗炿崶锆曥ⅱ霒告灡鍢枽鎽碉恭瓴ラ垚釡囦が瞠婎尮婕 [ 740.843320][ T65] usb 10-1: SerialNumber: syz [ 740.935466][T32399] overlayfs: failed to clone upperpath [ 740.955229][ T36] audit: type=1326 audit(1812814214.867:98911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32400 comm="syz.6.10602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4284b8f6c9 code=0x0 [ 740.973140][T30390] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 740.986318][T30390] usb 1-1: found format II with max.bitrate = 2418, frame size=7 [ 740.994101][T30390] usb 1-1: 2:1: All rates were zero [ 741.004381][T30390] usb 1-1: USB disconnect, device number 68 [ 741.016768][T29827] udevd[29827]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 741.019483][ T36] audit: type=1400 audit(1812814214.932:98912): avc: denied { accept } for pid=32400 comm="syz.6.10602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 741.072405][ T65] cdc_ether 10-1:1.0: skipping garbage [ 741.077915][ T65] cdc_ether 10-1:1.0: skipping garbage [ 741.083497][ T65] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 741.092825][ T65] usb 10-1: USB disconnect, device number 32 [ 741.815002][T32418] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 741.822482][T32418] rust_binder: Write failure EINVAL in pid:614 [ 741.836867][ T65] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 741.862865][T32420] rust_binder: Error in use_page_slow: ESRCH [ 741.862885][T32420] rust_binder: use_range failure ESRCH [ 741.869180][T32421] rust_binder: Error in use_page_slow: ESRCH [ 741.874772][T32421] rust_binder: use_range failure ESRCH [ 741.881120][T32420] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 741.886652][T32420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 741.895818][T32421] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 741.906962][T32420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:616 [ 741.917171][T32421] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 741.929102][T32421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:616 [ 741.987885][T32425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:621 [ 742.017003][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 742.050162][ T65] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 742.058484][ T65] usb 1-1: config 0 has no interface number 0 [ 742.065185][ T65] usb 1-1: config 0 interface 184 has no altsetting 0 [ 742.073670][ T65] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 742.083070][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.091112][ T65] usb 1-1: Product: syz [ 742.095554][ T65] usb 1-1: Manufacturer: syz [ 742.101099][ T65] usb 1-1: SerialNumber: syz [ 742.111443][ T65] usb 1-1: config 0 descriptor?? [ 742.117491][ T65] smsc75xx v1.0.0 [ 742.315640][ T1558] Bluetooth: hci0: command 0x1003 tx timeout [ 742.315743][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 742.337400][T32436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10615'. [ 742.346742][T32436] FAT-fs (rnullb0): bogus number of reserved sectors [ 742.353440][T32436] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 742.372097][T32438] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 742.385355][T32438] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 742.448057][T32441] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 742.487186][T32441] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 742.765029][ T65] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 742.783604][ T65] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 742.987451][ T405] usb 4-1: device descriptor read/64, error -71 [ 743.225210][ T65] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 743.236176][ T65] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 743.245992][ T65] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 743.260473][ T65] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 743.272599][ T65] usb 1-1: USB disconnect, device number 69 [ 743.279641][ T405] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 743.290695][ T405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.302333][ T405] usb 4-1: config 0 descriptor?? [ 743.331032][T32460] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 743.331697][T32460] netlink: 9 bytes leftover after parsing attributes in process `syz.9.10624'. [ 743.347814][T32460] gretap0: entered promiscuous mode [ 743.353544][T32460] netlink: 5 bytes leftover after parsing attributes in process `syz.9.10624'. [ 743.362732][T32460] 0{X功: renamed from gretap0 [ 743.368347][T32460] 0{X功: left promiscuous mode [ 743.373413][T32460] 0{X功: entered allmulticast mode [ 743.379435][T32460] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 743.449645][T32461] rust_binder: Error in use_page_slow: ESRCH [ 743.449663][T32461] rust_binder: use_range failure ESRCH [ 743.455777][T32461] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 743.461281][T32461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 743.469148][T32461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:647 [ 743.770633][T32463] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 743.792128][T32463] netlink: 5 bytes leftover after parsing attributes in process `syz.0.10625'. [ 743.801394][T32463] 0{X功: renamed from bridge_slave_1 (while UP) [ 743.808890][T32463] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 743.883064][T32474] netlink: 'syz.0.10629': attribute type 13 has an invalid length. [ 743.949519][T32443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.958513][T32443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.966848][T32443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.975365][T32443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.989836][ T405] hid-led 0003:1D34:000A.0049: probe with driver hid-led failed with error -71 [ 744.007343][ T405] usb 4-1: USB disconnect, device number 34 [ 744.019307][T32485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:679 [ 744.071751][T32500] rust_binder: Error while translating object. [ 744.082684][T32500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 744.090427][T32500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:685 [ 744.100136][T32502] binder: Bad value for 'max' [ 744.211574][T32526] overlayfs: failed to clone upperpath [ 744.252677][T32531] rust_binder: 32519 RLIMIT_NICE not set [ 744.252706][T32531] rust_binder: 692: no such ref 0 [ 744.342593][T32538] syzkaller0: entered allmulticast mode [ 744.348320][T32538] syzkaller0: entered promiscuous mode [ 744.355323][T32538] syzkaller0 (unregistering): left promiscuous mode [ 744.362921][T32538] syzkaller0 (unregistering): left allmulticast mode [ 744.408493][T32536] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 744.448839][ T405] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 744.495676][T32548] Invalid logical block size (3) [ 744.590870][T32552] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 744.598222][T32552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:662 [ 744.623606][ T405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 744.641781][T32559] loop2: detected capacity change from 0 to 8388607 [ 744.643693][ T405] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 744.659302][ T405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.670141][ T405] usb 4-1: config 0 descriptor?? [ 744.677513][T32504] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 744.714674][T32564] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 744.715244][T32564] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 744.721721][T32564] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 744.729805][T32564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:672 [ 744.971024][ T437] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 745.119051][ T405] hid-generic 0003:04F3:0755.004A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 745.130975][ T437] usb 1-1: device descriptor read/64, error -71 [ 745.386955][ T437] usb 1-1: device descriptor read/64, error -71 [ 745.652631][ T437] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 745.779688][T32601] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 745.813627][ T437] usb 1-1: device descriptor read/64, error -71 [ 746.080094][ T437] usb 1-1: device descriptor read/64, error -71 [ 746.137431][T32630] overlayfs: failed to clone upperpath [ 746.197561][ T437] usb usb1-port1: attempt power cycle [ 746.572850][ T437] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 746.604349][ T437] usb 1-1: device descriptor read/8, error -71 [ 746.752875][ T437] usb 1-1: device descriptor read/8, error -71 [ 746.918933][T32648] tmpfs: Invalid uid '0x00000000ffffffff' [ 746.955379][T32655] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 747.007933][ T437] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 747.178776][T30390] usb 4-1: USB disconnect, device number 35 [ 747.266703][ T437] usb 1-1: device descriptor read/8, error -71 [ 747.396002][T32674] rust_binder: Write failure EINVAL in pid:147 [ 747.456181][ T437] usb 1-1: device descriptor read/8, error -71 [ 747.586914][T32680] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.594552][ T437] usb usb1-port1: unable to enumerate USB device [ 747.605926][T32680] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.613048][T32680] bridge_slave_0: entered allmulticast mode [ 747.619694][T32680] bridge_slave_0: entered promiscuous mode [ 747.627049][T32680] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.646949][T32680] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.658414][T32680] bridge_slave_1: entered allmulticast mode [ 747.664677][T32680] bridge_slave_1: entered promiscuous mode [ 747.699477][T22747] bridge_slave_1: left allmulticast mode [ 747.705478][T22747] bridge_slave_1: left promiscuous mode [ 747.711596][T22747] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.719508][T22747] bridge_slave_0: left allmulticast mode [ 747.730738][T22747] bridge_slave_0: left promiscuous mode [ 747.736850][T22747] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.745064][T22747] tipc: Resetting bearer [ 747.768705][T22747] tipc: Disabling bearer [ 747.840381][T32705] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10702'. [ 747.849750][T32704] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10702'. [ 747.901994][T22747] tipc: Left network mode [ 747.915737][T22747] veth1_macvtap: left promiscuous mode [ 747.921296][T22747] veth0_vlan: left promiscuous mode [ 747.935753][T32721] random: crng reseeded on system resumption [ 748.010063][T22769] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.017154][T22769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.026604][T22769] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.033675][T22769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.061308][T32680] veth0_vlan: entered promiscuous mode [ 748.071607][T32680] veth1_macvtap: entered promiscuous mode [ 748.108376][T32737] netlink: 1335 bytes leftover after parsing attributes in process `syz.6.10692'. [ 748.117660][ T9] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 748.121964][T32737] input: syz0 as /devices/virtual/input/input58 [ 748.161005][T32744] netlink: 'syz.9.10712': attribute type 4 has an invalid length. [ 748.239431][T32757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 748.281277][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 748.317078][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 748.327222][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.356304][ T9] usb 4-1: config 0 descriptor?? [ 748.361551][T32707] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 748.412526][ T318] netlink: 48 bytes leftover after parsing attributes in process `syz.9.10725'. [ 748.496855][ T321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10726'. [ 748.527951][ T327] SELinux: security policydb version 18 (MLS) not backwards compatible [ 748.536637][ T327] SELinux: failed to load policy [ 748.820845][T30390] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 748.919752][ T9] hid-generic 0003:04F3:0755.004B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 748.980783][T30390] usb 10-1: Using ep0 maxpacket: 8 [ 748.987027][T30390] usb 10-1: config 0 has an invalid interface number: 194 but max is 0 [ 748.995353][T30390] usb 10-1: config 0 has no interface number 0 [ 749.002900][T30390] usb 10-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=b7.96 [ 749.012010][T30390] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.020143][T30390] usb 10-1: Product: syz [ 749.025242][T30390] usb 10-1: Manufacturer: syz [ 749.029916][T30390] usb 10-1: SerialNumber: syz [ 749.035310][T30390] usb 10-1: config 0 descriptor?? [ 749.050000][T29745] udevd[29745]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.194/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 749.133135][ T65] usb 4-1: USB disconnect, device number 36 [ 749.256264][ T343] loop7: detected capacity change from 0 to 7 [ 749.262707][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 749.271881][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 749.279907][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 749.289068][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 749.296935][ T343] loop7: unable to read partition table [ 749.302843][ T343] loop_reread_partitions: partition scan of loop7 (濉賶鼚綜阩號恽P=媒?銄X嫼 滊%醌`涉謤鶇{愆謵樔4FLQk輮) failed (rc=-5) [ 749.304149][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 749.318095][ T437] usb 10-1: USB disconnect, device number 33 [ 749.325465][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 749.339816][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 749.348974][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 749.356961][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 749.366103][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 749.374083][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 749.383213][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 749.391244][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 749.400401][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 749.637320][ T369] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 749.647321][ T369] rust_binder: Got transaction with invalid offset. [ 749.647377][ T369] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 749.654325][ T369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:763 [ 749.829865][ T394] overlay: ./file0 is not a directory [ 749.845108][ T394] overlay: ./file0 is not a directory [ 749.850878][ T394] FAT-fs (rnullb0): bogus number of reserved sectors [ 749.857639][ T394] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 749.923374][ T403] can: request_module (can-proto-3) failed. [ 749.943836][ T407] rust_binder: 759: no such ref 0 [ 749.961896][ T437] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 750.004404][ T408] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 750.011675][ T408] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 750.122906][ T437] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 750.133849][ T65] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 750.141445][ T437] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 750.150619][ T437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.159697][ T437] usb 4-1: config 0 descriptor?? [ 750.165083][ T380] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 750.313810][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 750.320012][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 750.331087][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 750.340792][ T65] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 750.352725][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 750.363623][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 750.374733][ T65] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 750.383820][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.391893][ T65] usb 1-1: Product: syz [ 750.396134][ T65] usb 1-1: Manufacturer: syz [ 750.400803][ T65] usb 1-1: SerialNumber: syz [ 750.405984][ T65] usb 1-1: config 0 descriptor?? [ 750.412374][ T65] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input59 [ 750.611845][ T437] hid-generic 0003:04F3:0755.004C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 750.627239][ T398] binder: Unknown parameter 'defcontext01777777777777777777777' [ 750.637009][ T437] usb 1-1: USB disconnect, device number 74 [ 750.848804][ T437] usb 4-1: USB disconnect, device number 37 [ 751.092293][ T9] usb 10-1: new full-speed USB device number 34 using dummy_hcd [ 751.184909][ T415] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 751.194773][ T418] rust_binder: Got transaction with invalid offset. [ 751.202877][ T418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 751.209487][ T418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:786 [ 751.264243][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 751.281456][ T9] usb 10-1: not running at top speed; connect to a high speed hub [ 751.290002][ T9] usb 10-1: config 1 interface 0 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 751.300802][ T9] usb 10-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 751.313671][ T9] usb 10-1: config 1 interface 0 has no altsetting 0 [ 751.321755][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.c0 [ 751.330899][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.338983][ T9] usb 10-1: Product: syz [ 751.343220][ T9] usb 10-1: Manufacturer: syz [ 751.347898][ T9] usb 10-1: SerialNumber: syz [ 751.620877][ T433] sit0: entered promiscuous mode [ 751.627193][ T433] netlink: 'syz.6.10755': attribute type 1 has an invalid length. [ 751.631194][ T9] usb 10-1: USB disconnect, device number 34 [ 751.641243][ T433] netlink: 1 bytes leftover after parsing attributes in process `syz.6.10755'. [ 751.821131][ T444] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 751.831197][ T36] audit: type=1400 audit(1812814225.069:98913): avc: denied { relabelto } for pid=443 comm="syz.0.10759" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 751.831810][ T444] rust_binder: Error while translating object. [ 751.858926][ T36] audit: type=1400 audit(1812814225.069:98914): avc: denied { associate } for pid=443 comm="syz.0.10759" name="ptp0" dev="devtmpfs" ino=196 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 751.893611][ T444] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 751.893641][ T444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:799 [ 751.976985][ T446] netlink: 596 bytes leftover after parsing attributes in process `syz.0.10760'. [ 752.226203][ T456] kvm: kvm [455]: vcpu0, guest rIP: 0x9112 Unhandled WRMSR(0xc2) = 0xdd12 [ 752.234922][ T456] kvm: kvm [455]: vcpu0, guest rIP: 0x9112 Unhandled WRMSR(0xc1) = 0xef12 [ 752.436009][ T9] usb 10-1: new full-speed USB device number 35 using dummy_hcd [ 752.585272][T30390] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 752.597191][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 752.608364][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.618427][ T9] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 752.627622][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.636616][ T9] usb 10-1: config 0 descriptor?? [ 752.757299][T30390] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 752.765844][T30390] usb 1-1: config 0 has no interface number 0 [ 752.772208][T30390] usb 1-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 752.783329][T30390] usb 1-1: config 0 interface 214 has no altsetting 0 [ 752.791805][T30390] usb 1-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 752.801084][T30390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.809145][T30390] usb 1-1: Product: syz [ 752.813590][T30390] usb 1-1: Manufacturer: syz [ 752.818250][T30390] usb 1-1: SerialNumber: syz [ 752.827521][T30390] usb 1-1: config 0 descriptor?? [ 752.832993][ T461] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 753.054194][ T461] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 753.074563][ T9] isku 0003:1E7D:319C.004D: unknown main item tag 0x0 [ 753.097164][ T9] isku 0003:1E7D:319C.004D: unknown main item tag 0x0 [ 753.103988][ T9] isku 0003:1E7D:319C.004D: unknown main item tag 0x0 [ 753.111100][ T9] isku 0003:1E7D:319C.004D: unknown main item tag 0x0 [ 753.117918][ T9] isku 0003:1E7D:319C.004D: unknown main item tag 0x0 [ 753.124933][ T9] isku 0003:1E7D:319C.004D: unknown main item tag 0x0 [ 753.131886][ T9] isku 0003:1E7D:319C.004D: unknown main item tag 0x0 [ 753.139580][ T9] isku 0003:1E7D:319C.004D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.9-1/input0 [ 753.290906][ T454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.300328][ T454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.309802][ T9] isku 0003:1E7D:319C.004D: couldn't init struct isku_device [ 753.317739][ T9] isku 0003:1E7D:319C.004D: couldn't install keyboard [ 753.327511][ T9] isku 0003:1E7D:319C.004D: probe with driver isku failed with error -71 [ 753.340053][ T9] usb 10-1: USB disconnect, device number 35 [ 753.577201][ T1558] Bluetooth: hci0: command 0x1003 tx timeout [ 753.583255][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 753.895500][ T65] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65380 sclass=netlink_tcpdiag_socket pid=65 comm=kworker/1:2 [ 753.913623][ T9] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=104 sclass=netlink_tcpdiag_socket pid=9 comm=kworker/0:0 [ 753.949906][ T502] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 753.950035][ T502] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 754.147367][ T509] rust_binder: Write failure EINVAL in pid:179 [ 754.175413][ T516] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10782'. [ 754.191252][ T516] binder: Bad value for 'defcontext' [ 754.205325][ T518] loop7: detected capacity change from 0 to 7 [ 754.225229][ T523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.225313][ T523] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 754.249346][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 754.268878][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 754.288319][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 754.407639][ T535] rust_binder: Error while translating object. [ 754.407694][ T535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 754.413959][ T535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:205 [ 754.512935][ T461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10766'. [ 755.530200][ T553] rust_binder: Write failure EFAULT in pid:217 [ 755.621136][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 755.638540][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 755.649620][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 755.660854][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 755.671841][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 755.682811][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 755.693877][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 755.704934][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 755.716143][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 755.727206][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 755.738365][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 755.749427][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 755.760500][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 755.771494][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 755.782561][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 755.793629][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 755.804511][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 755.812322][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 755.823437][T30390] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 755.835819][T30390] ax88179_178a 1-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 92:32:27:c1:10:20 [ 755.852977][T30390] usb 1-1: USB disconnect, device number 75 [ 755.859351][T30390] ax88179_178a 1-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 755.976581][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 755.982839][ T9] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.992840][ T9] usb 4-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 756.006366][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 756.013028][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 756.022160][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.030875][ T9] usb 4-1: config 0 descriptor?? [ 756.221922][ T65] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 756.382856][ T65] usb 10-1: config 0 has no interfaces? [ 756.389846][ T65] usb 10-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 756.399069][ T65] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.407306][ T65] usb 10-1: Product: syz [ 756.411582][ T65] usb 10-1: Manufacturer: syz [ 756.416392][ T65] usb 10-1: SerialNumber: syz [ 756.421769][ T65] usb 10-1: config 0 descriptor?? [ 756.435062][T30390] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 756.472285][ T9] wacom 0003:056A:0030.004E: hidraw0: USB HID v0.00 Device [HID 056a:0030] on usb-dummy_hcd.3-1/input0 [ 756.596129][T30390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.607082][T30390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.616855][T30390] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 756.625926][T30390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.634582][T30390] usb 1-1: config 0 descriptor?? [ 756.698283][ T36] audit: type=1326 audit(1812814229.626:98915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=571 comm="syz.9.10796" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4af858f6c9 code=0x0 [ 756.724217][ T555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.732777][ T555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.801226][ T573] usb 4-1: USB disconnect, device number 38 [ 757.023489][ T611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:60 [ 757.202920][ T573] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 757.288733][ T589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.297237][ T589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.343472][T30390] usbhid 1-1:0.0: can't add hid device: -71 [ 757.349492][T30390] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 757.358140][T30390] usb 1-1: USB disconnect, device number 76 [ 757.374565][ T573] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 757.385497][ T573] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 757.394551][ T573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.403104][ T573] usb 4-1: config 0 descriptor?? [ 757.409538][ T605] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 757.847369][ T573] hid-generic 0003:04F3:0755.004F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 757.988382][ T622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 758.024992][ T625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10807'. [ 758.043086][ T625] erspan0: default FDB implementation only supports local addresses [ 758.068192][ T65] usb 4-1: USB disconnect, device number 39 [ 759.174443][T30390] usb 10-1: USB disconnect, device number 36 [ 759.187063][ T637] fuse: Bad value for 'rootmode' [ 759.192772][ T637] fuse: Bad value for 'rootmode' [ 759.269427][ T643] rust_binder: Error while translating object. [ 759.269456][ T643] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 759.275713][ T643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:793 [ 761.093097][ T656] rust_binder: Write failure EFAULT in pid:807 [ 761.119115][T22762] Bluetooth: hci0: Frame reassembly failed (-84) [ 761.131689][T22762] Bluetooth: hci0: Frame reassembly failed (-84) [ 761.175282][ T659] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10820'. [ 761.860256][ T667] binder: Bad value for 'max' [ 762.218013][ T682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:839 [ 762.236762][ T684] rust_binder: Error while translating object. [ 762.246043][ T684] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 762.252417][ T684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:841 [ 762.330594][ T686] loop7: detected capacity change from 0 to 7 [ 762.348167][ T687] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10830'. [ 762.357763][ T67] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.547114][ T696] rust_binder: Write failure EFAULT in pid:249 [ 762.548046][ T698] rust_binder: Write failure EFAULT in pid:249 [ 762.707895][ T712] binder: Bad value for 'defcontext' [ 762.738430][ T714] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 762.738505][ T714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:265 [ 762.866693][ T36] audit: type=1400 audit(1812814235.421:98916): avc: denied { read } for pid=719 comm="syz.3.10840" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 762.918584][ T36] audit: type=1400 audit(1812814235.421:98917): avc: denied { open } for pid=719 comm="syz.3.10840" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 762.946840][ T36] audit: type=1400 audit(1812814235.459:98918): avc: denied { ioctl } for pid=719 comm="syz.3.10840" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 763.144066][ T735] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 763.152351][ T735] rust_binder: Write failure EINVAL in pid:283 [ 763.217747][ T742] random: crng reseeded on system resumption [ 763.302859][ T1558] Bluetooth: hci0: command 0x1003 tx timeout [ 763.302925][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 763.365422][ T750] rust_binder: Write failure EFAULT in pid:298 [ 763.402521][ T753] SELinux: security_context_str_to_sid (syste_u軬泄 :) failed with errno=-22 [ 763.438490][ T756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.448030][ T756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.998819][ T788] netlink: 1363 bytes leftover after parsing attributes in process `syz.9.10861'. [ 764.075758][ T790] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10862'. [ 764.162556][ T796] netlink: 96 bytes leftover after parsing attributes in process `syz.9.10864'. [ 764.619009][ T820] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 764.619162][ T820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:321 [ 764.633609][ T820] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 764.643001][ T820] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 764.651162][ T820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:321 [ 765.126760][ T36] audit: type=1400 audit(1812814237.541:98919): avc: denied { accept } for pid=832 comm="syz.9.10876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 765.190421][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 765.350412][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 765.357639][ T9] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x3 has invalid maxpacket 16 [ 765.367765][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 765.435723][ T437] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 765.574351][ T437] usb 1-1: device descriptor read/64, error -71 [ 765.830293][ T437] usb 1-1: device descriptor read/64, error -71 [ 766.086891][ T437] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 766.223697][ T860] loop7: detected capacity change from 0 to 7 [ 766.235537][ T437] usb 1-1: device descriptor read/64, error -71 [ 766.291742][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 766.301533][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 766.491473][ T437] usb 1-1: device descriptor read/64, error -71 [ 766.612440][ T437] usb usb1-port1: attempt power cycle [ 766.623769][ T878] tc_dump_action: action bad kind [ 766.628871][ T878] tc_dump_action: action bad kind [ 766.634047][ T878] tc_dump_action: action bad kind [ 766.639140][ T878] tc_dump_action: action bad kind [ 766.644272][ T878] tc_dump_action: action bad kind [ 766.649547][ T878] tc_dump_action: action bad kind [ 766.649587][ T878] tc_dump_action: action bad kind [ 766.661065][ T877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 766.661091][ T878] tc_dump_action: action bad kind [ 766.661138][ T877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:882 [ 766.667915][ T878] tc_dump_action: action bad kind [ 766.686769][ T878] tc_dump_action: action bad kind [ 766.691823][ T878] tc_dump_action: action bad kind [ 766.696966][ T878] tc_dump_action: action bad kind [ 766.702053][ T878] tc_dump_action: action bad kind [ 766.707350][ T878] tc_dump_action: action bad kind [ 766.712449][ T878] tc_dump_action: action bad kind [ 766.717749][ T878] tc_dump_action: action bad kind [ 766.722835][ T878] tc_dump_action: action bad kind [ 766.727930][ T878] tc_dump_action: action bad kind [ 766.733052][ T878] tc_dump_action: action bad kind [ 766.738199][ T878] tc_dump_action: action bad kind [ 766.743321][ T878] tc_dump_action: action bad kind [ 766.748430][ T878] tc_dump_action: action bad kind [ 766.753491][ T878] tc_dump_action: action bad kind [ 766.758626][ T878] tc_dump_action: action bad kind [ 766.763709][ T878] tc_dump_action: action bad kind [ 766.768815][ T878] tc_dump_action: action bad kind [ 766.773895][ T878] tc_dump_action: action bad kind [ 766.778987][ T878] tc_dump_action: action bad kind [ 766.784117][ T878] tc_dump_action: action bad kind [ 766.789179][ T878] tc_dump_action: action bad kind [ 766.794269][ T878] tc_dump_action: action bad kind [ 766.799470][ T878] tc_dump_action: action bad kind [ 766.804751][ T878] tc_dump_action: action bad kind [ 766.809827][ T878] tc_dump_action: action bad kind [ 766.814927][ T878] tc_dump_action: action bad kind [ 766.820022][ T878] tc_dump_action: action bad kind [ 766.825115][ T878] tc_dump_action: action bad kind [ 766.830206][ T878] tc_dump_action: action bad kind [ 766.835311][ T878] tc_dump_action: action bad kind [ 766.840545][ T878] tc_dump_action: action bad kind [ 766.845642][ T878] tc_dump_action: action bad kind [ 766.850715][ T878] tc_dump_action: action bad kind [ 766.855815][ T878] tc_dump_action: action bad kind [ 766.860906][ T878] tc_dump_action: action bad kind [ 766.865990][ T878] tc_dump_action: action bad kind [ 766.871060][ T878] tc_dump_action: action bad kind [ 766.876191][ T878] tc_dump_action: action bad kind [ 766.881298][ T878] tc_dump_action: action bad kind [ 766.886446][ T878] tc_dump_action: action bad kind [ 766.891525][ T878] tc_dump_action: action bad kind [ 766.896597][ T878] tc_dump_action: action bad kind [ 766.901727][ T878] tc_dump_action: action bad kind [ 766.992736][ T437] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 767.015116][ T437] usb 1-1: device descriptor read/8, error -71 [ 767.032003][ T881] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 767.039295][ T881] rust_binder: inc_ref_done called when no active inc_refs [ 767.039318][ T881] rust_binder: 886: no such ref 2 [ 767.051587][ T881] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 767.170663][ T437] usb 1-1: device descriptor read/8, error -71 [ 767.429911][ T437] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 767.452268][ T437] usb 1-1: device descriptor read/8, error -71 [ 767.590995][ T437] usb 1-1: device descriptor read/8, error -71 [ 767.707278][ T437] usb usb1-port1: unable to enumerate USB device [ 768.142615][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 768.151794][ T36] audit: type=1400 audit(1812814240.372:98920): avc: denied { remount } for pid=897 comm="syz.3.10897" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 768.165559][ T902] rust_binder: Error while translating object. [ 768.171747][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.171773][ T9] usb 4-1: Product: 愠毦杌绘敺岣 [ 768.173149][ T9] usb 4-1: can't set config #1, error -71 [ 768.187552][ T902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 768.193247][ T9] usb 4-1: USB disconnect, device number 40 [ 768.202271][ T902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:899 [ 768.218199][ T904] rust_binder: Write failure EFAULT in pid:339 [ 768.326778][ T928] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 768.347105][ T928] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 768.353579][ T928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 768.372619][ T928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:907 [ 768.411427][ T949] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 768.446021][ T949] netlink: 'syz.9.10903': attribute type 27 has an invalid length. [ 768.463531][ T949] 0{X功: left allmulticast mode [ 768.500740][ T952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:909 [ 768.619959][ T965] rust_binder: Write failure EFAULT in pid:96 [ 768.628658][ T964] rust_binder: Write failure EFAULT in pid:96 [ 768.656941][ T36] audit: type=1400 audit(1812814240.851:98921): avc: denied { setattr } for pid=967 comm="syz.6.10909" name="ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 768.658805][ T968] rust_binder: Write failure EFAULT in pid:99 [ 768.762464][ T981] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 768.768799][ T982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 768.775397][ T981] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 768.781873][ T981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:919 [ 769.802867][ T1000] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 769.861379][ T573] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 770.032370][ T573] usb 1-1: too many configurations: 138, using maximum allowed: 8 [ 770.041271][ T573] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 770.048895][ T573] usb 1-1: can't read configurations, error -61 [ 770.192019][ T573] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 770.352265][ T573] usb 1-1: too many configurations: 138, using maximum allowed: 8 [ 770.361119][ T573] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 770.368728][ T573] usb 1-1: can't read configurations, error -61 [ 770.375097][ T573] usb usb1-port1: attempt power cycle [ 770.735882][ T573] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 770.757910][ T573] usb 1-1: too many configurations: 138, using maximum allowed: 8 [ 770.766773][ T573] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 770.774412][ T573] usb 1-1: can't read configurations, error -61 [ 770.917200][ T573] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 770.939248][ T573] usb 1-1: too many configurations: 138, using maximum allowed: 8 [ 770.948071][ T573] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 770.955679][ T573] usb 1-1: can't read configurations, error -61 [ 770.962060][ T573] usb usb1-port1: unable to enumerate USB device [ 771.291449][ T1009] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 771.292305][ T1009] rust_binder: 939: no such ref 2 [ 771.303856][ T1009] rust_binder: Read failure Err(EAGAIN) in pid:939 [ 771.727634][ T65] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 771.748964][ T7050] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 771.899276][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 771.910206][ T7050] usb 10-1: Using ep0 maxpacket: 16 [ 771.915438][ T65] usb 4-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 771.925544][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.933439][ T36] audit: type=1400 audit(1812814243.917:98922): avc: denied { create } for pid=1024 comm="syz.6.10930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=bluetooth_socket permissive=1 [ 771.936372][ T7050] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.966173][ T65] usb 4-1: config 0 descriptor?? [ 771.971323][ T7050] usb 10-1: config 0 interface 0 has no altsetting 0 [ 771.973367][ T1030] netlink: 'syz.6.10931': attribute type 1 has an invalid length. [ 771.978584][ T1021] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 771.993044][ T7050] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 772.008063][ T7050] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.018182][ T7050] usb 10-1: config 0 descriptor?? [ 772.124877][ T1038] binder: Bad value for 'max' [ 772.241659][ T7050] usbhid 10-1:0.0: can't add hid device: -71 [ 772.247768][ T7050] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 772.257274][ T7050] usb 10-1: USB disconnect, device number 37 [ 772.433245][ T65] betop 0003:8380:1850.0050: unknown main item tag 0x0 [ 772.440747][ T65] betop 0003:8380:1850.0050: unknown main item tag 0x0 [ 772.448380][ T65] betop 0003:8380:1850.0050: hidraw0: USB HID v1.01 Device [HID 8380:1850] on usb-dummy_hcd.3-1/input0 [ 772.459692][ T65] betop 0003:8380:1850.0050: no inputs found [ 772.646946][ T1021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.655523][ T1021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.663730][ T65] usb 4-1: USB disconnect, device number 41 [ 772.774837][ T1041] rust_binder: Write failure EFAULT in pid:877 [ 772.775466][ T1042] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 772.804343][ T1044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 772.881416][ T1049] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 772.888062][ T1049] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 772.897515][ T1049] rust_binder: validate_parent_fixup: new_min_offset=60, sg_entry.length=0 [ 772.903986][ T1049] rust_binder: Error while translating object. [ 772.912712][ T1049] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 772.918889][ T1049] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:882 [ 772.949167][ T36] audit: type=1326 audit(1812814244.873:98923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1050 comm="syz.9.10938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af858f6c9 code=0x7fc00000 [ 772.986770][ T1058] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 772.986907][ T1060] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 772.993363][ T1060] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 773.000535][ T1063] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 773.009815][ T1060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:961 [ 773.079359][ T1070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=1070 comm=syz.0.10944 [ 773.101804][ T1070] SELinux: security_context_str_to_sid (sytem_u軬泄) failed with errno=-22 [ 773.115677][ T1074] netlink: 188 bytes leftover after parsing attributes in process `syz.6.10946'. [ 773.138383][ T1079] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 773.138454][ T1079] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:890 [ 773.145234][ T1079] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 773.154625][ T1079] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 773.162659][ T1079] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:890 [ 773.181997][ T1084] rust_binder: 892: no such ref 0 [ 773.196286][ T1084] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 773.203339][ T1084] rust_binder: 892: no such ref 2 [ 773.210291][ T1084] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 773.239886][ T1092] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 773.241536][ T1094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 773.248381][ T1092] rust_binder: Error while translating object. [ 773.255857][ T1094] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 773.261202][ T1092] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 773.267268][ T1094] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 773.275793][ T1092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:896 [ 773.286459][ T1094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:385 [ 773.303934][ T573] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 773.328967][ T1099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 773.329470][ T1099] rust_binder: Error while translating object. [ 773.335970][ T1099] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 773.342176][ T1099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:387 [ 773.389995][ T1113] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 773.399432][ T1113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:401 [ 773.488586][ T573] usb 10-1: not running at top speed; connect to a high speed hub [ 773.506308][ T573] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 773.517244][ T573] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 773.529962][ T573] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 773.539112][ T573] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.551188][ T573] usb 10-1: Product: syz [ 773.555552][ T573] usb 10-1: Manufacturer: syz [ 773.560237][ T573] usb 10-1: SerialNumber: syz [ 773.569947][ T1068] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 773.593860][ T437] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 773.726806][ T1136] incfs: Error accessing: ./file0. [ 773.730510][ T1135] incfs: Error accessing: ./file0. [ 773.731973][ T1136] incfs: mount failed -20 [ 773.737174][ T1135] incfs: mount failed -20 [ 773.767084][ T437] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 773.776225][ T437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.784221][ T437] usb 1-1: Product: syz [ 773.788577][ T437] usb 1-1: Manufacturer: syz [ 773.791921][ T1067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.793195][ T437] usb 1-1: SerialNumber: syz [ 773.804287][ T1067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.827739][ T573] cdc_ncm 10-1:1.0: bind() failure [ 773.834569][ T573] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 773.841656][ T573] cdc_ncm 10-1:1.1: bind() failure [ 773.849955][ T573] usb 10-1: USB disconnect, device number 38 [ 773.967150][ T37] INFO: task syz.7.9505:28943 blocked for more than 122 seconds. [ 773.974934][ T37] Not tainted syzkaller #0 [ 773.979912][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 773.988603][ T37] task:syz.7.9505 state:D stack:0 pid:28943 tgid:28942 ppid:22410 flags:0x00004004 [ 773.998771][ T37] Call Trace: [ 774.002067][ T37] [ 774.005000][ T37] __schedule+0x1322/0x1df0 [ 774.009612][ T37] ? __sched_text_start+0x10/0x10 [ 774.014677][ T37] ? __kasan_check_write+0x18/0x20 [ 774.019884][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 774.025038][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 774.030599][ T37] schedule+0xc6/0x240 [ 774.034699][ T37] schedule_preempt_disabled+0x14/0x30 [ 774.040184][ T37] rwsem_down_read_slowpath+0x6d1/0x1460 [ 774.045831][ T37] ? down_write_killable+0x2d0/0x2d0 [ 774.051124][ T37] ? filemap_write_and_wait_range+0x16a/0x1d0 [ 774.057425][ T37] ? __cfi_filemap_write_and_wait_range+0x10/0x10 [ 774.063941][ T37] ? __kasan_check_write+0x18/0x20 [ 774.069094][ T37] ? downgrade_write+0x3a0/0x440 [ 774.074073][ T37] down_read+0x8f/0xe0 [ 774.078151][ T37] ? __cfi_down_read+0x10/0x10 [ 774.082908][ T37] super_lock+0x231/0x300 [ 774.087260][ T37] ? user_get_super+0x350/0x350 [ 774.092130][ T37] ? __kasan_check_write+0x18/0x20 [ 774.097261][ T37] ? _raw_spin_lock+0x8c/0x120 [ 774.102038][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 774.107248][ T37] ? dquot_quota_sync+0x452/0x4e0 [ 774.112291][ T37] ? __kasan_check_write+0x18/0x20 [ 774.117439][ T37] iterate_supers+0x8a/0x560 [ 774.122042][ T37] ? __cfi_quota_sync_one+0x10/0x10 [ 774.127265][ T37] ? security_quotactl+0x3b/0xf0 [ 774.132218][ T37] __se_sys_quotactl+0x308/0x7d0 [ 774.137153][ T37] ? __x64_sys_quotactl+0xc0/0xc0 [ 774.142196][ T37] ? __kasan_check_write+0x18/0x20 [ 774.147326][ T37] ? do_user_addr_fault+0xbc4/0x1200 [ 774.152630][ T37] ? __kasan_check_read+0x15/0x20 [ 774.157689][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 774.163781][ T37] __x64_sys_quotactl+0x9f/0xc0 [ 774.168645][ T37] x64_sys_call+0x2818/0x2ee0 [ 774.173344][ T37] do_syscall_64+0x58/0xf0 [ 774.177799][ T37] ? clear_bhb_loop+0x50/0xa0 [ 774.182513][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 774.188417][ T37] RIP: 0033:0x7fec4178f6c9 [ 774.192863][ T37] RSP: 002b:00007fec425ea038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 774.201293][ T37] RAX: ffffffffffffffda RBX: 00007fec419e5fa0 RCX: 00007fec4178f6c9 [ 774.209276][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000101 [ 774.217274][ T37] RBP: 00007fec41811f91 R08: 0000000000000000 R09: 0000000000000000 [ 774.225433][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.233475][ T37] R13: 00007fec419e6038 R14: 00007fec419e5fa0 R15: 00007fff281c4f28 [ 774.241542][ T37] [ 774.244606][ T37] INFO: task syz.7.9505:28949 blocked for more than 123 seconds. [ 774.252398][ T37] Not tainted syzkaller #0 [ 774.257365][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 774.266056][ T37] task:syz.7.9505 state:D stack:0 pid:28949 tgid:28942 ppid:22410 flags:0x00004004 [ 774.276227][ T37] Call Trace: [ 774.279520][ T37] [ 774.282459][ T37] __schedule+0x1322/0x1df0 [ 774.287012][ T37] ? __sched_text_start+0x10/0x10 [ 774.292054][ T37] ? irqentry_exit+0x4a/0x60 [ 774.296725][ T37] ? common_interrupt+0x5c/0xb0 [ 774.301607][ T37] ? asm_common_interrupt+0x2b/0x40 [ 774.306835][ T37] schedule+0xc6/0x240 [ 774.310958][ T37] schedule_preempt_disabled+0x14/0x30 [ 774.316460][ T37] rwsem_down_read_slowpath+0x6d1/0x1460 [ 774.322129][ T37] ? down_write_killable+0x2d0/0x2d0 [ 774.327429][ T37] ? filemap_write_and_wait_range+0x16a/0x1d0 [ 774.333531][ T37] ? __cfi_filemap_write_and_wait_range+0x10/0x10 [ 774.339962][ T37] ? __kasan_check_write+0x18/0x20 [ 774.345119][ T37] ? downgrade_write+0x3a0/0x440 [ 774.350081][ T37] down_read+0x8f/0xe0 [ 774.354195][ T37] ? __cfi_down_read+0x10/0x10 [ 774.358971][ T37] super_lock+0x231/0x300 [ 774.363363][ T37] ? user_get_super+0x350/0x350 [ 774.368236][ T37] ? __kasan_check_write+0x18/0x20 [ 774.373412][ T37] ? _raw_spin_lock+0x8c/0x120 [ 774.378201][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 774.383482][ T37] ? dquot_quota_sync+0x398/0x4e0 [ 774.388623][ T37] ? __kasan_check_write+0x18/0x20 [ 774.393774][ T37] iterate_supers+0x8a/0x560 [ 774.398398][ T37] ? __cfi_quota_sync_one+0x10/0x10 [ 774.403595][ T37] ? security_quotactl+0x3b/0xf0 [ 774.408614][ T37] __se_sys_quotactl+0x308/0x7d0 [ 774.413602][ T37] ? __x64_sys_quotactl+0xc0/0xc0 [ 774.418662][ T37] ? __kasan_check_write+0x18/0x20 [ 774.423810][ T37] ? do_user_addr_fault+0xbc4/0x1200 [ 774.429137][ T37] ? __kasan_check_read+0x15/0x20 [ 774.434181][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 774.440268][ T37] __x64_sys_quotactl+0x9f/0xc0 [ 774.445137][ T37] x64_sys_call+0x2818/0x2ee0 [ 774.449885][ T37] do_syscall_64+0x58/0xf0 [ 774.454316][ T37] ? clear_bhb_loop+0x50/0xa0 [ 774.459015][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 774.464947][ T37] RIP: 0033:0x7fec4178f6c9 [ 774.469394][ T37] RSP: 002b:00007fec425c9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 774.477815][ T37] RAX: ffffffffffffffda RBX: 00007fec419e6090 RCX: 00007fec4178f6c9 [ 774.485943][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000100 [ 774.494064][ T37] RBP: 00007fec41811f91 R08: 0000000000000000 R09: 0000000000000000 [ 774.502064][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.510033][ T37] R13: 00007fec419e6128 R14: 00007fec419e6090 R15: 00007fff281c4f28 [ 774.518039][ T37] [ 774.521082][ T37] INFO: task syz.7.9505:28958 blocked for more than 123 seconds. [ 774.528846][ T37] Not tainted syzkaller #0 [ 774.533799][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 774.542453][ T37] task:syz.7.9505 state:D stack:0 pid:28958 tgid:28942 ppid:22410 flags:0x00004004 [ 774.552634][ T37] Call Trace: [ 774.555933][ T37] [ 774.558856][ T37] __schedule+0x1322/0x1df0 [ 774.563359][ T37] ? __sched_text_start+0x10/0x10 [ 774.568572][ T37] ? __kasan_check_write+0x18/0x20 [ 774.573730][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 774.578870][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 774.584433][ T37] schedule+0xc6/0x240 [ 774.588559][ T37] schedule_preempt_disabled+0x14/0x30 [ 774.594055][ T37] rwsem_down_read_slowpath+0x6d1/0x1460 [ 774.599705][ T37] ? down_write_killable+0x2d0/0x2d0 [ 774.605014][ T37] ? filemap_write_and_wait_range+0x16a/0x1d0 [ 774.611106][ T37] ? __cfi_filemap_write_and_wait_range+0x10/0x10 [ 774.617545][ T37] ? __kasan_check_write+0x18/0x20 [ 774.622703][ T37] ? downgrade_write+0x3a0/0x440 [ 774.627647][ T37] down_read+0x8f/0xe0 [ 774.631732][ T37] ? __cfi_down_read+0x10/0x10 [ 774.636503][ T37] super_lock+0x231/0x300 [ 774.640864][ T37] ? user_get_super+0x350/0x350 [ 774.645732][ T37] ? __kasan_check_write+0x18/0x20 [ 774.651058][ T37] ? _raw_spin_lock+0x8c/0x120 [ 774.655925][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 774.661201][ T37] ? dquot_quota_sync+0x445/0x4e0 [ 774.666256][ T37] ? __kasan_check_write+0x18/0x20 [ 774.671434][ T37] iterate_supers+0x8a/0x560 [ 774.676037][ T37] ? __cfi_quota_sync_one+0x10/0x10 [ 774.681239][ T37] ? security_quotactl+0x3b/0xf0 [ 774.686202][ T37] __se_sys_quotactl+0x308/0x7d0 [ 774.691172][ T37] ? __x64_sys_quotactl+0xc0/0xc0 [ 774.696222][ T37] ? __kasan_check_write+0x18/0x20 [ 774.701355][ T37] ? do_user_addr_fault+0xbc4/0x1200 [ 774.706680][ T37] ? __kasan_check_read+0x15/0x20 [ 774.711737][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 774.717824][ T37] __x64_sys_quotactl+0x9f/0xc0 [ 774.722693][ T37] x64_sys_call+0x2818/0x2ee0 [ 774.727403][ T37] do_syscall_64+0x58/0xf0 [ 774.731839][ T37] ? clear_bhb_loop+0x50/0xa0 [ 774.736543][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 774.742446][ T37] RIP: 0033:0x7fec4178f6c9 [ 774.746921][ T37] RSP: 002b:00007fec425a8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 774.755384][ T37] RAX: ffffffffffffffda RBX: 00007fec419e6180 RCX: 00007fec4178f6c9 [ 774.763989][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 774.772017][ T37] RBP: 00007fec41811f91 R08: 0000000000000000 R09: 0000000000000000 [ 774.780036][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.788022][ T37] R13: 00007fec419e6218 R14: 00007fec419e6180 R15: 00007fff281c4f28 [ 774.796027][ T37] [ 774.799116][ T37] NMI backtrace for cpu 1 [ 774.799131][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 774.799158][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 774.799168][ T37] Call Trace: [ 774.799173][ T37] [ 774.799179][ T37] __dump_stack+0x21/0x30 [ 774.799201][ T37] dump_stack_lvl+0x10c/0x190 [ 774.799219][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 774.799239][ T37] dump_stack+0x19/0x20 [ 774.799256][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 774.799274][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 774.799300][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 774.799323][ T37] ? sched_show_task+0x379/0x560 [ 774.799348][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 774.799388][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 774.799406][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 774.799424][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 774.799443][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 774.799460][ T37] watchdog+0xd8f/0xed0 [ 774.799481][ T37] ? __cfi_watchdog+0x10/0x10 [ 774.799499][ T37] ? __kasan_check_read+0x15/0x20 [ 774.799520][ T37] ? __kthread_parkme+0x138/0x180 [ 774.799532][ T37] ? schedule+0xc6/0x240 [ 774.799552][ T37] kthread+0x2ca/0x370 [ 774.799565][ T37] ? __cfi_watchdog+0x10/0x10 [ 774.799583][ T37] ? __cfi_kthread+0x10/0x10 [ 774.799597][ T37] ret_from_fork+0x67/0xa0 [ 774.799618][ T37] ? __cfi_kthread+0x10/0x10 [ 774.799632][ T37] ret_from_fork_asm+0x1a/0x30 [ 774.799654][ T37] [ 774.952681][ T37] Sending NMI from CPU 1 to CPUs 0: [ 774.957908][ C0] NMI backtrace for cpu 0 [ 774.957921][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 774.957940][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 774.957950][ C0] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 774.957971][ C0] Code: cc cc cc b8 f9 d2 2d c1 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 e2 39 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 d3 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 774.957985][ C0] RSP: 0018:ffffffff87207da0 EFLAGS: 000002c2 [ 774.957998][ C0] RAX: ffff8881f6e00000 RBX: ffffffff87215540 RCX: ffffffff858d70be [ 774.958011][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000e05174 [ 774.958021][ C0] RBP: ffffffff87207da0 R08: ffff8881f6e39733 R09: 1ffff1103edc72e6 [ 774.958032][ C0] R10: dffffc0000000000 R11: ffffed103edc72e7 R12: 1ffffffff0e42aa8 [ 774.958043][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87cb2128 [ 774.958053][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 774.958066][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 774.958076][ C0] CR2: 00007f404b3b4198 CR3: 000000010f26a000 CR4: 00000000003526b0 [ 774.958090][ C0] DR0: 0000000000000002 DR1: 0000000000000000 DR2: 0000000000000000 [ 774.958099][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 774.958109][ C0] Call Trace: [ 774.958114][ C0] [ 774.958120][ C0] default_idle+0x17/0x30 [ 774.958138][ C0] arch_cpu_idle+0xd/0x20 [ 774.958154][ C0] default_idle_call+0x3f/0x80 [ 774.958170][ C0] do_idle+0x1a0/0x470 [ 774.958186][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 774.958203][ C0] cpu_startup_entry+0x48/0x70 [ 774.958217][ C0] rest_init+0x10b/0x130 [ 774.958234][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 774.958254][ C0] start_kernel+0x46a/0x4bb [ 774.958269][ C0] x86_64_start_reservations+0x2e/0x30 [ 774.958288][ C0] x86_64_start_kernel+0x6a/0x7b [ 774.958305][ C0] common_startup_64+0x13b/0x157 [ 774.958327][ C0] [ 776.516584][ T7050] usb 1-1: USB disconnect, device number 86