last executing test programs: 6m19.341903939s ago: executing program 2 (id=122): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd422bd676d3863b7, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x8, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x2, 0x2, 0x5, "e1c6"}]}}, 0x0}, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe28, 0x4, @mcast2, 0x7}, 0x1c) (async, rerun: 64) connect$inet6(r1, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async, rerun: 32) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="687567653d77697468696e5f73697a65b7a236649c95b823d989c03bf724c855ba5f44c01b21a3c2d0575ad850e3ad9bc1a032640e52acc1f704aff00b1bd99ac903aae0643a41a74626"]) (async, rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (rerun: 32) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 6m18.675009445s ago: executing program 2 (id=125): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@private=0xa010102, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x33, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @flat=@handle={0x73682a85, 0x10a, 0x2}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 6m18.663715786s ago: executing program 2 (id=126): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x405, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@rnullb, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 6m18.663508226s ago: executing program 2 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x1}, 0x57) (async) keyctl$search(0xa, 0x0, &(0x7f00000003c0)='asymmetric\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8808, &(0x7f0000000000)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6m18.650428877s ago: executing program 2 (id=128): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f0000000080)) r4 = openat(0xffffffffffffff9c, &(0x7f0000002140)='./file1\x00', 0x42, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = dup(r5) connect$inet6(r6, &(0x7f0000008900)={0xa, 0x4e21, 0x1, @local, 0x7}, 0x1c) (async) r7 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsync(r8) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000240)=@ethtool_cmd={0xe, 0x2, 0x40, 0x5, 0x1, 0xa4, 0x4, 0x3, 0x0, 0x7, 0x5, 0x3, 0x4, 0x7, 0x8, 0x5, [0x5, 0xd0]}}) (async) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r9, 0x3, 0x11, r7, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFSYNC(r10, &(0x7f0000000100)={0x7, 0x33, 0x1}, 0x7) (async) r11 = creat(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0) write$cgroup_int(r11, &(0x7f0000000540), 0xfffffdd8) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000180)={[{@stats}, {@max={'max', 0x3d, 0x7fffffffffffffff}}, {@stats}, {@stats}]}) 6m18.559123306s ago: executing program 2 (id=129): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) (rerun: 32) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x10) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000800)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, r8, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) (async) syz_fuse_handle_req(r7, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x64170730, 0x4, 0x8000006, 0x0, {0x5, 0x100001, 0x1000b, 0x2, 0x3, 0x0, 0x3, 0x8000000, 0x0, 0x8000, 0x2000002, 0x0, r10, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r7, &(0x7f0000006680)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xd7, {0x5, 0x1, 0xfd, 0xfffffffffffffffd, 0x3ff, 0xfffffdff, {0x4, 0x80000808000083, 0x3, 0xfff, 0x10000, 0x100000800000008, 0x80000008, 0x0, 0x4, 0x6000, 0x7fffffff, 0x0, r10, 0x0, 0xe5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000008c0), 0x420240, 0x0) (async) r13 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/binder-control\x00', 0x2, 0x0) r14 = accept$unix(r3, &(0x7f0000000940)=@abs, &(0x7f00000009c0)=0x6e) sendmmsg$unix(r3, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000400)="f36e814085d0070baa2d59554a86700ade666ae583c2f0574b21755550543461f644aac7750d07caaf017bb2866b249247628d7610e17c278bd2b082d3a25c6840df1ac19a5f05a7d1054974e791320c99746a3935282a2e6357d6e5dd513f9f5f7a8d74344d1f5d", 0x68}, {&(0x7f0000000480)="745a7618bae5dc0c08bc0922052a973920c58f528165dffbebe854ebd258982c3785ece761fd6227711cfc236f893eeffe64617fecece49863f86165a2f153ba687adca073e221cd", 0x48}, {&(0x7f0000000500)="79b48b427b725bd4fcd2615f7fb002ab8568d98ed6b9b2e387c5aa1b5698f4acdcac3037ba31dc726fe4281247b7dae69ed09ef9a6da2d32cf4b9690bb05dde540ad42cfeed07bb8d64b5f965e0497245b94a63343b5be268a757ae4da84238e9dd11473213b0b59a23a93b0167266eb77f61a9dc45396a46dcea845bc", 0x7d}], 0x3, &(0x7f0000000580)=[@rights={{0x28, 0x1, 0x1, [r3, r2, r0, r3, r2, r0]}}, @rights={{0x18, 0x1, 0x1, [r3, r1]}}], 0x40, 0x54}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="eb92ffb2a037e2f8f823d6f7f23111c98bae918337103a086dd1dd908bfd0e8b7e4b8231f12ff94b28cf27fecf02fbe387b417ba52b489b29eb9ddc20f82623b3c6ae8f7a8e325c3cc1226c2511e253f940708623dfcb06fa505363fa0a4cc8cebe8c3dc8daf98f1d27e10baa40ad806f7ee275fc96d73dfe18161f8d19f0c903f6324b3af419feee061c796b9d2e4d610b37e", 0x93}], 0x1, &(0x7f0000001a40)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r10}}}, @rights={{0x18, 0x1, 0x1, [r11, r1]}}, @rights={{0x30, 0x1, 0x1, [r3, r2, r0, r1, r0, r12, r3, r13]}}, @rights={{0x20, 0x1, 0x1, [r14, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r0, r2, 0xffffffffffffffff, r2, r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r12]}}], 0xd0, 0x48801}}, {{&(0x7f0000000b40)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000bc0)="4301ccd3c05be03d4f5eec58a29017a651e6ad6715d63524003e4e818259d1c1fa0343fdd264a10ff252ed9d0651fbdc3b3f7be220743d12879f24f2da0ab62059c1047a246500b1cdf0a1a43df1668ef38e86b0047056e87b846dfeb3f683407cac0bf22e47ae54e4eb9768e527408098c917e25dae5ff8286433adf0eaed568187ecd274d5b8f3965fe6aca191eb5e6aa71dddf9b2a76c38a8d5959f2029", 0x9f}, {&(0x7f0000000c80)="ba1895c1fe11927292c817f6a14129bb7ecae27483dd36a293b5c2d2d2cfabb1af65eb9ac8", 0x25}, {&(0x7f0000000cc0)="64b2d047ca129342410569dd6c80dcc59ee7406704ef010922e149710107686f5295", 0x22}, {&(0x7f0000000d00)="b96deeecbce0c33e848a7017b3de526978ff4bb0f755dcb1e9", 0x19}, {&(0x7f0000000d40)="dcded285acf6185db2d99685a5039611bfe221d6138af8b3f73df04e7d905abeed12a232ae38d2873ff3a55766d32fcb1ac4a3b5dfc5dd6e83a202fcff4d1a340e608ef30974244e6b1d8f1b8e127c49255f345aa50d2c4f1a3d98b41b5f68ccfbd9e86570f1a4b5c8ee1c84ff20a10b4b631e7acba2c5d6d5ee3ec0e655f1493c483160eb", 0x85}, {&(0x7f0000000e00)="2ee56e19f98ace8b63c06ffbcba0b14adb6898f4427120d2a2bb4204097d15c9059cde4b7827161b749d9ad30fcf102888b97c1347826f7fe1095dadeabdea6c1b14308cb1ec3e96104992197be46833edbf6c0c11d74187", 0x58}, {&(0x7f0000000e80)="e3c1b57f5825c3d2a64ab01934ead9fdcd6adf391b66f13fb9b22f90a8832c84b8716492dae3b305a831aba1ccab5bd5d47feb3fd576c00a4b2b2f2b44d12ff1e0449f89fbdfbe21467c94b3f3131392f9f699b14c52e146af44eea9ecb6af7261513a39429cb554966580b460eff8dd2e360a41f80fc6fdcd6bedfed5ebb676daac8bbb9365f173bdb459ade94e54aaa95f7435a1872c8f2c77520e3e129d5ffbb50a1da8f6492b50488579e42447fe51baac8c9b7d94e620e7ea2c72c85526feee5a27", 0xc4}, {&(0x7f0000000f80)="bf8070c7de1e86993f8281b58808f84c4a333064bf7e019bde1a6bd8e6f2863718753babb51c6fccf6b42e72aabde0f1cd232310d2ea37a134f0842201462ca066d944baacd726dc960695e7", 0x4c}], 0x8, &(0x7f0000001180)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r9, r6}}}, @cred={{0x1c, 0x1, 0x2, {r4, r9, r10}}}], 0x60, 0x101}}, {{&(0x7f0000001200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001280)="4c257cfe5599789ae5d5d135f3fc9e7ff9578eb170b9c0b4f961a232a4d3990c6afc0f2745487540023ce6c4435f3890e63a12bbe7dfc5a5a17bd0aef8bb3916691d319f66d9d6e9688d3bd30140fb41461e606ebf03dec64ec4000fd6068e46bb003a58b28978e63cb561ff6a579184cb5a1748889899b124f954243294de3e1383e55c1d270818235322240eee2d37e5c4bc0afc6639a409b5ae0003376f65df7af64545589641bf29ffcba2cf6a1882af05db63271c0b0cdcee39574079776f25ba49fa3494608851e7100b17564d8624675f3f47bd2c0e68b83d4c13cf517c51", 0xe2}, {&(0x7f0000001380)="d3170d3399a0a5bb4e695aaa69a805b2217dfdbe9b8ed92cffd44ff455dd1715840a0d678cadd100fd9ddcf181017c14e8db10024cd84b432cbf6c2d0dca45fbb893cf2161", 0x45}, {&(0x7f0000001400)="1f9d7a91ce711fb8730e18a6ed8db71a04beb8275746a1e7960681517af88765c1a86c975c7cff200fef62bc7585bc67a34c5d14af442d40ad5cc7c897df019049d392df1a8e3f0ab44eb502a8eb0353ede0263c598f443eccb28dbd0c3b87e39ef3ef665828d4dcf44b418a66de26780a1df3b48d5d1546fe8c1c2a34f7f840d70de1aaec660107fb8e7eae96e3f586916c510a", 0x94}, {&(0x7f0000001680)="547ec45af4ea570370d23a00baad604aa7eb70c01259ba947c4ea8289c3c30c00c7993ef8911683eef7fb28e287410230436712ae020e2ac4727148d5b6be011f322cefe6663892c45307d3d24e0ce6fe39d74f1e6b1b451f1e8ef5c46230ae45558d46340cb03eb93b5fdf789e34f5b741ed7f269f512a09eff06c5486f97f893db4017c8c4d2cb09", 0x89}, {&(0x7f0000000ac0)="bbdc757bda6dd03a24a37a37b10aa3f591145bd29898aad4388eab79b9062246b5a261b4e6006156286bca84d52a553d8fee42d3887ff451f2e86d2f628b7ec6604f157723037254098eba33421db55c0d97f78faeb3deb3cec53ae067744b641114", 0x62}, {&(0x7f0000001100)="25c4dae12b44cdfecf1dc9e1e545188a7fe2cb340f954d4d", 0x18}, {&(0x7f0000001740)="ac213ca022ee2fe854490e8a984f114d849f097d72b0039313357ec883aa868eec58472c26461e9da437116c765fe592081eba567b9a7831", 0x38}, {&(0x7f0000001780)="847cb23f963d604744380f2ddadb559ce06dbfa7ed62df2ac8a477fdfc42cdc1bf6848367581ad83492c1385e2ccf80950ff63067949c104952f8b2c0b8b099acdee075ab12ef075491910d9ffb3579efecadde4fcb898f48b00e57a37c7d1747b354fe69576939070ba74a8ad2010daeea57972505380e85c6c7ad082b79bfa5ea372a5e70b010efa4797989a3f7f9f87332144a51da6f0fd0e2985c3ce021520f5eb8a4cb98996179f9d169b295482a283b3d25f1356423cca75ec8d72c12cd416d162fce36f2450cdd935e4741f12e93b2d3d53913b667b6cd47bedf590d0f1288b3e78a5ad74e672be", 0xeb}], 0x8, 0x0, 0x0, 0x8000}}], 0x5, 0x40010) (async) r15 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r15) r16 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r16, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r16, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) setsockopt$inet6_group_source_req(r16, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r16, 0x29, 0x2c, &(0x7f0000001540)={0x90, {{0xa, 0x4e22, 0x6, @mcast1, 0xf}}, {{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1002}}}, 0xfffffffffffffd66) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r15}, 0x2c, {'wfdno', 0x3d, r3}}) r17 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendfile(r17, r0, 0x0, 0x1) 5m58.981714558s ago: executing program 32 (id=129): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) (rerun: 32) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x10) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000800)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, r8, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) (async) syz_fuse_handle_req(r7, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x64170730, 0x4, 0x8000006, 0x0, {0x5, 0x100001, 0x1000b, 0x2, 0x3, 0x0, 0x3, 0x8000000, 0x0, 0x8000, 0x2000002, 0x0, r10, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r7, &(0x7f0000006680)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xd7, {0x5, 0x1, 0xfd, 0xfffffffffffffffd, 0x3ff, 0xfffffdff, {0x4, 0x80000808000083, 0x3, 0xfff, 0x10000, 0x100000800000008, 0x80000008, 0x0, 0x4, 0x6000, 0x7fffffff, 0x0, r10, 0x0, 0xe5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000008c0), 0x420240, 0x0) (async) r13 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/binder-control\x00', 0x2, 0x0) r14 = accept$unix(r3, &(0x7f0000000940)=@abs, &(0x7f00000009c0)=0x6e) sendmmsg$unix(r3, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000400)="f36e814085d0070baa2d59554a86700ade666ae583c2f0574b21755550543461f644aac7750d07caaf017bb2866b249247628d7610e17c278bd2b082d3a25c6840df1ac19a5f05a7d1054974e791320c99746a3935282a2e6357d6e5dd513f9f5f7a8d74344d1f5d", 0x68}, {&(0x7f0000000480)="745a7618bae5dc0c08bc0922052a973920c58f528165dffbebe854ebd258982c3785ece761fd6227711cfc236f893eeffe64617fecece49863f86165a2f153ba687adca073e221cd", 0x48}, {&(0x7f0000000500)="79b48b427b725bd4fcd2615f7fb002ab8568d98ed6b9b2e387c5aa1b5698f4acdcac3037ba31dc726fe4281247b7dae69ed09ef9a6da2d32cf4b9690bb05dde540ad42cfeed07bb8d64b5f965e0497245b94a63343b5be268a757ae4da84238e9dd11473213b0b59a23a93b0167266eb77f61a9dc45396a46dcea845bc", 0x7d}], 0x3, &(0x7f0000000580)=[@rights={{0x28, 0x1, 0x1, [r3, r2, r0, r3, r2, r0]}}, @rights={{0x18, 0x1, 0x1, [r3, r1]}}], 0x40, 0x54}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="eb92ffb2a037e2f8f823d6f7f23111c98bae918337103a086dd1dd908bfd0e8b7e4b8231f12ff94b28cf27fecf02fbe387b417ba52b489b29eb9ddc20f82623b3c6ae8f7a8e325c3cc1226c2511e253f940708623dfcb06fa505363fa0a4cc8cebe8c3dc8daf98f1d27e10baa40ad806f7ee275fc96d73dfe18161f8d19f0c903f6324b3af419feee061c796b9d2e4d610b37e", 0x93}], 0x1, &(0x7f0000001a40)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r10}}}, @rights={{0x18, 0x1, 0x1, [r11, r1]}}, @rights={{0x30, 0x1, 0x1, [r3, r2, r0, r1, r0, r12, r3, r13]}}, @rights={{0x20, 0x1, 0x1, [r14, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r0, r2, 0xffffffffffffffff, r2, r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r12]}}], 0xd0, 0x48801}}, {{&(0x7f0000000b40)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000bc0)="4301ccd3c05be03d4f5eec58a29017a651e6ad6715d63524003e4e818259d1c1fa0343fdd264a10ff252ed9d0651fbdc3b3f7be220743d12879f24f2da0ab62059c1047a246500b1cdf0a1a43df1668ef38e86b0047056e87b846dfeb3f683407cac0bf22e47ae54e4eb9768e527408098c917e25dae5ff8286433adf0eaed568187ecd274d5b8f3965fe6aca191eb5e6aa71dddf9b2a76c38a8d5959f2029", 0x9f}, {&(0x7f0000000c80)="ba1895c1fe11927292c817f6a14129bb7ecae27483dd36a293b5c2d2d2cfabb1af65eb9ac8", 0x25}, {&(0x7f0000000cc0)="64b2d047ca129342410569dd6c80dcc59ee7406704ef010922e149710107686f5295", 0x22}, {&(0x7f0000000d00)="b96deeecbce0c33e848a7017b3de526978ff4bb0f755dcb1e9", 0x19}, {&(0x7f0000000d40)="dcded285acf6185db2d99685a5039611bfe221d6138af8b3f73df04e7d905abeed12a232ae38d2873ff3a55766d32fcb1ac4a3b5dfc5dd6e83a202fcff4d1a340e608ef30974244e6b1d8f1b8e127c49255f345aa50d2c4f1a3d98b41b5f68ccfbd9e86570f1a4b5c8ee1c84ff20a10b4b631e7acba2c5d6d5ee3ec0e655f1493c483160eb", 0x85}, {&(0x7f0000000e00)="2ee56e19f98ace8b63c06ffbcba0b14adb6898f4427120d2a2bb4204097d15c9059cde4b7827161b749d9ad30fcf102888b97c1347826f7fe1095dadeabdea6c1b14308cb1ec3e96104992197be46833edbf6c0c11d74187", 0x58}, {&(0x7f0000000e80)="e3c1b57f5825c3d2a64ab01934ead9fdcd6adf391b66f13fb9b22f90a8832c84b8716492dae3b305a831aba1ccab5bd5d47feb3fd576c00a4b2b2f2b44d12ff1e0449f89fbdfbe21467c94b3f3131392f9f699b14c52e146af44eea9ecb6af7261513a39429cb554966580b460eff8dd2e360a41f80fc6fdcd6bedfed5ebb676daac8bbb9365f173bdb459ade94e54aaa95f7435a1872c8f2c77520e3e129d5ffbb50a1da8f6492b50488579e42447fe51baac8c9b7d94e620e7ea2c72c85526feee5a27", 0xc4}, {&(0x7f0000000f80)="bf8070c7de1e86993f8281b58808f84c4a333064bf7e019bde1a6bd8e6f2863718753babb51c6fccf6b42e72aabde0f1cd232310d2ea37a134f0842201462ca066d944baacd726dc960695e7", 0x4c}], 0x8, &(0x7f0000001180)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r9, r6}}}, @cred={{0x1c, 0x1, 0x2, {r4, r9, r10}}}], 0x60, 0x101}}, {{&(0x7f0000001200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001280)="4c257cfe5599789ae5d5d135f3fc9e7ff9578eb170b9c0b4f961a232a4d3990c6afc0f2745487540023ce6c4435f3890e63a12bbe7dfc5a5a17bd0aef8bb3916691d319f66d9d6e9688d3bd30140fb41461e606ebf03dec64ec4000fd6068e46bb003a58b28978e63cb561ff6a579184cb5a1748889899b124f954243294de3e1383e55c1d270818235322240eee2d37e5c4bc0afc6639a409b5ae0003376f65df7af64545589641bf29ffcba2cf6a1882af05db63271c0b0cdcee39574079776f25ba49fa3494608851e7100b17564d8624675f3f47bd2c0e68b83d4c13cf517c51", 0xe2}, {&(0x7f0000001380)="d3170d3399a0a5bb4e695aaa69a805b2217dfdbe9b8ed92cffd44ff455dd1715840a0d678cadd100fd9ddcf181017c14e8db10024cd84b432cbf6c2d0dca45fbb893cf2161", 0x45}, {&(0x7f0000001400)="1f9d7a91ce711fb8730e18a6ed8db71a04beb8275746a1e7960681517af88765c1a86c975c7cff200fef62bc7585bc67a34c5d14af442d40ad5cc7c897df019049d392df1a8e3f0ab44eb502a8eb0353ede0263c598f443eccb28dbd0c3b87e39ef3ef665828d4dcf44b418a66de26780a1df3b48d5d1546fe8c1c2a34f7f840d70de1aaec660107fb8e7eae96e3f586916c510a", 0x94}, {&(0x7f0000001680)="547ec45af4ea570370d23a00baad604aa7eb70c01259ba947c4ea8289c3c30c00c7993ef8911683eef7fb28e287410230436712ae020e2ac4727148d5b6be011f322cefe6663892c45307d3d24e0ce6fe39d74f1e6b1b451f1e8ef5c46230ae45558d46340cb03eb93b5fdf789e34f5b741ed7f269f512a09eff06c5486f97f893db4017c8c4d2cb09", 0x89}, {&(0x7f0000000ac0)="bbdc757bda6dd03a24a37a37b10aa3f591145bd29898aad4388eab79b9062246b5a261b4e6006156286bca84d52a553d8fee42d3887ff451f2e86d2f628b7ec6604f157723037254098eba33421db55c0d97f78faeb3deb3cec53ae067744b641114", 0x62}, {&(0x7f0000001100)="25c4dae12b44cdfecf1dc9e1e545188a7fe2cb340f954d4d", 0x18}, {&(0x7f0000001740)="ac213ca022ee2fe854490e8a984f114d849f097d72b0039313357ec883aa868eec58472c26461e9da437116c765fe592081eba567b9a7831", 0x38}, {&(0x7f0000001780)="847cb23f963d604744380f2ddadb559ce06dbfa7ed62df2ac8a477fdfc42cdc1bf6848367581ad83492c1385e2ccf80950ff63067949c104952f8b2c0b8b099acdee075ab12ef075491910d9ffb3579efecadde4fcb898f48b00e57a37c7d1747b354fe69576939070ba74a8ad2010daeea57972505380e85c6c7ad082b79bfa5ea372a5e70b010efa4797989a3f7f9f87332144a51da6f0fd0e2985c3ce021520f5eb8a4cb98996179f9d169b295482a283b3d25f1356423cca75ec8d72c12cd416d162fce36f2450cdd935e4741f12e93b2d3d53913b667b6cd47bedf590d0f1288b3e78a5ad74e672be", 0xeb}], 0x8, 0x0, 0x0, 0x8000}}], 0x5, 0x40010) (async) r15 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r15) r16 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r16, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r16, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) setsockopt$inet6_group_source_req(r16, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r16, 0x29, 0x2c, &(0x7f0000001540)={0x90, {{0xa, 0x4e22, 0x6, @mcast1, 0xf}}, {{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1002}}}, 0xfffffffffffffd66) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r15}, 0x2c, {'wfdno', 0x3d, r3}}) r17 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendfile(r17, r0, 0x0, 0x1) 4m1.272772613s ago: executing program 3 (id=3019): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\xcf<\x1d{\x87\tCD\x9chp\x14>%\xb4\xaeQ\xbf\xaf-\x00') 4m1.272527283s ago: executing program 3 (id=3020): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000001400)=""/4096, 0x100a}, {0x0}, {&(0x7f0000000280)=""/254}, {&(0x7f0000002400)=""/4108}, {&(0x7f00000000c0)=""/52}, {&(0x7f00000004c0)=""/201}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) setuid(r3) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace(0x10, r5) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x6, 0x0) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x6, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7, 0x2, 0xffffffff, 0xff, 0x8, 0x8}, {0x8001, 0x7ff, 0x3, 0x6, 0x10, 0x9784964}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000003480)={'wg1\x00', &(0x7f0000000100)=@ethtool_perm_addr}) (async) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000003480)={'wg1\x00', &(0x7f0000000100)=@ethtool_perm_addr}) preadv(r8, &(0x7f0000004c80)=[{&(0x7f0000004b00)=""/225, 0xe1}], 0x1, 0x9, 0x7) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r10, 0x1, 0x7, 0x0, &(0x7f0000000080)) (async) getsockopt$sock_int(r10, 0x1, 0x7, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000040)={0x2, 0x0, [{0x80000000, 0x7ebd, 0xfffffffe, 0x4, 0x7}, {0x6, 0x2, 0x5080af1, 0x99, 0xfff}]}) 4m1.271465133s ago: executing program 3 (id=3022): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0xc9ad598e679361a0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x20042, 0x0) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, r1}) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@remote, r1}, 0x14) (async) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=@dstopts={0x8, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @ra={0x5, 0x2, 0xa}]}, 0x18) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2100, 0x12) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040), 0x4) 4m1.223159098s ago: executing program 3 (id=3023): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000600)={0x22000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r1], 0x1}, 0x58) (async) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) rt_tgsigqueueinfo(0x0, 0x0, 0x25, &(0x7f0000000100)={0x2a, 0x6, 0xffff}) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, &(0x7f0000000080)) (async, rerun: 64) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async, rerun: 64) syz_clone3(&(0x7f0000000300)={0x9009400, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2e}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000280)=""/36, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) pidfd_send_signal(r3, 0x9, &(0x7f0000000380)={0x23, 0x9, 0xed3}, 0x0) 4m1.222850507s ago: executing program 3 (id=3024): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) userfaultfd(0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400004, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffffd0f, 0x4, 0xfffffff9, 0x1, 0xffd, 0xfffff801, 0x5], [0x2, 0x1, 0x10003, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x3, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x2, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x4000000, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x5, 0x10000, 0x1, 0x3, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0xa, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x80008001, 0x7fff, 0x3, 0x6, 0xe, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0x8, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0003020000200203"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000090a0104000000000000000007000000200000000c0a01010000000000000000070000000900010073797a3000000000140000001000010000000000000000000084000ab34fe386e14420a5dbafa71fedfa2c58b69b6c80b280a5dc1ea82c9a976bd87cf98185922acc0ebff063d90d957f6dcb1bfae81fe7bda20cb3d0f294c1a698d6ce9fb172bc2653825cee5195c6741a"], 0x5c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a0300000000000000000002000000090002"], 0x34}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_connect_ath9k(0x3, 0xffffffffffffff39, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x4, 0x8, 0xf000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffd) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="380000001000010000000000fedbdf25070000001300000062000000", @ANYRES32, @ANYBLOB="18001280140001"], 0x38}], 0x1}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) 4m1.222273678s ago: executing program 3 (id=3025): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x2000) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) (async) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000)) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x2000) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) (async) 4m1.215710178s ago: executing program 33 (id=3025): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x2000) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) (async) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000)) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x2000) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) (async) 3m42.299053815s ago: executing program 5 (id=3283): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=0x0], 0x8) (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) (async) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0xc) openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000000c0)={0x1, 'ip_vti0\x00', {}, 0xfff}) (async) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=""/242, 0xf2}, 0x9}], 0x1, 0x2, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 3m42.243167151s ago: executing program 5 (id=3284): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffbd) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r3, &(0x7f0000016440)={0x2020}, 0x2020) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) write$P9_RLINK(r4, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) 3m42.242975881s ago: executing program 5 (id=3285): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @broadcast}, 0x14) sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_int={{0x14}}], 0x18}, 0x80) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 3m42.235565261s ago: executing program 5 (id=3286): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000100)=""/33, &(0x7f00000001c0)=0x21) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a030000000000000000000200000009"], 0x34}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) rename(&(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000300)) r9 = inotify_init() readv(r9, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) 3m41.320053391s ago: executing program 5 (id=3298): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005200010000000000000000000a0000000c0001"], 0x20}}, 0x40010) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1002, 0x3}) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xf0, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 3m41.316335462s ago: executing program 5 (id=3299): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x9, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x200088d0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@subj_type={'subj_type', 0x3d, '/\\#*[%R@\'%^!\t-,'}}, {@subj_type={'subj_type', 0x3d, '#*-'}}]}}) 3m26.076399366s ago: executing program 34 (id=3299): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x9, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x200088d0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@subj_type={'subj_type', 0x3d, '/\\#*[%R@\'%^!\t-,'}}, {@subj_type={'subj_type', 0x3d, '#*-'}}]}}) 2m18.777124436s ago: executing program 1 (id=4933): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000040)='stat\x00') pread64(r5, &(0x7f00000000c0)=""/22, 0x16, 0x6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='qnx6\x00', 0x80, &(0x7f00000001c0)='\x00') timerfd_create(0x2, 0x180800) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r7 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0xa8d58000) syz_io_uring_setup(0x40000f00, &(0x7f0000000080)={0x0, 0x0, 0x20000, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000640)) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x484ac2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x1, 0x7, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r9, 0x54a0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x4, 0x7}, @flat=@weak_binder={0x77622a85, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0xa, 0x0, 0xe}}, 0x0}, 0x1000}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 2m18.240752939s ago: executing program 1 (id=4950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x10) (async) r2 = socket$inet_icmp(0x2, 0x2, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, 0x0, &(0x7f0000001ac0)) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, 0x0) 2m18.171255716s ago: executing program 1 (id=4952): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) setuid(0xee01) creat(&(0x7f0000000200)='./file0\x00', 0x102) stat(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)) 2m18.141688339s ago: executing program 1 (id=4954): r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)={0x27, 0x1}) (async) unshare(0x20010200) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x1c1702, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 2m18.066172107s ago: executing program 1 (id=4956): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00006b0000/0x2000)=nil, 0x2000}, 0x7}) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000940)={0x6, 0x0, &(0x7f0000000300)=[@request_death={0x400c630e, 0xfffffffd}], 0x0, 0x0, 0x0}) 2m17.131066799s ago: executing program 1 (id=4974): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) (async) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000000), 0x1004) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0xa840, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) (async) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) timer_gettime(r1, &(0x7f0000000080)) 2m1.063845074s ago: executing program 35 (id=4974): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) (async) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000000), 0x1004) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0xa840, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) (async) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) timer_gettime(r1, &(0x7f0000000080)) 12.506796586s ago: executing program 6 (id=7015): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) r1 = syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x2, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0xa, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) unshare(0x22020600) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) syz_usb_connect(0x5, 0x539, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x1, 0x6, 0x5, 0x8, 0x3}, 0x1a0, &(0x7f0000000580)={0x5, 0xf, 0x1a0, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "21bccd61f9a950780b860111adaa5446"}, @generic={0x72, 0x10, 0x1, "36e56ea1bfb03b084196017ccce6bc1e436a01c0c9d2228e86c210bde49a22c799077a1ab81b70581240483bf79cf335a33ffee12b589f2f3613f8e0229ea76f71437a3ca64b56be9f602787447bafcae75bd8f5e42e05442778467a53830c8120a496d86cd67bcdb2fa0b5cc0afbe"}, @generic={0xdc, 0x10, 0x2, "1dfeee7365c757a375e699d1aeef4d3adae17fb853e1c3ee0ff281ad5312f9d9b46e90dfeeaf04b261dcf7f853363eb8dd01ff2432840ce8caf4bc4ace294024b02494eb88504411297badc55bdd9fcf57e39b4e60166453668b70434a996af66af61b5d82904d59ffda0d430da4105f32be8cbdf7476b9cba4c38799d3688561c0ec623a7b32c6e5773a6327f6b57fa2aee14164ad25ade213a468cffaefdb6a33db7743cabf4bc2048289d1087c88944be4cb8a3e6d3f83624962c9155b96186af0684e49f4207cc5ab4e89495f3895739bcf2a654569bbc"}, @generic={0x2b, 0x10, 0xb, "fe51a54ad0cfdd57704e63c2b1a0411af5764511e88eb4cb2d63cae834ca6f3172f6336b8ad476cc"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x9, 0x100}]}, 0x2, [{0x36, &(0x7f0000000740)=@string={0x36, 0x3, "04da6d815cfffc079e6b3f466575ba5f989e1b7ddc118816dedccefc0bc7f60a496ae59448c173fe98f54ec5ac54310634ad0fba"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x423}}]}) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 11.944298061s ago: executing program 6 (id=7026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040810}, 0xc81) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000180)={'vlan0\x00', {0x2, 0x4e21, @local}}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0010c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000440)="00000000000000a90000", 0xa}], 0x2}, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) (async) ioprio_get$pid(0x2, 0x0) (async) r6 = socket(0x11, 0xa, 0x5) (async) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x18, 0x0, &(0x7f00000001c0)=[@increfs_done={0x40106308, 0x3}, @exit_looper], 0x19, 0x0, &(0x7f0000000200)="f210841e64c1685a44ec0fa3f02e1b53ae9fcbe146262ad5d5"}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) sendto$inet(r6, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) (rerun: 32) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 11.943840301s ago: executing program 6 (id=7027): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x889002, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000140)=r1) (async) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000140)=r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x64, 0x0, &(0x7f0000000380)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fef0ead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df5215b75a482436e231f28e370fafd3b4afd276d2"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x64, 0x0, &(0x7f0000000380)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fef0ead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df5215b75a482436e231f28e370fafd3b4afd276d2"}) 11.942958401s ago: executing program 6 (id=7028): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003b00)=ANY=[@ANYBLOB="20100000180001000000000000000000020000000800000004000000040012"], 0x1020}}, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4a40, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181d82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) io_submit(0x0, 0x1, &(0x7f0000001640)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x41, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x1}]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000006b02"]) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) preadv2(r1, &(0x7f0000001000), 0x61, 0x3ff, 0x9, 0xf) 11.939574341s ago: executing program 6 (id=7029): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x7, 0x2, 0x7}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) 11.829063992s ago: executing program 6 (id=7032): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$setperm(0x5, r1, 0x30925) keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 11.784825197s ago: executing program 36 (id=7032): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$setperm(0x5, r1, 0x30925) keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 11.298032365s ago: executing program 8 (id=7038): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r1 = socket$netlink(0x10, 0x3, 0x13) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x3ff, 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f0000000200), 0x4) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) (async) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0xf0, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r4}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x90, 0x0, &(0x7f0000000340)=[@register_looper, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x0, 0x3}, @fda={0x66646185, 0x3, 0x0, 0x2}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x40}, @clear_death={0x400c630f, 0x1}, @free_buffer={0x40086303, r4}, @decrefs], 0x0, 0x0, 0x0}) 11.240146431s ago: executing program 8 (id=7042): write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x90) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = getpid() read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) syncfs(r0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0) r4 = syz_pidfd_open(r2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) setns(r4, 0x24020000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x2) 11.233724891s ago: executing program 8 (id=7043): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0xee00, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x1}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="240000001e005f0214ffffffffff03000000000000000000000008000800090020000000", 0x24) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="e16ee7304ab761cf0d467befa8a185ebef63c5cf3e9664a9dab1f3a2febe28da82afbaf4e93779d426dd99943c548e431616eca436dc7300d2", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25260000000c00018008000100", @ANYRES32=r6], 0x20}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r7, 0x11, 0x65, 0x0, &(0x7f0000000040)) io_setup(0x9, &(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r10, r10) bind$inet(r8, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r8, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r8, 0xb5d6) bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) socket(0x18, 0x6, 0x6) 11.085867506s ago: executing program 8 (id=7048): epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[0x1]}, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe, 0x0, &(0x7f0000000240)="3b36179dd9848f7c32f566b851c6"}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = open$dir(&(0x7f0000000180)='./bus\x00', 0x20400, 0x81) mkdirat(r0, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x440, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000020000040"]) fchownat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0xee01, 0x1000) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000500)=""/179, 0xb3) lseek(r4, 0x5, 0x3) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) dup3(r3, r4, 0x0) pipe2$watch_queue(0x0, 0x80) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, &(0x7f00000002c0), &(0x7f0000000200)=0x80) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(0xffffffffffffffff, &(0x7f0000000400)="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", 0x1f000) 11.059253538s ago: executing program 8 (id=7050): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@cpuid={0x14, 0x18, {0x8, 0x6}}, @in_dx={0x82, 0x20, {0xa47d, 0x2}}, @wrmsr={0x1e, 0x20, {0xa2f}}, @code={0xa, 0x7d, {"440f20c03509000000440f22c0c74424000b000000c74424026adf0000c7442406000000000f0114248fa978d7a206000000b9800000c00f3235008000000f3066ba200066b8030066ef66ba410066b80b0066ef66400f38813741e90030000066b81a010f00d0410f4d466f"}}, @cpuid={0x14, 0x18, {0x7, 0x2f31}}, @wrmsr={0x1e, 0x20, {0x325, 0xf}}], 0x10d}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000180), 0x80, 0xa5400) r2 = dup3(0xffffffffffffffff, r1, 0x80000) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x148, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x148}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000500)={@initdev, 0x0}, &(0x7f0000000540)=0x14) sendmsg$nl_route_sched_retired(r2, &(0x7f0000002480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002440)={&(0x7f0000000580)=@newtfilter={0x1ec0, 0x2c, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x9, 0xa}, {0x3, 0x2}}, [@f_tcindex={{0xc}, {0x8d8, 0x2, [@TCA_TCINDEX_MASK={0x6}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xf017}, @TCA_TCINDEX_POLICE={0x8b4, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x15, 0xfff, 0x10, 0x0, 0x2, 0xc, 0xe9, 0x1, 0xffffffff, 0x80, 0x3, 0x3, 0x84, 0xe, 0x10000, 0x80000001, 0x898, 0x1ff, 0xb3c, 0xffffffff, 0x2, 0x7fffffff, 0x8, 0xfffffffd, 0x0, 0x4, 0x7, 0x10001, 0x2, 0x9, 0xa1, 0x8, 0x8, 0x2, 0x3, 0x2, 0x38e, 0x5, 0x77, 0x1, 0x6, 0x7, 0x9, 0x1, 0x800, 0x858, 0xffff8001, 0x6, 0x1ff, 0x600000, 0xff, 0x0, 0x7, 0x7, 0x101, 0x3, 0x4c78, 0x5, 0x7, 0xaa, 0x0, 0x9, 0x0, 0x9, 0xfffffff7, 0x9, 0x6, 0x1, 0x1, 0x6, 0x3, 0x5, 0x7, 0x96, 0x2, 0x0, 0x3a, 0xb80, 0x7d4, 0x72d9, 0x401, 0x10, 0x81, 0xce, 0x7, 0x4, 0x8a, 0xe7ae, 0x5, 0x3, 0x30, 0x38b40000, 0x1, 0x7a, 0x3, 0x5, 0x3, 0x20000, 0x1, 0x7, 0x59d, 0xffff, 0x5, 0x7, 0x9, 0x8c2f, 0x81, 0x9, 0x8, 0x1, 0x8, 0x5, 0x2, 0x4, 0x7, 0x6, 0x9, 0x6, 0x4, 0x34, 0x0, 0x0, 0x1, 0x4, 0xfffffffc, 0x3, 0x7fffffff, 0x7fff, 0x7, 0x844, 0x6, 0x8, 0xd, 0xffffff67, 0x1, 0x7fffffff, 0xe, 0xfffffffd, 0x4, 0x1e, 0x8, 0x7, 0x4, 0x9, 0xe2cf, 0x5, 0x1, 0x2, 0x3, 0x6, 0x97, 0x4, 0x8, 0x3ff, 0x0, 0x9dd9, 0xff, 0xffff8b3f, 0x7, 0x2, 0x0, 0x59, 0x0, 0x6, 0xfffffff8, 0x6, 0x0, 0x7, 0x3, 0x1e00, 0x7, 0x8f2, 0x6, 0xd5, 0x9, 0x2, 0x9, 0xfffffffd, 0x12000, 0x40, 0x3, 0xfffff001, 0x7fffffff, 0xff, 0x4, 0x76a, 0x7, 0xffffffff, 0xffffffff, 0x2, 0x1, 0x4, 0x0, 0xfffffc01, 0x200, 0xd, 0x7fff, 0x3, 0xfffffffa, 0x9, 0x8, 0x401, 0x279, 0x871, 0x9, 0xffffffff, 0x80000001, 0x9, 0x100, 0x7fff, 0x0, 0x40000000, 0xfff, 0xc, 0xa, 0x7ff, 0x1, 0xfffffff8, 0x3, 0x6, 0x9, 0x2, 0x54, 0xfff, 0xffffffff, 0x1, 0xffffffff, 0x101, 0x5, 0xfffffffb, 0xffff, 0x2, 0xfffffffa, 0x9, 0x1, 0x9, 0xfffffff5, 0x5, 0xfffffc01, 0x7ce8c33, 0xfffffff9, 0x81, 0x5, 0x1, 0x8d, 0xfffffffa, 0x7, 0x7fff, 0xafc, 0x3, 0x1, 0x0, 0x4, 0xc, 0x5, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xcd6}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fff, 0x9, 0x8001, 0x8, 0x3e0a, 0x800, 0x2, 0x101, 0x6, 0x7, 0x80000000, 0x7f, 0x6, 0x3, 0x186c, 0x2d, 0x9, 0x5, 0x9, 0x7, 0x800, 0x1ff, 0x800, 0x2, 0xfefc4be, 0x8001, 0x3, 0x3, 0x400, 0x7, 0x2, 0x10001, 0x5, 0x5, 0x8, 0x6, 0x7, 0xf, 0x1, 0x1000, 0x8, 0x1, 0xffff, 0x7, 0x4, 0x4, 0x1, 0x80, 0x9, 0x140000, 0x5, 0xe6, 0x8, 0x1, 0xfffffff9, 0xffff0001, 0x6, 0x45e, 0x9, 0x9f, 0x4, 0x0, 0x8000, 0xf, 0x6, 0x1, 0x4, 0x7, 0x5, 0x4, 0x3, 0x3b4, 0x1, 0x3, 0x7fffffff, 0xa, 0x3, 0x3, 0xffffffff, 0x12bae09e, 0x4, 0xe40, 0x7, 0x2, 0x3ff, 0x7, 0x1, 0x3, 0xd, 0x8, 0x6, 0x3, 0x1, 0x2, 0x800, 0x75, 0x0, 0x7, 0x8, 0x1, 0x3, 0x1ff, 0x1ff, 0x2, 0x2, 0xa049, 0x3, 0xcd, 0xf, 0x1, 0x1, 0x1, 0xffff, 0x1, 0x8001, 0x5, 0x8, 0x6, 0x5, 0x0, 0x6, 0xe9d, 0x401, 0x6, 0x6bce, 0x3, 0x8, 0x309aaf96, 0x6, 0x7bf, 0xbc, 0x8, 0x2, 0x10001, 0xfffffc00, 0x9, 0x80000000, 0x3, 0x8, 0x6, 0x7, 0x3, 0x6, 0x401, 0x80, 0x1, 0x0, 0x6, 0x2, 0x6, 0x2, 0xfffffffa, 0xe209, 0x9, 0x0, 0x3, 0x7, 0x2421cb75, 0x81, 0x6, 0x8, 0xce, 0x10000, 0x5, 0x4, 0x7, 0x64, 0x57d, 0x0, 0x9, 0x4, 0x3, 0x8, 0x0, 0x80000000, 0x10001, 0x2, 0x3, 0x101, 0x7, 0x1, 0x10, 0x1, 0x7fffffff, 0x159e105b, 0x3732, 0x10000, 0xc, 0x1, 0x200, 0x5f10, 0x0, 0x0, 0x7, 0x84f, 0x7, 0xef45, 0x9, 0x9, 0x7, 0xffff, 0xfffffffc, 0x800, 0x8, 0x4, 0x3, 0x0, 0x401, 0x8, 0x81, 0x6, 0x8001, 0x2430, 0x5, 0x6, 0x6, 0x9, 0x0, 0x4, 0xe5400000, 0x1, 0x7, 0x0, 0x0, 0x3, 0x9, 0xd, 0x5, 0x7, 0x7fffffff, 0x5, 0x81, 0x1000, 0x200, 0x7, 0x80000000, 0x9, 0x8, 0x4, 0x10, 0x40, 0xf0000, 0x2, 0xcb, 0x101, 0x7, 0x3, 0xfffffff7, 0x137, 0x7ff, 0x2, 0xa866, 0xffffff7f, 0x4, 0x22c3ad97, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x5, 0x1, 0x7, {0x1, 0x1, 0x2, 0x0, 0x8, 0x5}, {0x19, 0x2, 0x5, 0x2, 0x7e84, 0xfffffffe}, 0x2, 0x401, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0xfffffffd, 0x5, 0xfffffffb, {0xb4, 0x2, 0xe, 0x9, 0x8}, {0x8, 0x0, 0xfff, 0x5, 0x0, 0x9}, 0xff, 0x8, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1338}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x6076}]}}, @f_rsvp6={{0xa}, {0x4}}, @f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x826}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x7, 0x4}}]}}, @f_rsvp={{0x9}, {0xa0, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0xe, 0x7fffffff}, {0x100, 0x9, 0xa}, 0x33, 0xb1, 0x8}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xe, 0x2, 0x8}, {0x8, 0x3, 0x8}, 0x8, 0xa, 0x4}}, @TCA_RSVP_SRC={0x8, 0x3, @multicast2}, @TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8, 0x7fffffff, 0x10000}, {0x4, 0xffff, 0x5}, 0x2, 0x6, 0x71}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8, 0x1, 0x4d}, {0x1a2, 0x3689, 0x4}, 0x29, 0x7f, 0x2}}, @TCA_RSVP_ACT={0x4}, @TCA_RSVP_SRC={0x8, 0x3, @local}]}}, @f_tcindex={{0xc}, {0x840, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x6}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x0, 0xfff3}}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x2}, @TCA_TCINDEX_POLICE={0x80c, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0x47, 0x8c, 0x5, 0x1000, 0x7, 0x4, 0x1, 0x100, 0x7, 0x8, 0x8, 0x93000000, 0xa, 0x1, 0x5, 0x1, 0xe68b, 0x9, 0x1ff, 0x6, 0xf4f, 0x1ff, 0x1, 0x2, 0x6, 0xf14, 0x7a5, 0x7, 0x7fff, 0xfffffffd, 0x9, 0x9, 0x7, 0x80000001, 0xa, 0x2, 0xd, 0x1, 0x4, 0x10000, 0x3ff, 0x401, 0x9, 0x600000, 0x1, 0x0, 0x2, 0x80000001, 0xb, 0x8, 0x3, 0xfffffe00, 0x5948, 0x5, 0xfffff9cc, 0x21, 0x8, 0x3f, 0x3, 0x1, 0x2, 0x2, 0x4, 0xf63, 0x9, 0x7, 0x7, 0xfffffffe, 0xe, 0x6, 0x6, 0x5, 0x10000, 0x9, 0x9, 0xba5c, 0xea6, 0xd, 0x8, 0x100, 0x4, 0x0, 0x101, 0x10001, 0xc000000, 0x7, 0x6, 0xcd1e, 0x5, 0x95, 0x3, 0x8, 0x2, 0x8, 0xa, 0x7, 0x5, 0x5, 0x9, 0x9, 0x4, 0x4, 0x2, 0x3, 0x1, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0x0, 0x6, 0xfffff765, 0x1, 0x2, 0x5, 0x8, 0x81, 0xd, 0xeaa, 0xff, 0x200, 0x2, 0x9, 0x80, 0x81, 0x7fff, 0x8, 0x1, 0x81, 0x6, 0x98, 0x40000000, 0x1fe, 0x2000, 0x5, 0x7, 0x0, 0x7, 0xc17, 0x7f, 0x401, 0xe8, 0x8000, 0x6, 0x6, 0x1, 0x7, 0x6, 0xb, 0x80, 0xfffffffc, 0x7fff, 0x0, 0x7fffffff, 0x1, 0x0, 0x6, 0x5, 0x6, 0x2, 0x5, 0x1480b13b, 0xff, 0x7, 0x7, 0x7fffffff, 0x5, 0x80000000, 0x7, 0x9, 0x1, 0x80000000, 0x200, 0x6, 0x8001, 0xd12, 0x7e62, 0x9, 0x0, 0xbefa, 0x2, 0x800, 0x0, 0x7, 0x5, 0x0, 0x0, 0x2, 0x10, 0x9, 0x46, 0x1, 0x5, 0xa, 0x3ca, 0x401, 0x81, 0x10000, 0x7, 0x5, 0x5, 0x7fffffff, 0x6, 0x4, 0x2, 0x101, 0x0, 0x0, 0x5, 0x5, 0x2a2, 0x0, 0x3ff, 0x3, 0x81, 0x2, 0x10000, 0xc, 0x4, 0x2cb, 0xb32, 0x2, 0x0, 0x2, 0x6, 0x0, 0x7fffffff, 0x7, 0x80, 0x2, 0x6, 0x3, 0x1000, 0x40000000, 0x1, 0x5, 0x5f, 0x36be, 0x5, 0xfffffffd, 0xfffffffe, 0x0, 0x1, 0x3, 0x2, 0xa, 0x4, 0x6, 0x9, 0x8001, 0xbb, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0xa, 0x9, 0x469, 0x7, 0x2, 0x7, 0x5, 0x6, 0x5, 0x8, 0x6, 0x4, 0x6, 0x100, 0x2, 0x40, 0x9, 0x129, 0xde9, 0x1000000, 0x3, 0x8000, 0x5, 0x4, 0x9, 0x28, 0x2, 0x2, 0x8, 0xffffffff, 0xfffffff8, 0x401, 0x1, 0x6c, 0xffffffff, 0x3, 0x8cb, 0x5, 0x5c, 0x0, 0x5, 0x4a, 0x33b8, 0x0, 0x3, 0x557, 0x1, 0x8, 0x0, 0x9, 0x4, 0x10000000, 0x9, 0x1ff, 0x119, 0x0, 0x3, 0x1000, 0x4, 0x4, 0x0, 0x2, 0x40, 0x9, 0x0, 0x10, 0x8, 0xb, 0x8000, 0xf484, 0x6, 0x7, 0x5, 0x4, 0x6, 0x6, 0x1, 0x1, 0x2, 0x10001, 0x4, 0x4, 0x5, 0x3, 0x10000, 0x2, 0x40d1, 0x4, 0x5, 0x2a, 0x8, 0xb4, 0x4d8e, 0xff, 0x9, 0x3, 0x3, 0xa, 0x2, 0x7, 0x18c9eeb9, 0xfffffff8, 0xf, 0x9f40, 0x97c, 0x7ff, 0x5a, 0x80000001, 0x80, 0x7f, 0x3, 0x0, 0x5b5, 0xffff, 0x819c, 0x7, 0x7, 0xf685, 0x913, 0x3, 0x8, 0x1, 0x80000001, 0x10000, 0x1, 0x3ff, 0x8, 0x3ff, 0x7ff, 0x7, 0xff, 0x10, 0x80000001, 0x4, 0x3, 0x6, 0x1, 0x44d, 0x3, 0x3, 0x0, 0x1, 0x8001, 0x1, 0xfd, 0xfffffffe, 0x0, 0x2c68, 0x100, 0x8da, 0x2, 0x7, 0x7, 0xe45, 0x9, 0x4, 0x0, 0x9, 0xfffffffa, 0x5, 0xf, 0x7, 0x8, 0x4a, 0x9, 0x80, 0xad, 0x2, 0x3, 0xfffffffa, 0x6, 0x2, 0x4ac, 0x7ff, 0x8, 0xa, 0xfffff001, 0x2b94, 0x80, 0x9, 0x0, 0x4b, 0x8, 0x2, 0x81, 0x3, 0x401, 0x1, 0xfff, 0x74dd00, 0x3, 0x51ed, 0x9, 0xd2de, 0x0, 0x2, 0x7fffffff, 0x4, 0x0, 0x6, 0xc14, 0x0, 0x3, 0x3, 0x2, 0x8, 0x7fffffff, 0x6, 0x1, 0x7, 0xfffffffe, 0xfffffff6, 0x800, 0x10000, 0x80000001, 0x8, 0x4, 0x5, 0x0, 0x6, 0xb, 0x80000001, 0x0, 0x94, 0x400, 0x28, 0x7, 0x8000, 0x5, 0x6, 0x3, 0x7, 0x6, 0x9, 0x7, 0x3, 0x5, 0x9, 0x68a, 0x7, 0x9, 0x401, 0x0, 0x2d79, 0x4, 0xfffffff9, 0xffffffff, 0x0, 0x0, 0x5651, 0x4, 0xfffffffb, 0x1, 0x7]}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x2}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x5}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @f_tcindex={{0xc}, {0xc84, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x9110}, @TCA_TCINDEX_POLICE={0xc78, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x10000, 0x3, 0xfffffffa, 0xffffffff, 0x10000, 0x7, 0x8, 0x100, 0x8, 0x9, 0x4, 0x25a, 0x4, 0x8000, 0x6, 0x10000, 0x3, 0x9, 0x40, 0xb, 0x66d8, 0x0, 0x5, 0x8, 0x1c00, 0x1, 0x1, 0xe4, 0x4, 0x0, 0x8, 0x401, 0x670f3033, 0x6, 0x6da203a9, 0x810, 0x7, 0xe745, 0x3ff, 0x4, 0x8, 0x401, 0x1, 0x5, 0x7fffffff, 0x78, 0xd864, 0x0, 0x7, 0xcb16, 0xd, 0x4, 0xb0, 0x5, 0x800, 0x29, 0x1, 0xf, 0x2, 0x7, 0x4, 0x800, 0x1, 0x1, 0x4, 0x4, 0x0, 0xc0, 0x4, 0xe5c, 0x8, 0x0, 0x101, 0x9, 0xf126, 0x7, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7, 0x6, 0x5, 0x81, 0xfffffff9, 0x7fff, 0x10001, 0xffffff42, 0x3, 0x6, 0x0, 0x8cb4, 0xfffffffd, 0x3, 0x6, 0x8, 0x7b07, 0xc, 0x27, 0x4ce, 0x7, 0x0, 0x0, 0x401, 0x5, 0x101, 0x9d, 0x3, 0x1, 0x4, 0x9, 0x5, 0x33, 0x1ff, 0xe, 0x7, 0x5, 0x3, 0x9, 0x80, 0x2, 0x7, 0x2, 0x101, 0x7, 0x849, 0x7, 0x3, 0x1, 0x9, 0x7fff, 0xfffffb8f, 0x3, 0x10, 0x19, 0xa0, 0x1ff, 0x1, 0x4644, 0x6, 0x10001, 0x64, 0xffff, 0x3, 0x2, 0x4, 0x4d, 0x80000001, 0x2, 0x7, 0x0, 0x6, 0x1, 0x1, 0x0, 0x0, 0x28d, 0x5, 0x96, 0x5, 0x7, 0x5, 0x3, 0xf5a, 0x0, 0x4ac, 0x5, 0x9, 0x1c, 0x401, 0xb, 0x81, 0x5, 0x40, 0x5, 0x5c, 0xff, 0x5, 0x3, 0x1, 0x9, 0x3, 0x7, 0x8, 0xf3d, 0x9, 0x2, 0x1, 0x6, 0x7, 0x7, 0x3e2, 0x1, 0x2, 0xa, 0x401, 0x4, 0x80, 0x7f, 0xc1a, 0x7, 0x0, 0x0, 0x5, 0x3, 0x2, 0x9, 0x800, 0x1, 0x1, 0x0, 0x0, 0x1, 0xbd, 0x46, 0x7, 0x8d, 0xfffffff8, 0xfffffeff, 0x2, 0x8001000, 0x3, 0x7, 0xfffffffd, 0x7e5f9ea8, 0x9, 0x5d31, 0x2, 0x2, 0x400, 0xa1, 0x1, 0xffff, 0x1, 0x3, 0xd8a, 0x8, 0xfffffffa, 0x9, 0x3, 0x3, 0xc53, 0x7, 0x7, 0x2, 0x0, 0x0, 0x4, 0xfffffffd, 0x4b12, 0x5, 0x3, 0x6bc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf1, 0x2, 0x0, 0x8001, 0x5, {0x4, 0x0, 0xf, 0x3, 0x1, 0x4422}, {0xa, 0x0, 0x7, 0x401, 0x8, 0x1}, 0x8, 0x200000, 0xe}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa6a2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x6ea8417a, 0x1, 0x0, 0x7fff, 0x9, 0xe, 0x7f, 0x4, 0x9, 0x6, 0x6, 0x7, 0x8, 0xed1, 0x0, 0x7, 0xb, 0xf, 0x6e, 0x2, 0x5, 0x6, 0x1, 0x7, 0x5, 0x4, 0x40, 0x0, 0x8, 0x5, 0x6, 0x0, 0x4, 0x8, 0x9, 0x0, 0x40, 0xfffffffe, 0x5, 0x80000000, 0x1, 0x314, 0x32501e01, 0x7, 0x5, 0x6, 0x0, 0x8fa, 0x5, 0x1, 0x73508309, 0x9, 0xa61, 0x4, 0x0, 0xb0000, 0x4, 0x10, 0xfffffffa, 0x1, 0xfffffff9, 0x10, 0x9, 0x4, 0x6f, 0x4, 0x9a, 0x3, 0x0, 0x4, 0x1, 0x30, 0x8, 0x1, 0x81, 0x7, 0x9, 0x1, 0xffffffff, 0xb, 0x5, 0x2e8, 0x2, 0x4, 0x8, 0x3, 0x4ae, 0x1000, 0x1000, 0x8, 0x1, 0x40, 0x4, 0xcb, 0xfc, 0x8, 0xf, 0x7fff, 0xce4, 0x100, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x3ff, 0x101, 0x6, 0x10001, 0xffff7050, 0xfffffffa, 0x9, 0x9, 0x3, 0x10000, 0x28bd5ace, 0x81d, 0xbaf, 0x10001, 0x4, 0x4, 0x9, 0xfffffffd, 0x8, 0x8001, 0x9, 0x4, 0x2, 0x6, 0x4, 0x5, 0x2d, 0x80000000, 0x200, 0x81, 0x3, 0x640, 0x4, 0xc9f, 0x0, 0x8, 0x5, 0x158, 0x5, 0x4, 0x1de8, 0x80, 0x7, 0x4, 0x64f, 0x9, 0x2, 0x100, 0x4, 0xffff, 0x9, 0x7, 0xe07, 0x635d, 0xfffffff9, 0x5, 0xb8, 0x0, 0x9, 0x71d, 0x0, 0x3, 0x8, 0x1a3, 0x401, 0x5, 0x6, 0x8, 0x9, 0x1, 0x6, 0x6, 0x0, 0x200, 0x7fff, 0x0, 0x1, 0x10, 0x80000001, 0xc, 0xfffffffa, 0x2, 0x8000, 0x6, 0x200, 0x4, 0xfff, 0x6, 0x1, 0x9, 0x10000, 0x1, 0x7, 0x8, 0x9, 0x200, 0x5, 0x4, 0x6, 0x80000000, 0xf9, 0x9, 0x9, 0x1, 0xfffff3ea, 0x80, 0x6, 0x9, 0x5c, 0xa2, 0x101, 0x7, 0x9, 0x2, 0xffffffff, 0x0, 0x4, 0x5, 0x9, 0x0, 0x0, 0x2, 0x300, 0x6, 0x9, 0x857, 0x101, 0x7314, 0x0, 0x6, 0xdbe, 0x40, 0x9, 0x4, 0x4, 0x5, 0x9, 0xffffffc8, 0x3, 0x1000, 0xb5, 0x1, 0x7f, 0x2, 0xffff, 0xffff, 0x4, 0x7, 0x7, 0x7, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9bb}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xfffffff9, 0x5, 0x2, 0xfc, 0x101, 0x221, 0xc, 0x3000000, 0x7, 0x6, 0x1, 0xffffffc1, 0x80000000, 0x8001, 0x4, 0x1, 0x7, 0x0, 0x3, 0x7, 0x7, 0xa0, 0x4, 0x3, 0x0, 0xe, 0x235a, 0x4, 0x9, 0xa7e2, 0x5, 0x2, 0x9, 0x80000001, 0x2273, 0x9, 0x0, 0x7760494a, 0x6, 0x5, 0x8, 0x4, 0x7, 0x5, 0x0, 0x2, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x1, 0x701, 0x0, 0x5, 0x9, 0xd3fd, 0xfffffff7, 0xc0, 0x1, 0x7f, 0x80000000, 0x9, 0x1, 0x10001, 0x4663, 0x3, 0x7b600000, 0x8000, 0x400, 0xa9, 0x8, 0x2, 0x7, 0x163fba34, 0x9438, 0x0, 0x4, 0x8, 0x4, 0x3, 0x800, 0x7, 0x2, 0x711, 0x4, 0x40a864b2, 0xfffffff7, 0x5, 0xe11, 0x628, 0x0, 0x2, 0x7, 0x8, 0x0, 0x0, 0x4, 0x3, 0x8, 0x401, 0xfffffffe, 0x6, 0x6, 0x1, 0x8, 0x1, 0x6, 0x7, 0x6, 0x0, 0xff, 0xa940, 0x8, 0x9, 0x7, 0x8, 0x6, 0x4, 0x10, 0x9, 0x7, 0x5, 0x2, 0x1ff, 0x1c, 0xfffffffd, 0x7, 0x7, 0x8, 0x9, 0x0, 0x591, 0x7, 0xdc06, 0x1ff, 0x4, 0x9, 0x1, 0x3f, 0x6, 0x5, 0x0, 0x1, 0x4, 0x8, 0x7fffffff, 0x800, 0x3, 0x1, 0x60, 0x81, 0x40b, 0xffffffff, 0xebc, 0x770, 0x0, 0x1ff, 0xfffffb0d, 0x5, 0x401, 0x7, 0xff, 0xc, 0x1ff, 0x5, 0x3, 0x5, 0x6b, 0x6, 0xfff, 0x9, 0xef47, 0x0, 0x200, 0x4, 0x9, 0x4, 0x3, 0xc, 0x9, 0x3, 0xf4, 0x40, 0x1, 0x5ea, 0x3, 0x7, 0x2, 0x1, 0x3, 0x0, 0x7f, 0x73, 0x7, 0x3, 0xf, 0x3, 0xfffffff9, 0xffffffff, 0x3, 0x6, 0x0, 0x0, 0x4, 0x8, 0x3b7, 0x2b, 0x4, 0x4, 0x9, 0x40, 0x5, 0x80000000, 0x8, 0x8, 0x1, 0x5d49, 0x6d1, 0x3, 0x3, 0x4, 0xd, 0x8, 0x6, 0x5, 0x6, 0x6c, 0x2, 0x10, 0x80000001, 0x10001, 0x10000, 0x3ff, 0x7, 0x2, 0xfffffffc, 0x5, 0x1, 0x8, 0x7, 0x1, 0x1, 0xaf, 0xffffffff, 0x2, 0x82ef, 0xaf8, 0x9, 0x400, 0x7, 0x4, 0x0, 0x1, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}]}]}}]}, 0x1ec0}}, 0x64004004) r6 = syz_usb_connect(0x0, 0xf8f, &(0x7f00000024c0)={{0x12, 0x1, 0x300, 0xdc, 0xe8, 0xfe, 0x20, 0xe8d, 0x7126, 0x78ff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7d, 0x3, 0x1, 0xff, 0x0, 0x5, [{{0x9, 0x4, 0x95, 0x3, 0xf, 0xff, 0x0, 0x0, 0x1, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "bc91a8b81649"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x9, 0x2726, 0x18}, {0x6, 0x24, 0x1a, 0x6, 0x12}, [@obex={0x5, 0x24, 0x15, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x6}, @obex={0x5, 0x24, 0x15, 0x7}, @mdlm_detail={0x2a, 0x24, 0x13, 0xa, "fa6d53a9c2e6970da6db9185b68c81cbbf02acdf28280aec3f61a16ccd9f49617e0686d665e1"}, @mdlm_detail={0x14, 0x24, 0x13, 0x3, "8183f2e0b29a5c54f35ae3021b7dbb96"}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "4f36c10063"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x81, 0x7f, 0x7}, {0x6, 0x24, 0x1a, 0x400, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x9398, 0xb, 0x8, 0x8, 0x46}, @obex={0x5, 0x24, 0x15, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xc6}, @country_functional={0x10, 0x24, 0x7, 0xc, 0x9, [0xf320, 0x8, 0x3, 0x55d9, 0x0]}, @mdlm={0x15, 0x24, 0x12, 0x10}, @dmm={0x7, 0x24, 0x14, 0x4, 0xba}]}], [{{0x9, 0x5, 0x1, 0x8, 0x3ff, 0x5, 0x5, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x6, 0xd, 0x1, [@generic={0x93, 0x23, "c5bf81cc52e12ed385106b026f4ad1ca180c17b4fef7bf7d78f4b1a92bc8de01f9f3db922f8e1a61d48e2cdb4a27762888b3c80254d4787ab6e4ab57a5a45b58d05d0f77ef9cebd41ad81e9b3ce8712eca731a3f20895567c2f616ac4f813900f6b377e2fb2ab987cc2c527a0ea35d335f97b815c684d39fd7279492a9a3ed1d027136f1628580be59b31c9603fbaa7cc8"}]}}, {{0x9, 0x5, 0x89, 0x10, 0x200, 0x6, 0x6, 0x51, [@generic={0x6f, 0x1, "db45b085a8dd132689635390df7a79d1c74632a721ca0616d7fe35ed83119700b281a662fc7a41a0f3f0edcb3fa5a290220a2eb1486ee4062922c48b85e7747b25901b4f2d86889c4d1e5f07fc9f74f56194484f780cb78c84f98a39d9202b2ca1046fe0f3618df4cdc8da85b2"}, @generic={0x3a, 0xa7c13fa2497d0b65, "82211bac16ba0f875dbf3ddd5c31dd238f5fbb5618c5f6c05a3ac0070988bb8f4979a116856bf19bcd5417f8e95aba83e9932a7d577fade1"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x6, 0x1, 0x80}}, {{0x9, 0x5, 0x7, 0x1a, 0x400, 0x4, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x2891}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x8001}]}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x8, 0x3, 0x21, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x1ff}, @generic={0xca, 0x2f, "6799dd03599c8d4fe1c24ff4631aebb3cbb89a8f420f8a46356723f69ca55cb29d85ec4a062c5ca90ad9d4a0c7a7fd7799d503e3e54d777fe0d7eb54ae5e7cc3b997b9543b0e8b79956ef2c1b2d48107dcc4013b1bf76b33541245a422d7279165568e31fa0d4dda531790da2af2260825e4bec61d33a88a7f40312b16217fa39d63dc7131a113909d4d456720ae48e592abd579e619ac9ee2d4a5f7078bc604b1ba2ce54339eb782809befa1a5b3ee6f109e86996c653f252618333c4b3f621404e7cf969cc9600"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x400, 0x6, 0x6, 0x7, [@generic={0x8a, 0x4, "0342098ca148b13b8da7124c7896fba45d6ad8a40c5a44d0854cf420a8d18b905786a943fe3e1e72ebf0013dd2fff2ddee7c25152a83056cc6837224222ef800bbe4f347a5a0520a9e222419d45f8afb925f3cbc0678a421e446cc4710ec719181723e06f7ae2d5ed34ae743d3f02d1e97d48999da34498f85ef683482927daa2a4c4f8b34ce55e4"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xf146}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x6, 0xc, 0x4, [@generic={0x68, 0x22, "a95331bec8dc1b97e2a491da38c096e201f7cd3ef42f0565d0c45a2487c42dd16d25a176e553cb92ebc78611cd9874208e0001137c68a456433404682476357e18ca1390e3b36f38c177e9e05b83055338cfc033bf45e59e6465b19f3781486b5fcb69fcb444"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xe, 0x10}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x0, 0x2, 0xce, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x9}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x2, 0x8, 0x6}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0xf3, 0x2, 0x40}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0xf1, 0x3, 0x49, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x56, 0xd41}]}}, {{0x9, 0x5, 0x1, 0x2, 0x400, 0xe, 0xf6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x68, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf4, 0x3}]}}, {{0x9, 0x5, 0x4, 0x0, 0x30, 0x3, 0x7, 0x8, [@generic={0x99, 0xd, "1081fc5d7d61fc1561a04b310ee2e3162938d12983f4ad0bd955746e8716474af9451b2abe57665945f40296a7281d2ebf3dab9118c9ca1ab2b97be0af0580012264aa63de3b401c2a8d303425a1ae3c8936ece88abcf91c3ae77750de946e27ac17c071ce31c31eaf120fbe2c77b9ff02ff8607f377437ad93877c333dcd11695f92b2df8edd74c4337a36338903fd64ce6e3d49b850a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x6, 0xc5, 0x2}}]}}, {{0x9, 0x4, 0xc3, 0x9, 0x9, 0x81, 0x38, 0x2, 0x80, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x2, 0xf3, 0x1}]}], [{{0x9, 0x5, 0x5, 0x1, 0x20, 0xfb, 0x5, 0x26, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6}]}}, {{0x9, 0x5, 0x2, 0x4, 0x400, 0x3, 0x5, 0x74, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x4, 0xd8, 0x2, [@generic={0x28, 0x19, "cbcd32e79bf9c5173288aa66530c6f0cd3cf0b8b0ac9e73f71350c58d27cb152449111f9b6f4"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x6, 0x3, 0x9}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x1, 0xc, 0xd7, [@generic={0x47, 0x0, "ff283d80024496445f80eb9ebe40aa77125a70465b9c07b4e6d1f2b29e8ec3e408484991b2e615c5516d77660ac789d183b5c8457dab0d970a6181bc9e1374f6c65e2ea675"}, @uac_iso={0x7, 0x25, 0x1, 0x7e9816148a93cc1f, 0x1, 0x4}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x3, 0x7, 0x3, [@generic={0x101, 0xf, "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"}, @generic={0xd6, 0xe, "0f8106ff7bdb1f9ba39087583243847ea152fdd577ad0fcebb48f4a954a3b51636f66d27d8ce7b92814f618cdb274687b220b872c041e7ca23f64485b1a778e937a3ca9c53379a135cbc3cf3fa8c3c8fa98e98a1f0f6b48e1a5a472c54f83436aa2d88d8cc7695616fbf7f94c586f0b80389d717e36e6070676233bd84d43160c7dfd75d89be48b89411ebcad9fe5c25b68b672cbddce49c2fc609fbda3073cae59365f16079d927de6b49e0ae19b690710520bdf7122bdabe92148033e53650c00bd68fe51559521eb97b9ee1cc72a9eab890ac"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x2, 0x5, 0x7b, [@generic={0xe6, 0x0, "b761355c0a66cfbeb3e8e441889fa74130833c86dc13f9684a927003c39e8f50166201be2dcd0e9f996f81a36b6d6be6836f356ae764675480e6d2f0a8da2ec49bfff0f76f1bf288cefb5fa15a93e9fcd46bf99c73b8076395b15a514e40f53ac5ebe8385c0479eb93bd47a42bfee754056ab48d91ceadb69dae1b12e041a902ea62067a4ac6edfecc5694f617679ad8046f05ea085a6d9276e670751c4fc1ed063573a2794e873ae20cdf9b28ca4186908f67cd1e1c0ed842129dcd4976db7d9b33a7639ee9cb23794f5760e4b7146c1f01a847dd2689e32ee8ac5f887ecb2eb9eba401"}, @generic={0xf0, 0xa, "3a7c33504e1ecbfdf970af50fa8e01a159e7d7977eb2c3d9b593c4a0817b808d1d829666a8b559fbd47a846dacad96fbd3e4180ae3b00f4c49a7501aa050d3384cad909f108613962c795fbf7cad0ad11a8790c6828a8ebe2696ad87b1ae78a5e0180a89ff981ef48012f1e88392038eeace6b8f7216b85acd2a6091dd5572406b9f89f78ce6ba1d1cd80eb6104d5f5de13584c3ec931c43eaaebc3b843ac39255710c74b0ec0f07b7584f64fcfbb48a9cafd357ca1ab10dc954e9d44ac272679c068b17e370a4818b1e7fcfa1ebd79421175044836f9a7699bf0b3dec5ab33c2925d9842603266f44531785d482"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x7, 0x66, 0x1}}, {{0x9, 0x5, 0xb, 0x10, 0x7fe, 0x5, 0x5, 0x81, [@generic={0xdb, 0xe, "2934dd9f56c1f49b41bbe622efd1a419c8c4721fc49790025e5669f631c7256d47ebc8672f700d8087e949eb4765e9e60a830cb0d6bd71e4daa6942754226cbf19dfa1e436b622e21a7bf85c7a76f4df14a00e793f22670d8a258b87be912645b846c2498a04aabe84c41e1873583a743233ae48f9db70108d699aa15523cff5972743a3126809246bff4ebf8eafbf32fbce6b15f11fd42b15cf807373843a56786863cfcdedf39f827bb742c2f6a0f3d5fd031624a5dabafa3dd6de2c1cf4d96d3dc03944ced01c83dd59aa33ccba366d50bd62a14082253a"}, @generic={0x3, 0x7, 'C'}]}}]}}, {{0x9, 0x4, 0xcc, 0x7, 0xe, 0x86, 0xd5, 0x93, 0x7, [], [{{0x9, 0x5, 0x0, 0x2806acb812fe2f93, 0x3ff, 0xb, 0xde, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x2}, @generic={0x6e, 0x7, "2c55260ea0d3a0ffad23d0593d7c0e8cc9e069732805a2167f73cadfae21199501cf02bbecc4b9ee1a66312e642249761bc7c717614d9e1950a97aa4b69eea463b3e3017d2ce52100c8f397cab5acb9f2407b31a134cb8d1f9748e050d7c8c89d8b6d28382f6ae33847fc17e"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x6, 0x7, 0x5, [@generic={0xa4, 0xc, "2a747e463064862a6f0f8ad591e9c1b19626432818a86409ed93910ee881294d31437f7d8e2c9d0956487a84b127a7c59f9efc4f7b31e24671c569c6a2ab49498e3e76dc40be13f29ba59fbc1adecf280b4f6b0960d56e27207e3392f58eddfc5b2d31da5799a042f893a373080a71b5b4d7e1c0d73d5c6c6d2fa4a4f53b185dcb11f075922d085e1370080831f6512a053badecdd7169332cbe883c33ffb3c098f5"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x9, 0x5a, 0xcf, [@generic={0xa1, 0x30, "39fec21d8c1622c697a230880a113626c3237643dd4e359935d1aef598cfb225662d645567993c7795a424444b1ad281e0ad18748c8fb4d4b8662050ca8ae075a329eb3d7805d401849dcdb9bb6398347369ebfae51f535c52ec49131eafd0a7acfffc9a335481780cc0f33fb08afb091e48674eafc6f72738122237a5f49a45153fb35d662426008c503417d015bb1609c04b7a77141ca607386c5fe3cd13"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x2, 0x2, 0x46, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x727}, @generic={0x34, 0xb, "891039194ef439df907d13a6570f46141a6db082b253ce8a6bc6bb842dff7f34c32b5f921c1e8a92cc2ff024ed0452619827"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x6, 0xae}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0x3f, 0x8, 0x9, [@generic={0xf1, 0x22, "e15daec8b3357a76f5b02fcc24c1d46cd576e4ec45625f89ea2dd0e8dcc4ffe6a231c756df847b5cb18dab265c2cf97123f069fe2cc76dddf8f79fb66296f5d0594e392ca8f9346d499051750b96657b56402a269395dd6439c6b3cd4a60840847d600c3f3723585d8c69d7a270d8918aecd40a71f1e844d3f082a2edfb2e36ef1410898fb760360c0ee98890d9738b95e4f3f7a1966a29f393ebad87b437a246361ff0fb1a69be5ec436f489e8ada4bf41183ff6a2e8d387035e89a0d20695a7af600fcd4951a291daf2caa17688f359b153a608841dcdc3e1058db811049835cb166fa5117d5e9c17d954ca3ec39"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x2}]}}, {{0x9, 0x5, 0x7, 0x14, 0x40, 0xb, 0x23, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0xa, 0xc1, 0x56, [@generic={0x42, 0x22, "6218e5723a414a15ee42c451c8138ab493118e7afcb895199f175d7e33d9ee8300bf8da6890650d25d6d66bd1313b7ec890f6ecd4a4567413c511657d7093757"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1e, 0x6b}]}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x1, 0x8, 0x7}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x6e, 0x1, 0x53, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x47}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x8, 0xfe, 0x8}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x7, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x69}]}}, {{0x9, 0x5, 0x4, 0xc, 0x40, 0xb, 0x10, 0xfa}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x8, 0x3, 0x5, [@generic={0xde, 0x4, "47e7b1264264004180c626b8d836867f23a0bd8e9f9bec94a4f8167e6fad9153c9e46d1e3855b6d6913a2ddbee9d130ccba14a6d76f9d73b57de07d8ee2ff7fde5b821a7f9e4832762eacdaeccf2527ed9cb123b18eba94a8be8e53146a09dd56ef468e462fce0203c8e13606d2489d0a9a1341a85991c33a4c1a8b290d1e4046e51c0760e62f181706dc55157037d4db0ae991747edca11354dfdb93c13117b8792fcfc86da152b7f36577b3f62da1aaf8cf89cd4a2012539f92f2e976ac45405b346c88a951c6e64a151c33609fd1bf41bd002740d22775a23f523"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x1}]}}]}}]}}]}}, &(0x7f0000003680)={0xa, &(0x7f0000003480)={0xa, 0x6, 0x200, 0x3b, 0x2, 0x6, 0x40}, 0x71, &(0x7f00000034c0)={0x5, 0xf, 0x71, 0x4, [@generic={0x54, 0x10, 0xb, "efd2fdbd5ca13915437c1b417dae4b0b7ac9deb5025900084509a2236e192b810e55bdc159ff4130dc048a728f29b5b077e62740879318b13c2743a5c57738e678fbb62cfba7c658967451df364b6c6612"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x5c, 0xf, 0x5, 0x1, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x19, 0x81}]}, 0x3, [{0x1d, &(0x7f0000003540)=@string={0x1d, 0x3, "1606ccaa291b2a761af6275d444466933603072db39f802488c71c"}}, {0x4, &(0x7f0000003580)=@lang_id={0x4, 0x3, 0x140a}}, {0x90, &(0x7f00000035c0)=@string={0x90, 0x3, "a129937171ec8febd18654f4627b6b6613fb7edd087f4ca1a8a44a28bdc51ea395298976a4f917c03d0f421ba6788708778f7bf82bacc03c291c9274cb39298e74db33f3635ea104bf4f2dd431f3f5ddd57152abe232b872508592cee4088cbdffc8f606e304beff82b0a32a434bc6af34d417a4b6df227fad56353ec11573088caf5c69d465515d9dead0a22dce"}}]}) close_range(r2, r1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x13) r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r8, &(0x7f00000036c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x93, 0x7, 0x316, 0x3, 0x3, 0xbd7, 0x35, 0x40, 0x345, 0x5, 0x7, 0x38, 0x4, 0x9, 0x7ff}, [{0x4, 0xfffffffa, 0x2, 0x3, 0x4, 0x100000000, 0x1, 0xea}, {0x6474e551, 0x1, 0x1000000000000, 0x79, 0x2, 0x3, 0x8000000000000000, 0xfe3}, {0x7, 0xc, 0xe577, 0x10001, 0xbb, 0x3, 0x8, 0x2}, {0x4, 0x5, 0x2, 0x100000000, 0x25e5, 0x109, 0x7fffffffffffffff, 0x2}], "ebaed8ea0722d261a3a69c9c6bb8a68d9da4a167d0584cf09f2d02e4971f3da2950a2b9c480ebf02c123a916a3b7981906d2d1ae350e0d18b4b15166fa90cf52858d6f0bf06253376b77acbdb69a202213c3bafa981249a69c12ad6defa30b", ['\x00', '\x00']}, 0x37f) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000003b40)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003a80)={0x54, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xffff7fff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x70}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xf50f}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4081}, 0x8804) bind$inet(r2, &(0x7f0000003b80)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) fchmod(r7, 0x140) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000003bc0)=0x6, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) syz_usb_control_io(r6, &(0x7f0000003e40)={0x2c, &(0x7f0000003c00)={0x40, 0x21, 0xc0, {0xc0, 0xa, "c235fc05e05bfcbedc584ac928a565732c532313f434fbaf99428063005e97036c37f3bc79d3b78d8fdb03cbb408afa3577fa6b6944379fd804a95fded7f23454308a579e6591d75b5788bfc5ed0a77649fb13f18b2263f25c8503e6697a6f1107b0059c3b13eef8224c8fd9f57d7e608febdfbf0a7f59c7188f234af39c25f58e1a85503fced63a2d716c081890558045a1fbce68c73c991fab62f6ae930ef21822ac7d38d3b256bc5856a960363eaeb10335efb15d654435558f8ee521"}}, &(0x7f0000003d00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}, &(0x7f0000003d40)={0x0, 0xf, 0x5f, {0x5, 0xf, 0x5f, 0x3, [@generic={0x3c, 0x10, 0x4, "2c845713135180c9022131e846203a7dc1547a87e6e1c9163ea8bba80c7adc62a190cb7300fe3bc3782f1cba045994ad26c01dec32ae0155ed"}, @ss_container_id={0x14, 0x10, 0x4, 0xe3, "43bb08a17ea6d48010e2e32f78372261"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x2c, 0xb, 0xd984}]}}, &(0x7f0000003dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x2, 0x3, 0x81, "c861726f", "c0d464e9"}}, &(0x7f0000003e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x8, 0x7, 0x4, 0x2}}}, &(0x7f0000004340)={0x84, &(0x7f0000003e80)={0x0, 0x17, 0xe4, "b82975093798be323009b656ad06720582957d30879e05d01f24afcb29989e3627d57de6df5b163df4888850d2d41dc0bd285b50bce38acb7a7253b7c8d8a77427fa94b9e035f2665266c6638a6ccd03a2abb7f5bda26ae52fbb340c0b77ac8604914c9a562a220d4ddf7893b37c2b58a4b50bd5abdba66a5656898c77f8c517aa4e5defe8a08ee2b7108f062981b1caacbf19579f6bcca63e8837987ca95949f82cb413db6e114a436d6757e53a36ba1987649ab0fc4c86a60b7de844ffff48afd9b6582dbc6bb165bc6d06ece55f7481a1d340badedcbf797c40bf1b8586649dd98f59"}, &(0x7f0000003f80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000003fc0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000004000)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000004040)={0x20, 0x0, 0x4, {0x1c00, 0x3}}, &(0x7f0000004080)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000040c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000004100)={0x40, 0xb, 0x2, "73e8"}, &(0x7f0000004140)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000004180)={0x40, 0x13, 0x6, @random="df2d7d689f68"}, &(0x7f00000041c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000004200)={0x40, 0x19, 0x2, "35c1"}, &(0x7f0000004240)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000004280)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000042c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000004300)={0x40, 0x21, 0x1, 0x9}}) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000004400), 0x28002, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0xfffffffffffff800) ioctl$TCGETS(r9, 0x5401, &(0x7f0000004440)) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004480)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f00000044c0)={0x3, 0x0, [{0x40000000, 0x5f, 0x0, 0x0, 0xee7e}, {0x3ad676ccb20260b0, 0x35b2, 0xc3, 0xfffff000, 0xf3fa}, {0x2, 0xff, 0xdf, 0x240000, 0xc79}]}) write$tun(r9, &(0x7f0000004540)={@void, @val={0x2, 0x80, 0x8, 0x8c, 0x9, 0x7}, @x25={0x0, 0x9, 0x27, "6fd22dae98a0cb16ab7c19bc8ea3583d4699c6b3efffdbe110b8076d59e97f6e14adff9413778bbccb480fcc75a6f0b83d2808d7e4cdee1cb9d79cc76409e9c80bccdb5ffeb3a92a05115bb524b506e4fddf02c726f4c83390ee0c97605a55908c7f471f52e84074dc4ba49eeca9cbbbc3580ce82acce990b4acd12b99ddf636cd2578b1aff63dde278967625bfb1fab37bc5944949b8f574ffb8b41c280340319993b16fec2fa4d272f57e6148d71fe49258a300c7ac5aedec1970214ff3379707ca734dc8d0eac5482b7f9e8b5327ea3a4b904a45e13096de10b"}}, 0xe8) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x184, &(0x7f0000004640)={[{0x1a, 0x4e00, "d711282954bb66f925c8af6e41d0d310d4f37d92d4cbd9ac7600"}, {0x8f, 0x4e00, "01a7322a3c6f317642671ad09a29102d39661ea4545070540ef7a47512c1b7afe38930ee06824595ae51550b75b2a25323c657fa153b4774df850719a738328777d0369914a43bf4e4171092dae942f4853c9552336f8365c1d4154fdb0b31c6af37e59e654c38738b4ca58d1d0b54222246be85c144f971a43ba11fb143469cb5c5d76d603bc25b4f0e9a1cd3f3e8"}, {0xc9, 0x4e00, "919cc586abf6360aa697a030e9ab0626f33100a5ede7ae805554d0f38efc087997cca19595fe25d7ab93989d25e6b33152ebfdede05e6daf721a15008b3e0b020cae3d96664b703f8e7c525fb1a6c703fca1f5a0f59d769755067c954f9913a54bbed1dac503dc8c75381cab334cd6142fba0812e942cc342b1f6c79941d927b6b530ac2633ff11ba1327464c5dc321966a02272008d5a4cddbbbba03b0cefe220a2c79aef18e576211280e1539a5c41e60be63014145802b2c1357c9517a205f7aea074837769a27d"}]}) ioctl$KVM_GET_LAPIC(r10, 0x8400ae8e, &(0x7f0000004800)) ioctl$EVIOCGLED(r9, 0x80404519, &(0x7f0000004c00)=""/233) 11.011740153s ago: executing program 8 (id=7051): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000000, 0x0, 0x0) r1 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, r1, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000001a40)=""/183, 0xb7}, {&(0x7f0000000940)=""/4109, 0x100d}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000740)=""/155, 0x9b}, {&(0x7f0000002d00)=""/127, 0x7f}, {&(0x7f0000000600)=""/265, 0x109}], 0x9}, 0x10000e}, {{0x0, 0x0, 0x0}, 0x1a}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x80001000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x810}], 0x8, 0x40010100, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x68, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 10.976530217s ago: executing program 37 (id=7051): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000000, 0x0, 0x0) r1 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, r1, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000001a40)=""/183, 0xb7}, {&(0x7f0000000940)=""/4109, 0x100d}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000740)=""/155, 0x9b}, {&(0x7f0000002d00)=""/127, 0x7f}, {&(0x7f0000000600)=""/265, 0x109}], 0x9}, 0x10000e}, {{0x0, 0x0, 0x0}, 0x1a}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x80001000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x810}], 0x8, 0x40010100, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x68, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.793613244s ago: executing program 4 (id=7223): mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, 0xffffffffffffffff, 0xffffa000) 2.792774274s ago: executing program 4 (id=7224): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc5) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x7d4) 2.792131264s ago: executing program 4 (id=7225): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000240)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000300)="0f23d2360f01f90f205566b9800000c00f326635008000000f3066b95f0a000066b80000000066ba010000000f30663665d8eaba4300ed66b9a709000066b84800000066ba000000000f3066b9140101c00f32650fc7bb0600", 0x59}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000cc0)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x88, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/183, 0xb7, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x100}, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x5, 0x1, 0x2f}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/125, 0x7d, 0x0, 0x1c}}, &(0x7f00000003c0)={0x0, 0x20, 0x38}}}], 0x50, 0x0, &(0x7f0000000140)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205dad1d02a2a4524d5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f6282e980021d25789ea8edc9"}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xb) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0x8000, 0x101}) 2.723995281s ago: executing program 4 (id=7226): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000080), 0x0, 0x0, 0x0) keyctl$revoke(0x3, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2482, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x80, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xab2a}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xfff, 0x8, 0xa9}, {0x6, 0x24, 0x1a, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x79, 0x81, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x0, 0x23}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x9, 0x9}}}}}}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.014873181s ago: executing program 7 (id=7230): unshare(0x4000400) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) fcntl$getflags(r0, 0x403) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) write(r2, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) (async) ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0x4) write(r2, &(0x7f0000000980)="a9", 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) (async) setgroups(0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x10, 0x400, 0x70bd28, 0x25dfdbfc, {0x20}, [@typed={0x8, 0x14c, 0x0, 0x0, @ipv4=@multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) (async, rerun: 64) mremap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0xfffffffff000, 0x3, &(0x7f0000ffc000/0x4000)=nil) (rerun: 64) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc3, 0x66, 0x62, 0x20, 0x67b, 0x307, 0xddc8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x94, 0x2, 0x2, 0xf3, 0x9e, 0xea, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x81, &(0x7f00000001c0)={0x20, 0x18, 0x17, 0x2}, 0x8, 0x100020, 0x1000003, 0x0, 0x4bf, 0x404, 0x0}) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x1) (async, rerun: 64) socket$netlink(0x10, 0x3, 0xe) (async, rerun: 64) close_range(r3, 0xffffffffffffffff, 0x0) (async) r5 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r5, 0xffff) (async) fcntl$addseals(r5, 0x409, 0x7) (async) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000001c0)={r5, 0x1, 0x0, 0x8000}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x2, 0xb, 0xd6}, 0x3a, [0x8003, 0x5, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x4, 0x24, 0x4, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0x4, 0x3, 0x10008, 0x4874, 0x80000001, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x4, 0x0, 0x5, 0x4, 0x461c3738, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x6, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xf, 0x2bf, 0x0, 0x8000009, 0xfffffff8, 0x3, 0x0, 0x800, 0x5, 0x2f, 0xc, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x7c3b, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x2, 0x8, 0x9, 0xb, 0x3, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x2, 0x0, 0x1, 0x7, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x0, 0x6, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x8000005, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x21], [0x9, 0xbb31, 0x7, 0x80b, 0x5, 0x7, 0xed2, 0x8, 0x0, 0xb9, 0xce7, 0x9, 0x2f2d, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x16, 0x2, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0xfffffffb, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x3, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x25b4, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.947015618s ago: executing program 7 (id=7231): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010226bddf250c0000000400038018000180"], 0x30}, 0x1, 0x0, 0x0, 0x20000094}, 0x404c004) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="d00000001e00090002000000ffdbdf2505"], 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x3, 0x3, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0xf14}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000002, 0xe}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0xff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x100}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x0, 0x1, 0x4}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) (rerun: 64) 1.946328078s ago: executing program 7 (id=7232): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40a02, 0x0) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0039503230303082528bf1810e5e36708dfd50b4fa681c36c2cb59085b251e592aff3f199d2103768898d37b"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r4) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r5, 0x30b, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x4000004) (async, rerun: 32) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}], [{@pcr={'pcr', 0x3d, 0x5}}], 0x6b}}) (async, rerun: 32) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async, rerun: 32) r7 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) mount_setattr(r6, &(0x7f0000000080)='./file0\x00', 0x1000, &(0x7f00000000c0)={0x78, 0x100002, 0x40000, {r6}}, 0x20) (async) sendfile(r7, r6, 0x0, 0xffffffff) 1.945884177s ago: executing program 7 (id=7233): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100020000000000040000000000000008000700", @ANYRES32=0x0, @ANYBLOB="100005000000000020"], 0x2c, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x70, 0x0, &(0x7f0000000640)=[@release={0x40046306, 0x1}, @free_buffer={0x40086303, r1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x10, 0x2e}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x14}}, 0x0}, 0x400}, @dead_binder_done, @register_looper], 0x51, 0x0, &(0x7f0000000980)="1d597002c52f656f7527abe01eec1920a6a2fae7958f3ab1072aa2bb1593bd90951979f0078e74bf553b055163ef78a314a007aad5762fe8392ee7c3806cc6deeee06171dc997de54169f1b9bbf3ea191f"}) 1.942701868s ago: executing program 7 (id=7234): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f00000000c0)=0x10, 0x800) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = syz_clone(0x180000, 0x0, 0x57, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getenv(0x4201, r2, 0xc, &(0x7f00000003c0)) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/udplite6\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 1.871560695s ago: executing program 7 (id=7236): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106a0584000000000000010902240001000040b109040007010300010009210101000122050009058103ff031200004e74781b89c724238838660392921130bd6baec096d3de10f1c15d563f71872ae101294a35405ac49f76677e6fd5d67e91d04d901fc9b5cd0e9bba12d1a7acfc1db6db51384e"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000570000080000001cfd0000"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_clone(0x36003200, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400017e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) openat$cgroup_ro(r3, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r2, &(0x7f0000001fc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$inet6(0xa, 0x2, 0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r5 = syz_open_procfs(r1, &(0x7f0000000000)='maps\x00') lseek(r5, 0x0, 0x1) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/162) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x5, 0x6) setsockopt$inet6_MCAST_LEAVE_GROUP(r6, 0x29, 0x2d, 0x0, 0x88) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r8 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xfffffffffffffffc, 0x0, 0x8) tkill(r8, 0x7) sync_file_range(r7, 0x7fff, 0x5, 0x1) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r7, 0x80083314, 0x0) ptrace$pokeuser(0x6, r4, 0x40, 0xffffffffffff47da) 1.11594973s ago: executing program 9 (id=7262): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x7}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000100)={0x18, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) close_range(r0, 0xffffffffffffffff, 0x0) 1.039015137s ago: executing program 9 (id=7264): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) (async, rerun: 64) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x37, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00210000000000000000000700050000000000000000000a0002009e", @ANYRES8], 0x28}, 0x1, 0x0, 0x0, 0x40048045}, 0x20008001) (async, rerun: 64) recvfrom$packet(r0, &(0x7f0000000280)=""/130, 0x82, 0x2002, 0x0, 0x0) (async, rerun: 64) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)=ANY=[@ANYBLOB="00d400000000000000"]) (rerun: 64) 1.037584257s ago: executing program 0 (id=7265): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x14000, 0x194) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r4, 0x5432, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="dce5a889abd8b0b0"]) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) (async) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r6, r6, r6, 0x0) (async) r7 = syz_clone(0x8900000, &(0x7f0000000000)="fb4a99e684cd", 0x6, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)="4a314deb02fd3d1aaba69f7d354b16") syz_open_procfs(r7, &(0x7f0000000140)='uid_map\x00') (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x801c4, 0x0) (async) sendfile(r5, r2, &(0x7f0000000280)=0x4, 0x8) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r9, 0x4068aea3, &(0x7f0000000000)={0xed, 0x0, 0x1}) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448df, &(0x7f0000000400)="b93fe504852bd23589322d4b917a66ca11bf65cf8e8963ba2032353afaa4b96ef2") (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200ff"], 0xa0}}, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) (async) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r11, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) setsockopt$inet6_tcp_int(r1, 0x6, 0x95de5ec84710b60c, &(0x7f0000000240), 0x4) 1.037257747s ago: executing program 9 (id=7266): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905b5af6604"], 0x0) write$P9_RVERSION(r2, 0x0, 0x0) (async) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) (async) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) 1.002969271s ago: executing program 0 (id=7267): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) socket$igmp6(0xa, 0x3, 0x2) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000a00)) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x8, 0x7, 0x10006, 0x6}}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x161142, 0x0) r4 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r4, 0x0) ftruncate(r4, 0x3) write(r3, &(0x7f0000000400)="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", 0x5f5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) accept4(r5, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000280)=0x80, 0x80800) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) syz_open_pts(0xffffffffffffffff, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000120000406d041cc7000000000001090224000100001000090400fe010300000009210000000122030009058103"], 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg2\x00'}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200f0c0000000c050c42faeae801a85db7e4a0d08bf0127d6a51bfbcde15b4d4bf"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1e72, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$setlease(r8, 0x400, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') 282.863602ms ago: executing program 0 (id=7268): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x9c000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xc0040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffff1, 0x4031, 0xffffffffffffffff, 0xffffc000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xc, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x840) sync_file_range(r2, 0x3, 0x299, 0x3) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="884a12aa089ff22420049a88daa64b20ceb7d3ce030f6498c2f8d0171ae7fd90bbe54d2e1a01edbcfe89bb13d70b68cbb4431c5b49eb5471381cd8f511ee558949449cd3b5cd5b5d7a51f6e78565b9c8fceb9f7c5c40c37ae4bdb2c6ed0fdce5e5f28719a9dcf7f479d7b816c74e2a9a18adbc2852b71895e8163582ce7f897d354082ed0dc164b8c51fcfbe12274b2097b0d1aa23d58259dcbaeb475e9a7bca03101219f2709cf030f36f7350dc8bd4"], 0x9) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) fcntl$lock(r2, 0x5, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x80000001}) 217.271969ms ago: executing program 0 (id=7269): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x280960, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) (async) r3 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) pidfd_send_signal(r4, 0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x10) setsockopt$inet6_tcp_int(r5, 0x6, 0xc, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, '\x00', "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5cc28f", "b200"}, 0x38) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x12, r0, 0x0) (async) r7 = socket(0x840000000002, 0x3, 0xff) sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40844}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001180)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r8, 0xffffffffffffffff, 0x600000000000000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') 216.390259ms ago: executing program 9 (id=7270): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x50000, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) 208.750839ms ago: executing program 9 (id=7271): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x7fffffffffffffff, 0x10580) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000004c0)={@mcast1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x8, 0x7, 0x100, 0xffffffffffffffff, 0x10080, r1}) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x6000, 0x200, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7fffffffffffffff}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@seclabel}, {@pcr={'pcr', 0x3d, 0x2a}}]}}) 172.250713ms ago: executing program 9 (id=7272): r0 = socket$unix(0x1, 0x1, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x24, 0xb0, 0x9e, 0x20, 0x54d5, 0x953f, 0x8282, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xd, 0x7, 0x2, 0x8, 0x2, 0x0, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'vlan1\x00', {}, 0x9}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000080)=0x1f4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r2, &(0x7f0000001fc0)=""/4079, 0xfef) getdents64(r2, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @mcast2}, 0x1c) 98.94126ms ago: executing program 0 (id=7273): r0 = socket$netlink(0x10, 0x3, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfa, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0xfff, 0x7fffffffffffffff) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000140)=r1) 97.95594ms ago: executing program 0 (id=7274): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000000)) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) (async, rerun: 32) r4 = syz_open_pts(r3, 0x0) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000003700)=ANY=[@ANYBLOB="3c1000000704010128bd7000fedbdf2507000001281084801400e000fe80000000000000000000000000001408002a00", @ANYRES32=r5, @ANYBLOB="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"], 0x103c}, 0x1, 0x0, 0x0, 0x2000004}, 0x4000041) (async) dup3(r4, r3, 0x0) (async) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f00000000c0)={0x1, 0x2000000, 0x1c, 0x4, 0x1b0, &(0x7f0000000280)}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 64) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905b5af6604"], 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) 31.661736ms ago: executing program 4 (id=7275): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) (async) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)=0x3d) (async, rerun: 64) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) (rerun: 64) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x800, 0x5, 0x13, 0x4, "37b4d3e0a295c063efbca67058155dae4d051016e2658b6321b6b95afbcccce8383326b28e3bb521f92c100b407eb12bcf8194cd73c1508ac9b61a086cd48fa5", "4f1f59a6a6c31fa7f80111c2fbf28fa76a849280ba805279b0ded705630b65a2", [0x1]}) 0s ago: executing program 4 (id=7276): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) shutdown(r0, 0x9586730c31f01255) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) listen(r3, 0xdc6) preadv2(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}], 0x1, 0xffffffff, 0x8, 0xd) 0s ago: executing program 4 (id=7277): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)={0x240, 0x188, 0x16}, 0x18) (async, rerun: 64) sendfile(r3, r3, 0x0, 0x7a680000) (async, rerun: 64) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2, 0xc}, 0x1c) (async) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000003080)=0x7a) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4, 0x1, 0x3}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r8, 0x1, 0x10000000, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x9004) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7b, 0x1, 0x26}, @fd={0x66642a85, 0x0, r5}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): evice strings: Mfr=0, Product=0, SerialNumber=0 [ 323.293037][ T588] usb 8-1: config 0 descriptor?? [ 323.541486][ T588] usbhid 8-1:0.0: can't add hid device: -71 [ 323.563705][ T588] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 323.592075][T17218] netlink: 7 bytes leftover after parsing attributes in process `syz.7.5604'. [ 323.594138][ T588] usb 8-1: USB disconnect, device number 14 [ 323.955591][T17230] loop2: detected capacity change from 0 to 7 [ 323.963612][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.972792][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 323.998461][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.007632][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 324.015887][T15666] loop2: unable to read partition table [ 324.032664][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.041869][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 324.060037][T17231] loop2: detected capacity change from 7 to 4 [ 324.081429][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.090622][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 324.099607][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.108788][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 324.116760][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.125913][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 324.133863][T17230] loop2: unable to read partition table [ 324.133986][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.139769][T17230] loop_reread_partitions: partition scan of loop2 (7࢕cFpX]Mec!Z83&;!, @~+ρsPɶlԏ) failed (rc=-5) [ 324.148645][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 324.171320][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.180518][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 324.190158][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.199353][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 324.211118][ T588] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 324.232892][ T36] kauditd_printk_skb: 31061 callbacks suppressed [ 324.232909][ T36] audit: type=1326 audit(2000000082.842:39397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.6.5595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f985fd8da7f code=0x50000 [ 324.282510][T17233] rust_binder: 208: no such ref 3 [ 324.287633][T17233] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 324.300877][T17233] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 324.316331][ T36] audit: type=1326 audit(2000000082.852:39398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.6.5595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f985fd8da7f code=0x50000 [ 324.339543][T17233] rust_binder: Write failure EFAULT in pid:208 [ 324.350372][ T36] audit: type=1326 audit(2000000082.852:39399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.6.5595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f985fd8da7f code=0x50000 [ 324.404644][ T588] usb 8-1: Using ep0 maxpacket: 32 [ 324.408996][ T36] audit: type=1326 audit(2000000082.852:39400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.6.5595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f985fd8da7f code=0x50000 [ 324.413288][T17241] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 324.435691][ T36] audit: type=1326 audit(2000000082.852:39401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.6.5595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f985fd8da7f code=0x50000 [ 324.446195][ T588] usb 8-1: config 0 has an invalid interface number: 230 but max is 0 [ 324.469120][ T36] audit: type=1326 audit(2000000082.852:39402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.6.5595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f985fd8da7f code=0x50000 [ 324.476726][T17243] /dev/nbd0: Can't lookup blockdev [ 324.500086][ T36] audit: type=1326 audit(2000000082.852:39403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.6.5595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f985fd8da7f code=0x50000 [ 324.515611][T17241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:340 [ 324.528251][ T36] audit: type=1326 audit(2000000082.852:39404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.6.5595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f985fd8da7f code=0x50000 [ 324.533607][ T588] usb 8-1: config 0 has no interface number 0 [ 324.537979][ T36] audit: type=1326 audit(2000000082.852:39405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.6.5595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f985fd8da7f code=0x50000 [ 324.592820][ T588] usb 8-1: config 0 interface 230 has no altsetting 0 [ 324.601502][ T36] audit: type=1326 audit(2000000082.852:39406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.6.5595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f985fd8da7f code=0x50000 [ 324.615634][ T588] usb 8-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 324.641228][ T588] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.643535][T17247] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:218 [ 324.649579][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.658796][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.680531][ T588] usb 8-1: Product: syz [ 324.691514][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.691553][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.697993][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.720792][ T588] usb 8-1: Manufacturer: syz [ 324.743023][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.743054][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.749653][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.756209][ T588] usb 8-1: SerialNumber: syz [ 324.776479][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.776505][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.783475][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.793593][ T588] usb 8-1: config 0 descriptor?? [ 324.808451][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.808476][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.814930][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.829078][ T588] ums-usbat 8-1:0.230: USB Mass Storage device detected [ 324.852872][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.852905][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.861757][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.870209][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.882317][ T588] ums-usbat 8-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 324.903767][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.903791][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.915046][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.921937][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.933270][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.942295][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.956638][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.968174][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.974894][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.981457][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.987963][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.994483][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.000984][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.007469][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.013961][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.019765][T17265] 9pnet_fd: Insufficient options for proto=fd [ 325.020415][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.033142][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.039620][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.046155][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.052612][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.059201][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.065732][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.072155][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.078868][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.085356][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.091855][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.098418][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.104833][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.111315][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.117747][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.124236][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.130742][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.137189][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.144057][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.150521][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.156967][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.163465][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.169903][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.176389][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.182865][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.189306][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.195810][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.202264][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.208811][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.215368][T17245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.221844][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.228327][T17246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.223692][T17298] overlayfs: failed to clone upperpath [ 326.292268][T17310] netlink: 57 bytes leftover after parsing attributes in process `syz.6.5635'. [ 326.440807][T17320] tipc: Started in network mode [ 326.445718][T17320] tipc: Node identity ac14142f, cluster identity 4711 [ 326.452713][T17320] tipc: New replicast peer: 0.0.0.0 [ 326.458107][T17320] tipc: Enabled bearer , priority 10 [ 326.464476][T17320] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 326.570422][T17325] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 326.570441][T17325] rust_binder: Error while translating object. [ 326.579238][T17325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 326.585415][T17325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251 [ 326.912995][T17330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5641'. [ 327.271304][ T588] ums-usbat 8-1:0.230: probe with driver ums-usbat failed with error -5 [ 327.284829][ T588] usb 8-1: USB disconnect, device number 15 [ 327.601031][ T588] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 327.643689][ T45] tipc: Node number set to 2886997039 [ 327.771644][ T588] usb 8-1: Using ep0 maxpacket: 8 [ 327.778289][ T588] usb 8-1: unable to get BOS descriptor or descriptor too short [ 327.786807][ T588] usb 8-1: config 1 has an invalid interface number: 4 but max is 2 [ 327.794953][ T588] usb 8-1: config 1 has an invalid interface descriptor of length 6, skipping [ 327.803918][ T588] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.813994][ T588] usb 8-1: config 1 has no interface number 1 [ 327.820124][ T588] usb 8-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 327.833142][ T588] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 327.844167][ T588] usb 8-1: config 1 interface 4 has no altsetting 0 [ 327.855584][ T588] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.864762][ T588] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.872893][ T588] usb 8-1: Product: syz [ 327.877068][ T588] usb 8-1: Manufacturer: syz [ 327.881712][ T588] usb 8-1: SerialNumber: syz [ 328.115426][T17325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.128175][T17325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.148336][ T588] usb 8-1: 2:1 : invalid UAC_AS_GENERAL desc [ 328.169133][ T588] usb 8-1: USB disconnect, device number 16 [ 328.206463][T15706] udevd[15706]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 328.385589][T17364] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 328.414571][T17364] overlayfs: failed to resolve './bus': -2 [ 328.503928][T17365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 328.503967][T17365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:364 [ 328.532508][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5653'. [ 329.469441][T17368] netlink: 'syz.0.5651': attribute type 46 has an invalid length. [ 329.636843][T17384] loop5: detected capacity change from 0 to 7 [ 330.139380][T17376] rust_binder: Error while translating object. [ 330.139416][T17376] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 330.189049][T17376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:253 [ 330.351078][T17400] 9pnet_fd: p9_fd_create_unix (17400): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 331.011796][ T36] kauditd_printk_skb: 3178 callbacks suppressed [ 331.011816][ T36] audit: type=1400 audit(2000000089.194:42585): avc: denied { remount } for pid=17420 comm="syz.0.5668" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 331.075786][ T31] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 331.129362][T17426] SELinux: security_context_str_to_sid () failed with errno=-22 [ 331.172922][T17429] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.173040][T17429] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 331.246302][ T495] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 331.267676][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 331.288350][ T31] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 331.320908][ T31] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 331.353079][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 331.372832][ T31] usb 5-1: config 0 has no interface number 0 [ 331.400580][ T31] usb 5-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 331.416872][ T495] usb 1-1: device descriptor read/64, error -71 [ 331.423257][ T31] usb 5-1: config 0 interface 104 has no altsetting 1 [ 331.431536][ T31] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 331.451350][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.470302][ T31] usb 5-1: Product: syz [ 331.481064][ T31] usb 5-1: Manufacturer: syz [ 331.485987][ T31] usb 5-1: SerialNumber: syz [ 331.491359][ T31] usb 5-1: config 0 descriptor?? [ 331.502499][T17372] overlay: Unknown parameter 'default_permissions:/' [ 331.520905][T17372] overlayfs: failed to clone lowerpath [ 331.604593][T17443] overlayfs: failed to clone upperpath [ 331.694021][ T495] usb 1-1: device descriptor read/64, error -71 [ 331.715665][ T31] asix 5-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 331.727562][ T31] asix 5-1:0.104: probe with driver asix failed with error -71 [ 331.736633][ T31] usb 5-1: USB disconnect, device number 51 [ 331.866361][T17460] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 331.866396][T17460] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:278 [ 331.949853][ T495] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 332.094435][ T36] audit: type=1400 audit(2000000090.226:42586): avc: denied { ioctl } for pid=17468 comm="syz.7.5686" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 332.118324][T17469] random: crng reseeded on system resumption [ 332.124525][ T495] usb 1-1: device descriptor read/64, error -71 [ 332.150051][T17469] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 332.150074][T17469] rust_binder: Read failure Err(EFAULT) in pid:287 [ 332.178271][ T7619] Bluetooth: hci0: Frame reassembly failed (-84) [ 332.360798][T17477] kvm_intel: kvm [17476]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1 [ 332.418786][ T495] usb 1-1: device descriptor read/64, error -71 [ 332.436815][T17480] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5690'. [ 332.517162][T17495] can: request_module (can-proto-0) failed. [ 332.536139][ T495] usb usb1-port1: attempt power cycle [ 332.911054][ T495] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 332.931443][ T495] usb 1-1: device descriptor read/8, error -71 [ 333.069951][ T495] usb 1-1: device descriptor read/8, error -71 [ 333.324766][ T495] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 333.347049][ T495] usb 1-1: device descriptor read/8, error -71 [ 333.485726][ T495] usb 1-1: device descriptor read/8, error -71 [ 333.601965][ T495] usb usb1-port1: unable to enumerate USB device [ 334.184729][ T36] audit: type=1400 audit(2000000092.187:42587): avc: denied { unmount } for pid=16449 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 334.212814][T17509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.212885][T17509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:265 [ 334.240462][T17517] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 334.249994][T17517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:273 [ 334.263856][T17518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.312993][T17522] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4232, size: 18446744073709551336) [ 334.319481][T17522] rust_binder: Error while translating object. [ 334.326684][ T652] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 334.331675][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 334.337824][T17522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 334.353267][T17522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:278 [ 334.382580][T17526] __vm_enough_memory: pid: 17526, comm: syz.0.5704, bytes: 18014402804453376 not enough memory for the allocation [ 334.699775][ T65] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 334.780176][ T36] audit: type=1326 audit(2000000092.740:42588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17567 comm="syz.6.5720" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f985fd8efc9 code=0x0 [ 334.809517][T17573] overlayfs: failed to clone lowerpath [ 334.846519][T17583] netlink: 'syz.6.5725': attribute type 4 has an invalid length. [ 334.854317][T17583] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.5725'. [ 334.859599][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 334.869792][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 64731, setting to 1024 [ 334.880992][ T65] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 334.892643][ T65] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 334.901793][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.909827][ T65] usb 1-1: Product: syz [ 334.914009][ T65] usb 1-1: Manufacturer: syz [ 334.918592][ T65] usb 1-1: SerialNumber: syz [ 334.924292][ T65] usb 1-1: config 0 descriptor?? [ 334.933096][T17533] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 335.137436][T17596] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 335.191081][T17608] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5735'. [ 335.207597][T17612] rust_binder: Error while translating object. [ 335.207632][T17612] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 335.214380][T17612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:305 [ 335.217256][T17613] rust_binder: Write failure EFAULT in pid:282 [ 335.233016][ T36] audit: type=1400 audit(2000000093.153:42589): avc: denied { getattr } for pid=17531 comm="syz.0.5707" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 335.723101][T17632] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 335.731371][T17632] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 335.932029][T17646] netlink: 'syz.4.5749': attribute type 6 has an invalid length. [ 335.941903][T17647] netlink: 'syz.4.5749': attribute type 4 has an invalid length. [ 335.949985][T17647] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5749'. [ 336.003537][T17651] rust_binder: inc_ref_done called when no active inc_refs [ 336.029225][T17656] binder: Bad value for 'max' [ 336.039842][ T36] audit: type=1400 audit(2000000093.932:42590): avc: denied { map } for pid=17654 comm="syz.4.5753" path="socket:[66769]" dev="sockfs" ino=66769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 336.074247][T17659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:429 [ 336.084570][T17661] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 336.103855][ T36] audit: type=1400 audit(2000000093.988:42591): avc: denied { relabelto } for pid=17660 comm="syz.4.5755" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 336.131721][ T36] audit: type=1400 audit(2000000093.988:42592): avc: denied { associate } for pid=17660 comm="syz.4.5755" name="ptp0" dev="devtmpfs" ino=196 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 336.216083][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.216125][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.222960][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.232161][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.239063][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.246541][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.246624][T17668] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 336.253006][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.260288][T17668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:314 [ 336.269071][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.285008][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.292379][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.298937][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.305425][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.313274][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.319988][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.326458][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.333133][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.339622][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.346045][T17674] rust_binder: 436: no such ref 0 [ 336.346138][T17674] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 336.352953][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.364850][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.368398][T17674] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 336.387087][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.387110][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.396326][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.402814][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.410093][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.416931][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.423449][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.429994][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.436534][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.443580][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.450125][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.456740][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.463310][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.470239][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.476939][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.483426][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.489951][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.496505][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.503028][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.509474][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.516139][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.522596][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.529112][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.535651][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.542160][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.548801][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.555391][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.561823][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.569544][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.576016][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.582520][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.589078][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.595798][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.602310][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.608813][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.615236][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.621722][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.628146][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.634755][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.641346][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.647842][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.654312][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.660752][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.667191][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.673636][T17667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.746212][ T495] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 336.918099][ T495] usb 5-1: not running at top speed; connect to a high speed hub [ 336.926576][ T495] usb 5-1: config 1 interface 0 has no altsetting 0 [ 336.934608][ T495] usb 5-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 336.943682][ T495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.951686][ T495] usb 5-1: Product: syz [ 336.955861][ T495] usb 5-1: Manufacturer: syz [ 336.960551][ T495] usb 5-1: SerialNumber: syz [ 337.192359][ T495] usbhid 5-1:1.0: can't add hid device: -71 [ 337.199417][ T495] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 337.213565][ T495] usb 5-1: USB disconnect, device number 52 [ 337.276117][T17730] netlink: 1363 bytes leftover after parsing attributes in process `syz.7.5775'. [ 337.312047][T17732] rust_binder: Failed to allocate buffer. len:4248, is_oneway:true [ 337.312078][T17732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 337.320063][T17732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:325 [ 337.354768][T17734] rust_binder: Write failure EFAULT in pid:327 [ 337.364008][T17735] rust_binder: Write failure EFAULT in pid:327 [ 337.438481][ T36] audit: type=1400 audit(2000000095.236:42593): avc: denied { ioctl } for pid=17737 comm="syz.7.5778" path="mnt:[4026533322]" dev="nsfs" ino=4026533322 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 337.488670][T17740] rust_binder: Error while translating object. [ 337.488713][T17740] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 337.495503][T17740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:333 [ 337.535010][ T495] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 337.641002][ T36] audit: type=1326 audit(2000000095.424:42594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17531 comm="syz.0.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x7fc00000 [ 337.671874][ T65] usb 1-1: USB disconnect, device number 43 [ 337.682060][T15666] udevd[15666]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 337.717267][ T495] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.727614][ T495] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.739252][ T495] usb 5-1: config 1 interface 1 has no altsetting 0 [ 337.747494][ T495] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.756916][ T495] usb 5-1: New USB device strings: Mfr=199, Product=2, SerialNumber=3 [ 337.765298][ T495] usb 5-1: Product: syz [ 337.769698][ T495] usb 5-1: Manufacturer: syz [ 337.774343][ T495] usb 5-1: SerialNumber: syz [ 337.781352][ T495] cdc_ncm 5-1:1.0: skipping garbage [ 337.786609][ T495] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 337.794771][ T495] cdc_ncm 5-1:1.0: bind() failure [ 337.833132][T17749] netlink: 'syz.6.5782': attribute type 4 has an invalid length. [ 337.840908][T17749] netlink: 'syz.6.5782': attribute type 5 has an invalid length. [ 337.848672][T17749] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.5782'. [ 337.860047][T17749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=17749 comm=syz.6.5782 [ 337.997893][ T36] audit: type=1400 audit(2000000095.761:42595): avc: denied { ioctl } for pid=17722 comm="syz.4.5773" path="/dev/usbmon5" dev="devtmpfs" ino=105 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 338.010281][ T495] usb 5-1: USB disconnect, device number 53 [ 338.418595][T17751] overlayfs: missing 'lowerdir' [ 338.423763][T17753] rust_binder: Write failure EFAULT in pid:339 [ 338.425137][T17755] rust_binder: Write failure EFAULT in pid:339 [ 338.447815][T17757] tipc: Enabled bearer , priority 10 [ 338.460372][T17757] rust_binder: Error while translating object. [ 338.460400][T17757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 338.466568][T17757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:343 [ 338.555219][ T36] audit: type=1326 audit(2000000096.287:42596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17745 comm="syz.0.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x7fc00000 [ 338.588136][ T36] audit: type=1326 audit(2000000096.287:42597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17745 comm="syz.0.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0167f8efc9 code=0x7fc00000 [ 338.613508][ T36] audit: type=1326 audit(2000000096.287:42598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17745 comm="syz.0.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x7fc00000 [ 338.640473][ T36] audit: type=1326 audit(2000000096.287:42599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17745 comm="syz.0.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x7fc00000 [ 338.664789][ T36] audit: type=1326 audit(2000000096.287:42600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17745 comm="syz.0.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x7fc00000 [ 338.689342][ T36] audit: type=1326 audit(2000000096.287:42601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17745 comm="syz.0.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x7fc00000 [ 338.713116][ T36] audit: type=1326 audit(2000000096.287:42602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17745 comm="syz.0.5781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x7fc00000 [ 338.949376][T17776] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.949462][T17775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 339.549122][T17807] fuse: Bad value for 'fd' [ 341.071651][T17859] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 341.071689][T17859] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:489 [ 341.094259][T17861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:491 [ 341.368941][T17874] fuse: Bad value for 'group_id' [ 341.383081][T17874] fuse: Bad value for 'group_id' [ 341.400098][T17879] fuse: Bad value for 'fd' [ 341.706672][ T7613] Bluetooth: hci0: Frame reassembly failed (-84) [ 342.013371][T17906] rust_binder: Error while translating object. [ 342.013403][T17906] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 342.019594][T17906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:497 [ 342.250683][T17908] binder: Unknown parameter 'di ' [ 342.284113][T17917] overlayfs: failed to clone lowerpath [ 342.290525][T17917] netlink: 'syz.0.5842': attribute type 16 has an invalid length. [ 342.298391][T17917] netlink: 64130 bytes leftover after parsing attributes in process `syz.0.5842'. [ 342.308134][T17917] overlayfs: failed to clone lowerpath [ 342.330891][T17924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=17924 comm=syz.6.5845 [ 342.343562][T17924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=17924 comm=syz.6.5845 [ 342.488106][T17944] overlayfs: failed to clone upperpath [ 342.511022][T17950] netlink: 'syz.6.5855': attribute type 16 has an invalid length. [ 342.519266][T17950] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.5855'. [ 342.529198][T17950] incfs_lookup_dentry err:-13 [ 342.534148][T17950] incfs: Can't find or create .index dir in ./file0 [ 342.540772][T17950] incfs: mount failed -13 [ 342.943278][ T7614] Bluetooth: hci1: Frame reassembly failed (-84) [ 343.513066][T17982] >: renamed from veth0_vlan (while UP) [ 343.876878][T17964] Bluetooth: hci0: command 0x1003 tx timeout [ 343.882931][ T652] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 344.162029][T17995] overlayfs: failed to resolve '/e~f-7*8=': -2 [ 344.445839][T18004] rust_binder: 351: no such ref 0 [ 344.450950][T18004] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 344.458314][T18004] rust_binder: 351: no such ref 2 [ 344.463575][T18004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:351 [ 344.505021][T18010] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 344.518684][T18010] rust_binder: Error in use_page_slow: EBUSY [ 344.530786][T18010] rust_binder: use_range failure EBUSY [ 344.537222][T18010] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 344.543011][T18010] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 344.550999][T18010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:357 [ 344.591782][T18017] tmpfs: Unknown parameter 'noinode32' [ 344.636995][T18025] rust_binder: Error in use_page_slow: ESRCH [ 344.637011][T18025] rust_binder: use_range failure ESRCH [ 344.654993][T18025] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 344.660574][T18025] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 344.668447][T18025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:361 [ 344.689743][T18031] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 344.793039][T18053] 9pnet_fd: p9_fd_create_unix (18053): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 344.801215][T18056] /dev/rnullb0: Can't open blockdev [ 344.850389][T18059] 9pnet_fd: Insufficient options for proto=fd [ 344.869840][T18059] overlayfs: failed to clone upperpath [ 345.093015][T18087] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5900'. [ 345.156147][ T652] Bluetooth: hci1: command 0x1003 tx timeout [ 345.157267][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 345.369102][ T65] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 345.551309][ T65] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.571782][T18097] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 345.575237][ T65] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.594932][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 345.594952][ T36] audit: type=1400 audit(2000000102.882:42616): avc: denied { relabelto } for pid=18096 comm="syz.0.5903" name="cgroup" dev="tmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 345.628658][ T36] audit: type=1400 audit(2000000102.882:42617): avc: denied { associate } for pid=18096 comm="syz.0.5903" name="cgroup" dev="tmpfs" ino=799 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 345.658926][ T65] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 345.668115][ T65] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 345.684278][ T65] usb 8-1: Manufacturer: syz [ 345.691217][ T65] usb 8-1: config 0 descriptor?? [ 345.695810][ T36] audit: type=1400 audit(2000000102.920:42618): avc: denied { unlink } for pid=16449 comm="syz-executor" name="cgroup" dev="tmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 345.763624][T18109] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18109 comm=syz.0.5908 [ 345.776666][T18109] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=770 sclass=netlink_tcpdiag_socket pid=18109 comm=syz.0.5908 [ 345.912434][T18127] tipc: Started in network mode [ 345.917431][T18127] tipc: Node identity ac14140f, cluster identity 8 [ 345.924081][T18127] tipc: New replicast peer: 255.255.255.255 [ 345.930587][T18127] tipc: Enabled bearer , priority 10 [ 345.937059][T18128] tipc: Enabling of bearer rejected, already enabled [ 346.263594][T18155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=18155 comm=syz.0.5923 [ 346.277126][T18155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=18155 comm=syz.0.5923 [ 346.328892][T18171] overlayfs: failed to clone lowerpath [ 346.329092][T18172] overlayfs: failed to clone lowerpath [ 346.340220][T18171] overlayfs: failed to clone lowerpath [ 346.801926][ T65] uclogic 0003:256C:006D.0015: v1 frame probing failed: -71 [ 346.809332][ T65] uclogic 0003:256C:006D.0015: failed probing parameters: -71 [ 346.816829][ T65] uclogic 0003:256C:006D.0015: probe with driver uclogic failed with error -71 [ 346.828762][ T65] usb 8-1: USB disconnect, device number 17 [ 346.956024][T18206] overlayfs: failed to clone lowerpath [ 347.028040][T18227] netlink: 'syz.6.5945': attribute type 11 has an invalid length. [ 347.117119][ T65] tipc: Node number set to 2886997007 [ 347.350350][T18238] rust_binder: Write failure EFAULT in pid:385 [ 347.456048][T18246] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 347.462410][T18246] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 347.470563][T18246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:390 [ 348.326831][ T7619] Bluetooth: hci0: Frame reassembly failed (-84) [ 349.032317][T18289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5966'. [ 349.041288][T18289] bridge_slave_1: left allmulticast mode [ 349.046970][T18289] bridge_slave_1: left promiscuous mode [ 349.052645][T18289] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.060218][T18289] bridge_slave_0: left allmulticast mode [ 349.065857][T18289] bridge_slave_0: left promiscuous mode [ 349.071574][T18289] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.125607][T18297] overlayfs: failed to clone lowerpath [ 349.131491][T18297] overlayfs: failed to clone lowerpath [ 349.147334][T18302] 9pnet_fd: Insufficient options for proto=fd [ 349.749844][ T65] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 349.909699][ T65] usb 5-1: Using ep0 maxpacket: 8 [ 349.916145][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.932767][ T65] usb 5-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 349.943894][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.952906][ T65] usb 5-1: config 0 descriptor?? [ 350.176812][T18316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.185384][T18316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.409463][ T65] wacom 0003:056A:00B8.0016: ignoring exceeding usage max [ 350.419148][ T65] wacom 0003:056A:00B8.0016: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 350.429334][ T65] wacom 0003:056A:00B8.0016: hidraw0: USB HID v5.59 Device [HID 056a:00b8] on usb-dummy_hcd.4-1/input0 [ 350.441772][ T65] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B8.0016/input/input28 [ 350.527937][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 350.527967][ T652] Bluetooth: hci0: command 0x1003 tx timeout [ 350.626697][ T334] usb 5-1: USB disconnect, device number 54 [ 351.348986][ T65] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 351.530948][ T65] usb 8-1: config 0 has an invalid interface number: 213 but max is 0 [ 351.539176][ T65] usb 8-1: config 0 has no interface number 0 [ 351.546725][ T65] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=92.db [ 351.555826][ T65] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.563832][ T65] usb 8-1: Product: syz [ 351.567986][ T65] usb 8-1: Manufacturer: syz [ 351.572586][ T65] usb 8-1: SerialNumber: syz [ 351.577784][ T65] usb 8-1: config 0 descriptor?? [ 351.798616][T18408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.807269][T18408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.854903][T18472] veth1: entered allmulticast mode [ 352.160793][ T65] usb 8-1: USB disconnect, device number 18 [ 352.318105][T18515] netlink: 300 bytes leftover after parsing attributes in process `syz.4.6047'. [ 352.329733][T18515] overlayfs: empty lowerdir [ 352.462342][T18539] fuse: Bad value for 'fd' [ 352.585027][ T31] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 352.734262][ T31] usb 5-1: device descriptor read/64, error -71 [ 353.000768][ T31] usb 5-1: device descriptor read/64, error -71 [ 353.135021][T18575] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 353.144765][ T36] audit: type=1400 audit(2000000109.975:42619): avc: denied { relabelto } for pid=18573 comm="syz.0.6068" name="file0" dev="tmpfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 353.171567][ T36] audit: type=1400 audit(2000000109.975:42620): avc: denied { associate } for pid=18573 comm="syz.0.6068" name="file0" dev="tmpfs" ino=1164 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 353.267210][ T31] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 353.331132][ T65] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 353.405761][ T31] usb 5-1: device descriptor read/64, error -71 [ 353.491008][ T65] usb 8-1: Using ep0 maxpacket: 16 [ 353.499719][ T65] usb 8-1: config 0 has an invalid interface number: 109 but max is 0 [ 353.501591][T18577] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6069'. [ 353.508240][ T65] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.527065][ T65] usb 8-1: config 0 has no interface number 0 [ 353.534592][ T65] usb 8-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 353.543886][ T65] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.552184][ T65] usb 8-1: Product: syz [ 353.556831][ T65] usb 8-1: Manufacturer: syz [ 353.561509][ T65] usb 8-1: SerialNumber: syz [ 353.566930][ T65] usb 8-1: config 0 descriptor?? [ 353.672249][ T31] usb 5-1: device descriptor read/64, error -71 [ 353.790383][ T31] usb usb5-port1: attempt power cycle [ 353.790679][ T65] rndis_host 8-1:0.109: More than one union descriptor, skipping ... [ 353.803939][ T65] usb 8-1: bad CDC descriptors [ 353.808814][ T65] cdc_acm 8-1:0.109: More than one union descriptor, skipping ... [ 353.819969][ T65] usb 8-1: USB disconnect, device number 19 [ 353.970718][ T36] audit: type=1400 audit(2000000110.744:42621): avc: denied { unlink } for pid=16449 comm="syz-executor" name="file0" dev="tmpfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 354.151869][ T31] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 354.174150][ T31] usb 5-1: device descriptor read/8, error -71 [ 354.312767][ T31] usb 5-1: device descriptor read/8, error -71 [ 354.567540][ T31] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 354.589868][ T31] usb 5-1: device descriptor read/8, error -71 [ 354.610218][ T334] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 354.728502][ T31] usb 5-1: device descriptor read/8, error -71 [ 354.771241][ T334] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.781391][ T334] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 354.795885][ T334] usb 8-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 354.804984][ T334] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.812999][ T334] usb 8-1: Product: syz [ 354.817145][ T334] usb 8-1: Manufacturer: syz [ 354.821718][ T334] usb 8-1: SerialNumber: syz [ 354.826896][ T334] usb 8-1: config 0 descriptor?? [ 354.833034][ T334] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 354.844741][ T31] usb usb5-port1: unable to enumerate USB device [ 355.070475][ T31] usb 8-1: USB disconnect, device number 20 [ 355.525749][T18612] binder: Unknown parameter 'context[7' [ 355.533472][ T36] audit: type=1400 audit(2000000112.217:42622): avc: denied { associate } for pid=18611 comm="syz.4.6083" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 355.564343][T18612] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 355.651563][T18619] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 355.651581][T18619] rust_binder: Error while translating object. [ 355.663728][T18619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 355.669987][T18619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:446 [ 355.776107][T18638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 355.785279][T18638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:451 [ 355.891823][T18641] SELinux: ebitmap: map size 458816 does not match my size 64 (high bit was 0) [ 355.912167][T18641] SELinux: failed to load policy [ 356.649095][ T36] audit: type=1326 audit(2000000113.268:42623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18653 comm="syz.6.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985fd8efc9 code=0x7ffc0000 [ 356.683929][ T36] audit: type=1326 audit(2000000113.268:42624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18653 comm="syz.6.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985fd8efc9 code=0x7ffc0000 [ 357.786498][ T495] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 357.864001][T18723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18723 comm=syz.0.6122 [ 357.935810][ T495] usb 8-1: device descriptor read/64, error -71 [ 357.950550][ T36] audit: type=1326 audit(2000000114.488:42625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18727 comm="syz.0.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x7fc00000 [ 358.191508][ T495] usb 8-1: device descriptor read/64, error -71 [ 358.287430][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 358.287500][ T652] Bluetooth: hci0: command 0x1003 tx timeout [ 358.315832][T18743] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 358.323213][T18743] rust_binder: Write failure EINVAL in pid:538 [ 358.332438][T18745] rust_binder: Write failure EINVAL in pid:540 [ 358.351195][T18750] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.422873][T18757] rust_binder: Error while translating object. [ 358.429393][T18757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 358.435556][T18757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:548 [ 358.447341][ T495] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 358.466194][T18761] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 358.466213][T18761] rust_binder: Error while translating object. [ 358.476777][T18761] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 358.482974][T18761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:552 [ 358.596543][ T495] usb 8-1: device descriptor read/64, error -71 [ 358.706070][T18766] overlayfs: failed to clone upperpath [ 358.863022][ T495] usb 8-1: device descriptor read/64, error -71 [ 358.980463][ T495] usb usb8-port1: attempt power cycle [ 359.100410][T18773] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6139'. [ 359.109580][T18775] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6139'. [ 359.215892][T18777] 9pnet_fd: Insufficient options for proto=fd [ 359.353324][ T495] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 359.361960][T18783] futex_wake_op: syz.6.6143 tries to shift op by -1; fix this program [ 359.386282][ T495] usb 8-1: device descriptor read/8, error -71 [ 359.419045][T18824] netlink: 680 bytes leftover after parsing attributes in process `syz.0.6157'. [ 359.436784][T18831] loop2: detected capacity change from 0 to 7 [ 359.443576][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.452736][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.460721][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.469884][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.477862][T15706] loop2: unable to read partition table [ 359.484485][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.493627][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.535547][ T495] usb 8-1: device descriptor read/8, error -71 [ 359.545555][T18833] loop2: detected capacity change from 7 to 4 [ 359.551828][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.560986][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.568848][T18831] loop2: unable to read partition table [ 359.574554][T18831] loop_reread_partitions: partition scan of loop2 (7࢕cFpX]Mec!Z83&;!, @~+ρsPɶlԏ) failed (rc=-5) [ 359.577148][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.597137][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.605403][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.614572][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.622683][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.631823][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.639888][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.649025][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.657767][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.666960][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 359.770338][ T7616] Bluetooth: hci0: Frame reassembly failed (-84) [ 359.790414][ T495] usb 8-1: new low-speed USB device number 24 using dummy_hcd [ 359.812649][ T495] usb 8-1: device descriptor read/8, error -71 [ 359.951204][ T495] usb 8-1: device descriptor read/8, error -71 [ 360.067552][ T495] usb usb8-port1: unable to enumerate USB device [ 360.255910][ T36] audit: type=1400 audit(2000000116.646:42626): avc: denied { execstack } for pid=18864 comm="syz.0.6171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 360.317922][T18870] /dev/loop0: Can't lookup blockdev [ 360.973695][T18897] fuse: Bad value for 'user_id' [ 360.978689][T18897] fuse: Bad value for 'user_id' [ 361.726002][T18946] netlink: 'syz.6.6199': attribute type 16 has an invalid length. [ 361.733887][T18946] netlink: 'syz.6.6199': attribute type 2 has an invalid length. [ 361.741785][T18946] netlink: 64086 bytes leftover after parsing attributes in process `syz.6.6199'. [ 361.954100][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 361.954161][ T652] Bluetooth: hci0: command 0x1003 tx timeout [ 362.509926][T18953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6202'. [ 362.537682][T18960] netlink: 'syz.4.6204': attribute type 4 has an invalid length. [ 362.547594][T18960] netlink: 'syz.4.6204': attribute type 17 has an invalid length. [ 362.568623][ T36] audit: type=1400 audit(2000000118.813:42627): avc: denied { bind } for pid=18961 comm="syz.4.6205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 363.511665][ T36] audit: type=1400 audit(2000000119.704:42628): avc: denied { ioctl } for pid=19030 comm="syz.4.6229" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 363.578557][ T13] bridge_slave_1: left allmulticast mode [ 363.593786][ T13] bridge_slave_1: left promiscuous mode [ 363.599797][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.608062][ T13] bridge_slave_0: left allmulticast mode [ 363.613898][ T13] bridge_slave_0: left promiscuous mode [ 363.619869][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.746913][ T13] veth1_macvtap: left promiscuous mode [ 363.752585][ T13] veth0_vlan: left promiscuous mode [ 363.891759][T19071] overlayfs: missing 'lowerdir' [ 364.000520][T19086] netlink: 'syz.0.6247': attribute type 16 has an invalid length. [ 364.008740][T19086] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.6247'. [ 364.530138][T19103] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 364.644827][T19120] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6260'. [ 364.663732][T19129] loop2: detected capacity change from 0 to 7 [ 364.673868][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 364.683048][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 364.692337][T19129] loop2: unable to read partition table [ 364.698186][T19129] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 364.789791][T19129] loop2: detected capacity change from 7 to 4 [ 364.810331][ C0] blk_print_req_error: 4 callbacks suppressed [ 364.810352][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 364.825605][ C0] buffer_io_error: 4 callbacks suppressed [ 364.825623][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 364.839678][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 364.848884][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 365.445086][T19171] fuse: Bad value for 'user_id' [ 365.450046][T19171] fuse: Bad value for 'user_id' [ 366.401804][ T36] audit: type=1326 audit(2000000122.415:42629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19225 comm="syz.0.6293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x0 [ 366.433393][T19232] SELinux: ebitmap: truncated map [ 366.440073][T19232] SELinux: failed to load policy [ 366.533404][T19240] overlay: ./file0 is not a directory [ 366.684278][T19258] rust_binder: Failed to allocate buffer. len:4232, is_oneway:true [ 366.684304][T19258] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 366.692285][T19258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:656 [ 366.717727][T19264] rust_binder: Error while translating object. [ 366.726946][T19264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 366.733289][T19264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:662 [ 367.569997][T19282] netlink: 288 bytes leftover after parsing attributes in process `syz.7.6311'. [ 368.520839][T19331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 368.528067][T19331] IPv6: NLM_F_CREATE should be set when creating new route [ 368.535298][T19331] IPv6: NLM_F_CREATE should be set when creating new route [ 368.557811][T19337] overlayfs: failed to clone upperpath [ 368.564978][ T36] audit: type=1400 audit(2000000124.441:42630): avc: denied { map } for pid=19336 comm="syz.7.6331" path="/196/bus/file0" dev="tmpfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 368.612230][T19345] /dev/rnullb0: Can't open blockdev [ 368.861017][T19383] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6347'. [ 368.926458][T19392] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6351'. [ 369.042525][T19398] overlayfs: failed to clone lowerpath [ 369.042553][T19397] overlayfs: failed to clone lowerpath [ 369.387501][ T36] audit: type=1326 audit(2000000125.210:42631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.0.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x7fc00000 [ 369.567863][T19442] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6368'. [ 369.657610][T19442] Invalid ELF header magic: != ELF [ 369.660592][ T36] audit: type=1400 audit(2000000125.464:42632): avc: denied { module_load } for pid=19441 comm="syz.7.6368" path="/bus" dev="ramfs" ino=72327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 369.737109][T19446] 9pnet_fd: Insufficient options for proto=fd [ 370.630515][ T36] audit: type=1400 audit(2000000126.374:42633): avc: denied { setattr } for pid=19485 comm="syz.7.6385" name="PPPOL2TP" dev="sockfs" ino=73197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 370.710214][T19495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 370.710246][T19495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:686 [ 370.733055][T19502] rust_binder: Write failure EFAULT in pid:689 [ 370.733859][T19501] netlink: 'syz.0.6390': attribute type 27 has an invalid length. [ 370.742992][T19502] rust_binder: Write failure EFAULT in pid:689 [ 370.799061][T19517] rust_binder: Error in use_page_slow: ESRCH [ 370.799087][T19517] rust_binder: use_range failure ESRCH [ 370.805679][T19517] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 370.811182][T19517] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 370.819260][T19517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:697 [ 370.850641][T19524] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 370.861665][T19523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 370.885660][T19531] netlink: 'syz.7.6400': attribute type 4 has an invalid length. [ 371.209333][T19554] 9pnet: Could not find request transport: fdy-< [ 371.413820][T19577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6417'. [ 371.476342][T19583] /dev/loop0: Can't lookup blockdev [ 371.598879][T19598] overlayfs: failed to clone lowerpath [ 371.599152][T19601] overlayfs: failed to clone lowerpath [ 371.706999][T19596] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6425'. [ 371.717166][T19596] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6425'. [ 371.912648][T19637] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=19637 comm=syz.4.6438 [ 371.913701][ T36] audit: type=1400 audit(2000000127.584:42634): avc: denied { ioctl } for pid=19636 comm="syz.4.6438" path="socket:[73363]" dev="sockfs" ino=73363 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 371.937402][T19639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6439'. [ 371.961244][T19640] fuse: Unknown parameter '{7D' [ 371.966617][T19639] fuse: Unknown parameter '{7D' [ 371.973425][T19639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.985080][T19639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.209674][T19647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6442'. [ 372.241042][ T65] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 372.402064][ T65] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.419129][ T65] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.435428][ T65] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 372.455841][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 372.464001][ T65] usb 5-1: SerialNumber: syz [ 372.533896][T19673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31776 sclass=netlink_route_socket pid=19673 comm=syz.6.6453 [ 372.691723][ T65] usb 5-1: 0:2 : does not exist [ 372.703418][ T65] usb 5-1: USB disconnect, device number 59 [ 372.716134][T15706] udevd[15706]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 372.826096][T19703] netlink: 2 bytes leftover after parsing attributes in process `syz.7.6464'. [ 373.018575][T19731] fuse: Unknown parameter '' [ 373.038818][T19735] netlink: 'syz.0.6474': attribute type 15 has an invalid length. [ 373.047228][T19735] fuse: Bad value for 'fd' [ 373.088653][T19745] overlayfs: failed to clone lowerpath [ 373.488277][ T495] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 373.648179][ T495] usb 5-1: Using ep0 maxpacket: 16 [ 373.654368][ T495] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 373.662688][ T495] usb 5-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 373.672974][ T495] usb 5-1: config 0 has no interface number 0 [ 373.680874][ T495] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 373.689925][ T495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.698068][ T495] usb 5-1: Product: syz [ 373.702252][ T495] usb 5-1: Manufacturer: syz [ 373.706847][ T495] usb 5-1: SerialNumber: syz [ 373.715512][ T495] usb 5-1: config 0 descriptor?? [ 373.723092][ T495] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 373.729451][ T495] usb 5-1: No valid video chain found. [ 373.864688][ T36] audit: type=1400 audit(2000000129.413:42635): avc: denied { relabelfrom } for pid=19828 comm="syz.0.6504" name="NETLINK" dev="sockfs" ino=73606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 373.889294][ T36] audit: type=1400 audit(2000000129.413:42636): avc: denied { relabelto } for pid=19828 comm="syz.0.6504" name="NETLINK" dev="sockfs" ino=73606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 373.937426][T19760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.945886][T19760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.954601][ T588] usb 5-1: USB disconnect, device number 60 [ 374.465186][T19837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6507'. [ 374.502244][T19840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.510816][T19840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.539324][T19845] netlink: 'syz.6.6510': attribute type 6 has an invalid length. [ 374.728750][T19858] 9pnet_fd: Insufficient options for proto=fd [ 374.728750][T19857] 9pnet_fd: Insufficient options for proto=fd [ 374.756868][ T31] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 374.917770][ T31] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 374.928590][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 374.941524][ T31] usb 5-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 374.950590][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.959074][ T31] usb 5-1: config 0 descriptor?? [ 375.066005][ T36] audit: type=1326 audit(2000032898.533:42637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19881 comm="syz.0.6523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x7ffc0000 [ 375.089848][ T36] audit: type=1326 audit(2000032898.542:42638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19881 comm="syz.0.6523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x7ffc0000 [ 375.114010][ T36] audit: type=1326 audit(2000032898.561:42639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19881 comm="syz.0.6523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0167f8efc9 code=0x7ffc0000 [ 375.137792][ T36] audit: type=1326 audit(2000032898.561:42640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19881 comm="syz.0.6523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x200000000002 code=0x7ffc0000 [ 375.161485][ T36] audit: type=1326 audit(2000032898.561:42641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19881 comm="syz.0.6523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=-9 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 375.185126][ T36] audit: type=1326 audit(2000032898.561:42642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19881 comm="syz.0.6523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x7ffc0000 [ 375.187405][ T31] wacom 0003:056A:00DD.0017: unknown main item tag 0x0 [ 375.211393][ T36] audit: type=1326 audit(2000032898.561:42643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19881 comm="syz.0.6523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0167f8efc9 code=0x7ffc0000 [ 375.217249][ T31] wacom 0003:056A:00DD.0017: unknown main item tag 0x0 [ 375.245987][ T31] wacom 0003:056A:00DD.0017: unknown main item tag 0x0 [ 375.252913][ T31] wacom 0003:056A:00DD.0017: unknown main item tag 0x0 [ 375.259897][ T31] wacom 0003:056A:00DD.0017: unknown main item tag 0x0 [ 375.267043][ T31] wacom 0003:056A:00DD.0017: Unknown device_type for 'HID 056a:00dd'. Assuming pen. [ 375.277002][ T31] wacom 0003:056A:00DD.0017: hidraw0: USB HID v1.01 Device [HID 056a:00dd] on usb-dummy_hcd.4-1/input0 [ 375.288729][ T31] input: Wacom Bamboo Connect Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00DD.0017/input/input33 [ 375.399470][T19840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 375.401468][T19840] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 375.412193][ T31] usb 5-1: USB disconnect, device number 61 [ 375.434936][T19905] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 375.444651][T19905] overlayfs: missing 'lowerdir' [ 375.583787][T19940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6543'. [ 375.978425][T19950] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 375.978462][T19950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:728 [ 376.387658][ T31] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 376.558275][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 376.564512][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.575477][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.585269][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 376.591963][ T31] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 376.601037][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.609506][ T31] usb 5-1: config 0 descriptor?? [ 377.258510][T19950] overlayfs: unescaped trailing colons in lowerdir mount option. [ 377.266613][T19950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6545'. [ 377.276144][T20001] 9pnet_fd: Insufficient options for proto=fd [ 377.278467][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 377.288660][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 377.299181][ T31] usb 5-1: USB disconnect, device number 62 [ 377.501575][ T330] tipc: Subscription rejected, illegal request [ 377.513465][T20005] tmpfs: Unknown parameter '00000000000000000002054' [ 377.876722][T20017] incfs: Error accessing: ./file0. [ 377.882104][T20017] incfs: mount failed -20 [ 377.938397][T20021] binder: Unknown parameter 'stat initial count (2842047336 ns). Using initial count to start timer. [ 384.722747][T20476] kvm: pic: single mode not supported [ 384.722763][T20476] kvm: pic: level sensitive irq not supported [ 384.728292][T20476] kvm: pic: non byte read [ 384.739012][T20476] kvm: pic: non byte read [ 384.743594][T20476] kvm: pic: non byte read [ 384.748271][T20476] kvm: pic: non byte read [ 384.752981][T20476] kvm: pic: non byte read [ 384.757745][T20476] kvm: pic: level sensitive irq not supported [ 384.757804][T20476] kvm: pic: non byte read [ 384.768668][T20476] kvm: pic: single mode not supported [ 384.768728][T20476] kvm: pic: non byte read [ 384.778729][T20476] kvm: pic: level sensitive irq not supported [ 384.778786][T20476] kvm: pic: non byte read [ 384.779901][T20486] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 384.789292][T20486] rust_binder: Read failure Err(EFAULT) in pid:793 [ 385.181063][ T45] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 385.352630][ T45] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 385.361093][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 385.372274][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 385.383569][ T45] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 385.392628][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.400672][ T45] usb 5-1: Product: syz [ 385.406158][ T45] usb 5-1: Manufacturer: syz [ 385.410807][ T45] usb 5-1: SerialNumber: syz [ 385.416485][ T45] usb 5-1: config 0 descriptor?? [ 385.636756][ T495] usb 5-1: USB disconnect, device number 67 [ 385.759241][T20505] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=20505 comm=syz.6.6734 [ 385.880942][T20513] 9pnet: Could not find request transport: fdu [ 386.184532][T20525] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 386.191925][T20525] rust_binder: Write failure EINVAL in pid:805 [ 386.255905][T20531] rust_binder: 810: no such ref 0 [ 386.471007][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 386.471025][ T36] audit: type=1400 audit(2000032909.238:42695): avc: denied { map } for pid=20558 comm="syz.4.6756" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 386.478645][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6754'. [ 386.501569][T20559] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 386.516511][T20562] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6754'. [ 386.526939][ T36] audit: type=1400 audit(2000032909.238:42696): avc: denied { execute } for pid=20558 comm="syz.4.6756" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 386.555262][T20562] gretap0: entered promiscuous mode [ 386.572110][T20573] rust_binder: Read failure Err(EAGAIN) in pid:824 [ 386.572606][ T36] audit: type=1400 audit(2000032909.332:42697): avc: denied { read } for pid=95 comm="acpid" name="event7" dev="devtmpfs" ino=767 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 386.601065][ T36] audit: type=1400 audit(2000032909.332:42698): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=767 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 386.623785][ T36] audit: type=1400 audit(2000032909.332:42699): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=767 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 386.678026][T20579] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 386.683283][T20586] netlink: 'syz.6.6763': attribute type 4 has an invalid length. [ 386.697192][T20586] tipc: Enabling of bearer rejected, failed to enable media [ 386.719429][T20586] netlink: 'syz.6.6763': attribute type 4 has an invalid length. [ 386.741242][T20588] netlink: 108 bytes leftover after parsing attributes in process `syz.6.6764'. [ 386.752628][T20588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20588 comm=syz.6.6764 [ 386.804774][T20598] overlayfs: failed to clone lowerpath [ 386.810796][T20598] overlayfs: failed to clone lowerpath [ 387.319681][T20641] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 387.337925][T20647] ./cgroup: Can't lookup blockdev [ 387.365353][T20655] rust_binder: Error while translating object. [ 387.365402][T20655] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 387.371706][T20655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:854 [ 387.381707][T20656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 387.430769][T20666] netlink: 'syz.6.6792': attribute type 1 has an invalid length. [ 387.463068][ T36] audit: type=1326 audit(2000032910.176:42700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20669 comm="syz.4.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faddfb8efc9 code=0x7ffc0000 [ 387.473870][T20671] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 387.487095][ T36] audit: type=1326 audit(2000032910.176:42701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20669 comm="syz.4.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faddfb8d810 code=0x7ffc0000 [ 387.517651][ T36] audit: type=1326 audit(2000032910.176:42702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20669 comm="syz.4.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faddfb8d810 code=0x7ffc0000 [ 387.541657][ T36] audit: type=1326 audit(2000032910.176:42703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20669 comm="syz.4.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faddfb8d810 code=0x7ffc0000 [ 387.565298][ T36] audit: type=1326 audit(2000032910.176:42704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20669 comm="syz.4.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faddfb8d810 code=0x7ffc0000 [ 387.747739][T20693] netlink: 324 bytes leftover after parsing attributes in process `syz.7.6801'. [ 387.777990][T20700] overlayfs: failed to clone upperpath [ 388.014328][T20716] tipc: Enabling of bearer rejected, media not registered [ 388.078335][T20727] netlink: 'syz.0.6812': attribute type 4 has an invalid length. [ 388.086340][T20727] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.6812'. [ 388.986231][ T65] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 389.124779][ T65] usb 5-1: device descriptor read/64, error -71 [ 389.380609][ T65] usb 5-1: device descriptor read/64, error -71 [ 389.657711][ T65] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 389.697798][T20795] tipc: Enabling of bearer rejected, media not registered [ 389.796276][ T65] usb 5-1: device descriptor read/64, error -71 [ 390.052085][ T65] usb 5-1: device descriptor read/64, error -71 [ 390.169414][ T65] usb usb5-port1: attempt power cycle [ 390.436261][T20837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=20837 comm=syz.6.6851 [ 390.492815][T20858] fuse: Bad value for 'fd' [ 390.531737][ T65] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 390.564692][ T65] usb 5-1: device descriptor read/8, error -71 [ 390.703288][ T65] usb 5-1: device descriptor read/8, error -71 [ 390.958175][ T65] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 390.980478][ T65] usb 5-1: device descriptor read/8, error -71 [ 391.119128][ T65] usb 5-1: device descriptor read/8, error -71 [ 391.235856][ T65] usb usb5-port1: unable to enumerate USB device [ 391.269059][T20894] netlink: 'syz.0.6867': attribute type 4 has an invalid length. [ 391.276845][T20894] netlink: 'syz.0.6867': attribute type 5 has an invalid length. [ 391.285147][T20894] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.6867'. [ 391.308784][T20897] overlayfs: failed to clone upperpath [ 391.412015][T20907] 9pnet_fd: Insufficient options for proto=fd [ 391.455011][T20914] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6875'. [ 391.473791][T20914] z00X: renamed from gretap0 [ 391.483377][T20914] z00X: entered allmulticast mode [ 391.529594][T20930] netlink: 240 bytes leftover after parsing attributes in process `syz.6.6879'. [ 391.559649][T20937] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 391.619496][T20947] 9pnet_fd: Insufficient options for proto=fd [ 392.411673][T21022] overlayfs: failed to clone lowerpath [ 392.417710][T21022] overlayfs: failed to clone lowerpath [ 392.474993][T21034] overlayfs: failed to clone upperpath [ 392.544427][T21044] 9pnet_fd: Insufficient options for proto=fd [ 392.749576][ T588] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 392.909087][ T588] usb 5-1: Using ep0 maxpacket: 16 [ 392.916706][ T588] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 392.926003][ T588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.934100][ T588] usb 5-1: Product: syz [ 392.938308][ T588] usb 5-1: Manufacturer: syz [ 392.942912][ T588] usb 5-1: SerialNumber: syz [ 392.949982][ T588] r8152-cfgselector 5-1: Unknown version 0x0000 [ 392.956264][ T588] r8152-cfgselector 5-1: config 0 descriptor?? [ 393.396725][T21041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 393.568070][T21091] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 393.585444][ T36] kauditd_printk_skb: 100 callbacks suppressed [ 393.585492][ T36] audit: type=1400 audit(2000032915.917:42805): avc: denied { relabelto } for pid=21090 comm="syz.6.6940" name="503" dev="tmpfs" ino=2739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 393.618675][ T36] audit: type=1400 audit(2000032915.917:42806): avc: denied { associate } for pid=21090 comm="syz.6.6940" name="503" dev="tmpfs" ino=2739 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 393.648123][ T36] audit: type=1400 audit(2000032915.945:42807): avc: denied { write } for pid=21090 comm="syz.6.6940" name="503" dev="tmpfs" ino=2739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 393.674697][ T36] audit: type=1400 audit(2000032915.945:42808): avc: denied { add_name } for pid=21090 comm="syz.6.6940" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 393.699747][ T36] audit: type=1400 audit(2000032915.945:42809): avc: denied { create } for pid=21090 comm="syz.6.6940" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 393.720327][ T36] audit: type=1400 audit(2000032915.945:42810): avc: denied { associate } for pid=21090 comm="syz.6.6940" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 393.744182][ T36] audit: type=1400 audit(2000032915.974:42811): avc: denied { mounton } for pid=21090 comm="syz.6.6940" path="/503/file0" dev="tmpfs" ino=2744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 393.767299][ T36] audit: type=1400 audit(2000032916.049:42812): avc: denied { remove_name } for pid=16381 comm="syz-executor" name="file0" dev="tmpfs" ino=2744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 393.794775][ T36] audit: type=1400 audit(2000032916.049:42813): avc: denied { rmdir } for pid=16381 comm="syz-executor" name="file0" dev="tmpfs" ino=2744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 393.817317][ T36] audit: type=1400 audit(2000032916.049:42814): avc: denied { rmdir } for pid=16381 comm="syz-executor" name="503" dev="tmpfs" ino=2739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 393.935994][ T588] r8152-cfgselector 5-1: USB disconnect, device number 72 [ 393.949117][T21100] rust_binder: 885: no such ref 1 [ 394.023514][T21105] tmpfs: Bad value for 'nr_blocks' [ 394.337392][ T588] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 394.475995][ T588] usb 5-1: device descriptor read/64, error -71 [ 394.569487][T21119] overlayfs: failed to clone upperpath [ 394.731811][ T588] usb 5-1: device descriptor read/64, error -71 [ 394.987668][ T588] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 395.126436][ T588] usb 5-1: device descriptor read/64, error -71 [ 395.184875][T21128] netlink: 'syz.7.6953': attribute type 2 has an invalid length. [ 395.373843][T21139] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 395.391050][T21142] overlayfs: failed to clone lowerpath [ 395.396655][ T588] usb 5-1: device descriptor read/64, error -71 [ 395.510070][ T588] usb usb5-port1: attempt power cycle [ 395.872459][ T588] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 395.894817][ T588] usb 5-1: device descriptor read/8, error -71 [ 395.997571][T21161] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6965'. [ 396.045073][ T588] usb 5-1: device descriptor read/8, error -71 [ 396.298850][ T588] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 396.322284][ T588] usb 5-1: device descriptor read/8, error -71 [ 396.459773][ T588] usb 5-1: device descriptor read/8, error -71 [ 396.576111][ T588] usb usb5-port1: unable to enumerate USB device [ 397.185186][T21180] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6972'. [ 397.197502][T21180] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6972'. [ 398.355972][T21220] overlayfs: failed to clone upperpath [ 399.034818][T21264] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7003'. [ 399.734970][T21324] netlink: 'syz.6.7026': attribute type 29 has an invalid length. [ 399.742885][T21324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7026'. [ 399.767671][T21331] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.7028'. [ 399.804845][T18473] veth1: left allmulticast mode [ 399.894585][ T12] bridge_slave_1: left allmulticast mode [ 399.900625][ T12] bridge_slave_1: left promiscuous mode [ 399.907157][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.915182][ T12] bridge_slave_0: left allmulticast mode [ 399.920905][ T12] bridge_slave_0: left promiscuous mode [ 399.926615][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.024518][ T12] veth1_macvtap: left promiscuous mode [ 400.030098][ T12] veth0_vlan: left promiscuous mode [ 400.068290][T21339] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.075390][T21339] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.082525][T21339] bridge_slave_0: entered allmulticast mode [ 400.088723][T21339] bridge_slave_0: entered promiscuous mode [ 400.095093][T21339] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.102114][T21339] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.109225][T21339] bridge_slave_1: entered allmulticast mode [ 400.115601][T21339] bridge_slave_1: entered promiscuous mode [ 400.158659][T21339] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.165724][T21339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.173027][T21339] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.180073][T21339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.200376][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.207869][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.217224][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.224276][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.233600][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.240628][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.266040][T21339] veth0_vlan: entered promiscuous mode [ 400.276631][T21350] bridge0: port 3(syz_tun) entered blocking state [ 400.283095][T21350] bridge0: port 3(syz_tun) entered disabled state [ 400.289739][T21350] syz_tun: entered allmulticast mode [ 400.295381][T21350] syz_tun: entered promiscuous mode [ 400.301580][T21350] bridge0: port 3(syz_tun) entered blocking state [ 400.308031][T21350] bridge0: port 3(syz_tun) entered forwarding state [ 400.321688][T21339] veth1_macvtap: entered promiscuous mode [ 400.422712][T21361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 400.422741][T21361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 400.443511][T21363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:11 [ 400.452646][T21364] rust_binder: 11: no such ref 3 [ 400.467512][T21364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 400.620064][T21387] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 400.714077][ T13] bridge_slave_1: left allmulticast mode [ 400.727833][ T13] bridge_slave_1: left promiscuous mode [ 400.733521][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.744318][ T13] bridge_slave_0: left allmulticast mode [ 400.749972][ T13] bridge_slave_0: left promiscuous mode [ 400.767820][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.878028][ T13] veth1_macvtap: left promiscuous mode [ 400.883697][ T13] veth0_vlan: left promiscuous mode [ 400.923123][T21398] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.930377][T21398] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.937592][T21398] bridge_slave_0: entered allmulticast mode [ 400.943942][T21398] bridge_slave_0: entered promiscuous mode [ 400.955506][T21398] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.962580][T21398] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.970225][T21398] bridge_slave_1: entered allmulticast mode [ 400.976523][T21398] bridge_slave_1: entered promiscuous mode [ 401.027794][T21425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7063'. [ 401.031945][ T588] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 401.044468][T21398] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.051513][T21398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.070094][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.079150][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.086199][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.095653][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.102704][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.135895][T21398] veth0_vlan: entered promiscuous mode [ 401.146124][T21398] veth1_macvtap: entered promiscuous mode [ 401.202751][ T588] usb 5-1: Using ep0 maxpacket: 16 [ 401.209327][ T588] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.219460][ T588] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.231637][ T588] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 401.240777][ T588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.248796][ T588] usb 5-1: Product: syz [ 401.252962][ T588] usb 5-1: Manufacturer: syz [ 401.257616][ T588] usb 5-1: SerialNumber: syz [ 401.695856][T21446] macsec0: entered allmulticast mode [ 401.701942][T21446] veth1_macvtap: entered allmulticast mode [ 401.707985][T21446] macsec0: left allmulticast mode [ 401.713039][T21446] veth1_macvtap: left allmulticast mode [ 401.747627][T21465] overlayfs: failed to clone upperpath [ 401.927771][T21479] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7078'. [ 401.936804][T21479] netlink: 43 bytes leftover after parsing attributes in process `syz.7.7078'. [ 401.945796][T21479] netlink: 'syz.7.7078': attribute type 6 has an invalid length. [ 401.953578][T21479] netlink: 'syz.7.7078': attribute type 5 has an invalid length. [ 401.961709][T21479] netlink: 43 bytes leftover after parsing attributes in process `syz.7.7078'. [ 402.020039][ T588] usb 5-1: 0:2 : does not exist [ 402.028091][ T588] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 402.035666][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 402.035681][ T36] audit: type=1400 audit(2000032923.835:42817): avc: denied { write } for pid=21490 comm="syz.4.7083" name="cgroup.subtree_control" dev="cgroup2" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 402.070850][T21493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:915 [ 402.072692][ T588] usb 5-1: USB disconnect, device number 77 [ 402.092321][T15706] udevd[15706]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 402.165255][T21504] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 402.165301][T21504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:917 [ 402.296151][T21518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 402.334462][T21515] binder: Unknown parameter 'fscontext?}' [ 402.363301][ T65] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 402.370759][ T65] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 402.378395][ T65] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 402.386001][ T65] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 402.393417][ T65] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 402.401089][ T65] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 402.408498][ T65] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 402.415866][ T65] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 402.423276][ T65] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 402.430781][ T65] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 402.438157][ T65] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 402.445737][ T65] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 402.453321][ T65] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 402.460984][ T65] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 402.468374][ T65] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 402.475794][ T65] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 402.483233][ T65] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 402.491185][ T65] hid-generic 0003:0004:0000.0019: hidraw0: USB HID v7fffff.ff Device [syz0] on syz1 [ 402.507038][T21522] fido_id[21522]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 402.564561][T21526] netlink: 'syz.7.7094': attribute type 4 has an invalid length. [ 402.584583][T21528] 9pnet_fd: Insufficient options for proto=fd [ 402.641476][T21547] fuse: blksize only supported for fuseblk [ 402.736141][T21558] incfs: Options parsing error. -22 [ 402.741443][T21558] incfs: mount failed -22 [ 402.746655][T21558] netlink: 'syz.0.7105': attribute type 4 has an invalid length. [ 402.755370][T21558] netlink: 'syz.0.7105': attribute type 4 has an invalid length. [ 402.854421][T21565] overlayfs: failed to clone upperpath [ 402.894607][T21571] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7111'. [ 402.908143][ T588] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 402.930848][ T36] audit: type=1400 audit(2000032924.688:42818): avc: denied { setattr } for pid=21574 comm="syz.0.7113" name="/" dev="configfs" ino=1509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 403.052008][T21586] /dev/rnullb0: Can't lookup blockdev [ 403.069069][ T588] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.080062][ T588] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.090004][ T588] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 403.099050][ T588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.108782][ T588] usb 5-1: config 0 descriptor?? [ 403.277062][T21590] binder: Unknown parameter 'defcontext01777777777777777777777' [ 403.323331][T21601] netlink: 'syz.7.7121': attribute type 64 has an invalid length. [ 403.550294][ T588] hid-steam 0003:28DE:1142.001A: unknown main item tag 0x0 [ 403.559342][ T588] hid-steam 0003:28DE:1142.001A: unknown main item tag 0x0 [ 403.567517][ T588] hid-steam 0003:28DE:1142.001A: item fetching failed at offset 2/5 [ 403.575974][ T588] hid-steam 0003:28DE:1142.001A: steam_probe:parse of hid interface failed [ 403.590366][ T588] hid-steam 0003:28DE:1142.001A: probe with driver hid-steam failed with error -22 [ 403.664604][T21650] rust_binder: Failed copying remainder into alloc: EFAULT [ 403.664630][T21650] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 403.682737][T21650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 403.696970][T21650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:33 [ 403.733899][T21656] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 403.773212][T21549] rust_binder: Got transaction with invalid offset. [ 403.792071][T21549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 403.802808][T21549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:945 [ 403.827085][ T495] usb 5-1: USB disconnect, device number 78 [ 404.001745][T21668] rust_binder: 44: no such ref 3 [ 404.025757][T21670] input: syz1 as /devices/virtual/input/input37 [ 404.448680][T21685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7148'. [ 404.698914][ T31] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 404.821199][T21734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7165'. [ 405.158515][T21752] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7172'. [ 405.251708][T21755] loop2: detected capacity change from 0 to 7 [ 405.258148][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.267316][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 405.275280][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.276179][T21753] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7172'. [ 405.284457][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 405.293358][T21753] netlink: 'syz.0.7172': attribute type 6 has an invalid length. [ 405.301477][T21755] loop2: unable to read partition table [ 405.308981][ T588] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 405.309137][T21753] netlink: 'syz.0.7172': attribute type 5 has an invalid length. [ 405.316411][T21755] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 405.330504][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.344176][T21753] netlink: 'syz.0.7172': attribute type 4 has an invalid length. [ 405.352635][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 405.423770][T21756] loop2: detected capacity change from 7 to 4 [ 405.429629][T21759] tipc: Enabled bearer , priority 26 [ 405.430370][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 405.439258][T21759] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7174'. [ 405.453474][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.459122][T21759] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7174'. [ 405.463936][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 405.472946][T21759] netlink: 'syz.7.7174': attribute type 5 has an invalid length. [ 405.483407][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.497498][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 405.505559][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.514718][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 405.522886][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.532051][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 405.543938][ T588] usb 10-1: config 0 has an invalid interface number: 214 but max is 0 [ 405.555905][ T588] usb 10-1: config 0 has no interface number 0 [ 405.568189][ T588] usb 10-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 405.584199][ T588] usb 10-1: config 0 interface 214 has no altsetting 0 [ 405.593898][ T588] usb 10-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 405.603153][ T588] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.611302][ T588] usb 10-1: Product: syz [ 405.615816][ T588] usb 10-1: Manufacturer: syz [ 405.620494][ T588] usb 10-1: SerialNumber: syz [ 405.625650][ T588] usb 10-1: config 0 descriptor?? [ 405.631057][T21750] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 405.851969][T21750] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 406.020559][ T31] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 406.073639][T21750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.082155][T21750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.180432][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 406.187401][ T31] usb 5-1: config 1 interface 0 altsetting 193 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 406.200500][ T31] usb 5-1: config 1 interface 0 has no altsetting 0 [ 406.208620][ T31] usb 5-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.40 [ 406.217764][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.225854][ T31] usb 5-1: Product: 둠礓ꊆ쫟롐ت㦠ꐾꛏ콘઺괈ᶗ憊勚괡㳞뽍ꍶ耛흃炮⩋䶴똒ᑧ啺䶬鰩ಾ훂❂ꏫ뢈︋챪긦᨜捔䨏᳇忴ᅫ㷈ꐞ뢻蘯㦉螑腑紃췟췝᫏訒둔麗᳔䤂慉蓿⠹㗄ꥠ햲摦˨׉㶓砩ྠ䲬ᇅధื뾞缫Ȭ猲๳ [ 406.252130][ T31] usb 5-1: Manufacturer: 惠⇈뛙戬靔溜ꢀꃮ嵼䤗㛃⏐鑶ᯚ鋴誋轎륢吋蛕涫៮솻㚂㱵펩㤐ણ㾹 [ 406.264858][ T31] usb 5-1: SerialNumber: ᐉ [ 406.490027][ T31] usbhid 5-1:1.0: can't add hid device: -71 [ 406.495994][ T31] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 406.505410][ T31] usb 5-1: USB disconnect, device number 80 [ 406.622104][T21789] overlayfs: failed to clone upperpath [ 406.892774][T21791] rust_binder: Error while translating object. [ 406.892795][T21791] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 406.899177][T21791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:54 [ 407.045083][T21795] SELinux: security_context_str_to_sid () failed with errno=-22 [ 407.065554][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 407.077293][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 407.091171][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 407.102460][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 407.115265][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 407.128556][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 407.140637][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 407.161248][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 407.184580][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 407.195895][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 407.207072][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 407.218297][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 407.229478][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 407.241948][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 407.253492][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 407.448823][ T65] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 407.459796][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 407.471039][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 407.482258][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 407.493444][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 407.504639][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 407.515813][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 407.526998][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 407.538116][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 407.549308][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 407.560483][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 407.571675][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 407.583146][ T588] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 407.595536][ T588] ax88179_178a 10-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.9-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 9a:37:2e:a2:44:a5 [ 407.613145][ T588] usb 10-1: USB disconnect, device number 2 [ 407.623264][ T588] ax88179_178a 10-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.9-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 407.638725][T21821] rust_binder: Write failure EFAULT in pid:57 [ 407.638730][T21822] rust_binder: Write failure EFAULT in pid:57 [ 407.638807][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.662364][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.672597][ T65] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 407.681774][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.694883][ T65] usb 5-1: config 0 descriptor?? [ 407.711340][ T36] audit: type=1326 audit(2000032929.166:42819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21820 comm="syz.9.7194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a558efc9 code=0x7fc00000 [ 408.055599][T21854] __nla_validate_parse: 2 callbacks suppressed [ 408.055649][T21854] netlink: 188 bytes leftover after parsing attributes in process `syz.7.7196'. [ 408.377912][ T65] usbhid 5-1:0.0: can't add hid device: -71 [ 408.383894][ T65] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 408.392907][ T65] usb 5-1: USB disconnect, device number 81 [ 408.511612][ T36] audit: type=1326 audit(2000032929.916:42820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21820 comm="syz.9.7194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50a558efc9 code=0x7fc00000 [ 408.552378][T21869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:61 [ 408.571966][T21873] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7203'. [ 408.602900][T21875] 9pnet_fd: Insufficient options for proto=fd [ 408.609406][T21875] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 408.620268][ T36] audit: type=1400 audit(2000032930.020:42821): avc: denied { relabelto } for pid=21874 comm="syz.9.7204" name="file0" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:system_cron_spool_t:s0" [ 408.648216][ T36] audit: type=1400 audit(2000032930.020:42822): avc: denied { associate } for pid=21874 comm="syz.9.7204" name="file0" dev="tmpfs" ino=133 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:system_cron_spool_t:s0" [ 408.962385][ T588] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 409.017006][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 409.023532][ T36] audit: type=1326 audit(2000032930.395:42823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21923 comm="syz.0.7222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x7fc00000 [ 409.083873][ T36] audit: type=1326 audit(2000032930.451:42824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21923 comm="syz.0.7222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x7fc00000 [ 409.133946][ T588] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.145029][ T588] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 409.154151][ T36] audit: type=1326 audit(2000032930.517:42825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21923 comm="syz.0.7222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x7fc00000 [ 409.154205][ T588] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.186457][ T588] usb 10-1: config 0 descriptor?? [ 409.211750][ T36] audit: type=1326 audit(2000032930.573:42826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21923 comm="syz.0.7222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x7fc00000 [ 409.275680][ T36] audit: type=1326 audit(2000032930.639:42827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21923 comm="syz.0.7222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x7fc00000 [ 409.339633][ T36] audit: type=1326 audit(2000032930.695:42828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21923 comm="syz.0.7222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0167f8efc9 code=0x7fc00000 [ 409.619426][ T588] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 409.629057][ T588] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.001B/input/input39 [ 409.704026][ T588] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 409.747514][T21953] netlink: 'syz.7.7231': attribute type 1 has an invalid length. [ 409.755288][T21953] netlink: 164 bytes leftover after parsing attributes in process `syz.7.7231'. [ 409.943219][T21984] overlayfs: failed to clone upperpath [ 410.056183][T21893] rust_binder: inc_ref_done called when no active inc_refs [ 410.056901][T16318] usb 10-1: USB disconnect, device number 3 [ 410.966224][T16318] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 411.126066][T16318] usb 10-1: Using ep0 maxpacket: 8 [ 411.132288][T16318] usb 10-1: config 0 has an invalid interface number: 200 but max is 0 [ 411.140555][T16318] usb 10-1: config 0 has no interface number 0 [ 411.146845][T16318] usb 10-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 411.158635][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 411.166169][T16318] usb 10-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 411.177377][T16318] usb 10-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 411.188791][T16318] usb 10-1: config 0 interface 200 has no altsetting 0 [ 411.197189][T16318] usb 10-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 411.206402][T16318] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.214507][T16318] usb 10-1: Product: syz [ 411.218770][T16318] usb 10-1: Manufacturer: syz [ 411.223471][T16318] usb 10-1: SerialNumber: syz [ 411.228668][T16318] usb 10-1: config 0 descriptor?? [ 411.234016][T22056] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 411.497058][T16318] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.200/input/input40 [ 411.509606][ C1] usb 10-1: hanwang_irq - urb shutting down with status: -2 [ 411.514761][T16318] usb 10-1: USB disconnect, device number 4 [ 411.536830][T22073] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 411.750559][T22092] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 411.755906][T22093] rust_binder: Failed to register with vma: already registered [ 411.763164][T22092] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 411.763192][T22092] CPU: 0 UID: 0 PID: 22092 Comm: syz.4.7277 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 411.770822][T22091] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 411.779098][T22092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 411.779118][T22092] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 411.791173][T22093] rust_binder: Failed to register with vma: already registered [ 411.797133][T22092] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24 [ 411.797155][T22092] RSP: 0018:ffffc900030af820 EFLAGS: 00010202 [ 411.807331][T22091] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 411.813403][T22092] [ 411.813412][T22092] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88811cc6a600 [ 411.813426][T22092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 7ffffffffffffffe [ 411.813439][T22092] RBP: ffffc900030afa40 R08: ffff8881f6e72240 R09: 1ffff1103edce448 [ 411.879067][T22092] R10: 1ffff1103edce44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 411.887028][T22092] R13: 7ffffffffffffffe R14: ffff888102b5c038 R15: ffff888102b5c028 [ 411.894986][T22092] FS: 00007fade0a8b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 411.903906][T22092] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.910468][T22092] CR2: 0000200000003080 CR3: 000000013cd36000 CR4: 00000000003526b0 [ 411.918437][T22092] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 411.926401][T22092] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 [ 411.934350][T22092] Call Trace: [ 411.937611][T22092] [ 411.940527][T22092] ? __cfi_iter_file_splice_write+0x10/0x10 [ 411.946407][T22092] ? __kmalloc_noprof+0x271/0x530 [ 411.951486][T22092] ? futex_wait_setup+0x1bc/0x260 [ 411.956554][T22092] ? __kasan_check_write+0x18/0x20 [ 411.961708][T22092] ? __cfi_iter_file_splice_write+0x10/0x10 [ 411.967586][T22092] direct_splice_actor+0x279/0x4b0 [ 411.972681][T22092] splice_direct_to_actor+0x4fb/0xbc0 [ 411.978039][T22092] ? should_fail+0xf/0x20 [ 411.982500][T22092] ? __cfi_direct_splice_actor+0x10/0x10 [ 411.988114][T22092] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 411.993995][T22092] do_splice_direct+0x182/0x270 [ 411.998859][T22092] ? __cfi_do_splice_direct+0x10/0x10 [ 412.004214][T22092] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 412.010088][T22092] ? security_file_permission+0x2e/0xc0 [ 412.015687][T22092] ? rw_verify_area+0xac/0x230 [ 412.020509][T22092] do_sendfile+0x5c8/0xfb0 [ 412.024954][T22092] ? vfs_writev+0xcf0/0xcf0 [ 412.029440][T22092] ? __se_sys_futex+0x28f/0x300 [ 412.034274][T22092] __x64_sys_sendfile64+0x193/0x1f0 [ 412.039453][T22092] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 412.045152][T22092] ? switch_fpu_return+0x12/0x20 [ 412.050095][T22092] x64_sys_call+0xa26/0x2ee0 [ 412.054686][T22092] do_syscall_64+0x58/0xf0 [ 412.059163][T22092] ? clear_bhb_loop+0x50/0xa0 [ 412.063866][T22092] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 412.069741][T22092] RIP: 0033:0x7faddfb8efc9 [ 412.074142][T22092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.093730][T22092] RSP: 002b:00007fade0a8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 412.102124][T22092] RAX: ffffffffffffffda RBX: 00007faddfde6090 RCX: 00007faddfb8efc9 [ 412.110080][T22092] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 412.118067][T22092] RBP: 00007faddfc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 412.126037][T22092] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000 [ 412.133990][T22092] R13: 00007faddfde6128 R14: 00007faddfde6090 R15: 00007ffc9603b098 [ 412.141949][T22092] [ 412.144971][T22092] Modules linked in: [ 412.149233][T22092] ---[ end trace 0000000000000000 ]--- [ 412.155330][T22092] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 412.161658][T22092] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24 [ 412.181355][T22092] RSP: 0018:ffffc900030af820 EFLAGS: 00010202 [ 412.187431][T22092] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88811cc6a600 [ 412.195426][T22092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 7ffffffffffffffe [ 412.203424][T22092] RBP: ffffc900030afa40 R08: ffff8881f6e72240 R09: 1ffff1103edce448 [ 412.211393][T22092] R10: 1ffff1103edce44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 412.219374][T22092] R13: 7ffffffffffffffe R14: ffff888102b5c038 R15: ffff888102b5c028 [ 412.227461][T22092] FS: 00007fade0a8b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 412.236521][T22092] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.243111][T22092] CR2: 0000200000003080 CR3: 000000013cd36000 CR4: 00000000003526b0 [ 412.251109][T22092] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 412.259112][T22092] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 [ 412.267096][T22092] Kernel panic - not syncing: Fatal exception [ 412.273399][T22092] Kernel Offset: disabled [ 412.277715][T22092] Rebooting in 86400 seconds..