last executing test programs: 2m48.825532203s ago: executing program 2 (id=410): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = epoll_create(0x4b) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x80000001}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000100)={0xa000000d}) close(r2) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0xffffffff, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/191, 0xbf, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 2m48.777632653s ago: executing program 2 (id=411): r0 = syz_open_dev$usbmon(&(0x7f0000001cc0), 0x4ddf, 0x80000) ppoll(&(0x7f0000001d40)=[{r0, 0x9483}], 0x1, &(0x7f0000001d80), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0xc4430, &(0x7f00000001c0)={[{@none}], [{@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/kvm\x00'}}, {@euid_lt}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x2, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0xffff1000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="80010000100013070000000000000000ff0100000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004800010078636263286165732900"/312], 0x180}}, 0x0) r5 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bind$can_raw(r5, &(0x7f0000000000), 0x10) getsockname$inet(r5, 0x0, &(0x7f00000001c0)) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r9, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x68, r10, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x62}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x4) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGUNIT(r8, 0x80047456, &(0x7f0000000280)) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') read$FUSE(r11, &(0x7f0000007100)={0x2020}, 0x941f) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r6, 0x66053000) 2m48.687563525s ago: executing program 2 (id=412): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40, 0xc1) execve(&(0x7f0000004700)='./file0\x00', &(0x7f0000004800)={[], 0x23}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2m48.565825787s ago: executing program 2 (id=416): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd7000000000000700000005000000000002000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x4c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8101e7541987b6b8205ab32386"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3555a54f78b2ec0908a0d955af"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c19828785e"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x62002, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r4, &(0x7f0000000240)='./file0/../file0\x00', r4, &(0x7f0000000280)='./file0\x00', 0x70) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4040081}, 0x40c0) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0xa0}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2000c000, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 2m48.45165912s ago: executing program 2 (id=419): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xfff, 0x3a, '^-%-\\xc5})\')&}*\xe9S\xe9\xaf\x9f\xb9\xc9\xce\xa55\x9d$]\xd0\x1e\xf5cM\xfaW\xd3m\x8d\xf4\x9c\xfalN\x9d\x05\x82\xed\'L0%\x89k\xc62+8U\xcb\xa7\x1c\x1e\xf8\xfb\xe9\x8b`H\xbf\"\xe0\xf1\x18y\x01eE\xec\xe6\x1el\xaaI\xf7\xe5\xba\xef\xcc\xa3\x1aO\x1c\xc3\xbei\xfcM\x05\xb1.e\x0f\xa8\x18\xa9G\n\x88\xe3\xe4\xfbKN\x7f\xb9\x02\xbfM\x10\x1e1\xed\xfdU\xfd\xaf/`\xeeHl\x86\x17S\xfc\xda\xe5\xf6\xb9\x82\x81vg\xf1Z\x84\xfc\n\xcb\x1a\x9f\x04', 0x3a, '', 0x3a, './file0'}, 0xbf) wait4(r0, 0x0, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x1, 0x2a7, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x100000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x1, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x4007, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x40000006, 0x1, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xf, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0x3, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0x40, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1006, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8005, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xfffb, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaec, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x4000000b, 0x5, 0x1, 0x6, 0x5, 0x0, 0x1003, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x1, 0xffff, 0x3, 0x7f, 0x100, 0x3, 0x0, 0x2, 0xffff, 0x0, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf250100"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 2m48.281797463s ago: executing program 2 (id=421): ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000000)=@generic={0x1, 0xf, 0x6}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14, &(0x7f0000000140)={&(0x7f0000000080)="7666daa359005e323c880df13fa6dc0883329738717f2e5ff776013d71a11aca12a453f34ce31131bef5bb98fe03f22f734d6d36e5eeb8deebebc402bf0491e9c6645660f87babe9b1f662f27d4ff3a153084e379d138f503351e555e07b715d1f7c2ae35b2881a6b56a29d9fcafeb28716c6fd1f55d6b3f771261d3012e974d8929de580de4fa3e42", 0x89}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000001c0)={'team0\x00', {0x2, 0x0, @remote}}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)='wlan1\x00'}) (async) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)='wlan1\x00'}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000280)=@generic={0x0, 0x401, 0x9}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000002c0)=@generic={0x1, 0x5, 0x5}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004014}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r3, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x1000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r3, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x1000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) r5 = dup(r0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000680)={r1, r1, 0xdd, 0xd1, &(0x7f0000000580)="cae7877bc32a60f472fa5cf9dfb83fefd040ea28b718c17f08686f4cd63d56b600e26e43014f79fff860aad157293c9b6a2632b0a74b4bcb0c89dfd5b2949ea3ec43ffd75417ee5806c7b77709a26adcd88a3447844a4e72edbe6f1e300e0c6d114c322b30a492a84732c606740b076cc1b379e28ac4a54978a713bb691185f5d5a25e3de7ed48f8a5252f8f769a291b9b69fb5b4d635cf0b09001c1579da8ad40ff1328b6fc528519d0873fc07f4cd5c2084799e719813ab4dd6bd8db334fb370aade20e014b2e49b230f5d87e2e05ca4", 0x9, 0x3, 0x4, 0x0, 0x800, 0x3, 0x3, 'syz0\x00'}) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000740)={0x0, 0x0, 0x8, 0x0, '\x00', [{0xe, 0x200, 0x9, 0x5, 0x9, 0xfffffffeffffffff}, {0x5, 0x52a, 0x0, 0x3, 0x6}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000740)={0x0, 0x0, 0x8, 0x0, '\x00', [{0xe, 0x200, 0x9, 0x5, 0x9, 0xfffffffeffffffff}, {0x5, 0x52a, 0x0, 0x3, 0x6}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000a00)={0x800, 0x2}) (async) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000a00)={0x800, 0x2}) accept$nfc_llcp(r5, &(0x7f0000000a40), &(0x7f0000000ac0)=0x60) (async) r6 = accept$nfc_llcp(r5, &(0x7f0000000a40), &(0x7f0000000ac0)=0x60) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000b00), &(0x7f0000000b40)=0x10) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) (async) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) shutdown(r0, 0x1) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c40), r2) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x50, r7, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0xc800}, 0x48000) r8 = gettid() ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000dc0)={'\x00', 0x2, 0x9, 0xff, 0x309, 0xd, 0xffffffffffffffff}) sendmsg$nl_generic(r2, &(0x7f0000001300)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000e40)={0x444, 0x41, 0x100, 0x70bd28, 0x25dfdbfc, {0x8}, [@generic="dd59c75777ced6b7cd2cc6e71336a5786d2121da83912fd82693660eec59fd2d098581f91847b412b36b31a4775b6d1c02c1d1d1ec3ca2eaa97c002ea5e0ad5ab00af3adc2cd63c1e40a1e65ca3847a8a270fa7c2665eedf9dbb705a443df31ca176bf22f8f775051369f466773c9d71cf1b510f0cc2b97f96d4c77c68b034ef980e5dc04086e39697bd519afad82b7e9640d66d9d56a37ddb01d9caf54baffd011658112a05f33fdb7429571503dda5441ac90fec2d8efab3c4faba6cae2935acaa082249d31c9d35f9c645d4a77db4eff367f9e97f", @typed={0x4, 0xd3}, @nested={0x23c, 0x10a, 0x0, 0x1, [@generic="40153002c15bf110f20b26bdc0677eb88cb0871ca55985739293a72717a0a6282efd097137d278a22c8d3c3a5a4a25663321ae1d08cc788583f853f813e558dc369a78bbd638416830dd07270e1aaed75f837c9033777fa7ba36a3", @generic="36e11e590a6bb91b871e5cd07dcdecef68e60eb08b5b868b8ae402d6722d34aa0e7669de5e8cbfdfd4add70c9d40f49b7200a130399a081330b90d029e8658846758118aa6d9b3f800f68d6959d3960d8a2ddf3b0bb8ea4c17bb6f3fa2b20a806409aa2cc5c28bcfe38b2e30fbe301dc2354f6e9a4db23cbbd9c009c3355332b9c29718f41a2837a295ecd3247d3aa907c8b4968079f14d59217ca531be8d89d21619b82d3dcb1e0f2884bed30689c0db9398c0c63ab4a9084c8bb01326d12106de26dadf3704dcc149b89372d6e", @typed={0x8, 0xa4, 0x0, 0x0, @fd=r2}, @typed={0x14, 0xd6, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0xd1, 0x0, 0x0, @pid=r8}, @typed={0x4, 0x5d}, @typed={0x8, 0x11, 0x0, 0x0, @pid=r9}, @generic="a52621dbc8cd24bd3791e24d8095a7388073ac3fa505f66695a26191637c05e48a22c3aa8732cfc7851a12e6b0682d1fff2826bd61b7065e4292b093f195486697d69e38b9adadd9cff0bc67b1a30334464152d4029bf9903a454348c2766ee09648bc17ea8ff6c68cea020d62cf0cd4eb1dbb3a57e8b3c4b6af30947230d89237263e8c7ba25c056ff0d64c0c2a119f3a7b0819fb0d938d4ff70f87a8207676bacb39386a01626642fe4d3962064e01c5093bda8eb2e608aab9141541217e3efe99cb8fabb5063ce903e434169e09d6b1833eea2e701ecdde833ac31ee5a2"]}, @nested={0xb9, 0xbb, 0x0, 0x1, [@nested={0x4, 0x2e}, @typed={0xa, 0x66, 0x0, 0x0, @str='wlan1\x00'}, @typed={0x8, 0xfd, 0x0, 0x0, @ipv4=@broadcast}, @generic="8bb9265ae39c0b3fb9591dd59bd3f3734d70dfa0ff79c55b6f9401035e68f17ad4352d0b83bf85109f500a3bc32d8a5506f96c6ff0aa5a4d1fd2934753e6fbdf49657f6f38a8b37cea97ad8604116a9648bea6771c5cf8e144e5f6cba10b33712ea62c317940b649d040aaa2b76468a805a35e87c89a48c7fbe88d19b12f5988d90e4e7f0de56278223a3d93adacf4b494265eb9de1ed3bfcb88db8d89"]}, @generic="71af335799d6718f75b7cd0df92ba4d4be88b2a29b8cc6628b92aa9b5f6bf772f2b9b2840851ff38c86a838a6a1b7bfa6423cd7320347dd338ef13bf17614278377c2a9489f89dcd828cf7f8fb3ec89b2d6b787777797cbe463386dd0d"]}, 0x444}, 0x1, 0x0, 0x0, 0x44}, 0x4040) fstatfs(r2, &(0x7f0000001340)=""/69) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFPFLAGS(r10, 0x8935, &(0x7f0000001400)={'wg1\x00'}) (async) ioctl$sock_inet_SIOCGIFPFLAGS(r10, 0x8935, &(0x7f0000001400)={'wg1\x00'}) 2m48.241011634s ago: executing program 32 (id=421): ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000000)=@generic={0x1, 0xf, 0x6}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14, &(0x7f0000000140)={&(0x7f0000000080)="7666daa359005e323c880df13fa6dc0883329738717f2e5ff776013d71a11aca12a453f34ce31131bef5bb98fe03f22f734d6d36e5eeb8deebebc402bf0491e9c6645660f87babe9b1f662f27d4ff3a153084e379d138f503351e555e07b715d1f7c2ae35b2881a6b56a29d9fcafeb28716c6fd1f55d6b3f771261d3012e974d8929de580de4fa3e42", 0x89}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000001c0)={'team0\x00', {0x2, 0x0, @remote}}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)='wlan1\x00'}) (async) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)='wlan1\x00'}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000280)=@generic={0x0, 0x401, 0x9}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000002c0)=@generic={0x1, 0x5, 0x5}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004014}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r3, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x1000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r3, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x1000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) r5 = dup(r0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000680)={r1, r1, 0xdd, 0xd1, &(0x7f0000000580)="cae7877bc32a60f472fa5cf9dfb83fefd040ea28b718c17f08686f4cd63d56b600e26e43014f79fff860aad157293c9b6a2632b0a74b4bcb0c89dfd5b2949ea3ec43ffd75417ee5806c7b77709a26adcd88a3447844a4e72edbe6f1e300e0c6d114c322b30a492a84732c606740b076cc1b379e28ac4a54978a713bb691185f5d5a25e3de7ed48f8a5252f8f769a291b9b69fb5b4d635cf0b09001c1579da8ad40ff1328b6fc528519d0873fc07f4cd5c2084799e719813ab4dd6bd8db334fb370aade20e014b2e49b230f5d87e2e05ca4", 0x9, 0x3, 0x4, 0x0, 0x800, 0x3, 0x3, 'syz0\x00'}) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000740)={0x0, 0x0, 0x8, 0x0, '\x00', [{0xe, 0x200, 0x9, 0x5, 0x9, 0xfffffffeffffffff}, {0x5, 0x52a, 0x0, 0x3, 0x6}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000740)={0x0, 0x0, 0x8, 0x0, '\x00', [{0xe, 0x200, 0x9, 0x5, 0x9, 0xfffffffeffffffff}, {0x5, 0x52a, 0x0, 0x3, 0x6}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000a00)={0x800, 0x2}) (async) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000a00)={0x800, 0x2}) accept$nfc_llcp(r5, &(0x7f0000000a40), &(0x7f0000000ac0)=0x60) (async) r6 = accept$nfc_llcp(r5, &(0x7f0000000a40), &(0x7f0000000ac0)=0x60) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000b00), &(0x7f0000000b40)=0x10) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) (async) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) shutdown(r0, 0x1) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c40), r2) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x50, r7, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0xc800}, 0x48000) r8 = gettid() ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000dc0)={'\x00', 0x2, 0x9, 0xff, 0x309, 0xd, 0xffffffffffffffff}) sendmsg$nl_generic(r2, &(0x7f0000001300)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000e40)={0x444, 0x41, 0x100, 0x70bd28, 0x25dfdbfc, {0x8}, [@generic="dd59c75777ced6b7cd2cc6e71336a5786d2121da83912fd82693660eec59fd2d098581f91847b412b36b31a4775b6d1c02c1d1d1ec3ca2eaa97c002ea5e0ad5ab00af3adc2cd63c1e40a1e65ca3847a8a270fa7c2665eedf9dbb705a443df31ca176bf22f8f775051369f466773c9d71cf1b510f0cc2b97f96d4c77c68b034ef980e5dc04086e39697bd519afad82b7e9640d66d9d56a37ddb01d9caf54baffd011658112a05f33fdb7429571503dda5441ac90fec2d8efab3c4faba6cae2935acaa082249d31c9d35f9c645d4a77db4eff367f9e97f", @typed={0x4, 0xd3}, @nested={0x23c, 0x10a, 0x0, 0x1, [@generic="40153002c15bf110f20b26bdc0677eb88cb0871ca55985739293a72717a0a6282efd097137d278a22c8d3c3a5a4a25663321ae1d08cc788583f853f813e558dc369a78bbd638416830dd07270e1aaed75f837c9033777fa7ba36a3", @generic="36e11e590a6bb91b871e5cd07dcdecef68e60eb08b5b868b8ae402d6722d34aa0e7669de5e8cbfdfd4add70c9d40f49b7200a130399a081330b90d029e8658846758118aa6d9b3f800f68d6959d3960d8a2ddf3b0bb8ea4c17bb6f3fa2b20a806409aa2cc5c28bcfe38b2e30fbe301dc2354f6e9a4db23cbbd9c009c3355332b9c29718f41a2837a295ecd3247d3aa907c8b4968079f14d59217ca531be8d89d21619b82d3dcb1e0f2884bed30689c0db9398c0c63ab4a9084c8bb01326d12106de26dadf3704dcc149b89372d6e", @typed={0x8, 0xa4, 0x0, 0x0, @fd=r2}, @typed={0x14, 0xd6, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0xd1, 0x0, 0x0, @pid=r8}, @typed={0x4, 0x5d}, @typed={0x8, 0x11, 0x0, 0x0, @pid=r9}, @generic="a52621dbc8cd24bd3791e24d8095a7388073ac3fa505f66695a26191637c05e48a22c3aa8732cfc7851a12e6b0682d1fff2826bd61b7065e4292b093f195486697d69e38b9adadd9cff0bc67b1a30334464152d4029bf9903a454348c2766ee09648bc17ea8ff6c68cea020d62cf0cd4eb1dbb3a57e8b3c4b6af30947230d89237263e8c7ba25c056ff0d64c0c2a119f3a7b0819fb0d938d4ff70f87a8207676bacb39386a01626642fe4d3962064e01c5093bda8eb2e608aab9141541217e3efe99cb8fabb5063ce903e434169e09d6b1833eea2e701ecdde833ac31ee5a2"]}, @nested={0xb9, 0xbb, 0x0, 0x1, [@nested={0x4, 0x2e}, @typed={0xa, 0x66, 0x0, 0x0, @str='wlan1\x00'}, @typed={0x8, 0xfd, 0x0, 0x0, @ipv4=@broadcast}, @generic="8bb9265ae39c0b3fb9591dd59bd3f3734d70dfa0ff79c55b6f9401035e68f17ad4352d0b83bf85109f500a3bc32d8a5506f96c6ff0aa5a4d1fd2934753e6fbdf49657f6f38a8b37cea97ad8604116a9648bea6771c5cf8e144e5f6cba10b33712ea62c317940b649d040aaa2b76468a805a35e87c89a48c7fbe88d19b12f5988d90e4e7f0de56278223a3d93adacf4b494265eb9de1ed3bfcb88db8d89"]}, @generic="71af335799d6718f75b7cd0df92ba4d4be88b2a29b8cc6628b92aa9b5f6bf772f2b9b2840851ff38c86a838a6a1b7bfa6423cd7320347dd338ef13bf17614278377c2a9489f89dcd828cf7f8fb3ec89b2d6b787777797cbe463386dd0d"]}, 0x444}, 0x1, 0x0, 0x0, 0x44}, 0x4040) fstatfs(r2, &(0x7f0000001340)=""/69) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFPFLAGS(r10, 0x8935, &(0x7f0000001400)={'wg1\x00'}) (async) ioctl$sock_inet_SIOCGIFPFLAGS(r10, 0x8935, &(0x7f0000001400)={'wg1\x00'}) 1m5.579323415s ago: executing program 4 (id=2364): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f00000001c0)={0xddb, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) bind$inet(r2, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000000)=0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m5.568203896s ago: executing program 4 (id=2365): openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 32) r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0xc00, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async, rerun: 32) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x38, 0x12) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x11) (async, rerun: 64) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x200000, 0xc1) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) (async, rerun: 32) write$cgroup_freezer_state(r5, &(0x7f0000000100)='FROZEN\x00', 0x7) (rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) 1m5.506082587s ago: executing program 4 (id=2366): socket$netlink(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000100)={'wlan1\x00'}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x400}], 0x1, 0x0, 0x0, 0x0) clock_nanosleep(0xa, 0x1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@flat=@weak_binder, @flat=@weak_binder={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x1c}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m4.686275853s ago: executing program 4 (id=2376): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async, rerun: 32) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (rerun: 32) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x717d, 0x3, 0xbe14, 0x9c, 0x0, "e88e76d49ad96dc88b09cc45015aeeb796f418"}) (async) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=ANY=[@ANYBLOB="1c0000001e00210000000000000000000a0000000540"], 0x1c}, 0x1, 0x0, 0x0, 0x48810}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_INIT(r4, &(0x7f0000000480)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10000200, 0x0, 0x0, 0x2, 0x20000006, 0x0, 0x0, 0x4, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) (async) fcntl$lock(r6, 0x5, &(0x7f0000000200)={0x1}) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async, rerun: 64) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async, rerun: 64) sendmmsg(r8, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x8003f, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1f, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r3, 0xffffb000) 1m4.649873383s ago: executing program 4 (id=2377): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) (async) unshare(0x62040200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) (async) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f000000e400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x204a) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0xffffffff, 0x240009, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009985f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4d6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf40028b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa350448ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f582300", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r4, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006100)="d1f89c14e7f8640b43b1f1d1e00b2b0b3146d223d281c321953af4ade40d696d07f4b7d2ed1c1fd5691291056351901df48500519139568c88f49bb32801f1eb24b30efbab27313a3acab179fd6ce1f7150b0f0aae8cde4dd46b4f63cd60f647ea9bcf83f107e981a050f61f5d1bb5c7883f93269bba25e4122796c0f88ab27d913586d055f8c977ffcb05c85210f93cbad91499fedb2ab95e06bf009e54b422f66cef043560f4d77ae5c083cc67fcb0d3f10699aac8cceaf6d3b8f32e15555924edbc42b4ca3d2f4a92f5d30c18176c3abd17db4de2ef74472ffb637dd07460aeb7c882811c089217d88cbb5eec41d2be903e1c65cad2ad742f9ba8b512adab575f89d539492034ddfe4fd28205c8f27c52f0f631703d384634bfcad149ea9e842125062ac67006ca474be31f708b4f4f1e0c97a4eb2f26b671e172e251e8a6e9e1510bb74931aaf6b6ff84f8aefd63591f18f2ae8028985d78fcc5ed2d57bf595d3068e904387eeddd19bd359721a432bed0bff033cbca6acfddb6529fb11290bf1563b45034bd9b6c331091efef04303ca9942fcb64e56f3ff74d610e14c8f8a87e41582aebb272e5d6e945fdc7095bd181b93f13ddbdc18545f9cfc4db7f134c9ffa6add6727ab8755a06dca23d24a67658fda84321bb97fc475ace3b9912dad73f0ee6c8b2d6d58d7328ca63d1aeceb22a419fe4ec4c3b943051e9d276c559c33e6a45a97813bfcf80c7d79ebe04b1827878c4c8c2da2d598f9f3e444ae82f142716827dddcd94f8997d88a30be2a76432641125e28d5a0896b3e040a8b6805abc98da90844261468826b89f6cbac8d7b5eb6cd8a23f7c7ae9b99dfa6616f9dd10ac48e8c53a38ebfcee8c0ae1be1ee982515ce12a1ebf5d2d1902203007a9bd062c453845ce75f54dd07e3d8079e19b3b116dc51f7a07d005ba682da13b73e3854bb60059fb021b8f4b9430629d408b32ccd3678bf1dc149a3493c44b2a52a5572c128957e0db8a4a214848b64bea6733bb48fc17a4e42474e2b1f47b507d038bb87a3fc32e7bf471685a61f736a414772cc1825e9342c58768640c83486dbf058050dd6c8a9843c106d1a4efa5e5b36deae71448e55f4ef2721d2d210ce075bdc52c97bd6c097a9a4120a507f6c99cd9054579c250cd5b207684deadf75f2f8c54349a57500625be7577fd6c81ca72111935f577c74c2bd1e9419344e2a3563b5a7d6026722469a30a061d123b45f93027a01c7d38863589118d25e333c07f5c3eb85d4dde937d8f1421b72035f8733754ef4793acdc8d1362ef08ac1e9f0246bfb478647ada002f809a3e63433d031e6d5e4f86218ace6a6221103608705719c3106b4659c377f7e3b6ae1777075ea45a68df2004deb6ef742c5971c23d409278be94c5de68153d93d1a2378f1b1656786ec896b72de0da8259a6f181be8829f9cb7cb98ce0b169e734e4a240508952f6ce3ca984eef7e0cd549996147fe56a0bb1598f015ab955df145a51d783397366084e53455840d5688cb9b7d2cdf8abbfcdf850a7de4073eada567d6ca989611c4910e692e44677a857eec2b654f8dc66b2be192786dce3b9780f9806652bdef013304a43dba3f8d15e5105414f6d1fb2a57dea02211fa311b489088a9802e36d649ada97d72a216f54ca6da090a51c01f5638a04f364a3cbf24bb374f644fda38856a7e0f5c3c9cd7b00555d105daf57561379cf1d77bce66d12de44f202a866a43a7a05a6e0910a1f0ab5b1341d8ae992ae9d95fa2c876db1bcd3635d7851f03dde1eddae6dcf95b182edab72a0521c88c8c3a8c2ad3c6ec2cc44321ce1550d51476e95a18ae5fdab801ef4f5a7a56580261d850f392929061ae5808ba390b2f7d8fe7325df9c07c39faadeeb0ee1ed95db7ccf49c9b93fca83e06be745156d422c8b936d65b8e7e76d9eeb2bbf19c1f9a59b8ee6b55d594d4794a869b2d3b37b0b936866894f00e6a90c788c22e0fb87d0ac53ce75e519765647deee2862552c77ceb75d419627e0627067ba24571807cbfae0bd959fa95cb14c2812a1ce41f76d2ad620c55df55f473e56cb219f7b13bed8cc4a98dddfda9d3b9b5650754f73c34bf00496993a1c4056aeb44e4160c3e2090d733604b2b13f40ae346b726a31365b7a230d8f66665dcb726594280678a258f8ddddfe69d424d62abe910db05c0efa5e773d0f6d8ef8c4c49926b46568a7a1321d996eacabb2f716539a020e34a02afc3bfead458287dd2050000000000000068853637dba0b2eb5e5318750b63c829ab0145c02d6bc05aef4113ee0ea0ba97c44d74cedcc89adff648eb5d7fe932a7a76c772b1e2e36c148dd3be951cfa0cfe11bc58635b38708fa1ff88f949eb15f4a4a3de71c33e2915c799d8204d7d1f9cf7c13c608e6ddf29e12b409028ee5edf37353df7982f67a120ff1871001094b1a3148ed5f4f75d9372aa21b2bb6e02b470336a2c20efee8af866032acd6dc56d1fa7a84dc314cafea1a7bba5fbae89e037a4a5597d2eefd153406d67ddbb3b4eeed6d981b229c2c1b76347b05d20835ecc979b697a2981f6785df853d3d5ce07c624136c805d4dc6c7419d68afe2ad4822aea38da761742b33de8394bcd2462518b35c6ef265eb2a9b130e5a3d669b55d457f92500a7b69156475e001989d55547fc831edf2afe2290591e902858914af73ad4e87ddb8ea3a719f435fe1c2839a39fe088ccc863e7c82e96b66e1b6d32ddbdc42bf2f6076b9e93ed2ec4b6ba6fce5dd3a8f5b3aa105aecf72a5cc9108d02a0b923de2d490ad90aed3a45c46d4594948e7b3f3cc7d153f4b2837ca378fb4af215657f016fd9c66395b98357c1d12a655ce07268beccb35acb3f928c1522bea5df98a0337c751308bfb361e68f3775c75e020ac9570283119264d4f8916c143ccc28d8e0709df356de6b6f35fccde79a677606b5b4d846fdad7c271fc5c2ae5f5e2fbcd6fbf21508a2615ab8f0208e276164bce80fb886b648b4cb085c7922a829c2bccdd850cec329870c866f7923c2c1cd59d6c2653263f7aa1f13d84c82575a021793ef875954ce8737c98abee465e780ab64f1d23da92828e62908543850e5730099eb34f5e47dee740581f596413b8e2711bbfc9d25e4a35b57416a741a60ba650b52ae2189cdd125f64565544f9e75bd8c2cbd898ed2dbdd704ee40d1746715eab4155a51289cf7d89a19ab7a355609dff8111c94f6cdf94a94c667508d7201eab7e86569b8b08bca2291cf3fb166df68f6d6da05398e8a1c0c5c66ca3cee621727a77f19b92927569ba44709302c1102683f338150989d971ea6d0151b69865e540ad4e5a186ad9fc8ce57a56ad114487c5ad99c0beae0fd49927c52380de839cc952f8e41e167006573b4ffc39ebec8f9f9fb4168386a78fe52c00cf3c3be6dbcd4ab32ac7cb8fdd1bae70a5c3da6f555aa6c8e6bd7e668391bd5d87e39ee21f9035b0b14dd50b3c4e211794bfd7e8fbc48658044eab550f6b564d8f663c25ddb30233fb260e2d30bc9956f7293fd5532df2f74019f639c7313ca029280c513c2fc3c77dc4d0e7f5a9f273fda00349c28319743bc8f7eaeacc7f487bcf5866a55b2fa5b66e31964f090ac448a1ccd3b8cbc9735db5d7d1dd2f2bcdad1ee48b4f8a36688d8ddead1f166a5afb2efe12e943ce6ca41f1f45fe650536860881c28ff04a66ddce9cd19b4304c26e3238f114a1f4080999aaf6ff1f4b8b59ef5d54c10cd8a6598420949f1c0eff13259ba7da9f4c749b58f31f01627b780c2502cc6d1d82f68271e2bc945ddcb6784532e1aba414385096eeeb45afca0ddec570b16b476fbf7b4818275a05afe4beec9086e1c816ebf96608ed57a570c931577ca5b14c9359718b4b31b4789f291f5cb012f832e5763ba53521f58d3ee0a10930d3b4ea7747c5c751cfb476159287a9d371530e5d7cffa6ab09f049d2435960b0ad34f7890df22a3cfd6ce052b08409e67a1291f8459a59b988d7b97d2534f306d83656fd43313eebce1732837b6c22dc60a80d03c54b695b4efbf31381916c7da9644ef8e0f6739c98e7892ca89bf696715391c989c3bd53362e01b81d998e50e46fab088f9312465d200c034691b7e5dcb22ead3c3f3225f16a5588b2be09470e225290d8073dce5cd955d31e7acd452950505597f01c4b54a6f16f2e7d00ab182258f26e40bb70db783b2a10aae019f87708e1306e1957fcc081dac3659d603d4044c10b0a1fe61f4482e56d031d43fc355100a9dcf822db16d0895e554b439bd032e6103df725123da3fdd4a48b68863e6bb36e05343136e171d39d86168be30188bf1ebac4a1d748115167033149ac61bb4f8d4cad7f4c68c32de226b03fb42d24d5e37ba886fa357100644e64d869f6395e3d6d3768a30f53e2aca3688408807bd4818a2c5150f8ee770121a4a6402c7dc334a9ee5e876566d19867e45d4bdc73477ff7f543a23f38d5f0bf666219b0391e66457af4238c5bd9a05586333556f8972aca1def4507c4b073d1bc1c3051f0bf34f71673ccc1de9c69170c9fc5299ac733569cfde6a7bbb3cd60b601cfca16510bf7fbb26ffab3b674000844daf55fbf4ab48eade708cf7f5de901454acc8cc95c63fd2ee771bffaf19205e9a119b847931bcfb4c738e39701a3882cef4ff47b46b72ce26ac207a1ccaa253cd3ddae2b2eb61d5b9b3c8156928a169d7dbb2874b884c3b2097cb8ea92ce7fe70af90514c11887df33c4f7ec3d3ee6c327e7129b0188b0ca8c777451b17d8f489d547d711404bef72d1914f66a5676e9d716ede8c4282526419adb31d071d241db47a58bb55ee6ebcb67c82765a25e5e6fedc4c8d1d9b17e2b5bac5e0af3c63ea870ad8c5f9521390b660fc735d331e6eb326abde284256cdb381b4651d05f55807f4ad1b5b883bf6b55ee87285fad8de366f3248ae0b9c32bf85fc95d5bc19a716ac2a5f41e4e58d26bfdfa582be5d506f9929bfe7cea70184c81722ef7300f779d5d64c08a225a083d44ce75ced73f3a016f5047af67245bc8a81214024e905f383252cc0228085aa5fc184cbcb41db3eccede89480e0a1c1d1754cc3ffa53edc27c337ec86ae2f68c6225edb0027c1c5bf9aee1b94b62f6144e4631887272a36add32d908add308207559064cd61576f917db864845e5e89efcb27c80d259eb6fd5fca398da0c7e62fc423511bb8eb3969732c862de33448e95aa5e15d2028b84b3b8348a50abb39c5c10ac7fdc2034d1ceeae9870dc4486f48ac6aae573a775716ec380ed57665b9bf1c77f6869f720e428f8b94170b14c23786ff1cacf95a66ae631c70245bf264ce5078c3bddb4aaa7928eb6f1261d52e45ae5fde6f1b3bff90cd560c6c2f77ecfcf553db137051685c925be70def2be6c9bdd5825eac58d4c892a6d4ad5dcc078c6582ca140e5a75993e5ab7b487f31e5c601844f18f13039c099317f5e512eb9e054dcd8535106a9bd8977bf74254b68753b7f3a9b385d4a38ccaa17e029bd9ab4ff9b9b561b2a7e613ea05eb18a50fc231f32b79b9f32514469193a3d12269f58f3c932e501513e48e81774ad389275d9f00b4f8c677b8bb584b503201f83c7ad2e934e909f9ae1fc540f544dd2327fe1d8e3bb86984a252e2ffa88e2aed6d65a302d1883e51654fdb046d35270130fb9f8e4a4861d7278a07ee627fe272dcf99d294d7b1ce72f2f804cddfe4fa7aeb2c9543ef2665bf826c8ce0ca82dc7d4e57b7181b55a5d96ad83417b79376793235ed5a320a3ffac3a025aefa669450a6df20d830042034c0953836097c9461bc0d9c1446485692d1b9d5c991086f3f118a49bfe2a0888a5af8a868d880e31946dbd0c7ddcfcd27dcf5c62c9c5ff8fa9750d129f32e3c4f524eb3c31d5c9cb33fbcf52384a04a9f4faa216020e45be91181efeb7393d96b1f3ad8e9fadcffe49bec1bf36e70c2291475356ec5a416feb5d3b4f1331052271679d1186b338163682ac5b6bb79c64d6d0f8ddfec84d0d9870f45a64413f529c8dd93b358e66c9da2fd233e53b73ae2761f363ee69a38a0d7320a149c90c086e6a426abca5c461088747a2fb5006919ad7640aad79b1ec03cf6f49206f37382ad3105fcbd0e08d00815029d8cc3ca16472e58226f1def116bfab456c32a2a2323bb5a661eacb3b7c915d1eaa8c5aa8b1bf25c3a7bc9a2e047c499d8f2fbf2fe25606fc7f0ae5a539af68830b1955f82962f596e2ad0feb3e99b1982ffe3e553f102b4360b8e1d659575a8f713b8bb88d97dbcfd98f91c147a97e896646a47a43334569da8a01541b012063e0465c4122cb96b57484b0ab8c5f0c8f346c0766be69decf4e3ebef7f74f153ef8c6b6e9c5fe224e8f995f11c1867c5600cd7a345afacafec9076d4ccfca741fd41e445478a3b71a5f06b0d0cf596c755235408782a5e37abeb1f2dad79c83e59a1040c4b3b6a5a2acce9df0ebdb607c9c0549a4b16028595f7a9cd9da115dab0189f3d98b0dc2b8ddf6be4de2b38421a2071d91f14f8752c74df31fecb64de59dce09da2c3a1a2826446d982509baaa89b76379d8320bf3c1f76448e0ddc0889fe57ba756ab1403949cd2ca9ab520fa485576eca5acb471002a14a31e8d7f54c8c3edda8f416b0ae9d9fdfc445b54ed8fb34ed7c1d11b3c57a2c5ad92217ab2fdebafc195d09fee7a518e027ccf9d2e8de8cef1e0ad52144d82b65519495b8a5c314e85361adca8953dce587cf461a461dc9bbc0eb13a54144964930d80d8b4a015676f3efd10ccfd0ec5fe64deb93b5901b506581461bf2aaf04fa9f8118936c5e67e1cee60ccfc4f011ee2812eb9716af42b22c40d83c55d4e4c4838826cc34387a2085aa3e17219c78255ace7bb1fc30ec80676449084744c0887dc4e7696d25a544f3e4b365cc6ad800931d5787be99d678347ea4d6cdeab5662f6cbcb5fa80590e513c4ca96d73d378085026e0e7c71d968a670aefd48519e35beaeef9c67506db6f9b3edb62ef1b3b52b9c2db876b76101644e7dcf5a5056a8d916a0f69ea5bf096e7a4c2f8f1d0da29dbcef9d2ad1b82179ccd0ef95006b7a1d542a847e3e0f864d63434c15d6de4fecad18b788a867da5515e3d51871417bfd783d2dffd852953ea7113d3a61aac3c7c1a4efb449faa928456eb570e62d0ff9542a971b542d7c1fed9d633eb4a81499c105d0f73c5165badb54b0e83f8192d3d51d46ddd9908b04e9f57d5a4e6b65affee3799ae7cc51b4098f71e8ee947ffdeee4fd03095536376e1281ef8158fd1da4a39aebdad37fad75f6217bf45bfad16f2f1a80f5e8a3eea1141a56beb91319fe948bb44350a6e79959c140a5dad9955fb287aeba0a8a45d1fd8d692d30c96d01c9100e417082ae6edf62965fef7e190af60a99145925a307d1e11534d2a64484be3c6cd642432a2db66ba6d3ab1b7ea645edf4e54623d2ba0619bcc2a917cc2df8b0dbed096951947445ed5f08c626e1f9a5f566515bf106c48174f73587314b513962ed556fa7f16d8c6a953bcdda72f083a9b16357b3262c13cd500dfa09cc3d09240a7338514031768ea3053caa5166c8e4e090b3128464a88ccdc751d8ee1b3b1098997c9eaa2b3a13a47e43723a49e5d011dabb22c0d9605e48d5e26b90a47519536fd77c5260bc713e2b510fa6da698069f6c1df7a72462399d7dd288be19a0eab18adb072677268a306f19685c2d813564bab4ac90b7389c2fb87c0517e769577c081ced55572da71b40d18e4979b6b6290afcde4caa610166920549286dfa80197a10ff074b08d6b96c97110e36742fdbc5607f4c48ea9dd53301eecb5c25fce4eec9381b84e6b5af767c5bcca600149a3021c3f4aa237a0143363549a705c5768b5aa6ed51fd1ca9f0f9dd242f0df21f7c3eaf321fca97837d989ca101b5462d2dc248316c21339cb2b4e3451bb483390c09c958d474c6df2f2eac208ef704cbae5c9f6597c19ce48c4c9161c1b14622ed824b0e8669cbe6746051729fd2fcabb020190764a468c58ce369528bfca46cf8ec51ab69e711a53c4121476d2a5d2ceb19c332a5a86a52cabb246d2be739f361d97a6efc2c1d408b6f079ff5cbfdfa7ffb5da3af4611e42f876a44f8180ebadf8efe05645f3326fd1b1bb7f82753ee13e25c406469a6b103b9083ac06d590a48543240bca6e467eafc7069c97aa93a3a4ef61b6043383b6e990d174637d695893bd910f217c9c2465688eccd8a171cb5270fca2e002261f2e3e595f3484b67c0bbd7b50ea53a470e3935c0eafc6226521f0a15fc7cf5494b67fcfb705019a86a5972a9dd285bc50985947e42ca8519de25510db7ba6553419d4e368fe56c2a7acec8e77cd734f557a0f1b507e0869d2d5c9913c52fcd78b42b8f59ad3ae92226e292ea4439b5486629b739f4cca3d7f21cef79045427656fd1679dc5ab23686e13500dcb6284df60599ce81e2570d1cd5c7c2e0026640177bf1395fcf6e999acac08e3a993c3700ad891b1a68d5efc32a4b4f9cc8841e837e778c2500eb6cffc1b9970b2adf724839c7711ebbb2ee3e55f7aa97746d7538153589deafeef63eee6dfbd43fc72e0b763a0e4709da3deb26691303e99230a93c490029383b322099363ba3b2f76b4773c0c43907361b578cfb312cde55ea6de2f477c351ac82786d15b52f08a42385b2a3349116d34f8719264f79082d7c24165423a8e6764c53b922a0b3121cbb88976e6f53c455be77521bc1ad4997135ff24c520b2fa0002cbcc8eb8ee5cb33b1140dc811ee36816f47f23ff0b77d6680d597ec2fe77f5bfe1bb75c3eddb2356940c01e694da66d1c4fd78f7df5857111c01bb5e9954585e54086af287dc0ce861d921b378e9a2a9c9c5a37d9812595063643b1dae4afa57d884501ee0de2d7e39692ed5ecbd2ba1d9bf4e3f291cf0b1dfb809a2f915ae90bd5fbe76d5848752c298f34e69d8e95f6f3c8a8ef365d0927811b8a90c8f58836da07c058f71b01025af8c9829f761d71465d3d813e1e08a7d8f66dcb0f98daa19bb106fb9b25d49a35e8900e6de4502668cecbb9638c5b0d158317970e802be345ab3570f6a452e18da421fb4957429ec4b6c481b5393be9c7f1cea3d77ad1c935ce6cab01ed08f7f24e5b01d25105211d5e28b25d3a5fea30e3c4cd1289bc2606728f127574cdfed91d7c19d7381c3e532c92d7e532e74f3d24281cbf0f4e1908dd4f5cf145daeb21db6b34f2fe175aafd1c20224544c113f132cefe620bd99c5caff7b74d6acf8a1aae2fda5212ec64c80d647308439d5f90f6f481101599b539cd09a1bdfc510b6c9027c879f76bfd397dce9d3985ff01e62ee0455372960b68202412c6d5eb7b09c36f265b7b8b3822aa489dc169f8079e71dc96e0b75de2ade686761b067416e4915287dfdd6309946487a68115ee9d0bec73ffc63223e9463a30b819297d24824cb20724c6b524d58af1e03264e8e2b8dce59377c78dbd5ff5977782181aeaa8c2bd6d9f3d25ec566fa4a01eb5aeaeb6912acad55ca7336d28e305781bf128d6575dba16110d64c55ec9840f299e353fcc5628f248bd660f4dfa5f3a1bb7fbdac78ec727e87a134c98a98f405a4cd3773e79bd4f22bd3239a5fa8cd5806601e07241b25678f048b05bab6f8da56818f8dd9c97d001f4a7ea8beb3fa65ed7a951878bcef7e1da873e21ac6208cf0852c6cb297c10c84b74582bf59aaa11e7d8239997c9e7fd3c5bbee5b8466c17394fa61771aa10a3541f88419b16bb4fa36126745e99c292911d30ed0fa366dcd62c10879a6826609ab2b80b3a0c2de3d877805a564ce925916063c53d9698bb918eed2b49315fb83465a0db1a63a0528a887f5106dd054edbf381280989581c859a517573a6eb4946e0fcc61956fd5868fd37c788090fd7c3341028cf1bcb38ed595a4fd845ccd45558282c6e23d92d4268875f80ebad1c24f8d247595de2f8b83708b504f674447bc6fa1748b86fdfc971c9275baedda1348324c4dbde22d423744e2d537a4e28d95771b18302bc5d92f9e0ba6b1029a3e73761080a4e6e1b52a9ebe3538cb3e982586c23f0b0cfa78126198a0a496d96734880885e4aef7b35d90af287f9d5b18998fba69cf5a13b9153edc5f1c3cd0d181c1cecb4936a489f34682b056eaf5c57caea4a9ebd9fc7d842bc3850046f925dc430769863922ce5bea6709fa9bf7f21098097d7f47c74269b524c4194bceae0571fe968ebdda85a28fa5be7f794632189da179e248fde037a3ba3fd53845e42db45747caa6cebf574e9abb75e3b33c1096e40e0e845385d6f961c56fd1c71f92ae31a0c9088b2100b457cf2f8b33ac984fe79ceeb65fde350f9c6229433aa20d226aeb7677e0e7e8002e3e220fb74d4a1bc07ca43fa23fcf9cbabe7799b5b8daeb63b35923c4a92d2c636d36d58e719e6855b57445a26072d716aba7b653dfcdee115b3310b0c8af8649337597c1ac8bcee8b0533cb458d165b4ca4ee72c60a49f4a7061aab09449a318a6dc1d5b1a4f2a7f82c5af241e1f0cbe3e9fd5079e385ec86bc978ca82aaf1de5b470dcbb06b5f0360142857a0519583e3a77a6fbdadfff48de440bb5c3dcb2c3e6624800fa7898ab00242b7109809d58e5aa8a25705266d9bb04f165f843f1c61c23b41f010ad67f80aa8e455385cf3ff89073dc9434ce9be78993d6c73a8adf4db6b540e7a9f60d8dbcf3133a8f5c5c59f8378f2e5aad07f31707fb9834c66d6d0ded8a8b2d984ff5b6bfe70bb6479aecf208beb8f4da7b23957ce77d574993e1a44de0b3a5cb245f0ebf8ea32a22472270798defec3deeb94a4d025d1fe276612ebfe0f4e6e639de1300d47e542fb032150ab0aded71ba693817feb9cb43beb6f3074c2d7bfb77b9b2783e0335449c9a9775ccf9060ab2468a6644ebddd41f70add6d2d24fb9dd377c4f0dce3439283f22075ff3973e4e70e0bdcb53001be03800392084d6768c3e8f7fad09b192a497a36f602d07655d3e6a7ccab561ab92c79506e1e06aad05975accc9b8b48c41da8bc611d331717ee312d77403f9f66ee9a81fa4e624cca690540dca722986dc740a919597f7836ee95b554d3c34db3443ee5b6908f8623b2c82f32b65c3e8c20ee92825d9c82745bb5368ddda47036390910e26470b96cfd7c4e7b0df89f897153fd5ab4302de65fcda1f48206346d6051a94d8e0c32b959d914c218f54813811d13d99ef6259f54c0e635c04f875772b38524e94fae3a73109f60d0b00c96c1809f37e8fb37e61620690b07d726d388e9ae5dbc3a1c3557d1e4288da0622d77081ab4cd00ce22243824c363ad1be5cb0ceaad6336a797d8ca6d988c4373b3c00667d651452d50f81a830ac6ebb71559590181eea67dce1599d10000000000000000736dcc7c36782c1788cdc8d5c3820d68093ea84d56daaeaac19c19724ed7d3ebc1b8c1e3092839314dc6eddd99dc0eede13dbcb7fd22d401df8eb7f679a04f785006d3b4c4012bf78b7e43b1b355a9f6d04ca0e86c32d44f73fa514d1e2b14746400", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0xa, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) syz_fuse_handle_req(r2, &(0x7f0000003300)="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", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r6, 0x8982, &(0x7f0000000080)) (async) sendmsg(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008001e00fff3c00e", 0x24}], 0x1}, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xff08, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$packet(r10, 0x0, &(0x7f0000000640)) (async) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000940)={0xa4, 0x0, &(0x7f00000003c0)=[@acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/171, 0xab, 0x2, 0x34}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}}, @enter_looper, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000380)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 1m4.462112817s ago: executing program 4 (id=2378): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) sync() sync() sync() sync() sync() ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x28, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x3}, @increfs_done={0x40106308, 0x1}, @enter_looper], 0x50, 0x0, &(0x7f0000001d40)="1d488055d3f1688c4e797b10f650c33bb295362f0d05fd380896aba267b2b8cad21dae8af42636cd1ca4f92ffd194cd6519e07c189705bbc9b9fc2fd1ac553684decb13566191e525ee138cbdd4dc3ad"}) 1m4.435466367s ago: executing program 33 (id=2378): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) sync() sync() sync() sync() sync() ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x28, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x3}, @increfs_done={0x40106308, 0x1}, @enter_looper], 0x50, 0x0, &(0x7f0000001d40)="1d488055d3f1688c4e797b10f650c33bb295362f0d05fd380896aba267b2b8cad21dae8af42636cd1ca4f92ffd194cd6519e07c189705bbc9b9fc2fd1ac553684decb13566191e525ee138cbdd4dc3ad"}) 1m1.047750834s ago: executing program 0 (id=2399): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x2802, 0x0) r2 = socket(0x10, 0x803, 0x0) recvmsg(r2, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0}, 0x142) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f00000046c0)='ns/ipc\x00') r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000180)=0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000140)=@filename='./cgroup\x00', r5, &(0x7f00000001c0)) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) pread64(r0, &(0x7f0000000240)=""/4088, 0xff8, 0x3343) read$FUSE(r0, &(0x7f0000002680)={0x2020}, 0x2020) 1m0.174555581s ago: executing program 0 (id=2409): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x10000000007}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1m0.121077783s ago: executing program 0 (id=2410): r0 = socket(0x28, 0x5, 0x75ed) r1 = dup(r0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x5) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fallocate(r2, 0x20, 0x6, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r4 = dup2(r3, r2) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f00000000c0)={[0x5, 0xc00000, 0x4, 0x4, 0x0, 0x4, 0x400, 0x4, 0x40, 0x9, 0x5, 0x6, 0x697, 0x0, 0xfffffff8, 0x1000, 0x401, 0x9, 0x5, 0x89c, 0x4, 0x80000000, 0xffff0001, 0x168, 0x1, 0x8001, 0x8, 0x8001, 0x1, 0x8, 0x67, 0x8, 0x7, 0x8, 0x8000, 0x8, 0x80000000, 0x3ff, 0x3, 0x5, 0xfe6c, 0x9b, 0x1, 0x4, 0x8, 0x3ff, 0xfffffffa, 0xc1, 0x1, 0x4, 0x9, 0x3, 0xfffffff9, 0x1905d0f8, 0x1, 0x83, 0x8000, 0x7, 0x8, 0x915, 0x8, 0xdef4, 0x8, 0x9, 0x8, 0x5, 0x7, 0x1, 0xfff, 0x0, 0x7f, 0x5, 0x9, 0x80000001, 0x1, 0x5, 0x2, 0x4c, 0x81, 0x871, 0x3, 0x7, 0x8c5, 0xbd04, 0x4b7f, 0x9, 0xb, 0x1, 0xfffffff9, 0x6afb, 0x7, 0x200, 0x9, 0x7fff, 0x100, 0x5d, 0xfffffe00, 0x3, 0x1, 0x2f4, 0x10001, 0x6, 0x18ea, 0x1, 0x40, 0x1, 0x7, 0x7ff, 0x2, 0x6b, 0xd7, 0x6, 0x2, 0x4, 0x5, 0x8000, 0x200, 0x31, 0xfffffffa, 0x3, 0x4, 0x7, 0x7, 0x101, 0x100, 0x8, 0x4, 0x9, 0xe94, 0x100, 0x9, 0x0, 0x10, 0x3, 0x72e5, 0x4, 0x5e, 0x6, 0x5d, 0x1, 0x7, 0x1, 0x7ff, 0x0, 0xfffff000, 0x44ca, 0x4, 0x3, 0xfffffff7, 0x9, 0x0, 0x1f, 0x4, 0xd, 0x1, 0x400, 0x40, 0x4, 0xfffffffa, 0x730e, 0x1, 0x8, 0xf, 0x80000000, 0x7, 0xffff, 0x5, 0x2, 0xab, 0x0, 0x8, 0x6, 0x7, 0x7, 0x6, 0x4, 0x5, 0x3, 0xc26, 0xa3, 0x1, 0x8, 0x4, 0x2, 0x4, 0x0, 0x4, 0x0, 0x4, 0x80, 0x6, 0xd, 0xf, 0x73b, 0x767, 0x10, 0x77a81303, 0x39, 0x6, 0x1, 0x40, 0xffffff7f, 0x1, 0xd5c4, 0x90000000, 0x9, 0x852, 0x7fff, 0xb0, 0x400, 0x62, 0xffffff9b, 0x7, 0xffffff7e, 0x9, 0x800, 0x9, 0x5, 0x2, 0x8, 0xfffff000, 0x8, 0x2, 0x7, 0x56bc5bee, 0x386, 0x935c, 0x9, 0xee1, 0x3ed, 0x9, 0x6, 0xff, 0x18, 0x0, 0x0, 0x3, 0x2ec, 0x8, 0xffffffff, 0x9161, 0xe5, 0xfffffffb, 0xffffff10, 0x0, 0x8, 0x6b, 0x401, 0xa, 0x9, 0x6, 0x1, 0x3ff, 0x8, 0x5, 0x1, 0x401, 0xd, 0x8, 0x0, 0x0, 0x877, 0x2, 0xca, 0x4, 0x1, 0x81, 0x72, 0x4, 0xdf7, 0x9, 0x8, 0xfffffff8, 0x400, 0x7, 0x0, 0x7, 0x30, 0x7f, 0x0, 0x525, 0x1, 0xfb6f, 0x1, 0xfffffffc, 0x8, 0x0, 0x9, 0x1, 0x3, 0x420a, 0x7, 0x3cdc, 0x77, 0x1, 0x2, 0x6, 0x7, 0x0, 0x0, 0x9, 0x4, 0x1, 0x401, 0xc, 0xd50, 0x3, 0x0, 0x80000000, 0x1, 0xfffffff3, 0x1ff, 0x0, 0x7, 0x8, 0x10000, 0x9, 0x5, 0xb, 0x3, 0x7fff, 0x33e, 0x2, 0x2, 0x7, 0x54, 0x7dd, 0x5, 0x4, 0xb, 0x8, 0x8, 0xfffff785, 0x2, 0x9, 0x3, 0xe, 0x5, 0x7, 0x7, 0x2, 0x0, 0x0, 0x7a7c1ea4, 0x1, 0x5, 0x7, 0x0, 0xfffffffe, 0x400, 0x0, 0xa, 0x7fffffff, 0x9, 0x27ff, 0x3, 0x3, 0x1000, 0x7ff, 0x3, 0xca98, 0x400, 0x5, 0x80000000, 0x9, 0x4cd4, 0x2, 0x1, 0x2a30, 0x9, 0x8, 0x3ff, 0x7, 0x3, 0x800, 0x3, 0x9, 0x40, 0x4, 0xd9, 0x0, 0x7, 0x4f18, 0x5, 0x40, 0x5, 0x3785, 0x2, 0x4, 0xfffffe61, 0x2, 0x5, 0x2015d8a6, 0x4, 0x6, 0x7, 0x46bc, 0xffff7fff, 0x3, 0x6, 0x2, 0x9, 0x1, 0xfffffffd, 0x7, 0x6, 0x200, 0xf, 0xffffffff, 0x0, 0x0, 0x18fd, 0x1, 0x6, 0x4, 0x6, 0x8001, 0xe, 0x8, 0xc, 0x51b6, 0xc, 0x100, 0x7, 0x5, 0xffff, 0x8, 0x3, 0x3, 0x5, 0x7, 0x2, 0x83bc, 0x5, 0x4, 0x5, 0x4, 0x4, 0xbb, 0x6c, 0xa, 0x36, 0x9, 0x4, 0x4, 0xa59f, 0x3, 0xf, 0x4, 0x401, 0x7fffffff, 0x4, 0x7ca8, 0x6, 0x4, 0x1, 0x10001, 0x64a, 0x3, 0xffffffff, 0xd79b, 0x1ff, 0xc5, 0x80000000, 0x40, 0x2, 0x30bc, 0x1000000, 0x5c, 0xfff, 0xd, 0x74, 0xf, 0x1, 0x7, 0x5, 0x3, 0x40, 0x0, 0x168000, 0x2f, 0xdd, 0x9, 0x7, 0x4, 0x7, 0x6, 0x4, 0x6, 0xfb, 0xffffffff, 0x3, 0x2, 0x1, 0x3ff, 0x0, 0x5, 0x5, 0x1, 0x4, 0xa6, 0xe, 0x3, 0x5, 0x5, 0x29ff, 0x80000001, 0x5, 0x8, 0x960, 0x9, 0xfff, 0x8, 0x9, 0x3, 0x0, 0x800, 0x8, 0x1, 0xcc1, 0x4, 0x9, 0xb, 0x5, 0x4, 0x6, 0x80000001, 0x1, 0x10000, 0x800, 0xe, 0xb, 0x2, 0x1000, 0x1ff, 0xfffffffc, 0x7, 0x6, 0x6, 0x59, 0x8001, 0x6, 0x9, 0x4, 0x3c, 0x9, 0x7ff, 0x4, 0x7, 0x3, 0xb9, 0x9, 0x1, 0x6, 0x80000001, 0x9, 0x0, 0x0, 0x8, 0x4, 0x1df5d433, 0x5, 0x200, 0x0, 0x112, 0x7, 0x5, 0x0, 0x6, 0x6, 0x80000000, 0xf2, 0x2, 0x468, 0x8, 0x1, 0x80000000, 0x7f, 0xcb8, 0x3, 0x6, 0x7, 0x7, 0x2, 0x7, 0x7, 0x5, 0x2, 0x6, 0x1, 0x8, 0xfffffff9, 0x6, 0x8, 0x2, 0x1, 0x8001, 0x7, 0x8001, 0x2a, 0x1000, 0x2, 0x4, 0x81, 0x200, 0x4, 0x9, 0x0, 0x80, 0x1, 0xfffffff9, 0x7, 0x0, 0xfffffffc, 0x3ff, 0x2, 0x4, 0x6, 0x296, 0x8, 0x9, 0xfffffff9, 0x3, 0xfffffffe, 0x9, 0x10000, 0x1, 0xe, 0x5, 0x9b, 0x6, 0x229, 0x10001, 0x1, 0x9, 0x3, 0x0, 0x7f, 0xb46e, 0x101, 0x6, 0x7, 0x6, 0x40, 0x2, 0x9aa5, 0x7, 0xa, 0x3, 0x9, 0x3, 0x8001, 0xa, 0x8, 0x4, 0x5, 0x0, 0x5, 0x101c, 0x3, 0x40, 0x5a35, 0x9, 0x2, 0x59, 0x7f, 0x8, 0x0, 0xf, 0x4, 0x8, 0x7, 0x7, 0x5, 0x3, 0x7, 0xfffffffd, 0x0, 0x3, 0x3, 0x1, 0x6, 0x7ff, 0x8, 0x3, 0x6a11e7cd, 0x0, 0xa, 0x7fffffff, 0x7, 0x2, 0x3ff, 0x4, 0x6, 0x322, 0x1, 0x3d, 0x200, 0xd0bd, 0x42, 0x5, 0x42d, 0x0, 0x9, 0x3ff, 0x2, 0x5, 0x2, 0x7997, 0xff, 0x2, 0x6, 0x6, 0x33, 0x232e, 0x1, 0x8001, 0x0, 0x2, 0xf, 0xcf, 0x1b3, 0xd, 0xfd, 0xcda, 0x5, 0x8c, 0x4, 0x1, 0x8001, 0x9, 0xdf, 0xffffff94, 0x9, 0xe, 0x36eb, 0xfffff000, 0x0, 0x100, 0x1000, 0x6, 0x8, 0x4, 0x1, 0x96, 0x1, 0x8, 0x82, 0x9, 0x1fff, 0x1, 0xe, 0x287a, 0x4, 0x6, 0x1, 0xffff7fff, 0x8d42, 0x2, 0x3, 0xfffffff8, 0x7, 0x0, 0xfffffffa, 0x4, 0x7fff, 0x8, 0x2, 0x10000, 0x4, 0x905, 0x4, 0xd4, 0x9, 0x6, 0xcd8, 0xc, 0x4, 0x3, 0x80000001, 0x0, 0x24, 0x200000, 0x3, 0x3, 0x8, 0x0, 0x5, 0x7, 0x1000, 0x4, 0x400, 0x2, 0x8000, 0xb, 0x4, 0x1ff, 0x5, 0x80000001, 0x3, 0xf, 0x7b, 0x0, 0x1, 0xa9, 0x9, 0x5, 0x6, 0x9, 0x10, 0xac, 0x2, 0x4, 0x3e, 0x6, 0x0, 0x80000001, 0x4, 0x1, 0x58, 0x8, 0x3, 0x1fe3, 0x81, 0x7ff, 0x0, 0x4, 0x2, 0x1, 0x7, 0x4, 0x6, 0xdb, 0x1, 0xee, 0x7, 0x3ff, 0x2, 0xfffff61e, 0x0, 0x100, 0x0, 0x1, 0x40, 0x5, 0x1, 0xd359, 0xd326, 0x9, 0xe70, 0xfffffffa, 0x7d, 0x6, 0xbb9, 0x4e, 0x3, 0x633b, 0x8, 0x4, 0x7, 0x1000, 0xd, 0x6, 0x7, 0xfffffffa, 0xfffffff7, 0x5, 0x3, 0xc689, 0x401, 0xffffffff, 0x2, 0x2, 0x3, 0xb, 0x0, 0x9, 0x100, 0x1, 0xba, 0xe6e, 0x6, 0x493, 0x2a, 0x4, 0x3, 0xffffffff, 0x80, 0x80000000, 0x2, 0xe, 0x3, 0x860, 0x10001, 0x7, 0x101, 0x29c8, 0x2, 0x3, 0x10000, 0xfffffff7, 0x1, 0x9, 0x4, 0x4, 0x2c1, 0x80, 0x10001, 0x3, 0x6, 0x25e, 0x1, 0x4, 0x20, 0x48000000, 0x5, 0x9, 0x1, 0x3, 0x6, 0x800, 0x6, 0x2, 0xff, 0xb8, 0xfffffff8, 0x5, 0x1, 0x8, 0x3, 0xfffffffb, 0x8, 0x10, 0x1, 0x1, 0x5, 0x1, 0x7, 0xff, 0x184, 0x401, 0x2, 0x7, 0x1, 0x6, 0x30, 0x4, 0x4, 0x5, 0xffff, 0x7, 0x81, 0x1, 0x100, 0x1, 0x9, 0x1, 0x7, 0xad, 0x4, 0x6, 0x8, 0x4, 0x0, 0xfff, 0x5, 0x5, 0x102, 0xfffffffa, 0x717de7d8, 0x9, 0x6ba, 0x5, 0xfffffff2, 0x6, 0x3, 0x7fffffff, 0x7, 0x2f43, 0x3, 0x800, 0x6, 0x8, 0xfffffff8, 0xd, 0x100, 0x5, 0xffffffc0, 0x100, 0x4095, 0x401, 0x5, 0x25155d8b, 0xfff, 0x0, 0x2, 0x3, 0x9, 0x26, 0x9, 0x9, 0x3, 0xa, 0x8, 0xff, 0x439, 0xff, 0x0, 0x400, 0x5, 0x2, 0x3, 0x2, 0x401, 0x0, 0xc0, 0xfffffc37, 0x80, 0x9, 0x8, 0x9, 0x5, 0xc5f, 0x7fffffff]}) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0xdd) pipe2$watch_queue(&(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) dup2(r2, r6) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000001180)={&(0x7f0000001100)=""/123, 0x7b}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f00000011c0)) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000001200)=0xd, 0x4) r7 = syz_usb_connect$cdc_ncm(0x3, 0xd4, &(0x7f0000001240)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x2, 0x1, 0x8, 0x40, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "d2"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x81, 0x7f, 0x6}, {0x6, 0x24, 0x1a, 0x6, 0x4}, [@mdlm_detail={0x51, 0x24, 0x13, 0x1, "42cd08dd96c9f1a73f4162b463e8209383d6c5312a30e9aaa5c9b73a8b0d2f6af830afc104f44203e7667d6bb81f2b822fcf1247f92f2ba42a622b935f18131c0d064e2d82b320e527838d39d9"}, @mbim={0xc, 0x24, 0x1b, 0x98, 0x25b, 0x7, 0x10, 0x4, 0x7}, @country_functional={0x8, 0x24, 0x7, 0xa, 0x1, [0x7fff]}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x4, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xfe, 0xb, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x3bf, 0xe, 0x34, 0x9}}}}}}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x300, 0x0, 0x9, 0x4, 0x20}, 0x5b, &(0x7f0000001380)={0x5, 0xf, 0x5b, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x8, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0xfd, 0x4, 0xb}, @generic={0x42, 0x10, 0xa, "23e70f7af49651c16a384f288664444a7f40720a6c953aac80f9a280e490909a84032dca11a8922a54f87c57d6b55c41fd91f5cbcc93d444e0f969c80821df"}]}, 0x1, [{0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0xf0ff}}]}) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000001540)={0x14, &(0x7f0000001480)={0x40, 0x0, 0x4d, {0x4d, 0x25, "264bfcee72ed69c472a0e11c273f20eb958c3ea4fb90dd93a064b678ebfae98f5b968f7254aaf08c7a908f198f0322b8371d379c83513a7da63d2b449f41c397e591c6d62d6599a2805493"}}, &(0x7f0000001500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000017c0)={0x44, &(0x7f0000001580)={0x20, 0x14, 0x5c, "18017de015d3286bf52b639e963ce316d4c2a12ab279bfccb0c4990b7de90c5b8ea0027d57e3b97a8f7a56b29cf88de6817b349dc5be2da8e0c7be01f109de11a145ebb487e52c1d96833a8d267a646b86c581933ce3f8217f586191"}, &(0x7f0000001600)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001640)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000001680)={0x20, 0x80, 0x1c, {0x7, 0x7, 0xfffffffd, 0x0, 0x330, 0x0, 0x0, 0x6, 0x0, 0x4, 0x12ea, 0x3}}, &(0x7f00000016c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000001700)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001740)={0x20, 0x87, 0x2, 0x323}, &(0x7f0000001780)={0x20, 0x89, 0x2, 0x1}}) fcntl$getflags(r5, 0x3) ioctl$int_in(r2, 0x5421, &(0x7f0000001840)=0x3) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, r9, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x20000000) r10 = accept4$tipc(r3, &(0x7f00000019c0)=@name, &(0x7f0000001a00)=0x10, 0x800) recvfrom(r10, &(0x7f0000001a40)=""/109, 0x6d, 0x140, 0x0, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001ac0), 0x80840, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r11, 0x40049366, &(0x7f0000001b00)) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) fcntl$setsig(r11, 0xa, 0x1b) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000001b40)={'pimreg1\x00'}) 58.71730997s ago: executing program 0 (id=2437): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd802d2d07770c6e1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfa, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x34}}, 0x4) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) close_range(r0, 0xffffffffffffffff, 0x0) 58.70262297s ago: executing program 0 (id=2438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f0000000380)=@ethtool_perm_addr={0x20, 0x6, "8d068ad2c2d1"}}) (rerun: 64) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x11c, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@rand_addr=0x64010102, 0xfffe, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@algo_comp={0xcb, 0x3, {{'lzjh\x00'}, 0x418, "ce645b8e0c7c90672eb66624d7996af69a59ab1ff2870f08f841cf05daec970606c2e968a8a0248e965fce29a9a3f8fabd89b87f2178c77ebb82257c36698b881cb0240d7217e8c442f25d871bc5e449f73c0f887dca825394478faf3ab5e2b29bc7799824087570dae59c916d9174fe4c40940de135855e8b552670ef79ad149998b5"}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 58.610135352s ago: executing program 0 (id=2439): mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f00000000c0), 0x4024, &(0x7f0000000240)=ANY=[]) 58.532023443s ago: executing program 34 (id=2439): mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f00000000c0), 0x4024, &(0x7f0000000240)=ANY=[]) 3.866955204s ago: executing program 6 (id=3016): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x28) connect$vsock_stream(r1, &(0x7f0000000280), 0x10) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x5, 0x5, 0xd, 0x4599}, 0x14) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) epoll_create(0x2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x7, 0x700, 0x0, 0x3ff, {{0x7, 0x4, 0x3, 0x13, 0x1c, 0x64, 0x0, 0x9, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@timestamp={0x44, 0x8, 0x49, 0x0, 0x2, [0x9]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x40, 0x75e, 0x3, 0x400, 0xa19, 0x84040000, r3}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x4c) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 3.850772625s ago: executing program 6 (id=3017): creat(&(0x7f0000000080)='./file0\x00', 0xac) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x2, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r2, 0x0, 0x0, 0x20000000}]) r4 = dup(r1) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f000013a000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000025a000/0x4000)=nil) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r6, 0x0) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid}, {@cache_fscache}], [], 0x6b}}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r7 = socket(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000280)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x183183, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xa3) socket(0xa, 0x1, 0x0) 3.58540197s ago: executing program 3 (id=3023): openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r1, 0x1, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x11) close_range(r0, 0xffffffffffffffff, 0x0) 3.518041741s ago: executing program 3 (id=3025): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x64) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x1000)=nil, 0x1000}) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x10041, 0x100) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) mount_setattr(r1, &(0x7f0000000080)='./file0\x00', 0x100, &(0x7f0000000100)={0x76, 0xc, 0x20000, {r2}}, 0x20) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000140)={'veth0_macvtap\x00'}) mmap$usbfs(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x10010, r2, 0xd9) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) recvmsg$unix(r3, &(0x7f0000000680)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/225, 0xe1}, {&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000003c0)=""/138, 0x8a}, {&(0x7f0000000480)=""/52, 0x34}, {&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/86, 0x56}, {&(0x7f0000000580)=""/114, 0x72}], 0x7}, 0x1100) mmap$IORING_OFF_SQ_RING(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0x20010, r2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000006c0)='ipvlan1\x00', 0x10) r5 = socket$netlink(0x10, 0x3, 0x9) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r3) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r6, 0x2, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x40000) fsync(r4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000840)={0x1, 0x2000}, 0x4) sendto(r2, &(0x7f0000000880)="e3d568ce0ec6356a6f78a3e737c3111a7ca485de8b86e137d83bbc4f0914e50ef004f1f0bc09cea8978f788bc6bcaedd927da939d83cc6d13369d44abec2653c73dbefd9be747e08c34b1a3ddb420ba5c6fb8ee7f7000ffdb87342af72e640ae", 0x60, 0x4000, &(0x7f0000000900)=@ll={0x11, 0x1c, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x80) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x2001c090) bind$can_raw(r3, &(0x7f0000000a80), 0x10) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000ac0)) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r3, 0x4068aea3, &(0x7f0000000b00)) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000b80)="18c3ef6c7cd2ad958df136a438dd54cd1a0203ae6c", 0x15) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000bc0), &(0x7f0000000c00)={0x0, 0xfb, 0x98, 0x2, 0xd1, "2b8a1e2c47ddb15a341ab590717387b5", "42b8559c6c55c66e988ef747ae2f92ec3b594394f2c207cb0094d1b49bc9506fd5bef1de6027115e36814d19e5270b1c4429e6d106e00c415cfbc5ae404c3a16830726d97f17a45ca369b20e86e9f1fb29b5e5660e0e92a5b25b3b2fe92897139d51504f81444dbc5b7254e26e03016373c5bd43fecc3b855bd9de7f2c0e0e431791dd"}, 0x98, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d00), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r7, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000e00)={@loopback, @multicast2, 0x0, "46fa99e462b24c29fd1b5279a28cef2b3bb80ec89a8c74a7111578ac730537b2", 0x7, 0x490, 0x7, 0x8}, 0x3c) r8 = fsopen(&(0x7f0000000e40)='aufs\x00', 0x0) fsmount(r8, 0x1, 0x4) 3.369592514s ago: executing program 3 (id=3029): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket(0xa, 0x3, 0x87) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000234000/0x800000)=nil, 0x800000, 0xe) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@private1, 0x18, r5}) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @private=0xa0100ff}, 0x2, 0x0, 0x2, 0x1}}, 0x26) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x6, 0xfffffffe, 0x4, @private1, @private2, 0x1, 0x80, 0x2a, 0x4}}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4042, 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r7, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x8020000, 0xdcd, 0x4005, 0x3, 0x3, 0x0, 0x0, 0x20, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) syz_fuse_handle_req(r7, &(0x7f00000042c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x1, {0x0, 0x6, 0x0, {0x5, 0x7, 0x0, 0x80000001, 0x3, 0x8001, 0x3, 0x35741061, 0x10000, 0x8001, 0x9e7, 0xffffffffffffffff, 0x0, 0x40, 0xdad}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000480)={0x4, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c1000020a000000000000", 0x58}], 0x1) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_get$pid(0x2, 0x0) 3.225913217s ago: executing program 5 (id=3031): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) (async, rerun: 64) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (rerun: 64) bind$tipc(r3, 0x0, 0x0) (async) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000000000000000000000000200000004000180"], 0x54}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r7 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d0001070000000904000505030000000921000208012294030905810300"], 0x0) (rerun: 32) syz_usb_control_io(r7, 0x0, 0x0) (async) syz_usb_control_io$hid(r7, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) socket(0x10, 0x2, 0x0) (async) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000980)={0x14, &(0x7f0000000900)={0x40, 0x2, 0xe, {0xe, 0x6, "67fdcc15b8a91f0ffee4d267"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f0000000bc0)={0x34, &(0x7f00000009c0)={0x0, 0x1c, 0x88, "99d58a8a4e9544627400feb969ebb2da6530cb171f075807f72aad8f615d5541b58a97c5a1cf4c61ed39892cd4c75192abfabb55e698212ee2e105f6819f1c520a19e7c4c9a0c4220af0a1472634db8850cc34faa39f8efe55e31ab529c5d5225417c6aee05c8571ffb79c0ccb3166c65ed0a2ee5c05ba9d24311507af1750e946cefde679bc4c11"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b00)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000b40)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000000b80)={0xc0, 0xa2, 0x2f, "d13feb908c888dcefa7a6f4ed937cf5f646a44ae790aaee426967d9c4007e9c78199e9af9f4e73e56ed7d852f88cd7"}}) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELOBJ={0x150, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x6b, 0x8, "03a4d018aeb1eafc292752f6d21bff55e6dc15e494f487195b2c36653982ac15fe399df40f48e92cd6968f9e07a9e02df2ee35060de2f427b623610537bbdc89b79517a49f3175a2ce7cdc6980169094b1631fe32218f2b36bf8139d7ce541f98051b7f2d390d1"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xa0, 0x8, "321e2b04a84f34f939772da736bf9fcfb012d38389da641bb83a8ed56ea6bef962fc83d316be51ef9b483787c79ce7aa41f6354293a118e0ec98736ac3332f980914981229d3eb6729598e41a40e57b4a4c17deca94864b646ac8e98fd2fb2c40dc1c3204fff11c66ecaf7c3a37bb257c8f36d6d039ff178f0b17ed0774f47067fdd0a7869c876c3920ad76b857a85e35bf87423144fdde62754ea19"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x154, 0x2, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xb7, 0x6, "ad8c080154d5b47dc36fb5a7a153aa562138346af2bb384bd8d5aff08a0724947dde43d6eaed5dc92fc42ad16b6e7903e6f686d6c165fd95b8d4a23ab5cad21ecca50079704edb9a67ee7b6bb4914e361b37257fe621572b4a70180a15d5c8237af8499621293d59ce471fa638a55b1af573800959c3298aef2506a7aaa7d4177cf8581dde239f9f0a9c7277892f6eb3d1230e91eb16ed5cc16579c9fbe311fca1c50ba0d540b320299a87257c1af3ed3e3fd8"}, @NFTA_TABLE_USERDATA={0x51, 0x6, "aad6c1bf1946a719ddf1050feab672ef8b4313552668db9745f6534023e12a4914f7363eab7f642310d0a1243464f20fe011d763a3ac063fd600d593b6b71966730bedabb8fabec72f017a80b7"}]}, @NFT_MSG_DELRULE={0x148, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x114, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xf18d}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x58, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0xac, 0x8, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7f}]}}}, {0x34, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x10c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0xd, 0x8, "0e69a3be93aaef9ea7"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0xbb, 0x8, "f4aac59d66dda778e98a8121911e0d1ae735b3aca370f65f933670f9e45e4102544057039f584856e001be97cf794e0b6d7c61a79a54b5763f05194c883dec0721482bd9ccf5f1120343d6d0c272a62d631e21d3a8b75018e1995e784ce802280bc9cb03f6f61331e6a8138611e1b046a2eb6110e67120d699d589342ed6b50fbe79de5bce81850aee6c0abf64f42258d96546bf4da748daef8863b809f4b93b37657e9acb7d386a045fed2f5380f4224718ce7a78fa69"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x5e8}, 0x1, 0x0, 0x0, 0x4008054}, 0x40) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000008c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)={0x44, 0x8, 0x6, 0x101, 0x0, 0x0, {0x9, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) (async) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 3.225075887s ago: executing program 5 (id=3033): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) bind$inet6(r1, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x4000000000002f5, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="250326bd7000fcdbdf25670000009a8825f4a1360ffe0800010024000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x51) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000080)=[@request_death], 0x0, 0x0, 0x0}) 3.143751729s ago: executing program 3 (id=3034): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = socket(0x1e, 0x1, 0x0) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x1000}) openat$tun(0xffffffffffffff9c, 0x0, 0x101140, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000040)={0x80, 0xa, 0x301, 0x0, 0x0, 0xfe, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) prctl$PR_MCE_KILL_GET(0x22) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0x4004e502, 0x0) (async) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0x4004e502, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 3.05509339s ago: executing program 3 (id=3035): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x220) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="450f78b1c3cff1340fc76e02b9800000c00f3235000400000f30646467410fc77a2b0f06c483c56b6c2c0077876800b9800000c00f3235002000000f3036d15000b928000000b82ab60000ba000000000f30", 0x52}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendfile(r3, r3, 0x0, 0x1000007fd) 2.921990363s ago: executing program 3 (id=3036): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000001010100000000000000000200de0104001640240001801483d68008000100e009000108000200e00000010c00028005000100657f84beca878907a09b319f"], 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000001010100000000000000000200de0104001640240001801483d68008000100e009000108000200e00000010c00028005000100657f84beca878907a09b319f"], 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x1, 0x0, &(0x7f0000000040)) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000007880)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000100)="eabd", 0x2}], 0x1}}, {{&(0x7f0000001580)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) (async) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket(0x2, 0x2, 0x1) (async) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) socket(0x2, 0x2, 0x1) (async) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) socket(0x2, 0x2, 0x1) (async) r6 = socket(0x2, 0x2, 0x1) bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e) (async) bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r7, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002413b88400819151300000000000109022d000000000000090400"], 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @dev, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x20, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xa}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x20, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xa}}}}}) r9 = dup2(r2, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000000)=0x5) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$ASHMEM_GET_NAME(r9, 0x40087708, 0x0) 2.921683923s ago: executing program 6 (id=3037): setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) mremap(&(0x7f00003c8000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000024a000/0x1000)=nil) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x440, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000b10000400000000006"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x40}, @fd={0x66642a85, 0x0, r4}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000180)=0x3, 0x4) 2.862761074s ago: executing program 6 (id=3038): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) (async) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) (async) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) shutdown(r1, 0x1) (async) recvfrom(r1, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$FUSE_OPEN(r2, &(0x7f0000000180)={0x20, 0x8000000000000013, 0x0, {0x0, 0x4}}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x7f8) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @remote}}}, 0x88) sendfile(r0, r0, 0x0, 0x7ffff000) 2.009732311s ago: executing program 6 (id=3039): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000140)=[@enter_looper, @dead_binder_done, @dead_binder_done, @exit_looper, @dead_binder_done, @increfs], 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r2) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000200)={'\x00', 0xce, 0x4, 0xc, 0x0, 0x7, 0x8000000, 0xd000, '\x00', 0x4}) 1.926064782s ago: executing program 6 (id=3040): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, 0x0) fcntl$getflags(r1, 0x408) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 670.153487ms ago: executing program 1 (id=3043): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async, rerun: 32) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) (rerun: 32) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) getdents64(r0, &(0x7f0000000140)=""/186, 0xba) (async, rerun: 64) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) (rerun: 64) 669.332487ms ago: executing program 1 (id=3044): syz_usb_connect(0x0, 0x34, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) lseek(r2, 0xca3, 0x4) sendfile(r2, r2, 0x0, 0x1200000000000) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000005200010000000000040028ac7d096456cc9f0100feffffff"], 0x1c}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r3, r0, &(0x7f0000002700)=0x1, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r5, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050009000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000300000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r6, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 220.544936ms ago: executing program 5 (id=3045): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0xa, &(0x7f00000000c0)=[{0x3, 0x5, 0x10, 0x9}, {0x3, 0x3, 0x85, 0x3}, {0x1, 0x5, 0xf, 0x80000000}, {0x5, 0x3, 0x81}, {0x4, 0x6, 0x4, 0x1}, {0x8, 0x2, 0x7, 0x8e5}, {0x8, 0x8a, 0x2, 0x1}, {0xc, 0x7, 0x2, 0x5}, {0x400, 0xbe, 0x7, 0xa3c}, {0xfff9, 0x58, 0x4, 0x3}]}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x5460, &(0x7f0000000540)={'veth0_macvtap\x00', @link_local}) sendfile(r0, r0, 0x0, 0x8000) 200.366606ms ago: executing program 5 (id=3046): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) (async) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) (async) sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@txtime={{0x18, 0x1, 0x3d, 0x10001}}], 0x18}}], 0x1, 0x20000844) (async) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = getpid() syz_pidfd_open(r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 141.974058ms ago: executing program 5 (id=3047): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$bind(&(0x7f0000000280)='./bus\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x101091, 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) (async) recvfrom(r1, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) (async, rerun: 32) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) (rerun: 32) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) (async) renameat2(r3, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x7) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @remote}}}, 0x88) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 139.724408ms ago: executing program 1 (id=3048): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000140)=[@acquire, @decrefs], 0x0, 0x0, 0x0}) 138.690748ms ago: executing program 1 (id=3049): r0 = getpid() ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000080)={[0x4]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ptrace$setregs(0xf, 0xffffffffffffffff, 0x100000001, &(0x7f0000000040)="b27aaf4a25acf1071195ffdf8a1bc7abb329d40734d9ef838b420db727baeb3f2711db1a") ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x802) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x3, 0x1) getdents64(r5, &(0x7f0000002540)=""/4096, 0x1000) read$FUSE(r5, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18, 0x0, r6, {0x2000004}}, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) 79.858769ms ago: executing program 5 (id=3050): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b9a}, 0x38, [0x7, 0x8, 0x5, 0x9, 0x94, 0x155f, 0x6, 0x5, 0x25cc, 0x1, 0x1, 0x6, 0xa2b7, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x6, 0xbbf, 0x4a732f64, 0xc, 0x9, 0xd, 0x800002, 0x80, 0x6, 0x1, 0x2, 0x3, 0x1004, 0x81, 0x28000, 0x5, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x7, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x4, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0xa], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc67, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x8, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xfeff58b9, 0x4c2336d3, 0x4, 0xfffffffd, 0xfffffff8, 0x401, 0x4, 0xf1, 0x4, 0xab00000, 0x40000005, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x8, 0x4, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0f, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x4, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x9, 0x9, 0x3ff, 0x2, 0x404, 0x40, 0x6, 0x240, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x2, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0xa6, 0xfc, 0x401, 0x101, 0x0, 0xfffffffd, 0x17f8, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x40, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x8, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fbfffff, 0x582c, 0x4, 0x2, 0x81, 0x4, 0x9d86, 0x9, 0xfffffff7, 0xd4, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x80000002, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x9, 0xfffffffe, 0x4, 0xfffffff9, 0x5, 0x4, 0x463f, 0x4, 0x8, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) (async) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) (async) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 79.593549ms ago: executing program 1 (id=3051): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005a00010d000009000000000004000080080004"], 0x1c}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newae={0x5c, 0x1e, 0x5e74984b1e295b5f, 0x70bd25, 0x25dfdbfc, {{@in=@private=0xa010101, 0x4d5, 0x0, 0x3c}, @in=@multicast1, 0x5, 0x34ff}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2d, 0x7ff8}}, @mark={0xc, 0x15, {0x35075d}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x20004810) (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000007c0)={0x15, 0x1, {0x981, @struct={0x2, 0x1ff}, 0x0, 0xa, 0x5, 0x6, 0x101, 0x7, 0x2, @struct={0x5, 0x2}, 0x8001, 0x4, [0x2008000000000000, 0x4, 0x8000, 0x8000000000000000, 0x10001, 0x7fffffff]}, {0x0, @struct={0x7, 0x4}, 0x0, 0x3455, 0x40, 0x8000000000000001, 0x6b7, 0x7ba, 0x10, @struct={0x0, 0x1}, 0x400, 0x8, [0x2, 0x7, 0x1, 0x7fffffffffffffff, 0x73bccca2, 0x7]}, {0x8, @struct={0x7, 0x1}, 0x0, 0x200, 0xd623, 0xffffffff, 0x8, 0x0, 0x40, @usage, 0x1, 0x8, [0x9, 0x2, 0x3c2, 0x5, 0x9, 0x5dd7c437]}, {0x2, 0x2, 0x7}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000bc0)={0x8, 0x5, {0xd0e2, @usage=0xf1, r3, 0xff, 0x5, 0x1c, 0x9f, 0x6, 0x22, @usage=0xfffffffffffffffd, 0x9, 0x4, [0x0, 0xcd, 0x6, 0x8, 0x5, 0x61]}, {0x16, @usage=0x1000000000000, 0x0, 0x10, 0x7, 0x6, 0x90, 0x6957, 0x6c, @struct={0x8000000}, 0xfd1, 0x6, [0x5, 0x55, 0xaeaa, 0x2, 0xfffffffffffffff9, 0x7]}, {0x66, @struct={0x2, 0x2}, 0x0, 0x4, 0x6, 0x0, 0xf3f4, 0xc2b, 0x472, @usage=0x80, 0x4, 0x341, [0x5, 0x4, 0x100000000, 0x6, 0x5, 0x100000001]}, {0x7, 0x10}}) (async) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r4}], 0x50, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da3f1872e006c7f8aab8148a0e021b5cf4690a761ba22fd7fca4f6c2d70eccab5995aa7eeb1ca60f45334c9"}) 0s ago: executing program 1 (id=3052): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='io\x00') r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='cgroup.controllers\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c63616368653d7265616461686561642c6b884279d9572b8c49e68b84e9733937d3f182f8ec4da6ac02b214d77f8fe9e356ce4502c486e83a2fbc159aceccc21641707c79c63b5cc58322151c97c1a0321c1445db18d20ebcc877ff1bf3f9e9d4eae37da6253677eec47fa774cffdb3d12c24dfdfb432bc9d9fa9ec1222cbb85fd880f466989fd11429f7cd48df022a8e4a645467e7a6dd03a12decf9987f8a08ced31493622d7223ceb1091861dc977539989ca583b452636f86f1b897"]) truncate(&(0x7f0000000240)='./file0\x00', 0x10001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r6, r6, 0x0, 0x7a680000) read$eventfd(r1, &(0x7f0000000400), 0x8) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@weak_handle={0x77682a85, 0xa, 0x2}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r7 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000003030d01000000000000000000002000"], 0x14}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='\\\x00', &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0) kernel console output (not intermixed with test programs): 28598][ T6862] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 165.077964][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 165.077983][ T36] audit: type=1107 audit(2000000094.239:618): pid=6869 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='EꮼNu7c' [ 165.155023][ T63] ftdi_sio 1-1:3.1: FTDI USB Serial Device converter detected [ 165.169768][ T63] ftdi_sio ttyUSB0: unknown device type: 0x2eef [ 165.186591][ T63] usb 1-1: USB disconnect, device number 12 [ 165.200302][ T63] ftdi_sio 1-1:3.1: device disconnected [ 165.285376][ T6913] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2201'. [ 165.721206][ T6936] binder: Binderfs stats mode cannot be changed during a remount [ 165.932687][ T36] audit: type=1326 audit(2000000095.089:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.1.2211" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f417178eec9 code=0x0 [ 165.987583][ T31] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 166.139397][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 166.150437][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.160229][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 166.169334][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.179156][ T31] usb 1-1: config 0 descriptor?? [ 166.588736][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 166.594829][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 166.603602][ T31] usb 1-1: USB disconnect, device number 13 [ 166.849377][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2217'. [ 166.896724][ T6969] syzkaller0: entered allmulticast mode [ 166.903276][ T6969] syzkaller0 (unregistering): left allmulticast mode [ 166.910017][ T6969] tipc: Disabling bearer [ 167.146701][ T6978] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.172080][ T6985] rust_binder: 82: no such ref 1 [ 167.240146][ T6990] tipc: Started in network mode [ 167.245054][ T6990] tipc: Node identity 62bb000c0c97, cluster identity 4711 [ 167.252472][ T6990] tipc: Enabled bearer , priority 0 [ 167.260126][ T6990] tipc: Disabling bearer [ 167.666026][ T7026] 9pnet_fd: Insufficient options for proto=fd [ 167.702033][ T36] audit: type=1400 audit(2000000096.859:620): avc: denied { mount } for pid=7034 comm="syz.1.2239" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 168.091216][ T7049] 9pnet_fd: Insufficient options for proto=fd [ 168.132520][ T7053] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 168.150045][ T36] audit: type=1400 audit(2000000097.299:621): avc: denied { write } for pid=7052 comm="syz.0.2246" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 168.232817][ T7081] overlayfs: failed to clone upperpath [ 168.239556][ T7081] /dev/rnullb0: Can't lookup blockdev [ 168.260920][ T7088] 9pnet_fd: p9_fd_create_tcp (7088): problem connecting socket to 127.0.0.1 [ 168.271692][ T7088] 9pnet_fd: Insufficient options for proto=fd [ 168.368773][ T7115] overlayfs: failed to resolve './file1': -2 [ 168.375634][ T7115] overlayfs: failed to clone upperpath [ 168.387552][ T63] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 168.538935][ T63] usb 1-1: not running at top speed; connect to a high speed hub [ 168.547481][ T63] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 168.558396][ T63] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 168.571270][ T63] usb 1-1: config 1 interface 0 has no altsetting 0 [ 168.579348][ T63] usb 1-1: New USB device found, idVendor=0b05, idProduct=196b, bcdDevice= 0.40 [ 168.588462][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.596537][ T63] usb 1-1: Product: 备ꈏ瘠谎淵薫綥苃몜몵鐛굸뽱駃㶏偛頗ࡰ厥⧐挴麊뼥몏궑㜆츇∥ﴒ触珚ქﯚ泞⍞ᙽ铫텅掴㣵⸿β큇광敠ᾳ艏儌﬿㭙妠᜖䖓鰬Ⲿᡘॹ쩑 [ 168.617981][ T63] usb 1-1: Manufacturer: Й [ 168.622750][ T63] usb 1-1: SerialNumber: Ё [ 168.628557][ T7053] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.713634][ T7140] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2281'. [ 168.839873][ T63] usbhid 1-1:1.0: can't add hid device: -71 [ 168.846078][ T63] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 168.855074][ T63] usb 1-1: USB disconnect, device number 14 [ 169.490366][ T36] audit: type=1400 audit(2000000098.649:622): avc: denied { setattr } for pid=7169 comm="syz.0.2292" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 169.767585][ T31] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 169.919118][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 169.927763][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 169.940113][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.949358][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.957371][ T31] usb 1-1: Product: syz [ 169.961559][ T31] usb 1-1: Manufacturer: syz [ 169.966170][ T31] usb 1-1: SerialNumber: syz [ 169.971838][ T31] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 169.980605][ T31] usb 1-1: no configuration chosen from 1 choice [ 170.166307][ T36] audit: type=1400 audit(2000000099.319:623): avc: denied { bpf } for pid=7212 comm="syz.3.2308" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 170.200204][ T7219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7219 comm=syz.1.2309 [ 170.317316][ T7266] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2322'. [ 170.455436][ T7294] 9pnet_fd: Insufficient options for proto=fd [ 170.462211][ T7294] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.518535][ T7300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7300 comm=syz.1.2332 [ 170.530995][ T36] audit: type=1400 audit(2000000099.679:624): avc: denied { mounton } for pid=7293 comm="syz.1.2332" path="/file0" dev="ramfs" ino=32587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 170.561624][ T7302] netlink: 'syz.3.2335': attribute type 28 has an invalid length. [ 170.585024][ T7304] netlink: 'syz.3.2336': attribute type 12 has an invalid length. [ 170.749366][ T7331] IPv6: syztnl0: Disabled Multicast RS [ 170.793941][ T7338] tipc: Enabling of bearer rejected, failed to enable media [ 170.803562][ T36] audit: type=1326 audit(2000000099.969:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7337 comm="syz.4.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6411d8eec9 code=0x7ffc0000 [ 170.827442][ T36] audit: type=1326 audit(2000000099.969:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7337 comm="syz.4.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6411d8eec9 code=0x7ffc0000 [ 170.853925][ T36] audit: type=1326 audit(2000000099.969:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7337 comm="syz.4.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f6411d8eec9 code=0x7ffc0000 [ 170.877336][ T36] audit: type=1326 audit(2000000099.969:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7337 comm="syz.4.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6411d8eec9 code=0x7ffc0000 [ 170.900953][ T36] audit: type=1326 audit(2000000099.969:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7337 comm="syz.4.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6411d8eec9 code=0x7ffc0000 [ 170.924385][ T36] audit: type=1326 audit(2000000099.969:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7337 comm="syz.4.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6411d8eec9 code=0x7ffc0000 [ 170.948049][ T36] audit: type=1326 audit(2000000099.969:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7337 comm="syz.4.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6411d8eec9 code=0x7ffc0000 [ 170.971662][ T36] audit: type=1326 audit(2000000099.969:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7337 comm="syz.4.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6411d8eec9 code=0x7ffc0000 [ 171.411381][ T7376] 9pnet_fd: Insufficient options for proto=fd [ 172.143591][ T7400] tipc: Enabling of bearer rejected, failed to enable media [ 172.439884][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.447026][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.454328][ T7411] bridge_slave_0: entered allmulticast mode [ 172.460937][ T7411] bridge_slave_0: entered promiscuous mode [ 172.467671][ T7411] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.474773][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.482048][ T7411] bridge_slave_1: entered allmulticast mode [ 172.488601][ T7411] bridge_slave_1: entered promiscuous mode [ 172.547553][ T609] usb 1-1: USB disconnect, device number 15 [ 172.713772][ T7411] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.720893][ T7411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.728223][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.735302][ T7411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.749734][ T7436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7436 comm=syz.0.2383 [ 172.782595][ T885] tipc: Left network mode [ 172.792136][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.799729][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.808330][ T885] veth1_macvtap: left promiscuous mode [ 172.813932][ T885] veth0_vlan: left promiscuous mode [ 172.870600][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.877692][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.897739][ T1770] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.904833][ T1770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.947426][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.954595][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.962014][ T7429] bridge_slave_0: entered allmulticast mode [ 172.968574][ T7429] bridge_slave_0: entered promiscuous mode [ 172.975149][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.982278][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.989386][ T7429] bridge_slave_1: entered allmulticast mode [ 172.995609][ T7429] bridge_slave_1: entered promiscuous mode [ 173.059641][ T7411] veth0_vlan: entered promiscuous mode [ 173.079446][ T7411] veth1_macvtap: entered promiscuous mode [ 173.103916][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.111089][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.118767][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.125838][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.164909][ T7429] veth0_vlan: entered promiscuous mode [ 173.170865][ T63] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 173.182254][ T7429] veth1_macvtap: entered promiscuous mode [ 173.213608][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 173.307574][ T63] usb 1-1: device descriptor read/64, error -71 [ 173.397639][ T609] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 173.527574][ T609] usb 4-1: device descriptor read/64, error -71 [ 173.548015][ T63] usb 1-1: device descriptor read/64, error -71 [ 173.556479][ T7463] fuse: Bad value for 'rootmode' [ 173.767553][ T609] usb 4-1: device descriptor read/64, error -71 [ 173.787733][ T63] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 173.917607][ T63] usb 1-1: device descriptor read/64, error -71 [ 174.007615][ T609] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 174.147553][ T609] usb 4-1: device descriptor read/64, error -71 [ 174.167557][ T63] usb 1-1: device descriptor read/64, error -71 [ 174.277890][ T63] usb usb1-port1: attempt power cycle [ 174.387580][ T609] usb 4-1: device descriptor read/64, error -71 [ 174.498880][ T609] usb usb4-port1: attempt power cycle [ 174.617598][ T63] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 174.638563][ T63] usb 1-1: device descriptor read/8, error -71 [ 174.768680][ T63] usb 1-1: device descriptor read/8, error -71 [ 174.847597][ T609] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 174.868695][ T609] usb 4-1: device descriptor read/8, error -71 [ 174.998561][ T609] usb 4-1: device descriptor read/8, error -71 [ 175.017646][ T63] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 175.038661][ T63] usb 1-1: device descriptor read/8, error -71 [ 175.168650][ T63] usb 1-1: device descriptor read/8, error -71 [ 175.217607][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 175.223691][ T421] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 175.237612][ T609] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 175.277646][ T63] usb usb1-port1: unable to enumerate USB device [ 175.284618][ T609] usb 4-1: device descriptor read/8, error -71 [ 175.419906][ T609] usb 4-1: device descriptor read/8, error -71 [ 175.538796][ T609] usb usb4-port1: unable to enumerate USB device [ 175.627270][ T63] rust_binder: get_current_thread was called from the wrong process. [ 175.807696][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 175.807715][ T36] audit: type=1400 audit(2000000104.959:634): avc: denied { mount } for pid=7493 comm="syz.0.2396" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 175.816275][ T7494] rust_binder: Error while translating object. [ 175.822320][ T36] audit: type=1400 audit(2000000104.969:635): avc: denied { remount } for pid=7493 comm="syz.0.2396" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 175.844257][ T7494] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 175.850535][ T36] audit: type=1400 audit(2000000104.969:636): avc: denied { ioctl } for pid=7493 comm="syz.0.2396" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 175.871177][ T7494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 175.909646][ T36] audit: type=1400 audit(2000000105.069:637): avc: denied { unmount } for pid=6508 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 176.179603][ T7515] 9pnet_fd: Insufficient options for proto=fd [ 176.222010][ T7519] cannot load conntrack support for proto=3 [ 176.597545][ T609] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 176.600974][ T7528] rust_binder: Error while translating object. [ 176.605223][ T7528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 176.611756][ T7528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:25 [ 176.769025][ T609] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.786269][ T609] usb 4-1: not running at top speed; connect to a high speed hub [ 176.795047][ T609] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.809714][ T609] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.822914][ T609] usb 4-1: string descriptor 0 read error: -22 [ 176.830109][ T609] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.839733][ T609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.845547][ T7535] rust_binder: Got transaction with invalid offset. [ 176.849945][ T7535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 176.856615][ T7535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:140 [ 176.860392][ T609] usb 4-1: 0:2 : does not exist [ 176.997058][ T36] audit: type=1326 audit(2000000106.149:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.5.2417" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c1138eec9 code=0x0 [ 177.147574][ T63] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 177.181189][ T7585] No source specified [ 177.188397][ T7586] rust_binder: 7576 RLIMIT_NICE not set [ 177.307568][ T63] usb 1-1: Using ep0 maxpacket: 32 [ 177.320326][ T63] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 177.330198][ T63] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 959 [ 177.341483][ T63] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.350934][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.358995][ T63] usb 1-1: Product: syz [ 177.363181][ T63] usb 1-1: Manufacturer: syz [ 177.367807][ T63] usb 1-1: SerialNumber: syz [ 177.437567][ T331] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 177.588861][ T331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.599864][ T331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.609636][ T331] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.623756][ T331] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.632908][ T331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.641761][ T331] usb 6-1: config 0 descriptor?? [ 177.701289][ T7590] overlayfs: failed to clone upperpath [ 177.779483][ T63] cdc_ncm 1-1:1.0: bind() failure [ 177.785624][ T63] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 177.793087][ T63] cdc_ncm 1-1:1.1: bind() failure [ 177.799538][ T63] usb 1-1: USB disconnect, device number 20 [ 177.849478][ T331] usbhid 6-1:0.0: can't add hid device: -32 [ 177.855475][ T331] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 177.886649][ T609] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 177.896228][ T609] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 177.908557][ T609] usb 4-1: USB disconnect, device number 32 [ 178.205294][ T63] usb 6-1: USB disconnect, device number 2 [ 178.349812][ T46] bridge_slave_1: left allmulticast mode [ 178.355648][ T46] bridge_slave_1: left promiscuous mode [ 178.361528][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.369594][ T46] bridge_slave_0: left allmulticast mode [ 178.375297][ T46] bridge_slave_0: left promiscuous mode [ 178.381489][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.499378][ T46] tipc: Left network mode [ 178.509128][ T46] veth1_macvtap: left promiscuous mode [ 178.530357][ T46] veth0_vlan: left promiscuous mode [ 178.559097][ T7631] overlayfs: failed to clone upperpath [ 178.567579][ T63] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 178.708578][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.715688][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.726459][ T7632] bridge_slave_0: entered allmulticast mode [ 178.733050][ T7632] bridge_slave_0: entered promiscuous mode [ 178.739399][ T63] usb 6-1: config 1 has an invalid descriptor of length 84, skipping remainder of the config [ 178.740201][ T7632] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.756878][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.764736][ T7632] bridge_slave_1: entered allmulticast mode [ 178.767581][ T63] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.771455][ T7632] bridge_slave_1: entered promiscuous mode [ 178.790480][ T63] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 178.799754][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 178.808179][ T63] usb 6-1: SerialNumber: syz [ 178.841776][ T7649] incfs: Error accessing: ./file0. [ 178.847271][ T7650] incfs: Error accessing: ./file0. [ 178.847886][ T7649] incfs: mount failed -2 [ 178.854659][ T7650] incfs: mount failed -2 [ 178.907680][ T7632] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.914875][ T7632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.922224][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.929288][ T7632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.935322][ T7653] rust_binder: Error in use_page_slow: ESRCH [ 178.936514][ T7653] rust_binder: use_range failure ESRCH [ 178.942848][ T7653] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 178.948453][ T7653] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 178.956488][ T7653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:15 [ 178.965997][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.982604][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.992109][ T885] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.999209][ T885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.008364][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.015430][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.058096][ T7632] veth0_vlan: entered promiscuous mode [ 179.068448][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2451'. [ 179.080094][ T7661] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 179.089753][ T7632] veth1_macvtap: entered promiscuous mode [ 179.130876][ T7664] rust_binder: Write failure EINVAL in pid:19 [ 179.190558][ T7667] 9pnet_fd: Insufficient options for proto=fd [ 179.299965][ T63] usb 6-1: 0:2 : does not exist [ 179.307607][ T63] usb 6-1: USB disconnect, device number 3 [ 179.341967][ T6783] udevd[6783]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 179.855534][ T7679] rust_binder: Error while translating object. [ 179.855566][ T7679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.862151][ T7679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 179.990176][ T7687] rust_binder: validate_parent_fixup: new_min_offset=36, sg_entry.length=0 [ 179.999364][ T7687] rust_binder: Error while translating object. [ 180.008078][ T7687] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.014313][ T7687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5 [ 180.039491][ T7691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.066333][ T7691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.086210][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.097124][ T7691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.098055][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.116778][ T7691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.229534][ T7710] rust_binder: Write failure EFAULT in pid:33 [ 180.277593][ T609] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 180.417626][ T609] usb 6-1: device descriptor read/64, error -71 [ 180.597624][ T63] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 180.657805][ T609] usb 6-1: device descriptor read/64, error -71 [ 180.748740][ T63] usb 7-1: config 127 has an invalid interface number: 32 but max is 0 [ 180.757129][ T63] usb 7-1: config 127 has no interface number 0 [ 180.763512][ T63] usb 7-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.06 [ 180.772619][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.782535][ T63] ums-freecom 7-1:127.32: USB Mass Storage device detected [ 180.897605][ T609] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 180.982487][ T7719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.990941][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.991598][ T7719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.999551][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.025247][ T7729] netlink: 57 bytes leftover after parsing attributes in process `syz.3.2468'. [ 181.037553][ T609] usb 6-1: device descriptor read/64, error -71 [ 181.277609][ T609] usb 6-1: device descriptor read/64, error -71 [ 181.387638][ T609] usb usb6-port1: attempt power cycle [ 181.727606][ T609] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 181.748628][ T609] usb 6-1: device descriptor read/8, error -71 [ 181.878593][ T609] usb 6-1: device descriptor read/8, error -71 [ 181.885204][ T7737] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2471'. [ 181.894409][ T7736] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2471'. [ 181.903621][ T7737] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2471'. [ 181.913293][ T7736] rust_binder: 45: no such ref 0 [ 181.918760][ T7736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45 [ 182.117594][ T609] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 182.148561][ T609] usb 6-1: device descriptor read/8, error -71 [ 182.288589][ T609] usb 6-1: device descriptor read/8, error -71 [ 182.397684][ T609] usb usb6-port1: unable to enumerate USB device [ 182.877557][ T609] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 183.028789][ T609] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 183.037142][ T609] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 183.045241][ T609] usb 4-1: config 0 has no interface number 0 [ 183.051633][ T609] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 183.064562][ T609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.068502][ T7756] 9pnet_fd: Insufficient options for proto=fd [ 183.073861][ T609] usb 4-1: config 0 descriptor?? [ 183.086988][ T609] ftdi_sio 4-1:0.3: FTDI USB Serial Device converter detected [ 183.097085][ T609] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 183.106590][ T36] audit: type=1400 audit(2000000112.259:639): avc: denied { setattr } for pid=7758 comm="syz.5.2479" name="/" dev="incremental-fs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.158531][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 183.164934][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 183.287238][ T7754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.295853][ T7754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.304242][ T7754] No source specified [ 183.309647][ T609] usb 4-1: USB disconnect, device number 33 [ 183.316184][ T609] ftdi_sio 4-1:0.3: device disconnected [ 183.317958][ T36] audit: type=1326 audit(2000000112.469:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7717 comm="syz.6.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486af8eec9 code=0x7fc00000 [ 183.330746][ T45] usb 7-1: USB disconnect, device number 2 [ 183.767585][ T45] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 183.839341][ T7772] binder: Unknown parameter '' [ 183.918694][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 183.929834][ T45] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 183.957208][ T45] usb 7-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 183.970366][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.982732][ T45] usb 7-1: config 0 descriptor?? [ 183.988183][ T7770] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 184.011350][ T45] usbhid 7-1:0.0: can't add hid device: -22 [ 184.012336][ T7781] IPv4: Oversized IP packet from 127.202.26.0 [ 184.017495][ T45] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 184.220076][ T7805] bpf: Bad value for 'gid' [ 184.227958][ T7770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.251206][ T7770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.281585][ T7810] tc_dump_action: action bad kind [ 184.327548][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 184.337162][ T7812] netlink: 'syz.1.2493': attribute type 12 has an invalid length. [ 184.497808][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 184.510580][ T9] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 184.529060][ T9] usb 4-1: config 0 has no interface number 0 [ 184.547543][ T9] usb 4-1: config 0 interface 230 has no altsetting 0 [ 184.571168][ T9] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 184.595173][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.603562][ T9] usb 4-1: Product: syz [ 184.607954][ T9] usb 4-1: Manufacturer: syz [ 184.612578][ T9] usb 4-1: SerialNumber: syz [ 184.627679][ T9] usb 4-1: config 0 descriptor?? [ 184.635033][ T9] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 184.649848][ T9] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 184.915886][ T36] audit: type=1400 audit(2000000114.069:641): avc: denied { setattr } for pid=7841 comm="syz.3.2500" name="RAWv6" dev="sockfs" ino=37084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.948960][ T7847] incfs: Error accessing: ./file0. [ 184.954184][ T7847] incfs: mount failed -20 [ 185.217566][ T421] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 185.223730][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 185.335142][ T7868] netlink: 'syz.1.2507': attribute type 1 has an invalid length. [ 185.343156][ T7869] netlink: 'syz.1.2507': attribute type 1 has an invalid length. [ 186.377637][ T1444] usb 7-1: USB disconnect, device number 3 [ 186.397469][ T7878] tipc: Started in network mode [ 186.402555][ T7878] tipc: Node identity 3299e5d632a5, cluster identity 4711 [ 186.410061][ T7878] tipc: Enabled bearer , priority 0 [ 186.418349][ T7878] tipc: Disabling bearer [ 186.434676][ T7887] overlayfs: failed to clone upperpath [ 186.487161][ T7896] rust_binder: Error in use_page_slow: ESRCH [ 186.487183][ T7896] rust_binder: use_range failure ESRCH [ 186.493247][ T7896] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 186.499030][ T7896] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 186.507323][ T7896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:32 [ 186.671025][ T36] audit: type=1400 audit(2000000115.829:642): avc: denied { map } for pid=7902 comm="syz.6.2519" path="socket:[36546]" dev="sockfs" ino=36546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 186.757216][ T36] audit: type=1326 audit(2000000115.909:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7902 comm="syz.6.2519" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f486af8eec9 code=0x0 [ 186.797226][ T7911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96 [ 186.918965][ T9] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 186.939340][ T9] usb 4-1: USB disconnect, device number 34 [ 187.227562][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 187.377558][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 187.383881][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 187.392246][ T9] usb 4-1: config 179 has no interface number 0 [ 187.398770][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 187.409989][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 187.421424][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 187.432812][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 187.444413][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 187.457843][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 187.466969][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.476785][ T7847] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 187.508484][ T7913] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.518053][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.525086][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.525134][ T7913] bridge_slave_0: entered allmulticast mode [ 187.533878][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.549263][ T7913] bridge_slave_0: entered promiscuous mode [ 187.564316][ T7913] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.575331][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.582592][ T7913] bridge_slave_1: entered allmulticast mode [ 187.589766][ T7913] bridge_slave_1: entered promiscuous mode [ 187.702731][ T7913] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.709846][ T7913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.717241][ T7913] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.724326][ T7913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.751944][ T1770] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.759545][ T1770] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.767715][ T63] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 187.776159][ T885] bridge_slave_1: left allmulticast mode [ 187.782128][ T885] bridge_slave_1: left promiscuous mode [ 187.788181][ T885] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.795893][ T885] bridge_slave_0: left allmulticast mode [ 187.801905][ T885] bridge_slave_0: left promiscuous mode [ 187.807880][ T885] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.883750][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.887594][ T609] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 187.890872][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.907662][ T1770] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.914785][ T1770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.924139][ T63] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 187.936215][ T63] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 187.950790][ T885] tipc: Left network mode [ 187.950813][ T63] usb 7-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 187.965089][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.973803][ T885] veth1_macvtap: left promiscuous mode [ 187.978930][ T63] usb 7-1: config 0 descriptor?? [ 187.983763][ T885] veth0_vlan: left promiscuous mode [ 188.040404][ T7913] veth0_vlan: entered promiscuous mode [ 188.052425][ T7913] veth1_macvtap: entered promiscuous mode [ 188.061735][ T609] usb 6-1: config 5 has an invalid interface number: 61 but max is 0 [ 188.069911][ T609] usb 6-1: config 5 has no interface number 0 [ 188.076016][ T609] usb 6-1: config 5 interface 61 altsetting 52 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 188.086937][ T609] usb 6-1: config 5 interface 61 altsetting 52 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 188.097972][ T609] usb 6-1: config 5 interface 61 altsetting 52 endpoint 0xD has invalid maxpacket 16, setting to 8 [ 188.108830][ T609] usb 6-1: config 5 interface 61 altsetting 52 has a duplicate endpoint with address 0xC, skipping [ 188.121082][ T609] usb 6-1: config 5 interface 61 altsetting 52 endpoint 0x9 has invalid maxpacket 512, setting to 8 [ 188.131949][ T609] usb 6-1: config 5 interface 61 altsetting 52 endpoint 0x8 has invalid maxpacket 1024, setting to 8 [ 188.143121][ T609] usb 6-1: config 5 interface 61 altsetting 52 endpoint 0x4 is Bulk; changing to Interrupt [ 188.153268][ T609] usb 6-1: config 5 interface 61 has no altsetting 0 [ 188.167454][ T609] usb 6-1: string descriptor 0 read error: -22 [ 188.173821][ T609] usb 6-1: New USB device found, idVendor=045e, idProduct=0459, bcdDevice= 6.20 [ 188.182947][ T609] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.192343][ T7921] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 188.387597][ T63] wacom 0003:056A:0315.000D: collection stack underflow [ 188.394772][ T63] wacom 0003:056A:0315.000D: item 0 2 0 12 parsing failed [ 188.402313][ T63] wacom 0003:056A:0315.000D: parse failed [ 188.408178][ T63] wacom 0003:056A:0315.000D: probe with driver wacom failed with error -22 [ 188.595518][ T7918] overlay: ./file1 is not a directory [ 188.678837][ T63] usb 7-1: USB disconnect, device number 4 [ 188.782329][ T36] audit: type=1400 audit(2000000117.939:644): avc: denied { ioctl } for pid=7937 comm="syz.1.2527" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xaebc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 188.783921][ T7939] rust_binder: 9: no such ref 3 [ 188.807145][ T7938] netlink: 'syz.1.2527': attribute type 3 has an invalid length. [ 188.811958][ T7939] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 188.826764][ T7939] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 188.833883][ T7939] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 188.841136][ T7939] rust_binder: 9: no such ref 0 [ 188.917371][ T609] usb 4-1: USB disconnect, device number 35 [ 188.917390][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 188.917425][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 189.040031][ T7950] binder: Bad value for 'max' [ 189.107541][ T63] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 189.196988][ T7955] rust_binder: Error while translating object. [ 189.197023][ T7955] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 189.203333][ T7955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 189.259724][ T63] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.260006][ T7957] EXT4-fs: dax option not supported [ 189.269316][ T63] usb 2-1: not running at top speed; connect to a high speed hub [ 189.278863][ T7957] overlay: ./bus is not a directory [ 189.282624][ T63] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.304918][ T63] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.317136][ T63] usb 2-1: string descriptor 0 read error: -22 [ 189.323753][ T63] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.332856][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.345056][ T63] usb 2-1: 0:2 : does not exist [ 189.417556][ T609] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 189.547601][ T609] usb 4-1: device descriptor read/64, error -71 [ 189.787657][ T609] usb 4-1: device descriptor read/64, error -71 [ 190.037548][ T609] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 190.177839][ T609] usb 4-1: device descriptor read/64, error -71 [ 190.397573][ T31] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 190.417560][ T609] usb 4-1: device descriptor read/64, error -71 [ 190.527575][ T31] usb 7-1: device descriptor read/64, error -71 [ 190.534001][ T609] usb usb4-port1: attempt power cycle [ 190.557270][ T7942] __vm_enough_memory: 55 callbacks suppressed [ 190.557288][ T7942] __vm_enough_memory: pid: 7942, comm: syz.1.2528, bytes: 18014402804453376 not enough memory for the allocation [ 190.584136][ T63] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 190.593629][ T63] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 190.605258][ T63] usb 2-1: USB disconnect, device number 37 [ 190.624511][ T45] usb 6-1: USB disconnect, device number 8 [ 190.777619][ T31] usb 7-1: device descriptor read/64, error -71 [ 190.802658][ T7970] input: syz1 as /devices/virtual/input/input15 [ 190.810482][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2539'. [ 190.819725][ T7970] bridge_slave_1: left allmulticast mode [ 190.825436][ T7970] bridge_slave_1: left promiscuous mode [ 190.831156][ T7970] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.839027][ T7970] bridge_slave_0: left allmulticast mode [ 190.844668][ T7970] bridge_slave_0: left promiscuous mode [ 190.850357][ T7970] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.863005][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 190.869904][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 190.877113][ T36] audit: type=1400 audit(2000000120.029:645): avc: denied { shutdown } for pid=7969 comm="syz.5.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.877560][ T609] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 190.919142][ T609] usb 4-1: device descriptor read/8, error -71 [ 191.027627][ T31] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 191.048902][ T609] usb 4-1: device descriptor read/8, error -71 [ 191.120935][ T7977] SELinux: security_context_str_to_sid () failed with errno=-22 [ 191.128819][ T7977] SELinux: security_context_str_to_sid () failed with errno=-22 [ 191.151927][ T36] audit: type=1400 audit(2000000120.309:646): avc: denied { shutdown } for pid=7980 comm="syz.1.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.157609][ T31] usb 7-1: device descriptor read/64, error -71 [ 191.188933][ T36] audit: type=1400 audit(2000000120.349:647): avc: denied { create } for pid=7982 comm="syz.1.2543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 191.208453][ T7983] usb usb9: usbfs: process 7983 (syz.1.2543) did not claim interface 5 before use [ 191.247463][ T36] audit: type=1400 audit(2000000120.399:648): avc: denied { append } for pid=7990 comm="syz.1.2545" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 191.307578][ T609] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 191.329527][ T609] usb 4-1: device descriptor read/8, error -71 [ 191.330447][ T7993] overlayfs: missing 'lowerdir' [ 191.417544][ T31] usb 7-1: device descriptor read/64, error -71 [ 191.468635][ T609] usb 4-1: device descriptor read/8, error -71 [ 191.537591][ T31] usb usb7-port1: attempt power cycle [ 191.587555][ T609] usb usb4-port1: unable to enumerate USB device [ 191.887566][ T31] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 191.918647][ T31] usb 7-1: device descriptor read/8, error -71 [ 192.049032][ T31] usb 7-1: device descriptor read/8, error -71 [ 192.297567][ T31] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 192.329250][ T31] usb 7-1: device descriptor read/8, error -71 [ 192.361132][ T8004] rust_binder: Error while translating object. [ 192.361172][ T8004] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 192.367379][ T8004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 192.477626][ T63] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 192.485100][ T31] usb 7-1: device descriptor read/8, error -71 [ 192.515618][ T8009] can0: slcan on ttyS3. [ 192.600058][ T8008] can0 (unregistered): slcan off ttyS3. [ 192.610581][ T31] usb usb7-port1: unable to enumerate USB device [ 192.627558][ T63] usb 4-1: Using ep0 maxpacket: 32 [ 192.634620][ T63] usb 4-1: config 126 has an invalid interface number: 30 but max is 0 [ 192.644547][ T63] usb 4-1: config 126 has no interface number 0 [ 192.651078][ T63] usb 4-1: config 126 interface 30 altsetting 2 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 192.662515][ T63] usb 4-1: config 126 interface 30 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 192.677361][ T63] usb 4-1: config 126 interface 30 has no altsetting 0 [ 192.685918][ T63] usb 4-1: New USB device found, idVendor=1f4d, idProduct=a803, bcdDevice=70.89 [ 192.706260][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.714805][ T63] usb 4-1: Product: Д [ 192.720256][ T63] usb 4-1: Manufacturer: ఊ [ 192.725111][ T63] usb 4-1: SerialNumber: П [ 192.809917][ T8043] rust_binder: 54: no such ref 2 [ 192.897668][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 192.897668][ T421] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 192.914566][ T8049] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.925445][ T36] audit: type=1400 audit(2000000122.079:649): avc: denied { read write } for pid=8051 comm="syz.1.2557" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 192.988076][ T63] usb 4-1: USB disconnect, device number 40 [ 193.019883][ T36] audit: type=1400 audit(2000000122.079:650): avc: denied { open } for pid=8051 comm="syz.1.2557" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.063416][ T36] audit: type=1400 audit(2000000122.219:651): avc: granted { setsecparam } for pid=8054 comm="syz.1.2558" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 193.657594][ T8081] rust_binder: Failed to allocate buffer. len:64, is_oneway:true [ 193.704087][ T8086] netlink: 'syz.5.2569': attribute type 1 has an invalid length. [ 193.782021][ T8090] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 193.867844][ T8093] rust_binder: 8092 RLIMIT_NICE not set [ 194.167548][ T31] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 194.349473][ T31] usb 2-1: config 1 interface 0 altsetting 205 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 194.367577][ T31] usb 2-1: config 1 interface 0 has no altsetting 0 [ 194.385899][ T31] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.40 [ 194.399426][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.416399][ T31] usb 2-1: Product: ᾁᮑ룰쒑苮佥䘸踄즼걄ీ툃錰铨挳͍ꮡ쮟釂螲墠偠厖냤攊実뼆䃔렼憸씁꩙輻뽹髸魔೮奞懪＿뙻띠徝콰웺薨覹䎵륛⍷賓趖렠ë⩗ᰞび뎁ꈶ滵潮鯬郏ᑱ̔ꮕ魨胞猃풙跒馆㝰䅴觌⼶潳⹜Წ鞺Ᏽమ釚ꭰ飉朻줊犛쬃愣෮胹䐭㧶贍궖쐩䲫䋺㹽ﴷ鴛鄳쪠 [ 194.483434][ T8104] rust_binder: 67: no such ref 0 [ 194.484992][ T31] usb 2-1: Manufacturer: 㠁 [ 194.493802][ T31] usb 2-1: SerialNumber: Ј [ 194.500088][ T8104] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:67 [ 194.757560][ T1444] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 194.848037][ T8108] rust_binder: Error while translating object. [ 194.848078][ T8108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 194.854375][ T8108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:130 [ 194.878513][ T36] audit: type=1400 audit(2000000124.039:652): avc: denied { sys_module } for pid=8110 comm="syz.5.2577" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 194.878542][ T8111] Invalid ELF header type: 2 != 1 [ 194.881291][ T8111] Invalid ELF header type: 3 != 1 [ 194.937561][ T1444] usb 7-1: Using ep0 maxpacket: 16 [ 194.945679][ T1444] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 194.954692][ T36] audit: type=1400 audit(2000000124.109:653): avc: denied { setattr } for pid=8112 comm="syz.5.2578" name="NETLINK" dev="sockfs" ino=38409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 194.954976][ T1444] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.986440][ T1444] usb 7-1: Product: syz [ 194.990721][ T1444] usb 7-1: Manufacturer: syz [ 195.003628][ T1444] usb 7-1: SerialNumber: syz [ 195.018214][ T1444] usb 7-1: config 0 descriptor?? [ 195.024633][ T1444] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 195.037467][ T1444] usb 7-1: Detected FT232H [ 195.153821][ T8125] netlink: 'syz.3.2581': attribute type 2 has an invalid length. [ 195.211322][ T36] audit: type=1400 audit(2000000124.369:654): avc: denied { map } for pid=8129 comm="syz.3.2583" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 195.236337][ T8106] rust_binder: Error while translating object. [ 195.236372][ T8106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 195.243657][ T8106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:69 [ 195.247830][ T31] usbhid 2-1:1.0: can't add hid device: -71 [ 195.278259][ T1444] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 195.287702][ T31] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 195.287719][ T1444] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 195.299119][ T31] usb 2-1: USB disconnect, device number 38 [ 195.321686][ T1444] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 195.338305][ T1444] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 195.353829][ T1444] usb 7-1: USB disconnect, device number 9 [ 195.365122][ T1444] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 195.375250][ T1444] ftdi_sio 7-1:0.0: device disconnected [ 195.697635][ T31] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 195.857631][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 195.864006][ T31] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 195.872425][ T31] usb 2-1: config 0 has no interface number 0 [ 195.878725][ T31] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.888689][ T31] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 195.904919][ T31] usb 2-1: config 0 interface 196 has no altsetting 0 [ 195.913506][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 195.922800][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.931001][ T31] usb 2-1: Product: syz [ 195.935417][ T31] usb 2-1: Manufacturer: syz [ 195.940367][ T31] usb 2-1: SerialNumber: syz [ 195.947652][ T31] usb 2-1: config 0 descriptor?? [ 195.991245][ T8163] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.991645][ T8163] rust_binder: Error while translating object. [ 195.998281][ T8163] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 196.004533][ T8163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 196.062626][ T8172] rust_binder: Error while translating object. [ 196.071915][ T8172] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 196.078164][ T8172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:92 [ 196.111144][ T8175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.121978][ T8174] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 196.176387][ T8183] rust_binder: Fixups oob 165 172 361 173 [ 196.176413][ T8183] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 196.182551][ T8183] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 196.191341][ T8183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156 [ 196.208957][ T8184] rust_binder: 75: no such ref 2 [ 196.223381][ T8184] rust_binder: 75: no such ref 0 [ 196.228409][ T8184] rust_binder: Write failure EINVAL in pid:75 [ 196.231803][ T8186] rust_binder: Write failure EINVAL in pid:158 [ 196.239004][ T8184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:75 [ 196.289160][ T8194] netlink: 'syz.5.2605': attribute type 16 has an invalid length. [ 196.330912][ T8196] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2606'. [ 196.365192][ T8202] tmpfs: Unknown parameter '0000000000000000000300000000000000000003' [ 196.467080][ T36] audit: type=1400 audit(2000000125.619:655): avc: denied { rename } for pid=8210 comm="syz.6.2611" name="file1" dev="overlay" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 196.617577][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 196.727588][ T1444] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 196.770087][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 196.779298][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.787321][ T10] usb 6-1: Product: syz [ 196.791535][ T10] usb 6-1: Manufacturer: syz [ 196.796161][ T10] usb 6-1: SerialNumber: syz [ 196.876695][ T1444] usb 4-1: Using ep0 maxpacket: 32 [ 196.883176][ T1444] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 196.891413][ T1444] usb 4-1: config 0 has no interface number 0 [ 196.897554][ T1444] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 196.907601][ T1444] usb 4-1: config 0 interface 196 has no altsetting 0 [ 196.915931][ T1444] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 196.925026][ T1444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.933077][ T1444] usb 4-1: Product: syz [ 196.937297][ T1444] usb 4-1: Manufacturer: syz [ 196.941909][ T1444] usb 4-1: SerialNumber: syz [ 196.947447][ T1444] usb 4-1: config 0 descriptor?? [ 196.952813][ T8213] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 196.999417][ T10] usb 6-1: USB disconnect, device number 9 [ 197.296520][ T8216] netlink: 'syz.6.2613': attribute type 27 has an invalid length. [ 197.327021][ T8220] netlink: 'syz.6.2614': attribute type 28 has an invalid length. [ 197.356495][ T8222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=8222 comm=syz.6.2615 [ 197.444021][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2616'. [ 197.454632][ T8228] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 197.543719][ T1444] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 197.564616][ T1444] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 197.569243][ T8241] rust_binder: Write failure EFAULT in pid:130 [ 197.642354][ T36] audit: type=1400 audit(2000000126.823:656): avc: denied { execute } for pid=8242 comm="syz.6.2622" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 197.740636][ T609] usb 4-1: USB disconnect, device number 41 [ 197.806796][ T609] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 197.852031][ T8279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.863551][ T8279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.882966][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2626'. [ 197.893587][ T8282] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 197.893623][ T8282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:168 [ 197.966265][ T8289] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 197.975516][ T8289] rust_binder: Error while translating object. [ 197.987571][ T8289] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 197.993787][ T8289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:143 [ 198.017918][ T8292] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 198.021810][ T8291] netlink: 8568 bytes leftover after parsing attributes in process `syz.6.2629'. [ 198.027243][ T8292] rust_binder: Error while translating object. [ 198.048428][ T8292] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 198.054818][ T8292] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 198.079843][ T331] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 198.215594][ T331] usb 6-1: device descriptor read/64, error -71 [ 198.252619][ T36] audit: type=1400 audit(2000000127.452:657): avc: denied { append } for pid=8297 comm="syz.3.2631" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 198.275848][ T36] audit: type=1400 audit(2000000127.452:658): avc: denied { ioctl } for pid=8297 comm="syz.3.2631" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 198.299172][ T8301] binder: Bad value for 'max' [ 198.332176][ T1444] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 198.424093][ T8308] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 198.434910][ T31] ipheth 2-1:0.196: Unable to find endpoints [ 198.461195][ T331] usb 6-1: device descriptor read/64, error -71 [ 198.470952][ T31] usb 2-1: USB disconnect, device number 39 [ 198.485814][ T1444] usb 7-1: config 0 has an invalid interface number: 182 but max is 1 [ 198.496567][ T1444] usb 7-1: config 0 has no interface number 1 [ 198.502946][ T1444] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 198.517361][ T8312] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 198.517391][ T8312] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:80 [ 198.527017][ T1444] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.552292][ T1444] usb 7-1: config 0 descriptor?? [ 198.596466][ T8327] rust_binder: Error while translating object. [ 198.596501][ T8327] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 198.602748][ T8327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 198.613229][ T8328] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.665035][ T8332] kvm: kvm [8331]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 198.680452][ T8332] kvm: kvm [8331]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 198.711080][ T331] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 198.837489][ T331] usb 6-1: device descriptor read/64, error -71 [ 199.071105][ T331] usb 6-1: device descriptor read/64, error -71 [ 199.178192][ T331] usb usb6-port1: attempt power cycle [ 199.390981][ T36] audit: type=1326 audit(2000000128.614:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.3.2644" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99be98eec9 code=0x0 [ 199.509015][ T331] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 199.529815][ T331] usb 6-1: device descriptor read/8, error -71 [ 199.656091][ T331] usb 6-1: device descriptor read/8, error -71 [ 199.830302][ T1444] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 199.898632][ T331] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 199.919163][ T331] usb 6-1: device descriptor read/8, error -71 [ 200.045871][ T331] usb 6-1: device descriptor read/8, error -71 [ 200.152203][ T331] usb usb6-port1: unable to enumerate USB device [ 200.654221][ T36] audit: type=1400 audit(2000000129.917:660): avc: denied { setcurrent } for pid=8374 comm="syz.3.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 200.792128][ T8393] binder: Bad value for 'defcontext' [ 200.822741][ T8395] rust_binder: Write failure EFAULT in pid:174 [ 200.854386][ T8397] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2662'. [ 200.944813][ T8399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=8399 comm=syz.5.2663 [ 200.962257][ T8399] netlink: 'syz.5.2663': attribute type 16 has an invalid length. [ 200.970196][ T8399] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.2663'. [ 201.009160][ T10] usb 7-1: USB disconnect, device number 10 [ 201.209780][ T8403] usb usb9: usbfs: process 8403 (syz.5.2664) did not claim interface 6 before use [ 201.449752][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 201.597365][ T10] usb 6-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config [ 201.607948][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 201.619290][ T10] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 201.634067][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.643239][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.651386][ T10] usb 6-1: Product: syz [ 201.655689][ T10] usb 6-1: Manufacturer: syz [ 201.660398][ T10] usb 6-1: SerialNumber: syz [ 201.902662][ T8412] fuse: Bad value for 'user_id' [ 201.907928][ T8412] fuse: Bad value for 'user_id' [ 202.522417][ T8423] rust_binder: Write failure EFAULT in pid:99 [ 202.660158][ T10] cdc_ncm 6-1:1.0: bind() failure [ 202.678488][ T10] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 202.691296][ T10] cdc_ncm 6-1:1.1: bind() failure [ 202.784311][ T36] audit: type=1400 audit(2000000132.097:661): avc: denied { setattr } for pid=8450 comm="syz.1.2678" name="/" dev="configfs" ino=1652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 202.808173][ T8454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:162 [ 202.818795][ T8455] tipc: Started in network mode [ 202.834575][ T8455] tipc: Node identity 7eecf32b7064, cluster identity 4711 [ 202.836284][ T8459] random: crng reseeded on system resumption [ 202.841982][ T8455] tipc: Enabled bearer , priority 0 [ 202.857643][ T8453] tipc: Disabling bearer [ 202.870256][ T8458] rust_binder: 164: no such ref 0 [ 202.872663][ T9] usb 6-1: USB disconnect, device number 14 [ 202.882142][ T8458] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 202.890460][ T8458] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 202.968617][ T8469] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2685'. [ 202.977694][ T8469] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2685'. [ 202.986887][ T8469] netlink: 'syz.6.2685': attribute type 6 has an invalid length. [ 202.994657][ T8469] netlink: 'syz.6.2685': attribute type 5 has an invalid length. [ 202.994720][ T8472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8472 comm=syz.3.2686 [ 203.002750][ T8469] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2685'. [ 203.016338][ T8472] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2686'. [ 203.025138][ T8470] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2685'. [ 203.042106][ T8470] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2685'. [ 203.051309][ T8470] netlink: 'syz.6.2685': attribute type 6 has an invalid length. [ 203.059464][ T8470] netlink: 'syz.6.2685': attribute type 5 has an invalid length. [ 203.067453][ T8470] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2685'. [ 203.228999][ T8494] overlayfs: conflicting options: metacopy=off,verity=require [ 203.237041][ T8494] rust_binder: Error while translating object. [ 203.237067][ T8494] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 203.243304][ T8494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:187 [ 203.304424][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2694'. [ 203.409292][ T8501] random: crng reseeded on system resumption [ 203.691743][ T36] audit: type=1400 audit(2000000133.026:662): avc: denied { accept } for pid=8531 comm="syz.3.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.693720][ T8532] /dev/rnullb0: Can't open blockdev [ 203.742261][ T1444] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 203.768924][ T8538] >: renamed from veth0_vlan (while UP) [ 203.822189][ T8546] overlay: filesystem on ./bus not supported as upperdir [ 203.826866][ T8548] binder: Binderfs stats mode cannot be changed during a remount [ 203.837960][ T8545] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2710'. [ 203.889595][ T8550] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2708'. [ 203.935222][ T1444] usb 7-1: Using ep0 maxpacket: 16 [ 203.943390][ T1444] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 203.952517][ T1444] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.960764][ T1444] usb 7-1: Product: syz [ 203.964976][ T1444] usb 7-1: Manufacturer: syz [ 203.969598][ T1444] usb 7-1: SerialNumber: syz [ 203.976841][ T1444] r8152-cfgselector 7-1: Unknown version 0x0000 [ 203.983142][ T1444] r8152-cfgselector 7-1: config 0 descriptor?? [ 204.072776][ T331] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 204.082290][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 204.209780][ T10] usb 2-1: device descriptor read/64, error -71 [ 204.229388][ T331] usb 4-1: Using ep0 maxpacket: 8 [ 204.235487][ T331] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 204.243938][ T331] usb 4-1: config 179 has no interface number 0 [ 204.250266][ T331] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 204.261355][ T331] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 204.272594][ T331] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 204.283781][ T331] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 204.295247][ T331] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 204.308866][ T331] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 204.317938][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.327197][ T8548] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 204.445094][ T10] usb 2-1: device descriptor read/64, error -71 [ 204.600171][ T36] audit: type=1326 audit(2000000133.944:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8539 comm="syz.5.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1138eec9 code=0x7fc00000 [ 204.680623][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 204.758881][ T8556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 204.758915][ T8556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:194 [ 204.759640][ T8557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 204.777677][ T8557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:194 [ 204.817925][ T10] usb 2-1: device descriptor read/64, error -71 [ 204.906288][ T8561] fuse: Bad value for 'user_id' [ 204.911228][ T8561] fuse: Bad value for 'user_id' [ 204.932324][ T8563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.941941][ T8563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.073197][ T10] usb 2-1: device descriptor read/64, error -71 [ 205.181368][ T10] usb usb2-port1: attempt power cycle [ 205.343879][ T36] audit: type=1400 audit(2000000134.708:664): avc: denied { ioctl } for pid=8567 comm="syz.5.2718" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x5400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 205.515063][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 205.543344][ T10] usb 2-1: device descriptor read/8, error -71 [ 205.662198][ T31] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 205.666440][ T8580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:219 [ 205.673089][ T10] usb 2-1: device descriptor read/8, error -71 [ 205.756264][ T8584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.764886][ T8584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.774710][ T8584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.783442][ T8584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.790167][ T31] usb 6-1: device descriptor read/64, error -71 [ 205.792211][ T8584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.806370][ T8584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.927590][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 205.948283][ T10] usb 2-1: device descriptor read/8, error -71 [ 206.025821][ T31] usb 6-1: device descriptor read/64, error -71 [ 206.076070][ T10] usb 2-1: device descriptor read/8, error -71 [ 206.183158][ T10] usb usb2-port1: unable to enumerate USB device [ 206.261704][ T31] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 206.325094][ T8586] Bluetooth: hci0: Frame reassembly failed (-84) [ 206.331689][ T885] Bluetooth: hci0: Frame reassembly failed (-84) [ 206.389474][ T31] usb 6-1: device descriptor read/64, error -71 [ 206.625372][ T31] usb 6-1: device descriptor read/64, error -71 [ 206.733720][ T31] usb usb6-port1: attempt power cycle [ 206.783325][ T331] usb 4-1: USB disconnect, device number 42 [ 206.783372][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 206.783407][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 207.087785][ T31] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 207.118491][ T31] usb 6-1: device descriptor read/8, error -71 [ 207.256127][ T31] usb 6-1: device descriptor read/8, error -71 [ 207.521277][ T31] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 207.561141][ T31] usb 6-1: device descriptor read/8, error -71 [ 207.698986][ T31] usb 6-1: device descriptor read/8, error -71 [ 207.700859][ T8599] rust_binder: 8598 RLIMIT_NICE not set [ 207.763062][ T609] rust_binder: 8597: removing orphan mapping 0:4240 [ 207.806307][ T31] usb usb6-port1: unable to enumerate USB device [ 207.924990][ T8604] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 207.934269][ T1444] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 207.969554][ T8606] random: crng reseeded on system resumption [ 208.083417][ T1444] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 208.090691][ T1444] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.103676][ T1444] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 208.112781][ T1444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.121657][ T1444] usb 2-1: config 0 descriptor?? [ 208.318355][ T421] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 208.318384][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 208.326565][ T1444] usb 2-1: string descriptor 0 read error: -71 [ 208.339095][ T1444] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 208.348602][ T1444] usb 2-1: USB disconnect, device number 45 [ 208.507284][ T8621] __nla_validate_parse: 3 callbacks suppressed [ 208.507304][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2737'. [ 208.527862][ T8621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.536405][ T8621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.920515][ T36] audit: type=1400 audit(2000000138.347:665): avc: denied { create } for pid=8636 comm="syz.3.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 209.153217][ T8645] kvm: kvm [8644]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x5 [ 209.161952][ T8645] kvm: kvm [8644]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x5 [ 209.173845][ T8645] kvm: kvm [8644]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x5 [ 209.190738][ T8645] kvm: kvm [8644]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x5 [ 209.215764][ T8647] rust_binder: Write failure EINVAL in pid:242 [ 209.216366][ T8645] kvm: kvm [8644]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x5 [ 209.236476][ T8645] kvm_intel: kvm [8644]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x5 [ 209.279176][ T8650] rust_binder: Write failure EFAULT in pid:247 [ 209.300960][ T8652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.316592][ T8652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.325758][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2745'. [ 209.726087][ T609] rust_binder: 8660: removing orphan mapping 0:112 [ 210.067708][ T36] audit: type=1400 audit(2000000139.513:666): avc: denied { audit_read } for pid=8700 comm="syz.6.2763" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 210.086359][ T31] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 210.195190][ T36] audit: type=1400 audit(2000000139.635:667): avc: denied { write } for pid=8716 comm="syz.6.2768" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 210.251776][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.262004][ T31] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 210.280243][ T31] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 210.294741][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=0008, bcdDevice= 0.40 [ 210.306451][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 210.314672][ T31] usb 6-1: SerialNumber: syz [ 210.467438][ T8735] rust_binder: Write failure EFAULT in pid:294 [ 210.698153][ T8749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.723332][ T609] usb 6-1: USB disconnect, device number 19 [ 210.737524][ T8749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.746923][ T8749] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 210.755747][ T8749] rust_binder: Write failure EINVAL in pid:243 [ 210.756115][ T8749] rust_binder: Write failure EFAULT in pid:243 [ 211.301450][ T8751] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 211.324301][ T8751] rust_binder: Error while translating object. [ 211.351179][ T8751] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 211.360212][ T8751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:245 [ 211.472735][ T8757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.481628][ T8759] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 211.488439][ T8759] rust_binder: Error while translating object. [ 211.490376][ T8757] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 211.499277][ T8759] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 211.513470][ T8759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:249 [ 211.542829][ T8762] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 211.919421][ T36] audit: type=1400 audit(2000000141.376:668): avc: denied { setattr } for pid=8788 comm="syz.1.2793" path="/dev/udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.952934][ T8789] overlayfs: missing 'lowerdir' [ 212.051124][ T36] audit: type=1400 audit(2000000141.518:669): avc: denied { listen } for pid=8790 comm="syz.5.2794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 212.140007][ T36] audit: type=1400 audit(2000000141.609:670): avc: denied { module_load } for pid=8792 comm="syz.5.2795" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=44164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 212.196503][ T31] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 212.342192][ T8800] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 212.344766][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 212.358639][ T31] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 212.367348][ T31] usb 2-1: config 150 has too many interfaces: 116, using maximum allowed: 32 [ 212.376292][ T31] usb 2-1: config 150 has an invalid descriptor of length 5, skipping remainder of the config [ 212.386659][ T31] usb 2-1: config 150 has 0 interfaces, different from the descriptor's value: 116 [ 212.396783][ T31] usb 2-1: config 150 has too many interfaces: 116, using maximum allowed: 32 [ 212.405731][ T31] usb 2-1: config 150 has an invalid descriptor of length 5, skipping remainder of the config [ 212.416061][ T31] usb 2-1: config 150 has 0 interfaces, different from the descriptor's value: 116 [ 212.426273][ T31] usb 2-1: config 150 has too many interfaces: 116, using maximum allowed: 32 [ 212.435195][ T31] usb 2-1: config 150 has an invalid descriptor of length 5, skipping remainder of the config [ 212.445558][ T31] usb 2-1: config 150 has 0 interfaces, different from the descriptor's value: 116 [ 212.455688][ T31] usb 2-1: config 150 has too many interfaces: 116, using maximum allowed: 32 [ 212.464764][ T31] usb 2-1: config 150 has an invalid descriptor of length 5, skipping remainder of the config [ 212.475321][ T31] usb 2-1: config 150 has 0 interfaces, different from the descriptor's value: 116 [ 212.485413][ T31] usb 2-1: config 150 has too many interfaces: 116, using maximum allowed: 32 [ 212.494382][ T31] usb 2-1: config 150 has an invalid descriptor of length 5, skipping remainder of the config [ 212.504762][ T31] usb 2-1: config 150 has 0 interfaces, different from the descriptor's value: 116 [ 212.514996][ T31] usb 2-1: config 150 has too many interfaces: 116, using maximum allowed: 32 [ 212.524179][ T31] usb 2-1: config 150 has an invalid descriptor of length 5, skipping remainder of the config [ 212.534722][ T31] usb 2-1: config 150 has 0 interfaces, different from the descriptor's value: 116 [ 212.544974][ T31] usb 2-1: config 150 has too many interfaces: 116, using maximum allowed: 32 [ 212.553962][ T31] usb 2-1: config 150 has an invalid descriptor of length 5, skipping remainder of the config [ 212.564377][ T31] usb 2-1: config 150 has 0 interfaces, different from the descriptor's value: 116 [ 212.581183][ T31] usb 2-1: config 150 has too many interfaces: 116, using maximum allowed: 32 [ 212.590241][ T31] usb 2-1: config 150 has an invalid descriptor of length 5, skipping remainder of the config [ 212.600672][ T31] usb 2-1: config 150 has 0 interfaces, different from the descriptor's value: 116 [ 212.611551][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=021b, bcdDevice= 0.00 [ 212.620718][ T31] usb 2-1: New USB device strings: Mfr=91, Product=134, SerialNumber=35 [ 212.629165][ T31] usb 2-1: Product: syz [ 212.633432][ T31] usb 2-1: Manufacturer: syz [ 212.638079][ T31] usb 2-1: SerialNumber: syz [ 213.055673][ T31] usb 2-1: USB disconnect, device number 46 [ 213.284158][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 213.324080][ T36] audit: type=1400 audit(2000000142.813:671): avc: denied { sqpoll } for pid=8816 comm="syz.6.2805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 213.359837][ T8820] __vm_enough_memory: pid: 8820, comm: syz.6.2806, bytes: 18014402804453376 not enough memory for the allocation [ 213.410929][ T8826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 213.410966][ T8826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:320 [ 213.421102][ T8827] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.433710][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 213.451259][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.462534][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.472504][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 213.486422][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 213.495579][ T9] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 213.503744][ T9] usb 6-1: Manufacturer: syz [ 213.509052][ T9] usb 6-1: config 0 descriptor?? [ 213.562843][ T8836] overlayfs: failed to resolve './file1/../file0': -2 [ 213.585656][ T8833] 9pnet_fd: Insufficient options for proto=fd [ 213.665480][ T8844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.674144][ T8844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.834223][ T8855] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 213.834251][ T8855] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 213.842344][ T8855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:339 [ 213.853850][ T8853] /dev/rnullb0: Can't open blockdev [ 213.913486][ T9] appleir 0003:05AC:8243.000E: item fetching failed at offset 0/1 [ 213.923575][ T9] appleir 0003:05AC:8243.000E: parse failed [ 213.929767][ T9] appleir 0003:05AC:8243.000E: probe with driver appleir failed with error -22 [ 214.112178][ T9] usb 6-1: USB disconnect, device number 20 [ 214.214333][ T31] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 214.363853][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 214.370535][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 214.379661][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.388326][ T31] usb 2-1: config 0 descriptor?? [ 214.632483][ T8873] tipc: Enabling of bearer rejected, failed to enable media [ 214.794407][ T31] kye 0003:0458:501B.000F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 214.808466][ T31] kye 0003:0458:501B.000F: hidraw0: USB HID v1.01 Device [HID 0458:501b] on usb-dummy_hcd.1-1/input0 [ 214.819685][ T8875] rust_binder: Error while translating object. [ 214.819791][ T8875] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 214.826085][ T8875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:349 [ 214.828394][ T31] kye 0003:0458:501B.000F: tablet-enabling feature report not found [ 214.860631][ T36] audit: type=1326 audit(2000000144.348:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8868 comm="syz.3.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99be98eec9 code=0x7fc00000 [ 214.890134][ T45] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 214.905915][ T31] kye 0003:0458:501B.000F: tablet enabling failed [ 214.936554][ T36] audit: type=1400 audit(2000000144.429:673): avc: denied { execute } for pid=8887 comm="syz.3.2830" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 214.958264][ T8897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:361 [ 214.961668][ T8897] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 215.017457][ T8905] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.033414][ T8905] IPv6: NLM_F_REPLACE set, but no existing node found! [ 215.041019][ T8905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8905 comm=syz.6.2833 [ 215.053733][ T8905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8905 comm=syz.6.2833 [ 215.066539][ T8905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=8905 comm=syz.6.2833 [ 215.077227][ T45] usb 6-1: not running at top speed; connect to a high speed hub [ 215.079212][ T8905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=8905 comm=syz.6.2833 [ 215.088163][ T45] usb 6-1: config 4 has an invalid interface number: 158 but max is 0 [ 215.108106][ T45] usb 6-1: config 4 has no interface number 0 [ 215.114322][ T45] usb 6-1: config 4 interface 158 altsetting 8 endpoint 0xA has invalid maxpacket 1088, setting to 64 [ 215.125457][ T45] usb 6-1: config 4 interface 158 has no altsetting 0 [ 215.133574][ T45] usb 6-1: New USB device found, idVendor=a40d, idProduct=548e, bcdDevice=5b.b9 [ 215.142780][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.150940][ T45] usb 6-1: Product: syz [ 215.155262][ T45] usb 6-1: Manufacturer: syz [ 215.159876][ T45] usb 6-1: SerialNumber: syz [ 215.322767][ T8908] SELinux: security_context_str_to_sid (ate) failed with errno=-22 [ 215.366749][ T45] usb-storage 6-1:4.158: USB Mass Storage device detected [ 215.427941][ T45] usb 6-1: USB disconnect, device number 21 [ 215.440700][ T8914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 215.927904][ T8926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:282 [ 215.942611][ T8926] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 215.961740][ T8926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:282 [ 216.047405][ T8930] rust_binder: Error in use_page_slow: ESRCH [ 216.047430][ T8930] rust_binder: use_range failure ESRCH [ 216.061291][ T8930] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 216.061326][ T8930] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 216.077396][ T8930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:284 [ 216.393374][ T10] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 216.495628][ T8940] __vm_enough_memory: pid: 8940, comm: syz.6.2846, bytes: 18014402804453376 not enough memory for the allocation [ 216.524827][ T8941] 9pnet_fd: Insufficient options for proto=fd [ 216.532083][ T10] usb 6-1: device descriptor read/64, error -71 [ 216.740133][ T8948] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:371 [ 216.779981][ T10] usb 6-1: device descriptor read/64, error -71 [ 216.927942][ T609] usb 2-1: USB disconnect, device number 47 [ 217.027935][ T10] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 217.045025][ T36] audit: type=1400 audit(2000000146.559:674): avc: denied { create } for pid=8957 comm="syz.1.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 217.141344][ T8969] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.141457][ T8968] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 217.148020][ T8969] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 217.156771][ T10] usb 6-1: device descriptor read/64, error -71 [ 217.345984][ T8988] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 217.424497][ T10] usb 6-1: device descriptor read/64, error -71 [ 217.457393][ T8995] x_tables: unsorted underflow at hook 3 [ 217.646527][ T9006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.660328][ T9006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.147584][ T9021] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 218.364779][ T10] usb usb6-port1: attempt power cycle [ 218.398848][ T36] audit: type=1400 audit(2000000147.930:675): avc: denied { append } for pid=9022 comm="syz.3.2872" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 218.399432][ T9025] rust_binder: Fixups oob 165 172 361 173 [ 218.428219][ T9025] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 218.434086][ T9025] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 218.442956][ T9025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:378 [ 218.473931][ T9027] rust_binder: Error while translating object. [ 218.484356][ T9027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 218.490786][ T9027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:382 [ 218.608915][ T9038] rust_binder: 9037 RLIMIT_NICE not set [ 218.626246][ T9039] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 218.629425][ T31] rust_binder: 9035: removing orphan mapping 0:24 [ 218.704191][ T10] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 218.725074][ T10] usb 6-1: device descriptor read/8, error -71 [ 218.854142][ T10] usb 6-1: device descriptor read/8, error -71 [ 218.952396][ T1444] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 219.091358][ T10] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 219.102352][ T1444] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.113945][ T1444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 219.124983][ T1444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 219.143086][ T1444] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.157267][ T1444] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.167032][ T1444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.180610][ T10] usb 6-1: device descriptor read/8, error -71 [ 219.197712][ T1444] usb 4-1: config 0 descriptor?? [ 219.255929][ T9060] netlink: 'syz.6.2884': attribute type 1 has an invalid length. [ 219.289797][ T9060] rust_binder: Error in use_page_slow: ESRCH [ 219.289830][ T9060] rust_binder: use_range failure ESRCH [ 219.295859][ T9060] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 219.301425][ T9060] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 219.309444][ T9060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:411 [ 219.319396][ T10] usb 6-1: device descriptor read/8, error -71 [ 219.415845][ T9069] tipc: Enabled bearer , priority 0 [ 219.423756][ T9069] tipc: Disabling bearer [ 219.438722][ T10] usb usb6-port1: unable to enumerate USB device [ 219.604422][ T1444] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 219.613532][ T1444] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 219.639052][ T63] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 219.726714][ T10] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 219.797246][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.808300][ T63] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 219.817603][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.826309][ T63] usb 2-1: config 0 descriptor?? [ 219.872859][ T1444] usb 4-1: USB disconnect, device number 43 [ 219.880145][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 219.891639][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 219.904947][ T10] usb 6-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 219.915371][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.925428][ T10] usb 6-1: config 0 descriptor?? [ 219.930665][ T9062] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 219.938914][ T10] usbhid 6-1:0.0: can't add hid device: -22 [ 219.944925][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 219.945448][ T9082] SELinux: policydb magic number 0xff does not match expected magic number 0xf97cff8c [ 219.962705][ T9082] SELinux: failed to load policy [ 220.140532][ T9062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.150397][ T9062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.159177][ T1444] usb 6-1: USB disconnect, device number 26 [ 220.232288][ T63] steelseries 0003:1038:12B6.0011: unknown main item tag 0xd [ 220.242759][ T63] steelseries 0003:1038:12B6.0011: item fetching failed at offset 6/7 [ 220.251531][ T63] steelseries 0003:1038:12B6.0011: probe with driver steelseries failed with error -22 [ 220.431540][ T31] usb 2-1: USB disconnect, device number 48 [ 220.531982][ T9092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.540736][ T9092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.550853][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 220.820511][ T36] audit: type=1326 audit(2000000150.367:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9080 comm="syz.3.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99be98eec9 code=0x7fc00000 [ 220.995499][ T9104] No source specified [ 221.062378][ T9107] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:213 [ 222.231705][ T9133] rust_binder: Error while translating object. [ 222.267408][ T9133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 222.286926][ T9133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:316 [ 222.361280][ T9134] fuseblk: Unknown parameter 'fowner>00000000000000000003' [ 222.448626][ T36] audit: type=1400 audit(2000000151.917:677): avc: denied { mounton } for pid=9128 comm="syz.1.2906" path="/67/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 222.588040][ T421] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 222.594341][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 223.361838][ T9161] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 223.361868][ T9161] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 223.361909][ T9160] rust_binder: Fixups oob 165 172 361 173 [ 223.370052][ T9161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:420 [ 223.387493][ T9160] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 223.396751][ T9160] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 223.405238][ T9160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:420 [ 223.453644][ T9171] binder: Unknown parameter 'fscontext?}' [ 223.543144][ T9176] can0: slcan on ptm0. [ 223.592053][ T1444] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 223.711354][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 223.751122][ T1444] usb 6-1: Using ep0 maxpacket: 16 [ 223.757358][ T1444] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.768298][ T1444] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.778116][ T1444] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.791017][ T1444] usb 6-1: New USB device found, idVendor=047d, idProduct=0000, bcdDevice= 0.00 [ 223.800075][ T1444] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.809210][ T1444] usb 6-1: config 0 descriptor?? [ 223.860520][ T10] usb 4-1: device descriptor read/64, error -71 [ 223.870468][ T63] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 224.016712][ T1444] usbhid 6-1:0.0: can't add hid device: -71 [ 224.022756][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 224.028012][ T1444] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 224.037426][ T1444] usb 6-1: USB disconnect, device number 27 [ 224.048641][ T63] usb 2-1: config 2 has an invalid interface number: 115 but max is 2 [ 224.057386][ T63] usb 2-1: config 2 has an invalid interface number: 42 but max is 2 [ 224.066244][ T63] usb 2-1: config 2 has an invalid interface number: 226 but max is 2 [ 224.074491][ T63] usb 2-1: config 2 has an invalid interface number: 186 but max is 2 [ 224.082705][ T63] usb 2-1: config 2 has an invalid interface number: 134 but max is 2 [ 224.090913][ T63] usb 2-1: config 2 has an invalid interface association descriptor of length 2, skipping [ 224.101000][ T63] usb 2-1: config 2 has 5 interfaces, different from the descriptor's value: 3 [ 224.110000][ T10] usb 4-1: device descriptor read/64, error -71 [ 224.116285][ T63] usb 2-1: config 2 has no interface number 0 [ 224.122456][ T63] usb 2-1: config 2 has no interface number 1 [ 224.128545][ T63] usb 2-1: config 2 has no interface number 2 [ 224.134649][ T63] usb 2-1: config 2 has no interface number 3 [ 224.140815][ T63] usb 2-1: config 2 has no interface number 4 [ 224.146913][ T63] usb 2-1: config 2 interface 115 altsetting 2 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 224.157941][ T63] usb 2-1: config 2 interface 115 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 224.168876][ T63] usb 2-1: config 2 interface 115 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 224.179993][ T63] usb 2-1: config 2 interface 42 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 224.190804][ T63] usb 2-1: config 2 interface 42 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 224.201621][ T63] usb 2-1: config 2 interface 226 altsetting 14 has a duplicate endpoint with address 0xD, skipping [ 224.212428][ T63] usb 2-1: config 2 interface 226 altsetting 14 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 224.223944][ T63] usb 2-1: config 2 interface 226 altsetting 14 has a duplicate endpoint with address 0x1, skipping [ 224.234846][ T63] usb 2-1: config 2 interface 226 altsetting 14 has 5 endpoint descriptors, different from the interface descriptor's value: 16 [ 224.248081][ T63] usb 2-1: too many endpoints for config 2 interface 186 altsetting 119: 200, using maximum allowed: 30 [ 224.259240][ T63] usb 2-1: config 2 interface 186 altsetting 119 has a duplicate endpoint with address 0x4, skipping [ 224.270130][ T63] usb 2-1: config 2 interface 186 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 224.281020][ T63] usb 2-1: config 2 interface 186 altsetting 119 has an invalid descriptor for endpoint zero, skipping [ 224.292274][ T63] usb 2-1: config 2 interface 186 altsetting 119 has an invalid descriptor for endpoint zero, skipping [ 224.303340][ T63] usb 2-1: config 2 interface 186 altsetting 119 has a duplicate endpoint with address 0xD, skipping [ 224.314385][ T63] usb 2-1: config 2 interface 186 altsetting 119 endpoint 0x5 has invalid maxpacket 991, setting to 64 [ 224.325625][ T63] usb 2-1: config 2 interface 186 altsetting 119 has a duplicate endpoint with address 0x7, skipping [ 224.336973][ T63] usb 2-1: config 2 interface 186 altsetting 119 has a duplicate endpoint with address 0x4, skipping [ 224.348053][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 224.355705][ T63] usb 2-1: config 2 interface 186 altsetting 119 has an invalid descriptor for endpoint zero, skipping [ 224.366996][ T63] usb 2-1: config 2 interface 186 altsetting 119 endpoint 0x2 has an invalid bInterval 127, changing to 10 [ 224.379179][ T63] usb 2-1: config 2 interface 186 altsetting 119 has 11 endpoint descriptors, different from the interface descriptor's value: 200 [ 224.392864][ T63] usb 2-1: too many endpoints for config 2 interface 134 altsetting 147: 31, using maximum allowed: 30 [ 224.404319][ T63] usb 2-1: config 2 interface 134 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 224.407558][ T9173] can0 (unregistered): slcan off ptm0. [ 224.420008][ T63] usb 2-1: config 2 interface 115 has no altsetting 0 [ 224.430164][ T63] usb 2-1: config 2 interface 42 has no altsetting 0 [ 224.436873][ T63] usb 2-1: config 2 interface 226 has no altsetting 0 [ 224.445039][ T63] usb 2-1: config 2 interface 186 has no altsetting 0 [ 224.451978][ T63] usb 2-1: config 2 interface 134 has no altsetting 0 [ 224.466583][ T63] usb 2-1: New USB device found, idVendor=04f2, idProduct=aff1, bcdDevice=e6.1a [ 224.475819][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.487127][ T63] usb 2-1: Product: 锆Ṅᰍₔ㿟榛꟯㐤㨇鿧炎訶ᔣᲒ涍郸믜涘┣鿌쯀＂䭫枫킜牁⥅ৎ⡔멣塠䘷茷稑䐔屯䌃⤥Ԛ⮛㊄뵃儧쎸짲岤䓓ᒟ㎢硓ࣁ醡ꁚ鼁⯒儍፽䵜キ颱옢悪눕ኇ咛આ侓蘆縡䀥답崈쬽빍⚕Ԑ᳾㗰䞂鮧ﯦ骝䥘ᄻϽ睪詆콵喇쬕䞭ẞ [ 224.517512][ T10] usb 4-1: device descriptor read/64, error -71 [ 224.538032][ T63] usb 2-1: Manufacturer: 臃댨즙䣒범칈燰萜裣孺鑾﮵℧演㮦瀋⑱ၘ剺ඨ㤷Ⰲ젩뀄苉᫡ᐷ㵃龮ۍ쳏쎌ぇ﯄쬧㡈ዄ쿬뎺⑕沽ɝ [ 224.557770][ T63] usb 2-1: SerialNumber: Б [ 224.593520][ T9222] netlink: 'syz.5.2923': attribute type 3 has an invalid length. [ 224.755732][ T10] usb 4-1: device descriptor read/64, error -71 [ 224.835385][ T45] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 224.865266][ T10] usb usb4-port1: attempt power cycle [ 224.965501][ T9185] rust_binder: Error while translating object. [ 224.965566][ T9185] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 224.971776][ T9185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:226 [ 224.984585][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 224.991992][ T63] usb 2-1: USB disconnect, device number 49 [ 225.005730][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.017081][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 225.029941][ T45] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 225.039037][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.047836][ T45] usb 6-1: config 0 descriptor?? [ 225.203494][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 225.224521][ T10] usb 4-1: device descriptor read/8, error -71 [ 225.353812][ T10] usb 4-1: device descriptor read/8, error -71 [ 225.453016][ T45] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 225.463115][ T45] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 225.470349][ T45] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 225.477615][ T45] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 225.484948][ T45] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 225.492732][ T45] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 225.501551][ T45] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 225.512543][ T9236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.520765][ T9238] random: crng reseeded on system resumption [ 225.522082][ T45] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 225.534387][ T9236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.542381][ T45] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 225.549923][ T45] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 225.558333][ T45] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 225.571839][ T45] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0012/input/input17 [ 225.588286][ T45] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 225.601441][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 225.622436][ T10] usb 4-1: device descriptor read/8, error -71 [ 225.751690][ T10] usb 4-1: device descriptor read/8, error -71 [ 225.860384][ T10] usb usb4-port1: unable to enumerate USB device [ 226.055164][ T9222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.064600][ T9222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.079548][ T36] audit: type=1400 audit(2000000155.647:678): avc: denied { map } for pid=9221 comm="syz.5.2923" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.365978][ T9253] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.383704][ T9255] rust_binder: Error while translating object. [ 226.390370][ T9255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 226.396682][ T9255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:239 [ 226.481358][ T9257] overlay: Bad value for 'uuid' [ 226.612320][ T10] usb 6-1: USB disconnect, device number 28 [ 226.657965][ T45] rust_binder: 9267: removing orphan mapping 0:112 [ 226.754983][ T36] audit: type=1400 audit(2000000156.330:679): avc: denied { create } for pid=9272 comm="syz.3.2939" name="custom1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 226.819810][ T9275] binder: Bad value for 'max' [ 227.024786][ T10] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 227.094521][ T63] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 227.141219][ T9279] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 227.172512][ T9281] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 227.184537][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 227.204393][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 227.226040][ T10] usb 6-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 227.239081][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.247195][ T63] usb 4-1: Using ep0 maxpacket: 8 [ 227.254287][ T63] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 227.263034][ T10] usb 6-1: config 0 descriptor?? [ 227.268079][ T63] usb 4-1: config 0 has no interface number 0 [ 227.274639][ T9271] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 227.275884][ T63] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 227.291858][ T10] usbhid 6-1:0.0: can't add hid device: -22 [ 227.297945][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 227.306195][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.315856][ T63] usb 4-1: Product: syz [ 227.320258][ T63] usb 4-1: Manufacturer: syz [ 227.325015][ T63] usb 4-1: SerialNumber: syz [ 227.330214][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2944'. [ 227.331199][ T63] usb 4-1: config 0 descriptor?? [ 227.382042][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.391384][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.547237][ T63] usb 4-1: USB disconnect, device number 48 [ 227.612314][ T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 227.741791][ T10] usb 2-1: device descriptor read/64, error -71 [ 227.924949][ T31] rust_binder: 9282: removing orphan mapping 0:8 [ 227.980646][ T10] usb 2-1: device descriptor read/64, error -71 [ 228.064414][ T497] rust_binder: 0: removing orphan mapping 0:112 [ 228.076731][ T9295] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 228.104806][ T9299] rust_binder: Write failure EFAULT in pid:447 [ 228.146056][ T9301] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 228.152280][ T9301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:449 [ 228.162257][ T9302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.219652][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 228.359079][ T10] usb 2-1: device descriptor read/64, error -71 [ 228.451766][ T9318] __vm_enough_memory: pid: 9318, comm: syz.6.2956, bytes: 18014402804453376 not enough memory for the allocation [ 228.550867][ T9325] rust_binder: Error in use_page_slow: ESRCH [ 228.550887][ T9325] rust_binder: use_range failure ESRCH [ 228.556986][ T9325] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 228.562684][ T9325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 228.570752][ T9325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:484 [ 228.608098][ T10] usb 2-1: device descriptor read/64, error -71 [ 228.609397][ T9327] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.637563][ T9332] rust_binder: Write failure EFAULT in pid:491 [ 228.675113][ T9337] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2962'. [ 228.690430][ T9337] netlink: 'syz.6.2962': attribute type 6 has an invalid length. [ 228.698229][ T9337] netlink: 'syz.6.2962': attribute type 5 has an invalid length. [ 228.705969][ T9337] netlink: 'syz.6.2962': attribute type 4 has an invalid length. [ 228.719559][ T10] usb usb2-port1: attempt power cycle [ 228.781721][ T9341] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2964'. [ 229.009610][ T9344] rust_binder: Error while translating object. [ 229.009660][ T9344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 229.016035][ T9344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:502 [ 229.076233][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 229.117119][ T10] usb 2-1: device descriptor read/8, error -71 [ 229.225097][ T9346] rust_binder: Read failure Err(EAGAIN) in pid:505 [ 229.225449][ T9346] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 229.257449][ T10] usb 2-1: device descriptor read/8, error -71 [ 229.269836][ T9351] rust_binder: Error in use_page_slow: ESRCH [ 229.269854][ T9351] rust_binder: use_range failure ESRCH [ 229.276868][ T9351] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 229.282457][ T9351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 229.290956][ T9351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:507 [ 229.349534][ T9357] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 229.358683][ T9357] rust_binder: Error while translating object. [ 229.367894][ T9357] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 229.374193][ T9357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:470 [ 229.431374][ T9361] rust_binder: Error in use_page_slow: ESRCH [ 229.440882][ T9361] rust_binder: use_range failure ESRCH [ 229.447090][ T9361] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 229.452703][ T9361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 229.461262][ T9361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:510 [ 229.471437][ T9362] rust_binder: 472: no such ref 2 [ 229.494549][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 229.525495][ T10] usb 2-1: device descriptor read/8, error -71 [ 229.654932][ T10] usb 2-1: device descriptor read/8, error -71 [ 229.763926][ T497] usb 6-1: USB disconnect, device number 29 [ 229.770053][ T10] usb usb2-port1: unable to enumerate USB device [ 229.782204][ T9364] rust_binder: Write failure EINVAL in pid:331 [ 230.167144][ T9373] pim6reg0: tun_chr_ioctl cmd 1074025681 [ 230.179321][ T9373] pim6reg0: tun_chr_ioctl cmd 1342215191 [ 230.238118][ T36] audit: type=1326 audit(2000000159.825:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.6.2977" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f486af8eec9 code=0x0 [ 230.303516][ T9382] netlink: 'syz.6.2979': attribute type 19 has an invalid length. [ 230.311355][ T9382] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2979'. [ 230.332356][ T36] audit: type=1400 audit(2000000159.925:681): avc: denied { checkpoint_restore } for pid=9378 comm="syz.3.2978" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 230.464356][ T9405] rust_binder: 529: no such ref 3 [ 230.469444][ T9405] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 257 [ 230.476775][ T9405] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 230.483846][ T9405] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 230.490904][ T9405] rust_binder: 529: no such ref 0 [ 230.535454][ T9407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.544059][ T9407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.596782][ T9410] random: crng reseeded on system resumption [ 230.789845][ T31] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 230.929543][ T31] usb 2-1: device descriptor read/64, error -71 [ 231.171330][ T31] usb 2-1: device descriptor read/64, error -71 [ 231.180334][ T9419] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 231.212289][ T609] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 231.233510][ T609] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 231.402547][ T9431] SELinux: Context system_u:object_r:cgroup_t:s0 is not valid (left unmapped). [ 231.411886][ T36] audit: type=1400 audit(2000000161.009:682): avc: denied { relabelto } for pid=9430 comm="syz.3.2996" name="file0" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:cgroup_t:s0" [ 231.427634][ T31] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 231.445477][ T36] audit: type=1400 audit(2000000161.009:683): avc: denied { associate } for pid=9430 comm="syz.3.2996" name="file0" dev="tmpfs" ino=886 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:cgroup_t:s0" [ 231.459648][ T9435] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 231.481099][ T9435] rust_binder: Error while translating object. [ 231.489866][ T9435] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 231.496129][ T9435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:541 [ 231.607061][ T31] usb 2-1: device descriptor read/64, error -71 [ 231.636971][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 231.796419][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 231.805645][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 231.814432][ T10] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 231.824584][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.834904][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 231.844039][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.852080][ T10] usb 6-1: Product: syz [ 231.856307][ T10] usb 6-1: Manufacturer: syz [ 231.860917][ T10] usb 6-1: SerialNumber: syz [ 231.867672][ T31] usb 2-1: device descriptor read/64, error -71 [ 231.976043][ T31] usb usb2-port1: attempt power cycle [ 232.071940][ T10] usb 6-1: 0:2 : does not exist [ 232.078392][ T10] usb 6-1: USB disconnect, device number 30 [ 232.286229][ T9454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:506 [ 232.332506][ T31] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 232.365673][ T31] usb 2-1: device descriptor read/8, error -71 [ 232.445395][ T9461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 232.445428][ T9461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:513 [ 232.495165][ T31] usb 2-1: device descriptor read/8, error -71 [ 232.753378][ T31] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 232.780529][ T31] usb 2-1: device descriptor read/8, error -71 [ 232.788063][ T9473] rust_binder: inc_ref_done called when no active inc_refs [ 232.818902][ T9475] rust_binder: Failed to allocate buffer. len:64, is_oneway:true [ 232.882052][ T36] audit: type=1326 audit(2000000162.483:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.6.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486af8eec9 code=0x7fc00000 [ 232.935546][ T31] usb 2-1: device descriptor read/8, error -71 [ 233.042580][ T31] usb usb2-port1: unable to enumerate USB device [ 233.392162][ T9511] 9pnet_fd: Insufficient options for proto=fd [ 233.414135][ T9513] can0: slcan on ptm0. [ 233.453747][ T9513] can0 (unregistered): slcan off ptm0. [ 233.486489][ T9520] rust_binder: Error while translating object. [ 233.486542][ T9520] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 233.493351][ T9520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:258 [ 233.506491][ T36] audit: type=1400 audit(2000000163.105:685): avc: denied { map } for pid=9522 comm="syz.3.3025" path="pipe:[51544]" dev="pipefs" ino=51544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 233.541481][ T9525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9525 comm=syz.3.3025 [ 233.562850][ T9525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9525 comm=syz.3.3025 [ 233.569217][ T9537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.577562][ T9537] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 233.584221][ T9537] rust_binder: Error while translating object. [ 233.590746][ T9525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9525 comm=syz.3.3025 [ 233.597547][ T9537] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 233.613758][ T9537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268 [ 233.670900][ T9546] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 232, size: 100) [ 233.680148][ T9546] rust_binder: Error while translating object. [ 233.690937][ T9546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 233.697214][ T9546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:270 [ 233.710132][ T9548] rust_binder: Read failure Err(EAGAIN) in pid:270 [ 233.873062][ T9574] rust_binder: Failed copying remainder into alloc: EFAULT [ 233.879642][ T9574] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 233.887124][ T9575] rust_binder: Failed copying remainder into alloc: EFAULT [ 233.895585][ T9575] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 233.900536][ T9574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 233.903028][ T9575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 233.911372][ T9574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:536 [ 233.920524][ T9575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:536 [ 233.999852][ T497] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 234.079438][ T63] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 234.094391][ T9585] rust_binder: Error while translating object. [ 234.094426][ T9585] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 234.100662][ T9585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:566 [ 234.980917][ T497] usb 2-1: Using ep0 maxpacket: 32 [ 234.997019][ T497] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.997600][ T9590] rust_binder: 571: no such ref 0 [ 235.008282][ T497] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.022844][ T497] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 235.032006][ T497] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.042136][ T9592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.042416][ T497] usb 2-1: config 0 descriptor?? [ 235.055987][ T63] usb 6-1: device descriptor read/64, error -71 [ 235.057712][ T9592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.116557][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 235.246223][ T10] usb 4-1: device descriptor read/64, error -71 [ 235.296149][ T63] usb 6-1: device descriptor read/64, error -71 [ 235.465486][ T497] savu 0003:1E7D:2D5A.0014: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 235.485740][ T10] usb 4-1: device descriptor read/64, error -71 [ 235.545440][ T63] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 235.675176][ T63] usb 6-1: device descriptor read/64, error -71 [ 235.715487][ T9558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.724109][ T9558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.734195][ T497] usb 2-1: USB disconnect, device number 58 [ 235.740201][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 235.874614][ T10] usb 4-1: device descriptor read/64, error -71 [ 235.914527][ T63] usb 6-1: device descriptor read/64, error -71 [ 236.024344][ T63] usb usb6-port1: attempt power cycle [ 236.114051][ T10] usb 4-1: device descriptor read/64, error -71 [ 236.223874][ T10] usb usb4-port1: attempt power cycle [ 236.263664][ T9596] rust_binder: Write failure EINVAL in pid:278 [ 236.363387][ T63] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 236.394403][ T63] usb 6-1: device descriptor read/8, error -71 [ 236.524070][ T63] usb 6-1: device descriptor read/8, error -71 [ 236.562896][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 236.583900][ T10] usb 4-1: device descriptor read/8, error -71 [ 236.713651][ T10] usb 4-1: device descriptor read/8, error -71 [ 236.762492][ T63] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 236.784843][ T63] usb 6-1: device descriptor read/8, error -71 [ 236.830179][ T9618] rust_binder: pid 9618 performed invalid decrement on ref [ 236.912671][ T63] usb 6-1: device descriptor read/8, error -71 [ 236.961973][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 236.978319][ T9628] rust_binder: 9629 RLIMIT_NICE not set [ 236.987478][ T497] rust_binder: 9627: removing orphan mapping 0:1168 [ 237.005370][ T10] usb 4-1: device descriptor read/8, error -71 [ 237.023271][ T9632] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 237.035947][ T9632] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 237.044437][ T9632] CPU: 1 UID: 0 PID: 9632 Comm: syz.1.3052 Not tainted syzkaller #0 98bacdaf52065bb91416bd5578e49f5aee2639ea [ 237.056037][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 237.066143][ T9632] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 237.072470][ T9632] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 97 d3 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 73 d3 e6 ff 4c 8b 1b 48 8b 3c 24 [ 237.082257][ T63] usb usb6-port1: unable to enumerate USB device [ 237.092130][ T9632] RSP: 0018:ffffc9000135f820 EFLAGS: 00010202 [ 237.092171][ T9632] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888116114c00 [ 237.092191][ T9632] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffeffff [ 237.120596][ T9632] RBP: ffffc9000135fa40 R08: ffff8881f6f72240 R09: 1ffff1103edee448 [ 237.128633][ T9632] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 237.136680][ T9632] R13: 7ffffffffffeffff R14: ffff8881347ee010 R15: ffff8881347ee000 [ 237.144706][ T9632] FS: 00007fa4879866c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 237.153710][ T9632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.160348][ T9632] CR2: 000000110c34d3f4 CR3: 00000001408d4000 CR4: 00000000003526b0 [ 237.168378][ T9632] Call Trace: [ 237.171707][ T9632] [ 237.174691][ T9632] ? __cfi_iter_file_splice_write+0x10/0x10 [ 237.180670][ T9632] ? __kasan_kmalloc+0x96/0xb0 [ 237.185493][ T9632] ? __kasan_check_write+0x18/0x20 [ 237.188865][ T36] audit: type=1400 audit(2000000166.695:686): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 237.190655][ T9632] ? __cfi_iter_file_splice_write+0x10/0x10 [ 237.218293][ T9632] direct_splice_actor+0x279/0x4b0 [ 237.220774][ T10] usb 4-1: device descriptor read/8, error -71 [ 237.223461][ T9632] splice_direct_to_actor+0x4fe/0xbc0 [ 237.223507][ T9632] ? __cfi_direct_splice_actor+0x10/0x10 [ 237.238517][ T36] audit: type=1400 audit(2000000166.695:687): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.240690][ T9632] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 237.267885][ T9632] do_splice_direct+0x182/0x270 [ 237.272801][ T9632] ? __cfi_do_splice_direct+0x10/0x10 [ 237.278234][ T9632] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 237.284179][ T9632] ? security_file_permission+0x2e/0xc0 [ 237.286552][ T36] audit: type=1400 audit(2000000166.695:688): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.289773][ T9632] ? rw_verify_area+0xac/0x230 [ 237.315756][ T9632] do_sendfile+0x5c8/0xfb0 [ 237.320223][ T9632] ? vfs_writev+0xcf0/0xcf0 [ 237.324792][ T9632] ? __se_sys_futex+0x28f/0x300 [ 237.329706][ T9632] __x64_sys_sendfile64+0x193/0x1f0 [ 237.334971][ T9632] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 237.340755][ T9632] ? switch_fpu_return+0x12/0x20 [ 237.345473][ T10] usb usb4-port1: unable to enumerate USB device [ 237.345731][ T9632] x64_sys_call+0xa26/0x2ee0 [ 237.356625][ T36] audit: type=1400 audit(2000000166.695:689): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.356692][ T9632] do_syscall_64+0x58/0xf0 [ 237.381593][ T9632] ? clear_bhb_loop+0x50/0xa0 [ 237.386318][ T9632] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 237.392281][ T9632] RIP: 0033:0x7fa486b8eec9 [ 237.396757][ T9632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.404476][ T36] audit: type=1400 audit(2000000166.695:690): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 237.416395][ T9632] RSP: 002b:00007fa487986038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 237.416428][ T9632] RAX: ffffffffffffffda RBX: 00007fa486de5fa0 RCX: 00007fa486b8eec9 [ 237.416448][ T9632] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 237.461236][ T9632] RBP: 00007fa486c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 237.469254][ T9632] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000 [ 237.471329][ T36] audit: type=1400 audit(2000000166.695:691): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 237.477253][ T9632] R13: 00007fa486de6038 R14: 00007fa486de5fa0 R15: 00007ffdd7843228 [ 237.477282][ T9632] [ 237.511120][ T9632] Modules linked in: [ 237.515339][ T9632] ---[ end trace 0000000000000000 ]--- [ 237.526145][ T9632] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 237.534203][ T9632] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 97 d3 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 73 d3 e6 ff 4c 8b 1b 48 8b 3c 24 [ 237.550246][ T36] audit: type=1400 audit(2000000166.695:692): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 237.554183][ T9632] RSP: 0018:ffffc9000135f820 EFLAGS: 00010202 [ 237.591974][ T9639] rust_binder: Error while translating object. [ 237.598279][ T9632] [ 237.610876][ T9639] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 237.610915][ T9639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:298 [ 237.620743][ T9632] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888116114c00 [ 237.638757][ T9632] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffeffff [ 237.647058][ T9632] RBP: ffffc9000135fa40 R08: ffff8881f6f72240 R09: 1ffff1103edee448 [ 237.655446][ T9632] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 237.663818][ T9632] R13: 7ffffffffffeffff R14: ffff8881347ee010 R15: ffff8881347ee000 [ 237.672208][ T9632] FS: 00007fa4879866c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 237.681495][ T9632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.688311][ T9632] CR2: 00007fa487943f98 CR3: 00000001408d4000 CR4: 00000000003526b0 [ 237.696704][ T9632] Kernel panic - not syncing: Fatal exception [ 237.703160][ T9632] Kernel Offset: disabled [ 237.707514][ T9632] Rebooting in 86400 seconds..