last executing test programs: 6m22.034552883s ago: executing program 32 (id=84): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 4m18.265844061s ago: executing program 33 (id=2412): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000140)=',,\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r3, &(0x7f0000001f80)=""/4096, 0x1000) (async) getdents64(r3, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f00000002c0)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, &(0x7f0000000380)='cache=mmap') r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2000, 0x0) sendfile(r4, r0, 0x0, 0x2fe4) 3m52.512162262s ago: executing program 34 (id=2793): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000007c0)=@newtclass={0x24, 0x28, 0x1d, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xb, 0xf}, {0x8, 0xf}, {0xf, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004bc74b20cd14166158010102030109021b000c000220010904"], 0x0) syz_usb_connect(0x0, 0x33, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007b8955403a0976245b0d0102030109022100010d20000009040000000e0100000f2402010102"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000140)=[@exit_looper, @acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) 3m32.190922484s ago: executing program 35 (id=2890): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done], 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000280)=[@dead_binder_done, @enter_looper], 0xc2d, 0x0, &(0x7f0000001480)="0c230c49b5a42b243bd7b7b1904a4b8581244fe0f0f5014a86c0f3a9ff09918d8bdfd4356787dbc1f66b79285ef7aa4f9209f28084a27e7b96c158ba52242033097a1c2243c23874f3a26940f5f91f813ce61637a0abeedd836d1fbd9db3161c45132b4b03a4dd4fe5541d2df18f1cdb3995718771703c1f9980444eb19044be6ded14234c651672f4bb67f6641ec61775ed67fed50109dd9ae5251a04cd90c33a1761b014bae317b18d7f77936d6b5ccb52e13dad94a7912b168a5bd5d5dadaaef156e25ab41b2b3ced0226ef6c301a353c61e66b3cd98365c4b174437333f4123a45b9600dd2d332d0d9898676683941b48ea8be9256df0ec523eaf4dc15e7bfbc6c1b0b9f77c38e082c520d730d0f4eba7234f1035e6cb60b5188a9eb1a803d78e55926695873c82dbd49d4ba59d1004ee1e9e7b77bde2d5b69fd778e07e8a55b8f9199da0fc459a6cb4cecc195bf9ee3ba932bf9ffcdb8e0dc63e797da3c13fe081af4a579b488edc8902679707915a2262d2d9ea350833a6310a2ef8ab5f698f3fc25a41a6948275077b4e7e35a4da6223f7b7a2622ecbceecb57383e2a198285f8e3c28f67277fa0f03eb818c5aa36abf1ed1bf360e772c01fb32633623048112ce1f76f2fb1e9ec28b97e5f28194680270d92ac98f08319f845654f9fb5c540b6771cf94b2dd4f8ac983e17e1081b0baedf6ab2d100ec53a7454bdf42fca3a3263e5c7b0c9143fc9e3874423120f9c7727f08cd5792d18f1893682a078112756d7f4e9dc662fb73915796d0412b3577c1ceca83d347383d1c4e2dbd668b973c5704346232d61fb9e93a8ebe542ca4285ff7c01f3f2171466e744f40a1e2ab2d7038561e3ba46f916dae321c5b6063dff810f6f000757c96c79ab806fb58e9d88db408609abcfc62c1074d3e1cbfe819779ea420b02ba0e2a39bd41bedd469c96501b3ee1ac455fce3c576ba7b102fba26a3d2a013d5463c3da454d45dd9d581af96cb6bd8b404a0b2aed0016df7a2d0829c1d1608aff5389eb9fd3dcc152e69cc8c2405a05457797d170b7dc58c1dc315b781f9933153eefd79290152f86acc2069c382635f8063e714b0a7aa95dde151bbe6eda6231c9fd174134ef02376dc22269b330a4495f77e85c4835f43e2f9e0a958d1038b1470b7058a8ae37b71efd8cea19db6a320c1c392b766fe1a193ffbea5a1470f8f90aaec54f757d1099bf33ff6e83ae474dc454e1825e8f5c55df1e7496c3d447f6f73b59c8b35ad445bd0662696ab82d32c56b81f38907493ad2bf4530e78df526fada4f0f35e4774f7ab252ad697a57f6edce643193b9d18ffdf45e0180a7faa1b8e47a9fb2cd7a184aafcb1d8628019dd763b614cde900ff03af4e391cee13181543a23985f806ea9ff626b7865e2fff6cec859d588a73386de447b246f15d4223d1b6563696471215a7d847e92113d1432db592eeab88a45bb93c5c2469d61f9f170d4813d8f3a609c2482a159e9010455850d43b6836a49de9b5d333238e5e8e3de4d5633924849971fca2a3ffd783c108f51d6b92fe8720ce4381739ea2f7c7060f71f962a2be407d576567a6b3f498432307819577d80b3f3ccdc61680d66657bc0b8ae0a2d1c35e6d115d26cfba884fd12a09df8f4c078bd1e53cb1f06a4e13983e5a159f8691d6f4a762bdadaf0f35690e636288a0ae717372ed8aeb9e64611da5d27664ffff354b7d3d25168c0e671797fb13315a115aa5bb1dfca49865711bbd1026d3d88db7b7aed3d9eb76d91c90e15545e11f623d9a4668b2ff12a208c1a18a2cf43c9d6f9836cc0a465a25e84770d146c60138b979785bbe68500ee7818aefc7810a53f285a735d96d76d24ee70fb50a7bc428a6e05e32c493c8aefe568da151969f71290eba74877b08dca548619af056e89a51f3f636d553c6813b32f66f64fccba78992c5e5d21e06dfdcb7b71b8e40830ffb63450c8bc353c60d5671f7a40b53fb32db70d70aac7755eb1b406acdc29cb16cb73e14e83b40718dd95b0d85507f25d52d6e9ce0d1b22ee1cbff3d752fde817c3108185bb7b75dd484de8b74fb48d4ade0f62134d8aff246e47c342fcc441d73cc0e51841b0ec7682fcbf1cf58ee6173c40f744b2f6903e765a5c55960a697d2e89f3cc9ffe650282cc6c5cd945bd2b5eb04c0bfa8ece00639545b5cbcf231fc7019ddc7acff3fa087fa3e4c5f10b104d600a05c5c3fb3c5fc4f74f0c684b9a12ba19649f182b974876d07bcf51aba4f5d67bd62c400b5349cae17148a0384b8dc54abd1ca9fd992fb7ff8e2026c907299dc1749a696f337cd20a2f8095884e3e6b72ebbf2be1eec25ca8f0f344946572679e49c9b08ab16e192da2e48a83db0050e9466693ab539c17f798f525c0eae0f5b3eeb6cfc4967ab45ee0c0d704d6857a00d3ed899b93e52c462df33705cd9e199afcc4f50fa80dc0574034d0787107ba60da10b3e06af516e5cd6018fa38b852935213fa45e999239aa811b5f7a325900c065b67e7d9b26c0bb64e0f27d8b7a4b5dea780f1bba3690294d6e43cd4528d88eac5d0d4efeab0ccbbf5bbb277c79ae3ef453bb665637830d6fa7706b56bff4fd45f4c2b1cf830c7548c8543b7150ff7a81bfca9f4a55ddb2e9db58585596c519bd74660976d526db0c5127731ceea95ff22bef872103cdc5bee43b250aebf49a7f99b57e75c1bde723025c4a098a1c909c31c40d06fcdbd50ad35def27b6593d7865490701a383e470cdb9d24b6b7a960f6e45dffe9b5b6fcf77ecae01a4453091b2ed377b5e1aaaebd7b4f9e02d3c722b45b77670f56e53a263436cc01fed25721f165e51f2d3aa7f564939638052b1b919602a21efbc3c1f72b2fc5ac999127061b13137f5a0bffa004035a7a1f5e19217e55f489b6335ea42616eaf9493a615a1d6e3a098c205259542f1ad3b490d665b5053337ae03c9804792ff48bcb325a031b2396212952665e09e42f66343f2caff7a917754866d5ee5f2623108cc97a6710f3cc111bab4744ae0e43595785c2aa556d43cb308297fe8224e336cc700bf26b900f1b411a24cf953ffc0b8c50f7bf4d7a7bc436adaea7bcfe76ab2065811feb3995730397cb258eac4d8e74bb02791a7da3b0bb976e745272af9f164c61ae47d8da7d933d723c085e47ddbb8fd628a524059b0012b3435b97e0975cf764ea64a49b3b847d88ecaa9b9239038ac07acb2c40e3cc01f22893f93f7214b81af3ce99eba1684b8e7c80600bb608857e6cab18dc7de3accc6a4ea88c48af34b92cd023b10dfd43695b9f3b50484360f5659c57c0a50cc5532c1d536c5449ea18a561ffa5a1d7b63d28a704b41ec0ec72fe61b4b6cfcbab6ec6d83c3e302799f6aa2d93d0d730ad46c86beba06e6d76428982ca2a5d3a681a8b12f3361ce803e2cff853194f97f0de5326ff9e9174c0c4c659c1c89229b1c1953aebfff008d145ba701cfe88397e7502e32d4e7626a2244cbf368f7326ed73237de34212a8323068829153ca8bc8e996e76f6159ff0978503668dba8425221ad61124a3b783b288ba71ae5c2832315108d6522fc27f92928f76aa076118f51e5dcd152eb777cef0a82cdd0c3c83dcfacfbdf64ba08242760d3cc34471038c37a2a810551e699376ba42676f727cf8380642fd6c8bada7a71a241181f61a0a6acc75f5a3d6db6800cc4ed4a93508c1c9c6680d3bf05020378d083ee61ddf629ef2502cd4e30304e233099a9568ec6abaefc80dd3411b9b1db09762e330c1befa8361a8034158218196d2262ec6260fe5c7dbf2f7f294f5e33222bcef98c2ff457821a8b69c4cfc4dfeaf0e3f1e48f10cb7a6951333034813c63879146ee0f6cd529073edb3fa009343f8c48aa1e6e312131c03d99976adc86d6c55c844d22c66bbacba52dca0afce3e145841dc26721b6ec5d1dd68c6ffa750622df1c7032cbd10e04114362a91815618cdea40ddcb4df922960c7a779f50a87267d8c5b36b2221eab7f7b0669d36e38ad49c8858274ccd9715fc1e0bdc1dd8fa9c2770adb12df1844c732c01fc5df153e7d9d9dea8d504859985ec82e304b3804d1179543b5b096a6f2e87820f6d212bc2457ad6c72a95031b8d6d4ae9dfa3c0d168d025b30fa5789c88c69cbe682febb832c7676768fe48663c4940be8b5702dc86fb2b58c1cafea14786a41f5c032c8cda5b0c9589c5b37384c5636cd2594a0bfaf9d5356e907b89979cd26dfaed0345ec2f335d7d8c1ca76ac5282298cff6ae9831338fa431468dd269d7a3ad5daf015f3742b75ec6b595c1aee8ed156a4a9d8adcf84fc5ca2ec4e25a8d12a6b9204aa189ae534affe5d7a37e587f5d84cf0ff0591810031c3d53c09f9d8e2789bdbf0085444cc999180047e857eba09d714568c"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 2m47.353115486s ago: executing program 36 (id=3556): r0 = timerfd_create(0x4, 0x180800) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000240)={&(0x7f0000000200)=""/53, 0x35}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001400)={[0xffffffffffffffff]}, 0x8, 0x80000) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) socket$tipc(0x1e, 0x2, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',cache=m']) flock(r2, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x94, 0x0, &(0x7f0000000140)=[@register_looper, @increfs_done={0x40046305, 0x3}, @increfs_done={0x40106308, 0x2}, @free_buffer, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @fd={0x66642a85, 0x0, r2}, @fd}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @exit_looper], 0x0, 0x0, 0x0}) 2m47.353071725s ago: executing program 37 (id=3608): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0xb0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0x6}}]}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r6 = dup(r5) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x9d) read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) 2m6.668362062s ago: executing program 38 (id=4432): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x80000) getdents(r1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x1aa) getdents64(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) r5 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r5, 0x3, 0x5003) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x1d, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) close(r3) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m55.514390773s ago: executing program 39 (id=4393): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x80000) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000400)='tIB\xc2$g\x06+W\x8f\xa89ip\xfe\xe8$\xee)1M,S\xda\x18:\xe7\xf7X}@\xbb\xd8\x1e\xc0]\xe0m\xb6\xb3\x1dz\x99\x98\x7f.\xd2D\x11\x87\xbe.:\xa1D\xbf\x7f.fN\xe1\x98\xac\xc1\x97\xe7\xc6v\xe4Sd\x04\t\x15\xd8\xc0h(\xdd1\rE<\x92\x00D\xedl\xbb\xf4\x12Dk\xd0\x17v\x10\xcb\x875\x99`\xc6\xb8\xb0o\xae\x88\xd9\'\xd6Ch\xe1v\xb4\x05\fY,R\x0e\xe3\x93W\x16\x00\xaa\xe00[)\x1a\xc3\x9a_bi\xfa\xf1\xf1\xcbG(\xfe&\x8dV\xae\xeb\x15\xba\xcf\xbel\xcd\x06A\xd7{\n\xbf\x9d\xad\v\x00\x06\x14)\x12b\x0f1\xb7\'Y\rk1n\'\x19\x1e,\x11\xf5C\xcc\x8e1\xc4<\xe0\n\x1e\xa9\x91\x9ao\xe1\xfe\x88\xca\xdam\xaa\x87\x86\xd4\xfa\"\xd0\xb7\x85\xb6\xb5\xba\"\x06\x1f\xcf,\xdc\xc9\xaba\x9c\x0e\xdcnX\xe1\x92\xbc\xc3\xb1\\\xac\xcf\x8e\xf6x\xeb%V\x8d\xc7s\xc6\x9f.\x10><\x8c\xb21\x88\xa9\xa3\x00\x92\xee\xd9\f\xe5.h\x19q\x19\xf7\xc7\xcf&\x8c\x1a|t\x8d4>;\x97L\xf5\xd0\x88\xb2\xdb\xc3i\xc3\x89,\xe3\xf2\xeb\x13\xea`\x84w\vv\xac3d\x03\xfd\xd84U\xccB\x84\xdb\xb7=?\x16\xb4Fe2\ag\xf7\xf5$\xb5\x8c\xf1p]\xaf_\xc5\x1e\x82\xcd!\xd8\xaf\xff\xc9\x9c\xeeX\xf0\xb0Z\x84', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) sync() sync() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r2 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x4c00, 0x3) 1m41.370316135s ago: executing program 6 (id=4803): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) (async, rerun: 32) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 64) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) (rerun: 64) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x8, 0x0, 0x0) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async, rerun: 64) close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 64) 1m41.359452416s ago: executing program 6 (id=4804): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='stack\x00') write$cgroup_pid(r1, 0x0, 0x0) r2 = socket(0x11, 0xa, 0x100000001) setsockopt(r2, 0xff, 0xfffffffe, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x1}, &(0x7f0000000240)) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804125000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000100)=""/101) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) timer_delete(r3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) unshare(0x44040200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r7}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={@local, r7}, 0x14) timer_gettime(r3, &(0x7f0000002180)) sendfile(r0, r0, 0x0, 0x7ffff000) socket$inet6(0xa, 0x4, 0x9) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x57a83000) 1m40.82166932s ago: executing program 6 (id=4807): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r3, 0x265efcb887e1da7b, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x57789000) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001580)=""/4064, 0xfe0}, {&(0x7f0000000440)=""/204, 0xcc}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000003580)=""/4094, 0xffe}, {&(0x7f0000002580)=""/232, 0xe8}, {&(0x7f0000000140)=""/61, 0x3d}], 0x7}, 0xc98}], 0x1, 0x2, 0x0) recvmsg$unix(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000100) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x62, &(0x7f0000000100)=0x6, 0x4) fadvise64(r1, 0x3, 0x9, 0x5) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = dup2(r0, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000900)={0xe0, 0x4, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1cc}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x32654f73d536a6cf}, 0x800) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) (async) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r3, 0x265efcb887e1da7b, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x57789000) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001580)=""/4064, 0xfe0}, {&(0x7f0000000440)=""/204, 0xcc}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000003580)=""/4094, 0xffe}, {&(0x7f0000002580)=""/232, 0xe8}, {&(0x7f0000000140)=""/61, 0x3d}], 0x7}, 0xc98}], 0x1, 0x2, 0x0) (async) recvmsg$unix(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000100) (async) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x62, &(0x7f0000000100)=0x6, 0x4) (async) fadvise64(r1, 0x3, 0x9, 0x5) (async) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) dup2(r0, r5) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000900)={0xe0, 0x4, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1cc}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x32654f73d536a6cf}, 0x800) (async) 1m40.796893812s ago: executing program 6 (id=4808): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = memfd_secret(0x80000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x6) clock_adjtime(0x7, &(0x7f0000000580)={0xe7, 0x1, 0xd6b, 0x4, 0x1006, 0x0, 0x6, 0x10000a9, 0x3, 0x3, 0x5, 0x9, 0x8, 0xfffffffffffffe00, 0x1, 0x1, 0x7ffd, 0x7fffffffffffffff, 0xfffffffffffffefc, 0x1000001, 0x7fffffffffffffff, 0x8, 0x100000000000007, 0x80000000000000e, 0x4000009, 0x7e706d6a}) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='rootcontext', &(0x7f0000000300)='--^$-\x00', 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000000140)=0xcb) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendto$inet(r1, &(0x7f0000000040)="4b2291f3c9e93cfe7886556465f786bdfcabe0f55e1693c3f551ef595057181e241269aa15b813fcaf7ee0d68cbf57ca8c3ae73a2c", 0x35, 0xbc8b4c7a8596b4c9, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x38, 0x3d, 0x13, 0x40, 0x411, 0x12, 0x552b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x8d, 0x8a, 0x32, 0x40}}]}}]}}, 0x0) getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f0000001200)=""/4109, &(0x7f0000000000)=0x100d) close_range(r0, 0xffffffffffffffff, 0x0) 1m40.274872884s ago: executing program 6 (id=4818): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x87) (async) r2 = fsmount(r1, 0x0, 0x87) fchdir(r2) timerfd_settime(r2, 0x2, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1m40.216164539s ago: executing program 6 (id=4819): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000200)=[@sack_perm, @mss, @sack_perm, @sack_perm, @timestamp, @timestamp, @window={0x3, 0x2, 0x8000}, @sack_perm], 0x8) sendto$inet(r0, &(0x7f0000000440)="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", 0x1ca, 0x10, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) sendfile(0xffffffffffffffff, r1, 0x0, 0x3) mkdirat(0xffffffffffffffff, 0x0, 0x22) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_secret(0x80000) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000280)='\xfc\xff\xff\xff\xff\xff\xff\xff\x00\x00X\x8d\xbeqc\xae+\xab)\b/,\x06\x10\x96\xce\xc52M\xf9\n\xfd\x11\xb7\xc7\x87^\xfes\x15\xbf\xb8k\xf8\xf3\xf2\x91\xe2J\'M\x86\x82\xe9O\a\x01\x84\xd3\x9b^\x1f\xbf\x8e\x9a\x9b\xbe\xcd\xb9\xbf\xd4\x83,\xbc\xdf\x8a\x16\xd4(\xda\xa1\xb0s2:X\xf7\xce\xc7\xb8\"\x8f]\xa9L', &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c) sync() sync() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x90) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000640)="f30f7ff4c4c16c141366b8cf008ee00fc73a650f0199c5350000b805000000b9165300000f01d966baa000ecb9ea0900000f3266baf80cb8910aec85a20000000066bafc0cb000eeb9800000c00f3235004000000f30", 0x56}], 0x1, 0x60, &(0x7f0000000100)=[@flags={0x3, 0x100}], 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000180)=0x4, 0x4) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000140)=0x3, 0x20) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x2, 0x4}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0) connect$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x2, 0x2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643de6d98cad95038751075a899e22ea9c45e53bb800", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 1m35.154405238s ago: executing program 40 (id=4895): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x2, {{0x80, 0x1, 0x3}, 0x7801}}, 0x18) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000040)) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) close_range(r1, r0, 0x2) 1m33.066900376s ago: executing program 0 (id=4920): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$lock(r5, 0x24, &(0x7f0000000640)={0x1, 0x4, 0xa5, 0x2}) ioctl$KVM_SET_SREGS2(r4, 0x4140aecd, &(0x7f0000000140)={{0xe566c797b7515b9, 0xffff1000, 0x10, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd001, 0x10, 0x3, 0x3, 0x7, 0x86, 0x6, 0x1, 0x7, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xe, 0x7, 0x7f, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x3, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x2, 0x5}, {0x4000, 0xdddd1000, 0x9, 0x2, 0xb1, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x7}, {0xe6efd004, 0x6000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x21, 0x5, 0xa800, 0x8012001, 0x1, [0x6, 0x2, 0x3, 0x3]}) fcntl$setpipe(r4, 0x407, 0xf4) write$cgroup_pid(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r7, 0x0, 0x0, 0x1000f4) utime(&(0x7f0000000200)='.\x00', &(0x7f0000000240)={0x8000000000000000, 0xffffffffc86d5209}) writev(r7, &(0x7f0000000b80)=[{&(0x7f0000000a80)="950aa6", 0x3}], 0x1) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) unshare(0x44040200) timer_gettime(r6, &(0x7f0000002180)) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) timer_settime(r6, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}}, &(0x7f0000000040)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000ddd000/0x3000)=nil, 0x3000, 0xf) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x800}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 1m32.939876347s ago: executing program 0 (id=4922): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r2, 0x0, 0x31, 0x0, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000240)=0xd) r3 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 1m32.876733662s ago: executing program 0 (id=4924): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @remote, 0x5}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xd2, 0x40, 0xca, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee8000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x1, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0x100000, 0xa, 0x6, 0x4, 0x42, 0xb, 0xf8, 0xb, 0x7, 0xe, 0xf1}, {0xeeee0000, 0xd000, 0x3, 0x3, 0x15, 0x6, 0xab, 0x7f, 0x3, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) close_range(r0, 0xffffffffffffffff, 0x0) 1m32.876105532s ago: executing program 0 (id=4925): r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000040)={0x3, {{0xa, 0x4e20, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, {{0xa, 0x4e21, 0xe6f, @private0, 0x8}}}, 0x108) socket(0x8, 0x80000, 0xf4) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000180)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200), 0x400800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x16) statx(r1, &(0x7f0000000240)='./file0\x00', 0x1800, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat(r1, &(0x7f0000000380)='./file0\x00', &(0x7f0000000440)={[&(0x7f00000003c0)='TPROXY\x00', &(0x7f0000000400)='\x00']}, &(0x7f0000000640)={[&(0x7f0000000480)='-\x00', &(0x7f00000004c0)='}/-\x00', &(0x7f0000000500)='-\x00', &(0x7f0000000540)='/selinux/checkreqprot\x00', &(0x7f0000000580)='/selinux/checkreqprot\x00', &(0x7f00000005c0)='/selinux/checkreqprot\x00', &(0x7f0000000600)='\x00']}, 0x100) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r4) r5 = syz_open_dev$usbfs(&(0x7f00000006c0), 0x1, 0x2001) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000000700)=0x180000) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000740)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000780)={@id={0x2, 0x0, @auto="7b386570c36ff029b4966cd822e9e1f3"}}) pipe2$9p(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RXATTRWALK(r6, &(0x7f0000000800)={0xf, 0x1f, 0x2, 0x9}, 0xf) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/power/wake_unlock', 0x40001, 0x1) sendmsg$key(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x2, 0x8, 0x3, 0x6, 0xa, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x3, 0x0, 0x5, 0x7fffffff, 0x5}, @sadb_lifetime={0x4, 0x4, 0x6, 0xd76, 0xe, 0x9}]}, 0x50}}, 0x24000800) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r4) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f00000009c0)) read$FUSE(r7, &(0x7f0000000a00)={0x2020, 0x0, 0x0}, 0x2020) r9 = getegid() write$FUSE_DIRENTPLUS(r1, &(0x7f0000002a40)={0x158, 0x0, r8, [{{0x4, 0x1, 0x401, 0x9, 0x4, 0x2, {0x6, 0xfff, 0x0, 0x9, 0x9, 0x80, 0x101, 0x9, 0x4, 0x8000, 0x4b, r2, r3, 0x81, 0x1}}, {0x1, 0x8, 0xb, 0x2c61, 'NLBL_UNLBL\x00'}}, {{0x1, 0x2, 0xa, 0x6, 0xcf, 0x81, {0x3, 0xb10, 0x0, 0x3, 0x4, 0x2, 0x6, 0x7, 0x85df, 0x4000, 0x0, r2, r9, 0x3, 0x9}}, {0x1, 0x200, 0x1, 0x6, '$'}}]}, 0x158) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000002bc0)={{0x1c7, 0x7f, 0x3, 0x3c9, 0x105, 0x99, 0x1fc, 0x8}, "901c3038dca3e957f0a48419bce6e2c9cfa502a3150925a9a60dfbc0c74fc01eaef348021cba3822df89affa298501bcac02cdefcd7eb896569b78e535fc688b8b5af9d924319ec545f03dd6d1d38002377e4845c4d7a3c2d682b1501d3802422b3a813d24373f329f7a5dc492bac255d05bdfaf1866cb390ffe1df597b60612c4aa62a01482c28d0a38a0f981302436f8615024b5b95d64d512962ed3903d431077abbcd58b5301acea1e42", ['\x00']}, 0x1cc) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002e00), r7) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000002f00)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e40)={0x44, r10, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000010) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000002f40), 0x480000, 0x0) pwritev2(r11, &(0x7f0000003400)=[{&(0x7f0000002f80)="2cfaab8557942d335c4c842b2fd3fb170c82a4377f1b1e3f94b0f9a88c17d073e90d20d3f06caddff97302d8c708691bcfe5d94fca67db11951ef597c6f8e9ab53dbd6cc489eba9dafceabed72e0293f22541837f70972bcafcb00192be6153ea841a66381b3ffaa588dd2a286d5d9a8c2d5c3c25863809aa5c39527746cd7c85b46e4e61dab0c7f4ae1c7ab124cb3041112", 0x92}, {&(0x7f0000003040)="6f661f55", 0x4}, {&(0x7f0000003080)="4ab1dfdb5ef21b098f699b594f43c73970317a4e9e0403f6f8534a174ad32af61c7baccd80f2ab76baa4b02a8a5164c564168cee3ecd208cdf6d8a34cf43886c0f78561f184bb12620627c70", 0x4c}, {&(0x7f0000003100)="c736656c0f0dc8dc3ffb5e4bd1b9e57504c41debdf54597d558f0cef73517cfd673de78f36b2ed3bd16203244a639428281587c4a09c253e8b1949ebc44238c602ce35bedd6eaad56f940e1ba027fb90bc10e9e7f3cbc90e5f518613dede85eb744f5c4e84243811d234d329159689f3dd8b3726197cf925ebb8fa41f004f48fd7bdeebc98eff95ede66c4df3a2b96b109e2b974540586677e84ad34db7a54dbfbf2ad7cd5e551de9bed2f70b6e2eaf54a6da057eca40b93b0ef3b68c76f79f580a9ae86f1718dc5ac46d27a12040c18538d72de656de12365a22ce4f5e6c65299f4490c9a61af5d7a9dcc1ee02d2cd3c7dfd78c7256", 0xf6}, {&(0x7f0000003200)="340b52ffe94b68696f97c4ac9eea0121220f7726b2ea9b28d19e70a2b161ab7ca85f3e5553b7b673130b4d15ab07e6cf1953cb201710a5facf6024a1c9", 0x3d}, {&(0x7f0000003240)="403d00a2f7b0da8e45f47274ef9d6628f3c23eada82aa0ef6ba53b9c523d5ec69c9db70b9b720240cd871543281dd10de6d3acef65e3417a45dbef7b7fcfbd6866620686611bb523b1874f339c2130a507d639d6a1fe9d", 0x57}, {&(0x7f00000032c0)="61a6a610cc4e4b13a3d8ad2e6e79114cd54339ded631e560becaf970eba2f4db59cfb0bb1d2739a7cd1f858ed8682a96df7a40bc438bb961f718936f922167bfec2f3217f14760467dd29fd7af9f28661aa13a31a37bc923c789b97beec605cb1168e146967a26aa4c68c1f5d7e61493db9d85d658c7ad9a2aa73fb098b21a4e72239ebaf3908abd69c6697924", 0x8d}, {&(0x7f0000003380)="ed0ea6b457a4cff37688297daed3efc0d9cd07577ea173c97d55727bd50a105b4f626eead835c5ca72cfe67f1de9069b138bbfa1c3868b6f325b7d9ef2d655d8b548642f7c5924e76e70f1", 0x4b}], 0x8, 0x3816, 0x6, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000003480), 0x80000, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000034c0), r7) 1m32.873936212s ago: executing program 0 (id=4926): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000009800)="8c22fafcfe3a869279bb40a3a35f36a0713e540b44d239155c277b2bfb98c7f5af7111b2c563e5481c9f0bccdb310c589231ab33eccdd49f17a091a4da3399ff19a2b28efc04de473d4f7a6520d6bdf2b2d5b1b724be630606ba97f43d6b141f0aab6090860b63849507b5c6f37ebcbc9c42484b4df0e18231f9773f475285614c585828d5e00672497736b89558e3042b9f75e9c9f09ce0bacc0908d090006bb52974e5f1c2ab355927e6cdc2b4e92cead5762d74a5e75822efde7e99e57b2346a605f0f7a5a2e27f05b108a10cdc1c5c34919214b92f40f691540baaf02db446e7a02e4db2bb9e8318c9c510b27ee1d9427ccae3c2acd8e1e78a7e2c42cd40670e88d4395da63c78584257504be2996c6ae50246f35d5f87f22955d7fc2b59240e9c0cbb03428b9a1fc408ec1d06d2d3c79f8eb6e82e49af89d1e82e9fe2b9dc1881084361650c976729c3837012a27f692c00f7aacffc939674a77fd8861955a730a7ad4e8d2244b8142b0c27cba87ce607a9a01dc6a3064c17fbd2276843ba97f7e4e3cb4cac814b4aeced312c86544d20db49b2d417602b6a21d1b8b9d7fcf27286ee3ae307f6b03e7c73cb2f5550ebe4c0cfdd554b6c8056f53682f797451fc7bdfbe352d7789ee8f157a41d097ae51bb4ce38e25cce7dbd8bbd437cbc3eb936124371394c00e80a4d7d6b587a2f13862d18b49bb80472e7568a8cc3bd73f2bd7d9a7c8dff58a82d9f5cafdaec6dd421594cfc16ad0f3a06c74ad52297cbcdb6e46cbcfad6b498fc7f0f2ff70000e9cd9263d09ccea8f4ecdade1015b05620401e54c01786bd2b5274f7efe636822eb56477040d3773695a06cfa90c9fc47a662b3b7e3d48b7d43a1707b678f758a9b3757ae763e949c0e30fc3d31d7a198e99cc0c8566e3421119f32cde80fa7566cae3b2b86a634c12ef25208630462906db1de027fa1267db918bf78fab6bacaea997455140eac18ea47ce887ea3900b17b6acb3361ea5222464974f23e94d98d6b15aedd6584d0f0dd2f43dc056a61d30ef194d4aa2bd4043653e3a048a85cb3a3ff02df51f31909f0dade7ed60da3a4f978efc3e9f4dfea40aa0b73b9ad92e91f312382d5b0ef3726c785d8d3209373c518feeede96b3c143a7d427f17ecb5c5fcb9e9bfdf06809a4a66f3de33de7a0171b451f6e1fe671b9fd8c5cf1eff3d3ea24e00098f86e48a97eb7c4304d450a02efc11e418690b6c1ab52b243780aa97dac1f99ddc43ae02a1214330f9d05f4b66e79bc72fe090ec8cf2dcaa6f142b91c50b43bce156c14fa48920e985d13f66e0e4417c501cb76d573953328b0af5607d3c8af238ea9db8311637ea90012dd5557e5d27484a2d6bab1a4b32f6720075a1b8891d767376a1d1971dd36f92bd0724fe0fa89e7cf1bddca61706359b782af57a369ec0b573e26080b9d77459ace399139e6e648a3588664a50dd327f88764c955440e567536e0772d020bfecd5aa71b14755a4e4ed7297d6ba3e14d06ae279351e14bad13704d00eb51e42f37026fa33cd7e8fed872572111c7b713516ecd2fd0e0d87292cec843894f1965e1b05085a16d00f1a19ce8052e91b19d2266644febd8cb51c1967e0b8075490e46c08ee9691970925d37603a410b330f87d3871a3f158a1af3f5e8a6e0427bfd1182d77010ccc18c40be88f13879451a8bc95be513524f396b257ca51da1d2ed2b1581425105f8db62e3f38bc7dc7601a9c552cf3e49bcbe4486e57d85c22d49f5bad467a0ee741979505d4af7f2d8ab5ff6b424084a5ed6f9bf40fe5192b68d5f93a08f7f9d7b54e7e8ca1e97b70824f444657ee279d0a8d648d46feb9047d4d874f22ffdb72e6178bb7f556a6c96e48c386f56f87afa2b3e2c076c5a710d4320149fbc68fc0d1fb14ac331a134f940e3da0171828dca0108c94d359fe8d55bb74be6bcf3b9d5b75dd278d3b742fdac4e01e27308761eef29c8646ede01b14410e77f633ec96e7f12043e523271f3156ba68c2c84660ad89b01ddcf7725491ab09eefcc39ad35708cadf37503d1326fd0fca7b871a9c530d4e93d3fb668c68a258eb81d0354d8dfef2dd0cf57601add97a8c1a0dc2fca32bc8df607bed67a7bf65f34cc8cb147c6cc0d5613482bb36f02110a88a26f03e02d7499f058904feba2ce05f83bcd4c294ccf32d6317a4365e36666683fa32b24306af92e9d41b71a014a9b4b5156fe737e90f978231bf768db33907ac1d41e65cb96d4f132a065c2b5fe884f508161c9461cf768ddbecbc5c5cf6b43255508645ed853cfce1979940e1d6b3b5769d56e598f2df3437310cee31c143b0002104aee3e49a6d6c341ca06f61cf7e962c56cc75246cf11bf4fb8f2387bd044897682f05f0529a316a12b17da49c8046c65e24bf223ef972f389a887ecebfac111fc83e55f07cc51c36132021824826719b67ccbcef6cd16705e9f189dea3f5cfa599766d385044a16f619e26922bb94cc1276a1dc73713f1e6014f7d7973e216cc3abbb5b33656c329c5f2da821b5564fb449fb666d1699eaadab4fdb4184a8b06b84ec974507804676e7a64a9b76d387e8e0823f6c00a134261e0541ada940d1543fa640e7e3a5064ec23b09b306935ee98b629e0cce30b4cc5b96923909aaf585b89871a48fb934b2a58665feae1a1aaf04d28f7ea87d63d6ed9749b4eb52812acb62dfe19838a47e942d54c11f22f6389066d93b4126da8cd03754c1471e38e0498cebfa0411f0270cc92f4e4cd51a928ccb490a65d9c568406194ccb56ce6d6dac9928c3d76d8bf0e56e3ac17982c97d9bb729a8bfc2c8851402948bbf4460c42f302bce6d83ab16d170ec1d6d634fb79eb4bf6bc238b7db072a531692c3255d2847ed3f5d5c0b96a03e4ab321188758e7ae2bb6088832f9c19992f3c41b95d02eddf61c393028d0696c1bb86c226af5e51f99ccb192e1fe173c0586e7386a3b1cfe2bb497858e38c11520a68bdcd3e150507856aaeec067fe2d393ea06c161c0c4f19395c32f6ee93be625e5ee6d9a42abc5d4bc23ef82f91bece9f8d0dc6da5a4656942b3ef13eb875bfeda5b49b903db0a621347bf3231cd2500de511942f1fdb5fc65478305dcc8cc49d96d3add4208f379c5f0ce4c83f37d51a3ad6b607011f845ec0d73165a17255a4352c3dc7fcd98c6b36e73b6e0dfaaa3bc489ccb7bbe55dff6c008dce7b30f97eee84b0281675003c8dbc3b9e4f4c4031a6e4e64016a3de62826463cfb550f35783f7a670504c36846f96f794146efdf7c541e0c6add82bf0d33f9c521a44e2b8645f82618c1d49c7833f191a594710108812bce1621e70de6e20f37f25a968bfd2a85fd458e3363fa67d86deb63b8903bd57178f970487ce19d3b3b34181498ea29bb0b6d2732083d7070daaec47d6acea649e286e9f0cd55029ac73933b763cd70c9bcffe500761a76ea0d292d24f53fabaf796f54c2fe072996816d3b803b943d4a94a59ffa742d1a03de9c7ef1d5e4dee2e365c3ad8322fab373c2e9f22b6bce4c6032ff80a0b34fd460ad93dc00bcc47d9f3f4fbf210f67dd07d44590c9c6a2812d2254f99706d14ce9043c8456b627c8949f7d516425c902c073043310e83500cb3f4a74a3bffd9e96ae8021c4926f1645209780f0ef2fa86dc034f3077798ebe7b7dd681eab29bc4b054afcfa2fcc523b292b8ecb74a2f56ea8a46647d74d7c95a952289331625fbfbaa78c0fa83f706881c4523939cb214271c00efaa1b44b0ff3ec2ba90564ccd754dd4750daa376bde93c98f5ab300d7761707ff43cf555a8447076cbd683128c4b099c15d744248b8ce29059ee636a661e7b379db30ce9c48e76da3d9cf320067440cf6a32559f0b69973390475c88fd1a8294e7b45269359f3b9869a7128dac9fbfd3eafc382be204a868d364a263cfe7f982a66bf68d816a49a1c278be9a1ed509466f2adff5832ae8416ede89d729a1c0865db3f1051a9d92e72754e40596c3f055d6be439570ed378050a13303e8bdc3ea6517563b8612c96e346f52d6994d7ad8bf50046467a60dbd6edea3f6a40e14e2dbd27aded3a2893f4797485cda537cb780b615a17e0fe73840c977af4b14b9dcf44f12a6856d553ca9229934629961af7b4ebfb0a5ed86ab38ecff29ee7b92f8dd96c2c99f8fcdd901299cc1a31be271887558c36bda2b8e5dade5cb14e6e18589406d417a09b0569ab1c6d145c9d70b63633475e344c6e3bbdad82e542e88d9b993fd610c229baf6100c82727c197fd638e0e44e01f9ff8ed6c41d9c6d04713915bc5f52bc7151e734a5eaf8ced1ceec2521b6fece63d37b8fc0f40074a6544da9c65749b13155c7e88e26873a8a3967b3ca6e47ade4b161a120857c870c61bc1a4faa3d8707de833a085a3b18c89d4972984e57ad5c1fa6d9c4c6abadede349f61d13186bc9fa4b4302b8d0ae0827ba9039b0f7e4103ed55109a08dfde968d9fb5c6e0e0c8749af84e580e4ddb367e6f635567c72cee461bc8db0704979c6917042aa7788355a54662a93a3f39688d1899f90df2cb0e894db42f0b7a47823a48d5f1fe7cbdf2cebfcffda575bc62f13db8c0c5d33e6bf99055d3195315c8c1bd17ae3469cf707ff92097af732165d9a45d1abb5a48cb915a911e3f9898419c2a68d3b68960965bdf708ede24c07c6cfae57041721e677f0ce6a4b4cdf824aaa1cf4befee53b06ac4ac1c05b44819df77303b60ee3256b5a3cb01df82f63d8b5add95dc73a666b4cd2cafa4f78854a117f9d0dcb870d9415cd604458bab0f30308db7065fb48794631c365b4fb4154d5f7f57545c6efe0e734e17453ecb76e02f9a08a5ad01382b42491620dcc0346d4bd35b37ce1848d53c3b5230bc01b5ab85c5aeeb7a908b22a56eaf64547f605bb92b68924d8640c483fa694d48542c445f9378dcb07c0a56208610f95ee6ff02f05e877ffe53f64388276f38ba2f896730406f4623286b151c398a45b2b4b544006cd85421f07aa95ce84a762b062a33707726ba4b2811cccaf762b15b8b09ca11832c3f80b4eef3f9b53b93b5065605ad6836fa5b3264f220d3c7fa8e9503881dd6452f24b5477c35acda70343d21c3737491479389e1c7b66bf239a12ae3a119591275fc039f54210f0666853e9bf60cddeefca3dd9f4c8bab859132a899d1925bfd93ec9cec4080626c3da5a4f8ffe9b4f3f27771cb6c8765a68aedd261e21cc67e7373e817524d5aa0eea192ec0602368723a84bf08c75c1df03bd45e65cc51abb29c14c8ae8cee1d95a4322a40fbd9a5cff4eed2b04f4af87643ddacfc547ea92e72db4696f66ca9ee0d7e5749ec8b74f683872eeee91d035bd13f0adf8ca95b83673116e76edf7408edd4f1ddc583b0450e77795b10bf62289bf839342dd6985198559b16f80e9f2dd08ddc55290137198fd83839eb3e75aa150180783be7e2e0a28c72c054803fd1b005766b0afbc1abefe952530acdd5c5da19a16d6108e3feb805f1b3c58c4ab8ad1e2c71e09ed0fabd6826f7ec4afed3b3701ab96db8d2f611b0b4cac333060438957533ba0de3bebf7acf7b0ecac781085bf7470202515d224ce277f37894539812b6dbcbfb2a2f219ea9cd48eed0f98670643f3ffe3133fa4818d4d628a076abecc8626ea7c211ade48d0fe04f54d191e687ff38f14feb96e4cebae431bf4b63fa4baff5f50903fe855dfabb88cfb7bb11c52b07213ff1d7081482b19e410f1cec99c33ce698132c70e3413e58d5b94fe4d9ad6f7c0cd51e7383c19bb65436adddbd7e2d6464635859fbfd1e591d351c407e0b5b117837ffce3c70bc6232014d0e98f37d42dc4512293dc483ed249afcfc59b672d88103caf693e7218f7437763cbdd875d37488b13a22be623cb85f715ebbcd891262c9060b5765924004392419d0758ff12777a937ffd7d8ffb2aeee89cdf6111e5fd60913f293d6dc71cac5da772e7f4b16ca96c1685edeb29c2e65464cc7715d2289f05b93ebde3954394d702fc40d1eedfb71d43de08f8f81b3a0348ae1872e8101da7ca8961607132e2ce175859a87307663b39b97303f9a6d2989196d7c5ddc404280fb81d06597bad1e9d1264f6f947a759710dcdecf8e7de37a526614e7993427f51f70305cee7aec7a25d587154b01c3f023d30b932c971359d912fdd793d63f9eeff269c8482bb473896a96cf08fcbf2dbd258ebfbd034057ed249dd8c543762911aba3f7f6126feed91f3a231e907b4352a4a683b71030af71ebaf0d250ddd4c501acc026a89ed4db3e5cfc12cf2a13e4543a407ea193ba4920c5c72d1ca031bf7545817d062b464f5d8f2d2ca4fc05b66fc60aca14ce46647d937634acecf88742eeb296b494d91b72d664158e0f116528036dd0c08a9682a9d7ddf15feac269e00149593ba48166844ef6bec407baaf8b760dd881b8923297787ece552c3462b8e10c4933280df65e568a68cfddeec4e446fa15f1d2a3528112480a38fc28d6ce7057e453969acdcc00ed7f94618b50400bf842e7f6073795dc6d601e2e592ab0805cadf90915f09cf0706db925c9c99aa7a397f033c7a9f908cd5c1df04d3b06ec4d0ced9f0da1a290b35ebf1b35a6b500479b045f6499c499b47f83c03ff04ed5afaba64edee2e9f5014717d66d8496f74e93786ca6b580ef747f92bc0ddaf01a5d7093728d3980f4e38b7e4f341df7b427db1cd5f0e1b67b174d694455443888cd5e31888a23fbcadacebfc09f146d76ba488dca7085f4140c90a5eec497ce4c03a16302179ddb98ea456be36abfd7600c6448243160c79634e41f6536e3dcf94d1a84ef50052a9c39db77b142ca40940acf2f878cda7d6428b307c5972d82d7dc4daac8e59fa3530127c1463ff6efb768732e66ef48d64ee8fd8d3c3c14b1b07d2b25a61d5f814e4f64c64968029db479f380819abcd852ce3461d12571e6a1012f351ec0ea0ee00214f367714b08e3e524db25443402f11a46a13e7d3cb9bacf2f39dc01b1e235fe748bc2c26d310808692cdbec7002b76e3eab01c55cbb338bc15ecfa53d6efdeff44b8587d033dc063db498f15f835e8137c2e0e05ed8372388f20bb382d568acf0451d797f8e90c43e514c7fa8defcad2b9c848590c12d9d52d762a5bee2f036cbbab9c318c21ecab5452d5b3863a2c5f6e5ada2e00568dd029f8e738effe4c2d9d0251ba6b9d7b361d8cb43dda8a0c0e6c8704885b8f32acf5408a30fa0d189a6b2292abf30e0a8acc8415b8f677144511283a020082900a417bfcd7387dd0dbd0547dbc79abf88fee3b7e8a4d8001ca4910aac10e3aa0dbd1b8e87f90352cb9e12509619c8e0b6f2f1e86141fc56fa3b112c4e3fcb60d838cb75e31034e060aeb83c8ecd38b1fda7253103a79e4f960c92d4fd72fd8da6016232dc89707315175464db60046edb7bf51669ae463c59fdf488c09ecc70e8f3dcc24a93f046bd30430897955f1fc237e866a5782c89d830b0850dc8452e4c6a8d302f599dd033b501fa191c980fc115cf7e2826ae577fc977c894b3232f8f6e37c266dc3d472e344629bb9a942d33f9e880603a0a07222c2e3569442f7735e4ea62ef4fa8736f80a75784a60c733bb899d49ea723ad622f9576b0f90b44921bbeefef272841c6b0348d438780049d48c859109509ccb12d123c2bb8b0d7da0dde33cd134101db8455d3d4ecb4fe693d34a858f55d2c15c353a98e18e1a53e51cbe77814a4fd8ecb7141232df723d406afbabec96f2dededeaf441307da5ed235d329084f5ddb46c460ad79b37677136930cefa4dc3eb786f879e6b201058e008ab5f0788e48515d6565d3c972a1a5b41910f64d851a9d5e6ec03541502e3f0c03ea2887be1afe640382f23ec05d97694679a022110c0eeec6c756c45013c11fd574bb97248e5bbb4f0fa8d89f395d44072921ea3abe7ef125267893d1c7b626059c133592b6f77739a7b4e7e4e3b587315a1bbe4c459f0c052cf855d399c6132b3f8371975a792ce9589f8307d609e7390a1842c9ee48bc6de76d58e06d173cd74be81089cca691423de2e5906439b2d9221175b411f8a3f4ae698defefcdcd35e7b809c6e6d2d7ec8e68cf098a41f6a31766ef95e95ea14f11612b56f7c7fbb67d2e46966cdae325c6bbdbfff6a4c0db35e7688502724566f22bcb3535148cb51b05f307a7ccc9e79e83bfa2b7f88fe8fbf7fcdf88836279a3a59f2a5aea713a0c313b3df5c9458afd8d6df34dd5644d1781b6d7441791390105efcc765f09ac12f310a52623535392375b232b9fb6263f1301c38e8c50341f9e7549783d2a0641bd2230e7fec1f9cccbc7a3940f9e9cab143fcf7ae7b7fc476ffa06215e42b750b3b99e800aa1062e49805594bf9591435621d90723e0e58e1bb2a2973431b9afe64589f8228ed62981f1761466ffbd3775f217bbe8c4d6ab82026cc6591425c871b9e92392900b894465f12ba85791c49edba73906685ead7774039ba5f0e6823e8f315ca9932e9298f13ff4409044c70238135789fd2f518f6ca3da048304a859287a6096d8294beed0c99e6259351e10631f1d6b207365b77554d119c4676110acfa5e43f4a39cd19cc30e519a2bf8c590592bd3b449dc3dfb13d0712296dd9c77948bb06dac109c3d573dace2169bb7df5f5cbd2bdd4a543860a13c2a7c26b7a15a24dbf1c607e91126ff3c564b0c9f424cce366d822f1e1be5e2900378b532c25acddefb3aee8630579d9a94bc6782c4b59d6ec1785cf2a9a426a4950a4cda8ab034c272f09e56bafbffdb3b5adb9a110408e947b54ebd53b92c4a7c9bd07d18a91f23227c8b8366f6125d8a7e3186cdff882fa7ccf3df180fc73ec387254636362055ffc0ee208f5a1d82df0afec5087d7a09077a8beb796e572117ec3cd79bf4b9f8cc2b02471fd0ed8cedb5161e0d4a63148b7682c9dec0876b9840ed17e749f1f557beec34c10f96d7bcdbde40a68648ff931614c828949afa08075a4f6c0d341f097af5a82df1c8a15c688e36218a16d1176fc7dbc1727bca620d1c8ebf772c2694ba60f9f6f06931251664138729dd8755956ba7137c016076527c37dd380613c15b0f9d1169bb46ed1b0a6c0a16625f17fc30ce42b6a69736b7bf8827fae8f0b253afb825c533ecdac42d4eae093c84f6829f03a0332929e18d180dcaf8f2cae314811660f7b8cad717b0104c8390c72f79dc858998545514eb21eb154dfa2925c6168434bcbf6cd006ed472f4d6a114b7deca0d3169e4f3c8ef1445f009008ef30fc8d619dc546ee5f523eff47ed8ecf67ad14a3d629f1a2a636c00730dcf31014cae8cafa68defd6cefc8cf10506a44053660485ca597be4f1a6d72033fdc1e25af15f81ce53b4edf198252b387213e6afa625c07f64ba5f4b1b6b09210fefa634ea8956fd4c4ff701d7faddce24caa0a71d64ed81a2d988637010dd56dc23af277086a11cd9b9c6f281c90f91bba5d9d98faa0e1daededbab7820085c6dffb28987e15806398adc26f8ed774a804ddfcb7e828d6f15e59018bce98c2e52e4b0e6ba02a9f6f7f64ee1c6a4a893f505d02229d0c4387cc438c5a726b0a628bf20e001cdd2732e9117c6df6a0b2bccb9182c8b0286b6144771cd167f7540fdd01d9d4979cd2f1d9aa0819024857f9e7ce3dee40369dd831e2bedc7ad80e6b1ffb4aeb141ac633b46fd43cf4bf8f5074c003e3e2e892392c5612b315feef76402b2225b5ba55df84a2bd1412dafc1c47569a1128744f4e0d178bb6a5870cbc534c40b21a334984d400bc12cef113a69c757d2d1d692ccb7d15dc97f4c99fc249fb863f32e5d5afd6f966d6dd9756d500d85fbaafacf50bd5a2e6ae8419c50825354345c6ec699327466bf0e90c1756ee3fc30469e0914ac595ca512f06039b4ccf3ef6aee882082674cd2502e8765a3ac3b6a57f1c3c0fe5d1d115e9a2509d00bb6caf3406c79a74e74df85498dd697a8832dc52d383be6990c10495e189a37f2f414aee855c484c18946b8f7133d9066f90dd74cac5fcd356b215d40b3b22dcfc4f444f37ff58af5992df290e68d59a99d7c074bc6f2b48af91cf4242b9b8864ad698289fa7ff09233369d25368f0b1ce07c308dc48950c0393f163236b04fb78531772b649962c6c79baa5ed749b7bbaf96555f06d3b278a377c19ffce16b6a13065f817c1fbc8e9f595571519fa164f21e6779f8b7d5e1603c458e0d732e3368765b2cc92205ab4bc68f14790e646903fb5a1cee2b5392c0822a17b1d0651417e6ba9c9c5563a45b339ff0be850354731153576f2af90acabde32e85638952d3abf1f80e9d79c44f9eda6e2be1afaae44575025d1a5882faecff8ea5fad549310a0f1d3371c6c3c004fec1a898e817bd72963c586ba914d9453045256622404db4108043a4551b1632c506d4a9b8fef1eec5092cfcb9c3bb4153a2360f4c7a899f49d9bef584cc51d886004ff855a190396b09400fc662604ab61365336028b92af6fdbce224f141c9649cb2d52c32966a35e109e7b88db48e482b4588486c6a61d702c2421ab0bb73c3ba95042d6ca95235e8a50fe41eb9d0b94468b6a253874e7a0dd7f00100b2a26af44fd2e898d47bfda020aaf47d66b51f00df3e432974249e8eb43c6b5e53ec713b521b97bce7e9bc4c695427c16dda8039ede324bcb86640b1b26d9a90773897589bd5710e4e7ea6c149cbf7a72f38df77bfae3403de40b43c9b908fbf42097dc00314ddd27a77a91832e0cb2269d3f55efb5c65dc0628601e5cdad2f6e62a74b7aac8135daba4a6d4414101722d75ccea10a4b46ec8e52e3183d34b2ea2408ae078ceb8d0a74fcc8215a58f90dc9a369f9a87ea49b53f21c1cdc4d04fa81941c951f59a5a369177a35c8a178f129f0a174fdfa4f027db5eb5d794dd51baa61e2fb89e32e6e871ad9df576cc13cdb097ef551e68dbd52cdc2f6895a2185457f6efd474d383d0b7db3f9628b03b40c9d5a1a49f8a6eca4ca7613a8270bb181114f64997faf3bfca83a56267b50fd6158c6e1cbd86abc3466b396b26e2c71ac34cd1d88e4717db20e03868884ffacdbdc6a4ccca08da84aaaa6fe44e77436ebf4c5985231738fe395ca367ee224f416c202f916928f5b83414456e9684265608c4b3e3feb1d8ee5980d04956e49db3c958f91b341be7099c9db471ba06501107e3f8cbbf4e98b43ee78b4cdb56461ba2ce30db4e18eadab76dfff3dc694f95da5bdf38839ea8bb4b7b792c77d8aa95d85e66307336e70f4712bb47b1a52ec2d8a6dec007de96dfece58bb2915898930e48553f0518bc85324b6c9279421eec54b0e7e7aabff91441351c3e2ef802620a6a5c23349c8cadc6b49821ba19f205a4668776d1d220d8002db049f310244a613d597e9203645596cc46e87c18708299cf22724a2a30fdf82f104950449c98d407b5887be2ce66562db7286989029d37b11677b563dd55824bca19d8cbddf88ec02c97c94d8b5d9dc710dfd34d753cb3a8724b28250fdf75807e999657f201d642b19608bb693f2e0a323ee3e65cd54a22f3cf8c426a65af5ee78069623688f17ea2", 0x2000, &(0x7f0000000b80)={0x0, &(0x7f00000001c0)={0x18, 0xfffffffffffffffe, 0x3, {0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x0, {0x8000, 0x6, 0x0, {0x0, 0x8000000000000001, 0x4, 0x8, 0x9, 0x4, 0x7, 0x9, 0x1000, 0x8000, 0xa52, r5, 0x0, 0x6, 0x9}}}, 0x0, &(0x7f00000006c0)={0x10, 0xfffffffffffffffe, 0x5}, 0x0, 0x0, &(0x7f0000000580)={0x20, 0xfffffffffffffffe, 0x4, {0x800, 0x0, 0x4, 0x8000}}, 0x0}) mount$overlay(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100), 0x8, &(0x7f0000000440)={[{@uuid_on}], [{@euid_eq={'euid', 0x3d, r5}}, {@hash}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@obj_role={'obj_role', 0x3d, './binderfs\x00'}}, {@audit}, {@uid_gt}]}) 1m32.816345547s ago: executing program 0 (id=4927): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x3) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x1f0, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @private0, 0x101}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe0000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6b72}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3e09}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ac9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) (async) r3 = memfd_secret(0x80000) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000000)='mountinfo\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) (async) sync() (async) sync() (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x90) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async, rerun: 32) r4 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) (rerun: 32) ioctl$BTRFS_IOC_DEFRAG(r4, 0x4c00, 0x3) 1m30.023028562s ago: executing program 41 (id=4938): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r0, 0xa0e51000) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0xa84, 0x4) (async) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x0) (async) recvfrom$inet6(r1, 0x0, 0x0, 0x12003, 0x0, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)={0x6, 0x0, @d}, 0x18, r2) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) (async) write(r3, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) (async) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @loopback}, &(0x7f00000001c0)=0xc) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) (async) close_range(r5, r5, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xfffffffffffffffe, 0xf0ffffff) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000200)={@remote, r4}, 0x14) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d2", @ANYRES16=r6, @ANYBLOB="020025bd7000fbdbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0xc805}, 0x8080) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m24.913005085s ago: executing program 42 (id=4819): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000200)=[@sack_perm, @mss, @sack_perm, @sack_perm, @timestamp, @timestamp, @window={0x3, 0x2, 0x8000}, @sack_perm], 0x8) sendto$inet(r0, &(0x7f0000000440)="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", 0x1ca, 0x10, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) sendfile(0xffffffffffffffff, r1, 0x0, 0x3) mkdirat(0xffffffffffffffff, 0x0, 0x22) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_secret(0x80000) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000280)='\xfc\xff\xff\xff\xff\xff\xff\xff\x00\x00X\x8d\xbeqc\xae+\xab)\b/,\x06\x10\x96\xce\xc52M\xf9\n\xfd\x11\xb7\xc7\x87^\xfes\x15\xbf\xb8k\xf8\xf3\xf2\x91\xe2J\'M\x86\x82\xe9O\a\x01\x84\xd3\x9b^\x1f\xbf\x8e\x9a\x9b\xbe\xcd\xb9\xbf\xd4\x83,\xbc\xdf\x8a\x16\xd4(\xda\xa1\xb0s2:X\xf7\xce\xc7\xb8\"\x8f]\xa9L', &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c) sync() sync() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x90) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000640)="f30f7ff4c4c16c141366b8cf008ee00fc73a650f0199c5350000b805000000b9165300000f01d966baa000ecb9ea0900000f3266baf80cb8910aec85a20000000066bafc0cb000eeb9800000c00f3235004000000f30", 0x56}], 0x1, 0x60, &(0x7f0000000100)=[@flags={0x3, 0x100}], 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000180)=0x4, 0x4) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000140)=0x3, 0x20) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x2, 0x4}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0) connect$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x2, 0x2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643de6d98cad95038751075a899e22ea9c45e53bb800", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 1m18.324293098s ago: executing program 4 (id=5008): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="06dcdf25000000001400020077673100"/34], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffc, 0x2ffffdff5}, 0xc) r4 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804125000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigqueueinfo(0x0, 0x3a, 0x0) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd000111000400020070ef6e13800000000000ff0045625e33c4a6c326"], 0x7a) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 1m17.789662111s ago: executing program 43 (id=4927): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x3) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x1f0, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @private0, 0x101}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe0000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6b72}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3e09}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ac9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) (async) r3 = memfd_secret(0x80000) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000000)='mountinfo\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) (async) sync() (async) sync() (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x90) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async, rerun: 32) r4 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) (rerun: 32) ioctl$BTRFS_IOC_DEFRAG(r4, 0x4c00, 0x3) 1m16.864263766s ago: executing program 4 (id=5023): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x110) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f00000001c0)='-\xe8}u[%\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x5c, 0x0, &(0x7f0000000540)=[@request_death, @transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x50, 0x0, &(0x7f0000000000)="6b724b2bb14db9a06d472403034e766a5a8de7130e6db5760134d051e86b6d1fb8d772ecbde8e7ac4758509fcd0895ab3d3c78942acce92d0c89e2cbfdf89adff9ad28be6437aebb6c5e94f4fd20007e"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@decrefs], 0x0, 0x0, 0x0}) 1m16.863437915s ago: executing program 4 (id=5024): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0xf401, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m16.861540435s ago: executing program 4 (id=5026): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x8000) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32) 1m16.326168109s ago: executing program 4 (id=5037): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r2) io_setup(0x8dd1, &(0x7f0000000080)) io_destroy(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000006000000000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x3]}, &(0x7f0000000080), 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x4, @multicast1, 0x4e20, 0x2, 'wrr\x00', 0x2, 0x8, 0x2c}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x4e22, 0x1, 0xa, 0x7fffffff, 0xfb}}, 0x44) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r8, 0x400454da, &(0x7f0000000140)={'nicvf0\x00'}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'veth0\x00', 0x411}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1m16.305010501s ago: executing program 4 (id=5038): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x80000) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000000)='mountinfo\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) move_mount(r1, &(0x7f0000000040)='./file2\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x0) sync() sync() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r2 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x4c00, 0x3) sync() 1m4.229467396s ago: executing program 2 (id=5171): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x842004, &(0x7f0000000140)={[{@stats}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x3}}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x2}}], [{@dont_hash}]}) 1m4.221689467s ago: executing program 2 (id=5172): sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x2bc, 0x4000, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2bc3603996a34b477ff9e61d08297a7ee76c6cb9c5be3d5bfca761624ffc97676fb004b282e0105d51c4c9affb7cbb98e7329e6504a1ac1e0aa917f32ecc", 0x3e}], 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000003000)={0x2020}, 0x2020) 1m4.221136907s ago: executing program 2 (id=5173): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x80) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000207d1eed2c00000000000109022400010000000009040000010300020009210000040122050009058103000000000065d3e26916f44181a28422aca73e4005df6bb408d0300300771afa6ee666d46ffdb2ee411f7af023b3550cdf12deb8fe41a0f8df8d960d8c9ea49705d3d62b66256a4bd812c8685394524cac9650fb35c5d1aa6be0a8ae381cdb7df1316669f56600c1e83fd85758d7f8181c3f74a888863245c990828f723a38ee64bb7f39ea3f3856a5c5595356a62112a442b74dac7c19b4d4a166fd35e083c35cd22f312d6b5570f466d76f653b6576e857a0d68263d07b0d009fdbd7623400"/260], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000112"], 0x0, 0x0, 0x0, 0x0}, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 1m3.708806038s ago: executing program 2 (id=5174): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a) (async) write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a) recvmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1, &(0x7f0000000380)=""/243, 0xf3}, 0x2160) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0xffffffffffffffff, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/122, 0x0, 0x0, 0x20}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) 1m3.603362327s ago: executing program 2 (id=5175): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x2000, &(0x7f00000003c0)={[{@nfs_export_on}, {@metacopy_off}, {@redirect_dir_follow}, {@verity_off}, {@index_off}, {@redirect_dir_on}, {@redirect_dir_follow}, {@uuid_on}, {@userxattr}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@context={'context', 0x3d, 'system_u'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)={0x2, 0x0, @auto=[0x32, 0x1d, 0x29, 0x38, 0x1b, 0x28, 0x11, 0x1c, 0x2a]}, 0x11, 0xfffffffffffffffe) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002940)={'vxcan0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000002980)={@private, @dev, 0x0}, &(0x7f00000029c0)=0xc) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, &(0x7f0000002e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002e40)=0x14) sendmmsg$inet(r0, &(0x7f0000003080)=[{{&(0x7f0000000480)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f00000028c0)=[{&(0x7f00000004c0)="e8781238a43d77580252ec5a66ffbdf4f2518ab6215d1a2572c9a4155a04fe40880880f3f6e5cd5c44d88b5c2846147a7cfb25b73ca099880b1570ba65f53be9301ac9129480ed8c073763481909531802f7aecab583e7566eac87a0bf5859b0bf81021d6ec659edacc5201018c0d3361ae065ba4ef32f92908e51b34b7318b8362e68c5065a6afbb7136eee1aea9f609f2ff448", 0x94}, {&(0x7f0000000580)="0a74a950b870168da5b1271ef6086e299e7bf77db6a60de4db37a14c400c9635244f731285499e3ecac5778d7ef9860980c38bbe64", 0x35}, {&(0x7f0000002600)="9db401d49e8ceddbd6615a003fa0af19f411", 0x12}, {&(0x7f0000002640)="d077f4a9f5151f562eed5a93fd768e3ce8a2da16edbc0eb02a21460d4d78a4f9a7c24ace5243a1714776122df68d1499013899ab410e1eb9a791ec57ff1388643580741f9b7a92b7957e0172370dd4c4bdfc6d04e0afd76740c866bbfe58c41cb2023e56675e6cd049b737ed27531207eec045a98fd7d86fb41258bdda3948b83cd893401574af37371cf014581037bd22c65312c5a8a6f4ac95dfdfa6178d848cf7bf83f9abb506e739727185c850979da38b10462b5d1144f0bf76baf22ad74069a2c301ac9a65d80578901c1149a5bed004152fa89bb815f035771aad811b589d", 0xe2}, {&(0x7f0000002740)="0db0a0eb60315432291b44db4263045e2d32a6d835efe7674664c3dac4d7b88b2dc32a4ab657bc031b9c41118b3f8b26e3caaebcb42665690f8733170690d869431a7cc64da5f83f687211e578db2dfc868e2017887a13937c8db1bdc14a715b93efff2c6ea522b27966c0c2131812e1", 0x70}, {&(0x7f00000027c0)="393f700fecdeefcd03b2e7317578baa75aacf4015b4bc51bc5310a456f7690b861b84b2065398bb744651948fb7b313e6e71074b0f65f06a1556fe050ab989093c355c791dd8032ea2f02297ea5104cf3bc0105bdbcccfc9252580ca9869651bfb2323a38c4fdbe4188a2f9348a973761a9709c16d68bce05b27c01170894c59be31b637121e2eb76b18beb0db4fb8b479e82650587f68d00e872f54ccc1c1fc13031868839bef229f463d1a17cc1c4c9077958f175c8f30170fcf4b62dce63340d75c", 0xc3}], 0x6, &(0x7f0000002a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x88}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x12, 0x6, "b194d36e"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdd}}], 0xb8}}, {{&(0x7f0000002ac0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002d80)=[{&(0x7f0000002b00)="ff5d8811e8d82f74e541ad79d38defde", 0x10}, {&(0x7f0000002b40)="1935d8cf5bc9065e97c925ea89769a7f9c711f883ea89487f29dc12a0ff40346c1b84597a27c0fb49fe881cb647ce8290539afd233104af69e57c9a55d34bf6a211828887355e3fab620f9b9ee68d5861fc18376ae45", 0x56}, {&(0x7f0000002bc0)="dc517dbf2a83598244644a59c8cd67e504f5c8cd0b28ff81c7a83686759d31d3338dc52a56844574dd603d50ed4f814133cf9abad3d0f7fc42be39b868781a2dc8d076b45158621e5d", 0x49}, {&(0x7f0000002c40)="19aa0b88d1a8318d8b9bedfc1cb3c44c5a49958b11c2aefaf457cdeb61c20a5d118d76792bf5df765024d98e851d46060266d2cf3d6ec27641e3f0f3af536ed7f93c7e0eae32de00b631170900ee316e9af8abed112ae5b93efce317320060a98778bd3b2b904e3a4f6cee45196247757e7c80c5588b39029c57db0a60aa5ff94d957276bfa0731141697b016913f18ca4d75a7abaaeb2d6a9ec5fb9be9b671d53758482559c2fbea52f3a9b60879a90bf6549eb20354fb7f4728f0f29fdb9d22763e84c777f41a05615d55e517f255ab5a39936ae291b4998a492659cc3cb5a2901ed0db84b18f5be9f2eb9ebf8f84611", 0xf1}, {&(0x7f0000002d40)="228ff75acc435a445600f0f0f07a9749e434e834642da81bd3d6988741712a7358df3061e2575daef92fb7ddb5dde484adb008eb150b24e938f23aa0ec28", 0x3e}], 0x5, &(0x7f0000002e80)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x64, [@empty, @broadcast]}, @rr={0x7, 0xf, 0xda, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2]}, @rr={0x7, 0x1f, 0xd8, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010100, @remote, @multicast1, @private=0xa010100]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @ip_retopts={{0x110, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x12, 0x0, 0x2, [0x2, 0x3, 0x9, 0x6, 0x8, 0xd8f4]}, @timestamp_addr={0x44, 0x2c, 0xa1, 0x1, 0xc, [{@loopback, 0x3}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x6}, {@multicast2, 0x5}, {@loopback, 0x4}]}, @timestamp_addr={0x44, 0x54, 0xec, 0x1, 0x1, [{@rand_addr=0x64010102, 0xfffffffa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}, {@multicast2, 0x3}, {@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x4}, {@multicast1, 0x8c}, {@remote, 0x5}, {@broadcast, 0xe}, {@broadcast, 0x1}, {@remote, 0x29b}]}, @lsrr={0x83, 0x7, 0x4f, [@dev={0xac, 0x14, 0x14, 0x12}]}, @timestamp_prespec={0x44, 0x4c, 0x56, 0x3, 0x1, [{@remote, 0x9}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x8}, {@loopback, 0x100}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010102, 0x80}, {@loopback, 0x4}, {@empty, 0x1}]}, @ssrr={0x89, 0xb, 0xe6, [@dev={0xac, 0x14, 0x14, 0x3d}, @multicast2]}]}}}, @ip_tos_int={{0x14}}], 0x1e8}}], 0x2, 0x8000) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000240)={@id={0x2, 0x0, @b}, 0x10, r1, '\x00', @d}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 1m3.544385241s ago: executing program 2 (id=5176): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)={0x38, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x18, 0x12, 0x0, 0x1, [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x38}], 0x1}, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_secret(0x80000) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000040)='\x8a\xe0\xb7=\xff\x0f\x00\x00tinfo\x00', &(0x7f0000000080)='./file1\x00', r2) sync() sync() r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x4000, @dev={0xfe, 0x80, '\x00', 0xd}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="5d8095954d00d01aa9d1c32ddf60cb5e46ebc4847109dc7e3f503a39b856a4e426bab18cfa8a34263dcba43d5ae4264c323ab6bac30a9d96e2262636856e33e3e18bc5df81", 0x45}], 0x1}}], 0x1, 0xc8000) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000200)={0xb0000017}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) symlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='.\x00') r6 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r6, 0x4c00, 0x3) 1m0.787103414s ago: executing program 44 (id=5038): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x80000) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000000)='mountinfo\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) move_mount(r1, &(0x7f0000000040)='./file2\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x0) sync() sync() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r2 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x4c00, 0x3) sync() 48.510757965s ago: executing program 45 (id=5176): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)={0x38, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x18, 0x12, 0x0, 0x1, [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x38}], 0x1}, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_secret(0x80000) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000040)='\x8a\xe0\xb7=\xff\x0f\x00\x00tinfo\x00', &(0x7f0000000080)='./file1\x00', r2) sync() sync() r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x4000, @dev={0xfe, 0x80, '\x00', 0xd}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="5d8095954d00d01aa9d1c32ddf60cb5e46ebc4847109dc7e3f503a39b856a4e426bab18cfa8a34263dcba43d5ae4264c323ab6bac30a9d96e2262636856e33e3e18bc5df81", 0x45}], 0x1}}], 0x1, 0xc8000) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000200)={0xb0000017}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) symlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='.\x00') r6 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r6, 0x4c00, 0x3) 31.483711869s ago: executing program 3 (id=5612): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000040)=0xc, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xd2, 0x40, 0xca, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee8000, 0x3, 0x0, 0x40, 0x5, 0x7e, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x1, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0x100000, 0xa, 0x6, 0x4, 0x42, 0xb, 0xf8, 0xb, 0x7, 0xe, 0xf1}, {0xeeee0000, 0xd000, 0x3, 0x3, 0x11, 0x6, 0xab, 0x7f, 0x3, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 31.412345715s ago: executing program 3 (id=5613): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0xc, 0x1000000000000, &(0x7f00000005c0)="cbe60100f646f195447c88eb"}) 31.411897415s ago: executing program 3 (id=5614): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x80ff, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 30.896966457s ago: executing program 3 (id=5619): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='bdev\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x8}, {0x2, 0x70000000}], r0}, 0x18, 0x0) (async) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000080)=@sg0, r0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000000140)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) (async) read$FUSE(r2, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getgroups(0xfffffffffffffdc5, 0x0) (async, rerun: 32) syz_fuse_handle_req(r2, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x5, {0x3, 0x0, 0x1, 0x0, 0x3, 0x0, {0x6, 0x0, 0x6000000000000, 0x40, 0x0, 0x8, 0x80, 0x0, 0x81, 0x2000, 0x10000, r3, 0x0, 0x100d}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) quotactl$Q_SETQUOTA(0x8000000040000c03, &(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, r3, &(0x7f0000000200)={0x2, 0xd0d1, 0x20000000000, 0x5, 0x0, 0x8, 0xfff, 0x6, 0x40}) 30.836411262s ago: executing program 3 (id=5621): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f00000001c0)={0x67446698, 0x0, 0x1, 0x4, 0x4, "44a0f00bb4936d5c76786b6aed102032f71ba9fe8d7f04a9b9d3d9486054bad5f909bf83b518d18fd302b019a16d14853c74ed798bc0446afb2a8a9f2d8fefef64655bd4c82edf60836f08958edf41a6ee1710368587102b56f0777287a9bc65a18983340d06f621e390d8cd323ff60f22a4fd43f26fdf479a39c7cb3195767469f27ba2457c89155d326c7e415574816d605715fa377e98616e04d6d3479df054720b00a61f77d653e103168dd7554be16f43f061fbd9c59931d564bddc2f0a34caafd047be40fbc9dd7bd2fbcb"}, 0xde) mmap$binder(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000006c0)={@flat=@binder={0x73622a85, 0xa}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r3 = memfd_secret(0x80000) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)={0x7, 0x0, [{0xb, 0x5, 0x9, 0xdd5a, 0x2}, {0x6, 0x6ae, 0x9, 0x7dc, 0x1ff}, {0x1, 0xfffffffb, 0x5, 0x6}, {0x0, 0x3, 0x7, 0x3, 0x5}, {0x2, 0x3, 0x5, 0x3, 0x1}, {0x80000001, 0x9, 0xffffffff, 0x5fd1, 0x6}, {0x80000007, 0x4, 0xfffffff9, 0x7, 0x13}]}) 30.433232104s ago: executing program 3 (id=5622): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x3) mkdirat(0xffffffffffffffff, 0x0, 0x184) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000640)={0x14, &(0x7f0000000580)={0x20, 0xc, 0x4c, {0x4c, 0x10, "d42a4c4fa6310ecdb6522630f82a77f65791f826c70679b68c6e227e4e941f7610b04dcf03670e4941befc0cdc0ca6193f680ac4fa09e0c01224469798b9a96db81a27bb3b7ad32851f9"}}, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000680)={0x40, 0xb, 0x1a, "1c58f351c3f6452a2f9a484a362486d66fbdcd808d568e38dcc1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x8544, 0x1, 0xb, 0x5, 0x2, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x6, 0x4}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x80000000}, &(0x7f00000007c0)={0x20, 0x83, 0x2}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x10, 0x8010, 0x10, 0x14, 0x4010, 0x10, 0x8, 0x10, 0x10, 0x4, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_secret(0x80000) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000000)='mountinfo\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) sync() clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) futex(&(0x7f0000000400)=0x2, 0xc, 0x0, &(0x7f0000000480)={r3, r4+60000000}, &(0x7f00000004c0), 0x1) sync() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x90) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x5, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/199, 0xc7, 0x2, 0x5}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x1b, 0x0, &(0x7f0000000140)="4c57caf0ad00c3fda2acac2c3899656625e67a67d0240b5f545f13"}) socketpair$unix(0x1, 0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r6 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r6, 0x4c00, 0x3) 25.755948902s ago: executing program 1 (id=5691): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000080)=0x9, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, 0x0, 0x0) 25.591606285s ago: executing program 1 (id=5693): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getpid() (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000000c0)="1d0000001e005f0214fffffffffffff8070000001d0000000000000008", 0x1d) (async) setns(r2, 0x24020000) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) (async) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 25.496021102s ago: executing program 1 (id=5695): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="07062dbd7000000000002d0000000c0005000203aaaaaaaaaaaa08002f00000000000c002d000203aaaaaaaaaaaa0c002d000201aaaaaaaaaaaa05002e00010000000c002d000203aaaaaaaaaaaa08000200", @ANYRES64=r1], 0x5c}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x48000) socket$inet(0x2, 0x4, 0x1) (async) r3 = socket$inet(0x2, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xdd9a000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) open(&(0x7f00000004c0)='./file0\x00', 0x200000, 0x60) pidfd_getfd(0xffffffffffffffff, r3, 0x0) (async) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000001240)={0x12f4, r7, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1210, 0x3, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xf9, 0x2, "ec33fa24a430a87e4fc922e223bb7111f885b21e4baafe718baba16c18d2cceb63b455ce52a398657eeba075878659df45fdcdfbc466a468f8d9f2f39c8eca51b3b73173299142b486c52de9db7e774eeebdba95764c772fb79a6d4c12714561a58314d78f515242b45f88e1dee359d14532b1090038f2cc707e13a93429cf620c4da4847e34a095561e193d3d0c8f4b5f8785cfb3cfebb8dbed475438da559258923eefd77a6c2292188322017718480555c60a3b52e0dcd77c21c4dc67197a3205a27062d36fed9780fb4b48279ce8aaaf5d8d32ad1b55e7017615a17295f47f005675bcd878913063a2005a81e9bd59fa751f7d"}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "3b3d210b966afb25102f6e02eef7bc9eaea5478bf17236916bf7d9c9519a7f5224e6ae5e41e9104402a304383981d52c976932e41770cacf7cbcdd0fe399e5ab90fa78c2edd50780aa6d4a743f7a512b583651b1c087cf3e02b7fe69c68feb347bae8f970dc353c88104b248eaaf0b808a631f032670d041c9443d3fec4e7c2325b9d9496c1529aaf60f747c87139e6e90afaf16eb2ddb307444df9395d178337df1315515c30c0c109116b71f9525513e30aad74fee6917b368015e6963eb6ff75a4862e7c44a6bc440474fc38e9797774565abe202ca58053626b1f9d118704361f620ceaabbd8e3b8915587e6e060a41d046d712b70562fbf5ef28b7d9ba594aefa049f09b538b195f978030ac75c85d23b3e94d965f5b4b149d961aead5213436dce53d70134a50ac6bd69b3f48ad1952784ff9895fababbad01dacac0e3814aaef96c223fc0404874ddc3ac1bbe3f3befad9b727da677fadf8e1203955c2144694bd664b877bc5281214bea4b5c46733442b6596d523a0caf53b40281d86bee1875d1781368a6482fdeb573d4d5036bb6a645307cce12eee9667023a268bf4367e18a15be1ee5fa0a0c7d704fef826baeecea8c0f843bc82c830432066ab3e3b4beafde3fbc5a68c78940474744403c8cf96be7fd3c3835bf5bf8f8b867f983930a2f60376bed5b5440ee37dda7bba2e87cf0817aa690bea6d9a9bfc135f2fdaf425c49a5dc79c1d7e1148df5b4ee9903c00eda5c961589121a3ce071e1d7b8d8ddaff7add5e34b324424a9d54a3bbef2ca5b85841c898c0b3dd30b25897e50957dfabb700d8beb1e5002354baaa0db452319ea8c4db95821d3a8dedc57fc6047861897988dd5e5fccd85cfa1440268cf5abd0cf6236f961cd2bbcb3c7042f4d2762bc69e70f53e45e9d48a2e19429ed22fe69c489025835713779b1f65d07c2da37b4cb0263b5d6329e1c14ffa9e11f527685a53c1d5e364d09c68a5ca9e1102bcaf3d549188ed11173310b291ced2e6da2f7f20090098a7b4d8bc6a6dfd1a85f80f9491f44cacb2466e97664816a89a7f380b91abb0cdefe911666a5a98edf7fe3ffd8d8b38a775c56fcf11ff669dd4fe30c66058457a204045fffdec0e36fbea85584521d75dd8d6a9d477e8273c63bbdf7a4fb20b09fc2b153d1a18ab31dfc075165d67d51be29223b36bcaa683bd07a86b12a0cde9ddaace9ddae0589bdfe42dcf223ee2b2d025de703a6129379fdb607d8d4c3f1ebe5e7b3321b5876f362331be409c2d35538585b0550d056979d10ec1c0592ba3401fb4956eb063f0983f51255d89d999611bbf93595ea0bf29c816f9f227211aeb752c761d703f085ccb8c21d110135704b0bae8c4eb3ed254b8161d8f8f9e3840c619b5e81e7fe647b85243e8c65130765c27ac926ed8b4c0cb298c62a4e23613226911ff268c7d8a2494f62a76a5bada6d5a6156edc547d9e18a4f81c853642b7af8753ac4e21a5b83dc6f82bbc00c0360888c443e299b3067d183957d5796b8d1ce623b706cba47921b17e53d0e5f4aeb63f3e4d6bb93aecf41efbdee267bf48c52e4e85ec755c51a504e478b62a5cbf138c351c9795c5ceebe8a6538c7f5cd0d054f51121a02154ed30d5270987163e307517d5c737a3992a8b6dbc92939722690ab39d45e9be7748c7fce4b444af34354ff3f0f8ba914b129de7316e1fa6d0af99cea56bfe8464160af87c70d1ee87144cdba20d90e6319d8834440a72f2abf7bf75807df10487f7eb48d85cde322155148ce2bbc52162d559bd30e4aa943eef7471262ea05573c17dab39d02465ff5e3b80b9e3782a5f27ee8b800590a8b76d5ff2cf4ffc804891fdfe00ab5657b5e8aaa070896c9f48a03fc78835368c0db1df3f94158af9440fb6377e22a09dc276834aa521906397f9eacc2960afe485b52cd4d7dc4b391edcccf7af5969c41635b63e34efb9b54f6e0b1a78c0582e610f135af60ff7546e14604ab3c95a0cb77e17c38784e7dbdf5c822c05d7a959d7920226a288e523aaea9061eb0e40bcb96dafc75e0571ba28fdf9f1f9c3522f4c1e12fe098aa6b8d42804c1d56c9b11f4b7a34fe148e5ec4a6beedfbc6e6cc7c64a46582428f103294d8181f7276fab5af6fd1045e7059e257403f0eb8280e03d6aabff9321c55916853b224ada8acc4038251a6b32213ce6e360902d4b8edbb8b6b01294aa7934d321450f9cc575dba465e9aeb6ac653801aa6af6e7f43f62c951373c887efde8147ceebc3cab3c9c5e888af61d1f5197abdcc5e085a183e2b4538685b37d0a32bce76c8226851e46ba3bda9bb13c59e951c3c4e97ce59c11639d99527c669571f3066626c689909e36e9c3573d9fc30dd1864dc8202d34e7199d91deda4339510d90cae60cfbdc480006c05f825bc3c217c9e67f5442bd9971d7bc25a3c361c36f2dd262a824100142d8532f85af406594ccce684e44b97be259bcc471817a3ad97b4115d943749b084b521c2f5bcc9a3da4bb3e249abe921465ba9a563fa57cd6fd60f8b53031b5158d6e9ce85db3006ba47c7c905a715b6be9f6ca8659b68552e1dbdd10ff2a05fff58262102590aad25b55891a0fc811d353db7a1cb7b0fd3ffcf34343c63650b7ddde29e85d9060cd6e2a1f90e73f7b7bd309b114bd64d55919880fc0aa077330ffe430792b97696aab72ec87c72dd5b41a2e99dbadbc927b5fc1d584d34d520a0e3e09ebe8f5de2222ddee6bfd05ae400619677cb889070d97cdbbead0baf75dace847007ab6d14ae86cf456acd061fd3ceba83bdd84e29ee4c195c8be06c3df3805f1156d88a1316a385b22f04271105623593f8cf3be8a05178231a85170fa0a1d3459595d49875b9756fd729d5c3d1a61f4a5048f6784de16963c755777ffc42d089fc7e9ce7ac0ef6acc075f8dd3288b68178f069738707641d93b7c76131f39e8136c35f0f141b1983b8dc6f040365db68b1138b9f863ed5cb089bb1318d07421612245e66133fdeed5d4a663bb53cd714bbda6b6e6089064fa1ba37fa390fd64e345fa5bc8b9b9a54b4f85b039f11278eae2607a8aafbb0fb1fd92c23badb8e54640d5ce4ce646a9c9b43606a3414ab688e9d11a5b00df1a9998895426dafc2676de4024e3d378436d7eb37f5ae4229bb40aad63b8b76a937964f38a9dd7c89ce485b6e6a663ce3e7b54df7a51688a8257badf7bb79790fed4c39e795ae3bd60e8f29ad534d7cd37af669f7b0e8be8f78782ba6aea5241a442c9caad52fd79f45068d697316b4d6ad8fa0ed94fbbe9d0cbf19b58ec5d23878edc1892562658110767f4ab63f6e8b49692a76ecfdfd3ab699d970f6c32579adbb028df3ba2528d1257ab666ea39201f77f1bcf78c36aca5106af1cd3d23ca31f0789cbf129e0b5cefece126b528530cf7b770f69aa6b73be99cb4d4d9496da94755575b5cc6332ae8b8d32d5e038c50f7a0f76260717d59cf74e05cb30299a7ff014edd4816b3314194aae7875207ff1c9040537308c10e3eba3a94e6bd348fd64e1f47f3f24abc74b64180f2ba3e25aa73ab794cc61a43a9128223678394311b8b6e9889f72766b4d98f19e9585fcfbda61ee7f744b2a296209a86cf293b8186a6ded17f6d2e9623e64054347469851132bc7ea4ea5a5c1e55b657bf2f10628efbdde0155ad0f3e54a2ccb324a85687d15d28f8797f87ae0b168ea07b792a6ce8039168ed142d04c6d72e6b0389451d690c55e9ad96f78191cf30347539de774ee71b83a5cc0a924ad519edc34d08aa7e855ce47c820844d595f692d1a45e6c4be19a1e93928edff49abc9eff2cc2586b75a5ac1372ee43d7358596b34cf94eba8d18469a288907e2edbf49b91eff6f2663d041a1f2b6e0bad030b718da1a9ba548b79624957f56de376c62f8012e8873152be581a80f8e27b5fec7ca3b55effd7966555da1a7e5106f65187d11f30747bf5a2ac355fb504c67e3f27da01f95753e98b97baab1f87986fd8bd545f136cbe9b8d14a9286e41f922cbcbddac00d449db99fa2db8a3b88cc01d93a317c6af85a1f469bd7f4ca0dc05a6454237d1a264ab80ca5ea588a38d04b567db32880fc53122d41e49bbfbf21c180bca7cc0ed8166f5353a1e7606828f0ab71d012d8861836c77d76980c3d93c177015adbd4c310db833c8d99603970f9ed7b963ae113aab179f23efc1c770406fee699f882713aa1480e908545ff3d942938c534686a8a05ebb164799fa6ffb181865c3df6f8e264fa3257c1a5aedd3b933c49a98612b4a26201985419222b7500f9d2a5a3edf8dae848b4568b1b5a8beef08f3acfef63af7d7d333eaf23263aa5421791f31c3593db95f66a14aaeae05912fda1e8a98a65c9459c8eadac12c5595f1e335628b058f7f5e659c25827a14850a0257747fc3275f147162b63baf27a028d433511e1d2aeb9024342530f6eefea511f478c04ca2c47c003ba93e13d4dfa35cb92fee97b08f03b46ca23b47508d744f8ef2a9ff0bdf90973dcbbdda4f3ac7809029654198c648cb4ecaefa56e61f67e2ad21fc0954f2c43b9476c821656695f322f4b5039e8e2f33c2f3a57f0a783ba7619ed7245eeef62227052f721963173c734f761dbba7bc06b464b0ed84de8f06ac7c55c6d18c3a9ca73b95601d379aa5e567bcd345f4807848a3deca743dcc2b111993a4fe5b37082dc090f13f2be9ddf55d07ba3995f63b218cd26fe3c43186b866fc7735de4cd724e4db91f9333d89472151109a6ec4f36cd50885cd6a8da6a67b44a5daaff574718856ef6b83a68012e0ae419017993c368ad8c37f8c05849ae46c1ca604a4628faa36f1ec9009e6948614ce45d709b87d41816d1283eb6c977cb7bab59b872f666c407122d397524d7ce42f93897334fc98bda6ef3518e3016ca59aa5646946b2bd096eab198c8208f7e9f8af3f5b5e7464c22e9f189f26ff7606d2557319eef2f4b5262bb2444a8f880e2a87f0d6668a5005dae3f975efc28b763d9b224fc834582637fedfba63c9bd57d9036f15aac6182582eba3728bb9802926c584f0acef5caadda11e364eac5bcadba38ee07cf75b64ca3a046052388f62e36bae1f85d2214e63f64002387f9acbe6a98d9ff285f2206ede32ecb3abfbd3c32232b2de15985a198f901021949f562cee9ef6808fdc0435effabe767f86801bcec356386f5cb57e05872df8a0d08847b29c6ec90d7a8a9014da31e2801efbee03d255a7548016eacc30b7418547d5afa09bf549879e0d98c1c2f90e9a49bf5a20eaaf9e98a78b27a96c884df4e34f5453b7a7ab99c21be948fc38d40e0dc206407f3315e255a21018c4e42225e8e10fd290c9d402b779bdfd70bb23751f78bc138164a32267f4f9776bf2887626a5029217d72c773eaf1c4756b25795b5b6accbd79aaa119e399af981a695706e93b7a4e4c8b39094cbb555ecb597ed837019caa9b1077226cd7e2d5140d391be9d1e9b27a4c3fa930ec3427556aeb4c561ad62e41a473e1b523da668e8c22b58df19b7b2bb0b81f452de475bcb214b283444882597144120dd4361d9d8b3d38730c9b1b4fe77c541bca942471dd66f9d47be15ff7383bdd90c83d342638903d13f964cc8c5c28c6d15d44549d76dbcc9fdb05fa60066d1de7d791c78531bff389b4f71ba16d629616afab3aef1133260ffe559081a3755d0c3f87942d2cd6a22cc07dd5a37a05763b2b4a3f4217baedda396ab59b0203043289c9194c2f8a0594f1c3596c6513be00ed42e805ef3e52bb15a670b6e99d97"}}, {0x104, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xff, 0x1, "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"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xa4, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x40, 0x2, "59d97aade8efc87138a0492d6632203b86822cdac649897c1798f3432a35c71692d5a2bc72a042a8e4018075717cb2d125455547ed622b96a4ca722a"}}, {0x5c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x55, 0x1, "0e60c1489576bf03f23e217f0a21587fafd2fbe81846014b54d2408689895cdcfc05505b41c95356397c6f8384ff33462d2c8e6d5560d2014d80bfe43af72216853f15c1473fb28dfbdb4cdf14f86c6944"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x12f4}, 0x1, 0x0, 0x0, 0x4000005}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffd}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8c0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 25.495599073s ago: executing program 1 (id=5696): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x1000000, 0xfffffffffffffffd, 0x4000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r0, &(0x7f0000001c00)="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", 0xfffffdbf) 25.311466168s ago: executing program 1 (id=5697): prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r0 = creat(0x0, 0x28) sendmsg$IPSET_CMD_SWAP(r0, 0x0, 0x4010000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/sockstat6\x00') mount(0x0, 0x0, 0x0, 0x200020, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2d}, @dev={0xfe, 0x80, '\x00', 0x20}, @private0, 0x80000001, 0x6, 0x0, 0x100, 0x6, 0x110022}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000001c0)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 25.16188867s ago: executing program 1 (id=5699): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x80000) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000000)='mountinfo\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) sync() sync() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r2 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_DEFRAG(r2, 0x4c00, 0x3) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x3) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) memfd_secret(0x80000) (async) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000000)='mountinfo\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) (async) sync() (async) sync() (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x90) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) (async) setreuid(0xffffffffffffffff, r4) (async) ioctl$BTRFS_IOC_DEFRAG(r2, 0x4c00, 0x3) (async) 15.303905006s ago: executing program 46 (id=5622): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x3) mkdirat(0xffffffffffffffff, 0x0, 0x184) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000640)={0x14, &(0x7f0000000580)={0x20, 0xc, 0x4c, {0x4c, 0x10, "d42a4c4fa6310ecdb6522630f82a77f65791f826c70679b68c6e227e4e941f7610b04dcf03670e4941befc0cdc0ca6193f680ac4fa09e0c01224469798b9a96db81a27bb3b7ad32851f9"}}, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000680)={0x40, 0xb, 0x1a, "1c58f351c3f6452a2f9a484a362486d66fbdcd808d568e38dcc1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x8544, 0x1, 0xb, 0x5, 0x2, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x6, 0x4}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x80000000}, &(0x7f00000007c0)={0x20, 0x83, 0x2}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x10, 0x8010, 0x10, 0x14, 0x4010, 0x10, 0x8, 0x10, 0x10, 0x4, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_secret(0x80000) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000000)='mountinfo\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) sync() clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) futex(&(0x7f0000000400)=0x2, 0xc, 0x0, &(0x7f0000000480)={r3, r4+60000000}, &(0x7f00000004c0), 0x1) sync() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x90) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x5, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/199, 0xc7, 0x2, 0x5}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x1b, 0x0, &(0x7f0000000140)="4c57caf0ad00c3fda2acac2c3899656625e67a67d0240b5f545f13"}) socketpair$unix(0x1, 0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r6 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r6, 0x4c00, 0x3) 10.116583504s ago: executing program 47 (id=5699): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x80000) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000000)='mountinfo\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) sync() sync() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r2 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_DEFRAG(r2, 0x4c00, 0x3) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x3) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) memfd_secret(0x80000) (async) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000000)='mountinfo\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) (async) sync() (async) sync() (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x90) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) (async) setreuid(0xffffffffffffffff, r4) (async) ioctl$BTRFS_IOC_DEFRAG(r2, 0x4c00, 0x3) (async) 4.662306854s ago: executing program 9 (id=5887): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) lsetxattr$security_selinux(0x0, &(0x7f0000000040), 0x0, 0x0, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201ff030a0000000000000000000000030005003300000000000000ac1414ff000000000000000005000600000000000a004e240000000720010000000000000000000000000001ffffff7f00000000"], 0x50}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) (async) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\b\x00'], &(0x7f0000000180)=""/38, 0x26) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) (async) r2 = userfaultfd(0x80800) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000000000/0x13000)=nil, 0x13000}}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)) (async) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000029000000360000002b00000000000000b000"], 0xc8}, 0x810) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x8}, {0x2, 0x70000000}], r1}, 0x18, 0x0) quotactl_fd$Q_GETINFO(r0, 0x3, r1, &(0x7f0000000140)) 4.158268345s ago: executing program 9 (id=5891): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e0b7dfd6c9276f53e0667dd48f28b11c6b3c7ee46fd0943891c35a7ab3218af5c438fbfe1deef085e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001fc0)={0xa8, 0x0, &(0x7f0000000740)=[@register_looper, @acquire_done={0x40106309, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/246, 0xf6, 0x1, 0x2b}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/135, 0x87, 0x2, 0x14}, @flat=@weak_handle={0x77682a85, 0xb, 0x2}}, &(0x7f0000000440)={0x0, 0x28, 0x50}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, &(0x7f0000000980)=""/4096, 0x1000, 0x1, 0x5}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setstatus(r2, 0x4, 0x40000) getpid() r3 = socket$inet6(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendto$inet6(r3, &(0x7f00000001c0)="9c8f", 0x2, 0x881, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, &(0x7f0000002340)='\\\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x7, &(0x7f0000000080)=[{0x1, 0x3, 0x5, 0xffffffff}, {0x6, 0x6, 0xd, 0x4}, {0x7, 0x9, 0x2, 0x40}, {0x4, 0x4, 0x80, 0xe}, {0x3, 0x8, 0x12, 0x7}, {0x58, 0x4, 0xff, 0x4b}, {0x7, 0x57, 0x1, 0x8001}]}) 3.960373021s ago: executing program 9 (id=5897): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3}, [@CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x10}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xcf72}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040800}, 0x20000000) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.592349341s ago: executing program 9 (id=5904): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket(0x18, 0xa, 0x1) recvmmsg$unix(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400120a0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}}], 0x58, 0x0, &(0x7f0000000d80)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee9"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xffffffffffffff7d, 0x0, &(0x7f0000000b80)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000e00)={{0x0, 0xfffffffffffffff7, 0x3, 0x9e8, 0x1ff, 0x100, 0xbe, 0x2000, 0x5, 0xd, 0x800, 0x4000000080000000, 0x7, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001e00)={r3, 0x8}) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x28, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xd}]}, 0xffffffffffffff99}}, 0x14000000) syz_usb_connect$cdc_ncm(0x0, 0x198, &(0x7f0000000900)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x186, 0x2, 0x1, 0x4, 0x30, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "d894b4c3"}, {0x5, 0x24, 0x0, 0xe828}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x101, 0xfff7, 0x9}, {0x6, 0x24, 0x1a, 0x9, 0x20}, [@mbim={0xc, 0x24, 0x1b, 0xfffe, 0x6, 0x7f, 0xa, 0x2, 0x6}, @mdlm_detail={0x30, 0x24, 0x13, 0x4, "0452d308988c60ab041c978aa19ce1832b80178364b9f64c513539481da7e6513a35465e9a0a0e8dcca900b5"}, @mdlm_detail={0xea, 0x24, 0x13, 0x85, "443ec914755ab654c6ae3b5d9cdf9dc25184a68c6a4bc002be3b5f16a25bcbb6d7409ad72a5e1267424ed9f45ced3d0598123dcc2c593bb253e2dc82c22d80cbefb9683231c63d8481af0b455c609c3477c7b889d8bd9522e277cce6f8466cca61c7ce76ff8f208ccdfec393b731a01297d42a5f709e41d177d87b1d9b0a2511f0142d683d67f9ffaa075327713957c6248997b19cdf2c3b3e9267a8988299a1188898355dfa1fa2a9ccb79fbc565e11a6c72afb265b1a43bce2e00b30ea730064a0e6400321cc0337c816f71d1f412fd19983276577724fd1d95bc4a21e866129ca3b6a4d93"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x34, 0xe2, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x2f, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0xcf, 0x7}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7, 0xd, 0x81, 0x40, 0x10}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x860}}, {0xcf, &(0x7f0000000800)=@string={0xcf, 0x3, "a9a25bde769b59f9669a9aa452c7fe0c32a01f3e2af8919c41c4d6762b7a061d5d71ca1b9366e35d5bfcde8dd5f73ec32724630dd279d434415515d341a333089950f837d2c3fd563692efb468d2cca63fd8534129655d5e2c729374e8ff3c5635bf07641dc7d5f4bf3f82f857d76f7919850b68237dcac50189d1dc7927dd67c06f1936747e05fad76990161d620a1c19f064f24d708923ded62c95e99372c1fd1f1c1a4014140fa787fa2e6a4dba504bc7e46bf4c2383d18ef4bcb66048eae7fd57c226fb11e59fe529bbfcc"}}, {0xd9, &(0x7f0000000580)=@string={0xd9, 0x3, "ab55fd7362e035fa21b82cadf79299f081e9d7515cf79e044df86f13b2cb339ec7efe37fe23d8fc7a647b8198fe45d6d3d6a01c938e60fc0441983705cb9299db15856d8d5c70717f704eb5d31ac5ee84aa5f0bfc7f686b6f582d6ab132f7463c63a2423ddd71eb8466cdcc8afb676dae374856765a940927058ccc9b4f5e96b4f35d179aa99353841a8e6293b709376ce081da35ee91984807cc383f03cacf550df7b3c13b228a613b1a53680de55fe4cfde853dbd751a64d93cb491879aed858c2a2dce00a92a9004e82b6deda7b0dbceccfa572d743"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}]}) 1.901478067s ago: executing program 9 (id=5919): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0x0, 0x2, 0x20, 0x0, 0x2b}, {0xf, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000000)={0x8, {{0xa, 0x4e22, 0xfa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}, 0x88) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) r3 = gettid() r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0x1a, r4, 0xba, 0x0) r5 = fcntl$getown(r2, 0x9) fcntl$getownex(r2, 0x10, &(0x7f0000001480)={0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000014c0)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001500)={0x0, 0x0}) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001580)={0x0, 0x0}) r11 = gettid() rt_sigqueueinfo(r11, 0x0, &(0x7f0000000000)={0x27, 0x1}) r12 = syz_clone(0x1090000, &(0x7f0000001600)="70e83fa233984ba0ff433307f663c61c1b3d560c199b4ed37e5071188373d0e41a4d03a0c1aab51dbc0754697bd632ccfb7812b167c6507b307b6dde809826180787a307b70bc523bdd6573034fa9cbe41431818a539d7fdf6698f043d4579028cba9cc26ee1e399572197171569", 0x6e, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000001700)="01f2953aa2de004069174491de128e8770d7779fc437e5a28cae1190d1c60de1c570b0acb1942262b6b5a2e8b559c99985d60218f4673ca586896bea102cc421fa6a13799cc24121d5785cad4db6e5775ee8bde054c67afdbe0a1b115c26aad4fd9ac4d6a5b65c4726db28a02280b67e08d4ed6bd5ced0a247245e0f780d1aef2096ba338449a92f54bf8bd0cbe59c537030318b0d3636575639fbfad409d280e13a12338432d84cddf39de30266643be2c1c9b2bb7b6e419b99d5b8338a63e524621c578eff601fa41fc33488a44ce3dc7611c28486a94dcb784b50208df4d2e7c374c4ff55d1b2179973975973f12fc607c117dbfc") syz_clone3(&(0x7f0000001840)={0x10200000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0), {0x19}, &(0x7f0000000380)=""/240, 0xf0, &(0x7f0000000480)=""/4096, &(0x7f0000001800)=[r3, r4, r5, r6, r7, r8, r9, r10, r11, r12], 0xa, {r0}}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 1.148199218s ago: executing program 5 (id=5934): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) ptrace$setregset(0x4205, r0, 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r6, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r9, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2}) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) 1.077868254s ago: executing program 8 (id=5939): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x25dfdbfc, {0x28}, [@INET_DIAG_REQ_BYTECODE={0xfffffffffffffd68, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) sendfile(r1, r0, 0x0, 0x2fe4) 1.077586443s ago: executing program 5 (id=5940): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000140)={0x1000000000000000, 0x10000, 0xf, 0xc, 0x1c}) r3 = eventfd2(0x0, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) unshare(0x62040200) setresuid(0xee01, 0xee01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x4030582a, &(0x7f0000000300)={0x113e, 0x0, 0x2000000, 0x10000}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x9, 0x5, 0x2, 0x0, @msi={0xfffffff7, 0xf, 0x48bb, 0x1ff}}]}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) faccessat(0xffffffffffffffff, 0x0, 0x3) ioctl$TCSETA(r4, 0x5406, &(0x7f00000001c0)={0x0, 0xd, 0x4, 0x7fff, 0x17, "045f79037602553f"}) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) madvise(&(0x7f000099f000/0x2000)=nil, 0x2000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.024313458s ago: executing program 8 (id=5941): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f00000005c0)=0x2, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x1, 0xf7f, 0x24, @dev={0xfe, 0x80, '\x00', 0x3c}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x73f, 0x2, 0x614}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000340)={r3, @local, @broadcast}, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @multicast2}, 0x4}}, 0x2e) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r11, 0x0, 0xcf, &(0x7f0000000380), 0x4) listen(r10, 0x9) r12 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$AUDIT_TTY_SET(r12, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f9, 0x200, 0x70bd26, 0x25dfdbfe, {0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x10) writev(r12, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149014006040800", 0x58}], 0x1) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r13, 0xc004743e, &(0x7f0000000100)=0x82) ioctl$PPPIOCGIDLE(r13, 0x8010743f, &(0x7f0000000040)) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r14, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 1.017794079s ago: executing program 8 (id=5942): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) unshare(0x20020000) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async, rerun: 64) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='binfmt_misc\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) fchdir(r1) close(r1) (async, rerun: 32) poll(0x0, 0x0, 0x90f0) (async, rerun: 32) r2 = open(&(0x7f0000000000)='.\x00', 0x800, 0x0) unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) (async) r3 = socket$netlink(0x10, 0x3, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) (async) close_range(r0, 0xffffffffffffffff, 0x0) 990.35739ms ago: executing program 8 (id=5943): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x8, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) syz_usb_connect(0x6, 0x35d, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000002b00)={0xa, &(0x7f0000002940)={0xa, 0x6, 0x310, 0xfb, 0x9, 0x0, 0x8, 0x7f}, 0x49, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f4900050710020859010018100a060300400007f03aa10700cf0000000000ff00f0c0ff0014100407f0682d970e803ea83977f1bc30ca46440a1003020400a7f70500071002065a0200"], 0x4, [{0x4, &(0x7f0000002a00)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000002a80)=@lang_id={0x4}}, {0x29, &(0x7f0000002ac0)=ANY=[@ANYBLOB="2903103c8cc690a1524d107ae29d9f0f0700000000000000b23d5b7624d52cec06984df5036675ab9b"]}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r3, 0x100, 0x70bd28, 0x25dfdc02, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$tipc(r6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000481a}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r7, 0x11, 0x8, 0x0, &(0x7f0000000680)) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r8, &(0x7f0000000400)="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", 0x1f000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 848.139062ms ago: executing program 5 (id=5944): prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x25) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) socket$unix(0x1, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa000, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0xb83, 0x7, 0x5, 0x0, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xed2d, 0x4, 0x0, 0x5, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x1, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x8, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0xfffffff7, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) prlimit64(r1, 0x5, &(0x7f0000000280)={0x5, 0xffffffff}, &(0x7f00000002c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 847.687452ms ago: executing program 5 (id=5945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00), 0x400, 0x0) ioctl$TIOCCONS(r1, 0x541d) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b0000000030801020000000000000000000000020c00048008000a400000000a0600024089f50000050007003a000000050003000700000054000480080001400000000908000140000001400000000808000140fffffffd0800014000001acd080001400000040008000140000001260800014000000004080001400000800105000300840000001c000480080006400000006b08000440000020640800074000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x7fff) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x0, 0xffffffffffffff88, 0x7, 0x2d1}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r6, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) sendfile(r4, r5, &(0x7f0000000040)=0x9d6, 0x4) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$selinux_context(r7, &(0x7f0000000300)='system_u:object_r:nvram_device_t:s0\x00', 0x24) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x2}]}) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) close_range(r8, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x13, 0x100010, r2, 0x85b83000) 720.336252ms ago: executing program 7 (id=5946): r0 = socket(0xa, 0x2400000001, 0x0) bind$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @hyper}, 0x10) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) symlink(0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x2, 0x3) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x6c, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xf8, 0x0, 0x1, [@generic="e02b4221d3c744305fd369f30020dc8fcc58a362542a963097bf883548fe5ae164e5e6f4e0fb772aa1dc9e0330c9c8d1a98a1e02167abc021907e655c6053ebde9f7c472a7"]}]}, @typed={0x8, 0xe, 0x0, 0x0, @ipv4=@loopback}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r1, 0x22e7c000) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x48002, 0x1, 0x34}, 0x18) futimesat(r7, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={{0x0, 0x2710}, {0x0, 0xea60}}) 705.001064ms ago: executing program 9 (id=5947): unshare(0x22020600) getresgid(0x0, 0x0, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x22, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x27}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x57, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0xa, 0x2, 0x35}, @fda={0x66646185, 0x5, 0x2, 0x18}}, 0x0}, 0x400}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x0, 0x0, 0x2c}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) unshare(0x20000000) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) 703.102604ms ago: executing program 7 (id=5948): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0xfffffffffffffff5}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x6}}]}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020) 648.365098ms ago: executing program 7 (id=5949): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) futex(0x0, 0x5, 0xfffefffe, 0x0, 0x0, 0x1) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async) futex(0x0, 0x5, 0xfffefffe, 0x0, 0x0, 0x1) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) (async) ioctl$BLKRRPART(r1, 0x125f, 0x0) (async) socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)) (async) 648.213418ms ago: executing program 7 (id=5950): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x8001}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x8001, 0x4, 0xfffffff9}, 0x14) socket$netlink(0x10, 0x3, 0x8) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x200008, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f6e74657874c0"]) pwrite64(r0, &(0x7f0000000140)="d4c309f15caf9c20b81962c4f42b5329fb1cc6d31212ee37f1bf58d82bd14fe6cbf227a1a03616922645e521959e3924518a9549e3734e70fc152ba0a57aa5749391c56a990d22245e4cafe477a9457e61353ca07ee27c89d5825fcf5ccc95cc5eca951881b34a1572ccae0a40b8007664f8387274e8efe94effdbd2a8b1de84f0a0f9a27764f95460869064353b93865a87dbff6c83d6dbb8aae9c95081e4e19785df0d3f71ebe6", 0xa8, 0x9) 647.986688ms ago: executing program 7 (id=5951): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r0, &(0x7f0000000100)=@other={'unlock', ' ', 'io+mem'}, 0xe) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7fc, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r5, 0xf, &(0x7f0000000100)={0x3, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r9, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r8, 0x40489426, &(0x7f0000000240)={{}, 0x7, &(0x7f0000000040)=[0x90, 0x5, 0x1c00, 0x1, 0x3, 0x0, 0xd0], 0x5, 0x1, 0x1}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000140)={0x24, &(0x7f0000000380)={0x20, 0xb, 0x45, {0x45, 0x0, "a2d8d5d239606bc7a562437327c0e058f632ab105eefcc3ae76f354143fe34df843c2da7e7468c8e1dc692e735eaca0868f739531fc554ec184202b1f12c3ef60105ac"}}, 0x0, 0x0, 0x0}, 0x0) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r11, 0x4004ae8b, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) close_range(r1, 0xffffffffffffffff, 0x0) 271.710279ms ago: executing program 8 (id=5952): r0 = socket(0x2, 0x3, 0x100000001) setsockopt(r0, 0xff, 0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000000c0)={{0x32, @broadcast, 0x4e21, 0x0, 'sed\x00', 0x1, 0xfff, 0x11}, {@empty, 0x4e20, 0x4, 0xb1, 0xffff, 0xfff}}, 0x44) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x58200, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 256.846369ms ago: executing program 8 (id=5953): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000003c0)=0x1, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000440), r1) unshare(0x2040600) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x0, 0x0, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000005f000100000000000000000800c62a9d5a"], 0x1c}], 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 100.271322ms ago: executing program 7 (id=5954): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x3000002, @mcast2, 0x1}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2080, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xeeee8000, 0x0, 0x0, 0x8, 0xb, 0x0, 0x2, 0x0, 0x9, 0x9, 0x10}, {0x0, 0x4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x5, 0xff}, {0x3000, 0x5000, 0xd, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x80a0000, 0x2, 0x4, 0x0, 0x0, 0x0, 0xf7, 0xaa, 0x8, 0x0, 0x4}, {0xdddd0000, 0xdddd0000, 0x8, 0x6, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c, 0x5}, {0x0, 0x0, 0xd, 0x80, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x80, 0x40}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0xe8, 0x8}, {0x0, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x26, 0x3, 0x10, 0xfc}, {0x10000}, {0xeeef0000}, 0xddfcffd9, 0x0, 0x0, 0x22c, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000900)=ANY=[@ANYRES32=r0, @ANYRES8], 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x10, 0x8010, 0x10, 0x14, 0x10, 0x10, 0x10, 0x10, 0x10, 0x4, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) fcntl$setsig(0xffffffffffffffff, 0xa, 0xf) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x5e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x4, 0x96, 0x1, {0x22, 0xcf1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x1, 0xc}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x140, 0xfb, 0xe, 0xc0, 0x8, 0xe}, 0x25, &(0x7f0000000300)={0x5, 0xf, 0x25, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "8800e6345d574e57755f4e8f2ab683a2"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0xc, 0x0, 0xd2ba}]}, 0x4, [{0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="0cfb6f09bf515ba56faa7e6f888e0900dd69fd1388eccc"]}, {0x8f, &(0x7f0000000640)=@string={0x8f, 0x3, "ec4cfd035815db23bb7c6b833d729463b2c0b297c7aac85597c051fd879599b516076af8096a77c075a72dd1e166ff17a86fd1171fb506fa10c0d025638297b2023ca174cf198047dcbd8aaa9c88bec4f92ede16c7027b573ae85187ffca0c10e2af5c6d5dc5d7470f18330eeb89699fd400cd98b9eff1e095d1987930e873990ebdc096f3672d9dc6752b33d5"}}, {0x40, &(0x7f0000000700)=@string={0x40, 0x3, "ca742124850bf33c28700416ad5e5ac526679900bdd30be136bfb84bef111dc0a287d0af778dda1c2485d9d3d203762b09dbc26b52e75dd294dd2706dcae"}}, {0x53, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]}]}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x10000000000001f9, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x101801, 0x0) ioctl$TUNSETGROUP(r6, 0x400454ce, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 20.171689ms ago: executing program 5 (id=5955): r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0xd, 0x80000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x164, r2, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0xf8, 0x7}, {0x9, 0x6}, {0xb0, 0x6}, {0xce, 0x2}, {0x5, 0x7}, {0x4, 0x2}], "4d817bb1f2f89cbf"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x4, 0x4}, {0x3, 0x2}, {0x8, 0x3}, {0x3, 0x1}, {0x33}, {0x4d, 0x6}, {0x8, 0x4}, {0xab, 0x3}, {0xc, 0x7}, {0x8, 0x2}, {0x1, 0x4}, {0x7, 0x4}, {0x4, 0x4}, {0x4, 0x7}, {0x0, 0x1}, {0x7, 0x5}], "b4b1b127abca3986"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x3, 0x7}, {}, {0x81, 0x5}, {0x80, 0x5}, {0x4, 0x5}, {0x1d, 0x5}, {0x2}, {0x7, 0x4}, {0x7, 0x1}, {0x9, 0x6}, {0xf, 0x6}, {0x9, 0x6}], "564c2d553b2779dc"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x3}, {0x2}, {0x8, 0x3}, {0x9, 0x3}, {0x80, 0x7}, {0x0, 0x6}, {0x80, 0x6}, {0x2, 0x3}, {0x8, 0x4}, {0x1}, {0x3, 0x3}, {0x3, 0xff}, {0x3, 0x3}, {0x4, 0x1}, {0xf7, 0x1}, {0xf4, 0x5}, {0x9, 0x7}, {0x0, 0x1}, {0x6, 0x4}], "76dd5b0aedac86cf"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x71, 0x3}, {0x4, 0x7}, {0x7, 0x5}, {0x0, 0x5}, {0x17, 0x3}, {0x8, 0x7}, {0x9, 0x2}, {0x10, 0x4}, {0xfe, 0x2}, {0x6, 0x4}, {0x0, 0x4}, {0x9, 0x3}, {0xe, 0x3}, {0x2, 0x5}, {0xe2, 0x7}, {0x5, 0x4}, {0x8, 0x3}, {0x9, 0x6}, {0x4, 0x2}, {0xd, 0x6}, {0x3, 0x4}], "81ecb525192fd290"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "e15e2ab26ec18cbe"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x81, 0x3}, {0x1, 0x2}, {0xf5, 0x7}, {0x4, 0x7}, {0x8, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x6}, {0xe, 0x2}, {0x4e, 0x3}, {0x6}, {0x8, 0x1}, {0x6, 0x5}, {0x7f, 0x6}], "533e1adcd9e68ef9"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0xf1, 0x3}, {0x2, 0x1}, {0x7}, {0xb, 0x3}, {0x2, 0x2}, {0xff, 0x2}, {0x5, 0x3}, {0xfc}, {0x8, 0x3}, {0x10, 0x7}, {0x4, 0x1}, {0x1, 0x2}, {0x7}], "972669adf4ed63ae"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x2d, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x38}, {0xfb}], "d1c931d8c787da5f"}}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000015}, 0x8040) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000340)={'veth1_macvtap\x00', {0x2, 0x0, @empty}}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000380), 0x8) r5 = open(&(0x7f00000003c0)='./file0\x00', 0x121000, 0x82) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xac, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0xac}}, 0x800) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f00000005c0)={'vlan1\x00', 0xfffb}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r5, 0xc02054a5, &(0x7f0000000600)={0x5eff, r1, 'id1\x00'}) close_range(r7, r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000680)={0x1, [0x0]}) ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, &(0x7f0000000740)={0x1, 0x7fff, 0x4c, &(0x7f00000006c0)=""/76}) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000780), 0x80000, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r9, 0xc0093000) rename(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00') ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r5) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x88, r11, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x808}, 0x48840) setsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000a40)={r6, @empty, @multicast2}, 0xc) write$UHID_DESTROY(r7, &(0x7f0000000a80), 0x4) write$UHID_DESTROY(r5, &(0x7f0000000ac0), 0x4) sendmmsg$sock(r5, &(0x7f0000003a40)=[{{&(0x7f0000000b00)=@l2tp={0x2, 0x0, @multicast1, 0x2}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000b80)="cec42f1b991e8eaa95b8bd24675ff7654119cb6388f76d61fa9759a17de83db5bffced39da45e14d7f7292cf1754cc67a5de1736129672fb2c770b3e0e140a2f4afcca5a0440b364c1e9d927c947a8b57573fceb5ca960a97e6a552cd999d8fafda9079700ef9016f36f2bb2c70336735b1611468f937995ea701c847ed42fee5e2e02746d9759d379fc1f0c7f641ace9678c0beac48d9654d54401e687dd1f72b3c4f369024602013281eb7e61dd14cbbb004b1fdbadf5d", 0xb8}, {&(0x7f0000000c40)="6009a6166d4c770870ed21fcc65432f99d087b3724eff621", 0x18}, {&(0x7f0000000c80)="f67dbe7b0e6003382dc6dc46f2178e9d629582369b96d808607ab1e0eab945565aa08d18d0808bf8c83942bbb1a695112da3d50baa1ac83b84c97b615694874e", 0x40}, {&(0x7f0000000cc0)="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", 0xfc}, {&(0x7f0000000dc0)="472856ce124aab4dec17ddfc6b45a903816ba2c345bee2d1c5c8028c4085fa517dfa51eb62ecbb660fcf40f3e80b3d98a89052e9eaecd26c439bd2f181f0c63a917acb5c19433bbf75c43264cd0da89dc44b2e91166f696387c3f67bb3b8014949fcc48d4489b724934d0fa610d736b117164e0b50cb527564a1e94ea08d2f3b651ba2daf09664b68ffb4f079deaf3ea90aad099a43224b9", 0x98}, {&(0x7f0000000e80)="fcbc890b6366d79b588b4d07d90cb5cd2d660e115d1502e0be832c6a27f44b64426936bdee620468620b65a604ce61334d628f917def1fa945ecf465f9f53455e57792d3ff3b8b5129a60960ec6331f060a4c1387d5e6c250a5fdd9b91eb107e6b1d19953da2cd057e955997992e3b079e07269797cb40c55f49496f9b430dc4", 0x80}, {&(0x7f0000000f00)="c2687f8fcba5fc7284bf18b7e09029a31b7c88189129f3c2666c46fa88854a43accab17811dde2b2251428f5416702ae949c463c9494979e0cb621cc59b9b2865ba422bd62a74c9aa6077ada1fff11220b0970c800ff2b7cc7d25541910e6fe0772e", 0x62}, {&(0x7f0000000f80)="afe3eb1cb9bbe8e35d1648c0409fdd310a5de147f8ce5aabce05a4f681f4ba61499cc6a01c4bc88dcb9c0c3baf867633e65af0e366afd781c31698b495dc09fedfa853b3f3da30547e767925cd522ee0f49776f8d7f8d1be6adc8a366227be7c33b431573a8e95477d475c8e556eba7cc637826c0e228fa76e5a0e6710ab55ed1b002abbd4af9ee63b93210b7d2187053b363bf9f5580e063d5d0b19973391c99ff6acc6e4327d3c7da6", 0xaa}, {&(0x7f0000001040)="9b41b8030ebe996779e83740a9", 0xd}], 0x9, &(0x7f0000001140)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xb4a8}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0xf08}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x78}}, {{&(0x7f00000011c0)=@in={0x2, 0x4e23, @remote}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001240)="a7652e6b6cd07d6660840b748803c1b462ebe7e3d7a29634791aac7820bf0a97949cb5575f548dd9644ddd8352bb6b394b4d98a1bdbd00be79dcad42bacc234b77b9052928e0424440839e5685ab4b04776f121477b3bf7d919a4d4acbab2a144faafac91894c37ef40ca6b48be8f508d08bfb2d87d348d95b54d074c60cf85720", 0x81}], 0x1, &(0x7f0000001340)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000001380)}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="b27bb322c7b864fe0a28f8ef29eb3df9fee6cbe0b59aa54504b71d59a1d13c6260c6de46372d3b6b9e29188d524922506093aa7a9a7ec13988996e75dd11b464a48726fb1f49939d921270a6a915416cc942bc8c9827bdec557afb9f39172e065d7c435b2aed1c9e787beaf0e326acdfcd53b38ecbfe8704e5cee2852dfd74cf7ce2de7dbdd0c927b4ef3cb662c8f7fdf8e113c15f4c3b4ba1bd216f37712c19d3860e5520c7ecdee9a6f8d362f6891c9d9ffd2b4d1ef30f68931d13fbe53dfcf9a8564ac3a9fa0e80852d578b1d8cf53d9b22edcd52f53591c7f9eea026489239d6a4e79d882eaa61b497e8002f548ccd9001b83470025a67ff02e9115cc913ee4735d40a82ed807b11267ef6401c99606a0a30f4ab660701f179b35ce5d7b6a5da6c9a757e2c9181d5ba98fa3cfb1f89a6ac2e3f5a355540e04bc3cb7abcfbab9d60c3a216c6ee77d51eeaacb88836729526f08ecd45997eaa59525e8c3ec07977d67c6523990cbc18d39929c30cdb3b754fb64eead0723d35656bab8c041cdc09c42dd7cc5b582682def1fb0c7694cf7835352ecc999e5c8632bde4874a1804f4d887dab0c508205a314e45da37f019817977df033bafe0440992896a9b15538cb42fa0b9643833c3d2b6b60c067a20b655681dd66a8470571093ac443ea465edb82d01cdf53f0385c7e495b68036bbb2d034a13172f86a5322e262e2b971f2dd1d3fd98f69e6d238db0bde87eed0c02896279853ba10b7f05d3e49548d1a243f72264db1cb3c91676d8bbe212124459a25cf7bf3e87e46bb59a27963bdbd3d0877159dff7fbe56752ab98f73c7e6d3be21e0cf1b638a7750104e12cac83ab125b7eda9f3cb50c17699823d9b863da745588b160b699ec4da71746a65266ca219bc87e489556f9b55c2b8b5cedd64af86845fab9906e3f295f7bb02af711a1bf673557fc2692bb1cc2ddcd326f3135ac08170ae989c1b831cf96a6573e1956d5ddca365fba1b42bcb35edb8364a6969071a802e28be4906154900b42adc825dfe331239e7fe1e73ad0d725ba442368679ae187a3d1997fd24f4fe55c2d053bdca07f0fc8e105b9e622684d9ecff5610ef096b5ecd9fd279f04bd7f01c83e77916735ad092623a95e548e85cd649cab5462d407842e75c048a550eb107b45bfae982c257aa9e4933dea35ad1cef08a4e3ec0ac85a05ae6bd585e3b155886b62d09932b63bc9cdf9c9ecf078e2f6429a5bc56ac990ffbcc423b29f66714522c1813e0cd09429cea737f726cb16584af134e47fbe11ade954fe7188d3271ca89010f49267572877db91080a4748ae5e3af41e60222c55be8d50a1e8b6912e66d8b313ce69448a4593456b5232d714f1d0bbc142a8d366edee99137e17abc5226732d34f24d8980e4cbe407440c2abeabfb923462dfd2865aa4a66bf2faa5bc462b5e0089c93f453af22e7239d98db3e9d43641e7f3373ef19fa8f5b0ee740153e3c51faa24c206d2954ca601e4f797a49dce7f91313a17d392a678f42d9a7bafb76e742e0d6e82eae2cb6eebc4323d700dca1e24f4c9a3099d55c0053d8b3fe2686b7d9a3bef862d1f99633dc3032847dec4302b7f1dcc54cffadd195b1b49896817e2a35d654c8c33afc6e817883898c73de35cc1f2c1e2a5cd21ecd06e23c2b88b64e5fb61d8340a7aa0a701f9589d4722f01842d8fcffcec95f926f3cc59609672f8ff6ed161d5e6f8d5c26ef4f8eb2e3bd53f1fde66933a6cb1f8853ddf137c744f8b4e3a50934ac49edaf572102acf78ce08b536c7279c3a009f37e44daa16ee8b42448fe3827d1823e18edb91707accfae21655bc956ec98d8adbb222046b0daa7e395ec69bcd495ade638dd6b5afe454dd2e20b0ce8de4c5b2cc07af4a3d1e1b9782f588a809f19d4996fd001286687ee6b26067f0ed6cac4ad9486fb3a15bb1ab20424426cc4da99f23de14fd172d7dc67dbc1001d6a71545a47eba25e521e00bee158623918e339f0a4e6ffcf95585be644c2501689be78f0cce4328149003b065f3cf4c04928f3bbc0f971007937ea865548968d69b5b60088b086a7da4e53d4deb8999d9dd0eec2d4656b525f14c99ff1ba58588865f470791c68a292b0c6958ee759e8a6137c850d03f13f7ec325129278f5f14c397b5f7ae02212f51e025213d12583fa681494d862f41b88710a7a8030d342465deb51ff5b4448449263f6c6bf8f200b0fc64afcd82edd5adb67dd5173d5fbf4b50f6a385f51988ff092d652c7d7f1ef225985eb6b7587d733c08bff8afd30eb92137a55b6fc6028f0502db160f8ae8110a451617e5a317cfcaf52f0f5c4ea6174c90ef490c514f01cfb9e6dad574dc46c554cf1eb8970dee3503bd6b4eb08b10c10d36b539e6d43c465ca692ea41b857482aa2d3cf1fda06df404aa69da49814e667efba261dd7e1373da0c836730f0a778ba29cf8f4ad706cd71a13288937bb72b090c5dce833503722eeb7dee081f717d7da911e3a585ee72b956708d270a93e3eba9d0bb7ca464be87eac7836f92f43b75b7182845030e60db4f129fefe28dd8515a6e6b5c4b1868f8909d8f43cfa284dba18d0e2805978460dc30f336eb2b981928ed0ff521538f4a835ba78144e164678b3b0b48256f7ce643c5419b91f915d8cac50de46f8c57098937b2cfb32aaa01336cbda82fd712b6897bb6e4465abd5f7481c40b0b23df443e5ab2987f0f5b02ec5febc35a3deedeaa7a96359a1f9815c6e58e5a52975c7f9460358a2185a680a46d7c04f431308bd1e93d7be649221730287606b9bb20f829ecd59e241a41a3604b73d4b45a7b4e9b0da0d1a14501bfa5cb2ee169d8c5aeca036ba076b4a7d0f00b2d64db91e9b6f13b9477c697614961dc932da5c0f5d2f54a31d64ffd4ea3e41bd034b48fea14cf8154ed2448f5c3253dbf029356e33f93e8b03dc0d04facb6c5c1ca7014b75ab2e9f618a8c412fdf7092fa0d9cc2d12483618994968b1a51d192d8eb8476522c3784cf4bbc040df47ae4d016728c290b769483b04a68dee3abee096567a06d73a5d7af82c9f7ca95c78b5023b93cdd875199bc2f30ca4ba38a25e1fe7730130b81455a74d8f7a93613df87bb4ed1441a5826b8558f3a583813c6d668d12225b0a9191211d35fffb36a0cda4f4445fe2ebc997bf8c8a9a83958b5af303680d11ededd73713ed293534256064f0b0f9e9fcf25a653ef791f2ab2f3c0cc4b9139b63b50b1dad878812248e797029405c53e5955719ec49418f8653d9349b99c59f3bcf94b325b57c494546f84f482769f79736b145949d031e92b488960861c884711b7c2bf4ecda5c0a8549f7cde243a2d8a0f216892642bc0fdbafb48f4b858483d65d232c2c545a75d895d2f377ce50e947e8dee9f635f8f770f3500fc80311a356582bc8dcf7e75da51b2caebf729775c9a04a9ab07a1d366aa0ba99c0f4aa09684f87ed8b26cca74798807376be848b5f969a88b2f606ce6c851deb30d35706e71dfd7e6ecb6f488f21ddf3e51bac93bc61444bc7363368f449fd7b06fae95da2aede1a49e90f055a976616e2ac4c6ba08657476eef15941fe9baa2df8fa4639228f585d70d58d73a898ea42039a7fc98402da353072c80a0926ea259cc2d3c23113d620f6072b8fd5993efbb92ef8c106eb8ce6659dc94b91aadaac37605043708538a955da9e9c196f16ece0f9387ddbbf3e09bbcca6837e92589b79934de6c18b9adea70a498a3085475841d7bcfb5acad207bcf3975460d4961dd8b9dd23e350c27deb95b35b67287a7f20796f9539319fb1889aead1f708c40651a24816ce1490eadae7226660b7987c7d23ce0210298f09e3143e6d4d650c7d99882fdd854515ac9913eb41c6eed45adc18ac14f2221a30c5c062e29267857f9bc56090db58de3c77193ab1ef6849049df7002f964a1ebbe0421b1647a7ed918136461c147d3e6c10250528c9b9da7b6213426cf1780e92a5b8f9545a017a0c77c43398db95d63a24f3dcc4d4487b2023bb8f7d3e39dc8fd92f5fd12f05cfbfdcc80dc634882a5f79c8d02f41d0b5ea3ac72f75f9d464b1c8708d825ce5aaa8269734893fa687a68aee058e1a81266e50b7fca35860402ef79f6f772d7a3ee3a24584b6368d2639cc5147f6e965671cbd522d48383c9aa2afd4c10bd4d7be8707779b2767f8805d6749333f7163d6f8408f2c573826b6f5169be4ed61a9ac50d4b55133e442ec444f8a71c7ca6c9c7962a82cae5b63e4890c289aea86c7eb549be64e11a7aebfe9bf4b9ab4956d437c991321faa574f3e5ee5a7fe4cd8904484f3e9d85180512d118bab6949e4edf4989d9fc4f75bd086ddc7d1bdd8aa86ce7a0e281b44cd96efb599a41fb62294fcbc730f009ad2052599d6b732164ac08eadeb995aa5b1fee7b10c97509478073fa849382062ba8ff0950c30adebafbfebed4710042054221d58745f4361b3727be42a650c89c19dbc82952e80eb4f4a6c321347a3dc73e913636131f35105c65f8129b069b91c3639bc7959ce9a1b4019e7d0d95adcd70d5e07d4e60ea6afbb4af803fe566d695f24c2a0dccb1d1ca0f509b9e65fdd2d3056dff50161562b901fe2881a0ac0eb65aa947e6eee2ac508a75233fcc0fff2de1d02ebf73f21301371bcdfb8b7753376038849a1d81bd5973a51ee129f01f366fcedd10b0d0ac6605717c1d40adaea71f05f5571803f9aabc68d1a9a771949b69a181b7ced2bc6f0338f04cf783e6671a24bbbc8cd452e798eb9127d1db528b6cd962d82d5289ada0a6e1ded92bf479cbdebd3bdfbca12521f530daaf96736a051f3e65fbd498956760c226edf1ca13d4d78e80aa4e4795439f82763f3c6e624400bbf627cc573024ca8eb0a1a877a3be6a6595e44e3ae01c32b010613b23bc22dd54a7b4eeba57ae4c659c839f723222ae610ac0cdc01593eb36c4c9151d6e3c8d2a3f9be733082860088831ce6e22f1fd0d5ec7438fa19cb433bd47e73924f026fa8fedc848037d37c75087f43c89c091a4ffcb58d9d1983e836912e37fd394c781c7c99ef59441b4244b486216d62b766ab1fe128a58b6da36dd4134f09aeb6e90771ed27096241f00fe5802e5792465ca1ca2559a97b39f2f3e6e9f229640c96056611231a66431feb322774046614b23e2cceaeb9df5ffe57f63f131174ae48973c07e0b707ebbdf2d2a25537bd7d19c4a33868cf58d184343eb2adb290f3e71c07c0c6787510ac0828fec5cb0bbe16c3f278c68602b0374146afcc8561edf23da9f3bdebeda90d642169cd412c573a06f867feab90672cd65ee88e1a417a9e46530ec04e7d3e681978d552ef92665e0123e50dbd9cb599482c608fcff5938002c93e79fe599bf5f4a58d9aa9cc0c7bc97798f8c59a1fa456cfe5565127a4dd015da26449e71286e68cff979721fbed54e79ab58f4f4dd428a491b351c342ac680d760cb9c46df6bd7894ffb5b4423457f59cb32fb0b575eccfe4720d75943254e1ec556d1a3819aaab5b1d692ded5538de82e7ba54b732328a341adb0154e5be4c36940f10f620d262d1298402d403ba177ca18b7e9405576aebeb0cd1d59995b1cffe5803e7d653ac7c181e55dcaeafea4cef40062e232925dd267b99a2eb99981a13a19070ce24d405f669424dc0b0397306100b41b7b85e88a06e931f3e9ac341f155219d8a9ab67a89cc67ba62a9ea378714877565cc0d3ebb772f9e26c07de959100a45a0a363b4dacbb59becdf46adec7ac2859cfb0757c95dd6a156f617623e73", 0x1000}], 0x3, &(0x7f0000003400)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x6535}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x20000}}, @mark={{0x14, 0x1, 0x24, 0xfffffff8}}, @timestamping={{0x14, 0x1, 0x25, 0x4d3d}}], 0x90}}, {{&(0x7f00000034c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @multicast2}, 0x3, 0x0, 0x3, 0x3}}, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003540)="fce6b9aca17d92680005a075db1f7cb463f4e6b2dbd73aebdb75a83e8504cd6fa4ead798437d522d7764bb0b797992f5dbbc3d9fa67d2aece114c00e675584251a55519ae28d904be0186747d3f2008ec8c464e7166b178be4fdb8192b0dfbc833895ab3bf5decace4e1d22b114926a6d2c84c632d1abf4fd76a69b1affc25347d8ecad20ac7354661183843705bc04186e65330393b", 0x96}, {0xfffffffffffffffe}, {&(0x7f0000003600)="0398da24cfeabd65d599f6b511a74f5e160ecfdad537d7551ee149f31a530998ce8721fcf0b4f7a8cbcd69e1bef5c2cd201867edaf9803b8d4596977f195e1d85644cac179fc4e58d694f35a32ec62cb2d3fb70aa882f963c364d4b4f39141d26eb7708177eafbab707a7a52a3faf06c875d2b79abbea0786cfe64c03fd00d7bad2ea08d7271db88e5678f1a6e43d0115c6e35b9435c74cf4aa5b81285815950117894b1aca087175a09d36a7f24bf97a7c9bb0db658a58a6b75e4e1760a2c4efc56e4e920612a968d6b183f1b46fc795aa5", 0xd2}, {&(0x7f0000003700)="1f", 0x1}, {&(0x7f0000003740)="bf9033864295b1d1841531fdf97f45658182f66dfec1b759f2b52b495da26bf14ea36921e0fa324be501cc8e665beb4a997c8979591309d814a31bdb87484505442c15f3ab6b", 0x46}, {&(0x7f00000037c0)="2f6c646fed52dfea490356c33e401fe30f9662bcc1366442fd07077e72ac263022ac8d53fcb7929f0e0563d0dc8fc4d006505e7504a521336b94b12904c509a0e818831512c06b3cdfe2697d9f7b762d3f0b004a63d981ecda6ef08b0d4b37bf737b5003032aec506ff8d8", 0x6b}, {&(0x7f0000003840)="ecd4b3a8363dadc6af331fb206a1784b2e477261e3c1c8877c59bc48f6b48bc7d98069972058796a70b1bf797352f68d72d3a051099d11512be9074de17baaa12a1bd3984c1548dd7165a5041b90ee3bff5e", 0x52}], 0x7, &(0x7f0000003940)=[@mark={{0x14, 0x1, 0x24, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff9}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0xd8}}], 0x4, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r8, 0x82307202, &(0x7f0000003b40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000003e80)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003e40)={&(0x7f0000003dc0)={0x5c, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 5 (id=5956): io_submit(0x0, 0xfffffffffffffd52, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) io_submit(0x0, 0xfffffffffffffd52, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x3, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) (async) kernel console output (not intermixed with test programs): 0000023.270:41111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15066 comm="syz.0.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53438ebe9 code=0x7ffc0000 [ 319.347104][T15082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=15082 comm=syz.9.4888 [ 319.687732][ T31] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 319.838799][ T31] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.850668][ T31] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 319.861854][ T31] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 319.873190][ T31] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 319.882273][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.891659][T15086] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 320.358871][T15094] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.366015][T15094] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.373167][T15094] bridge_slave_0: entered allmulticast mode [ 320.379687][T15094] bridge_slave_0: entered promiscuous mode [ 320.386821][T15094] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.393900][T15094] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.401048][T15094] bridge_slave_1: entered allmulticast mode [ 320.407354][T15094] bridge_slave_1: entered promiscuous mode [ 320.460158][T15094] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.467216][T15094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.474527][T15094] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.481606][T15094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.503115][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.510764][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.520681][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.527779][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.537137][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.544234][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.570445][T15094] veth0_vlan: entered promiscuous mode [ 320.582026][T15094] veth1_macvtap: entered promiscuous mode [ 320.643918][T15109] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4899'. [ 320.815976][T15112] rust_binder: Error while translating object. [ 320.816027][T15112] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 320.822478][T15112] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 320.846753][T15114] 9pnet_fd: Insufficient options for proto=fd [ 320.909262][ T31] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 320.917183][ T31] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input43 [ 320.930279][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 320.930299][ T36] audit: type=1400 audit(2000000024.960:41122): avc: denied { create } for pid=15116 comm="syz.5.4902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 320.958480][ T31] usb 5-1: USB disconnect, device number 22 [ 320.964449][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 321.429570][ T36] audit: type=1400 audit(2000000025.460:41123): avc: denied { create } for pid=15122 comm="syz.4.4904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 321.989067][ T2969] bridge_slave_1: left allmulticast mode [ 321.994905][ T2969] bridge_slave_1: left promiscuous mode [ 322.000876][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.008543][ T2969] bridge_slave_0: left allmulticast mode [ 322.014390][ T2969] bridge_slave_0: left promiscuous mode [ 322.020126][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.081548][T15153] netlink: 'syz.0.4912': attribute type 19 has an invalid length. [ 322.089560][T15153] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4912'. [ 322.120054][ T2969] tipc: Left network mode [ 322.126351][ T2969] veth1_macvtap: left promiscuous mode [ 322.132301][ T2969] veth0_vlan: left promiscuous mode [ 322.177775][ T330] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 322.210344][ T36] audit: type=1400 audit(2000000026.240:41124): avc: denied { mounton } for pid=15163 comm="syz.0.4916" path="/file0" dev="ramfs" ino=62309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 322.329809][ T330] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 322.355463][ T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.366864][ T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.377100][ T330] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 322.392731][ T330] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 322.404576][ T330] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 322.414242][ T330] usb 6-1: Manufacturer: syz [ 322.419631][ T330] usb 6-1: config 0 descriptor?? [ 322.456763][T15178] netlink: 'syz.0.4920': attribute type 1 has an invalid length. [ 322.486950][T15184] netlink: 'syz.4.4923': attribute type 1 has an invalid length. [ 322.496077][T15184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4923'. [ 322.542604][T15190] overlay: Unknown parameter 'euid' [ 322.626233][T15143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.634887][T15143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.646264][ T330] usbhid 6-1:0.0: can't add hid device: -71 [ 322.652373][ T330] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 322.661139][ T330] usb 6-1: USB disconnect, device number 7 [ 323.444793][T15210] SELinux: security_context_str_to_sid () failed with errno=-22 [ 323.483476][T15212] rust_binder: Error while translating object. [ 323.483521][T15212] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 323.489826][T15212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:131 [ 323.600389][T15218] SELinux: security_context_str_to_sid () failed with errno=-22 [ 323.867734][ T487] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 323.997706][ T487] usb 5-1: device descriptor read/64, error -71 [ 324.237757][ T487] usb 5-1: device descriptor read/64, error -71 [ 324.418776][T15225] fuse: Bad value for 'fd' [ 324.477744][ T487] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 324.607738][ T487] usb 5-1: device descriptor read/64, error -71 [ 324.847725][ T487] usb 5-1: device descriptor read/64, error -71 [ 324.957838][ T487] usb usb5-port1: attempt power cycle [ 325.289143][ T2974] bridge_slave_1: left allmulticast mode [ 325.294866][ T2974] bridge_slave_1: left promiscuous mode [ 325.300529][ T487] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 325.300892][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.315693][ T2974] bridge_slave_0: left allmulticast mode [ 325.321512][ T2974] bridge_slave_0: left promiscuous mode [ 325.327411][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.339716][ T487] usb 5-1: device descriptor read/8, error -71 [ 325.464025][ T2974] veth1_macvtap: left promiscuous mode [ 325.468864][ T487] usb 5-1: device descriptor read/8, error -71 [ 325.469616][ T2974] veth0_vlan: left promiscuous mode [ 325.537920][T15227] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.544991][T15227] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.552118][T15227] bridge_slave_0: entered allmulticast mode [ 325.558400][T15227] bridge_slave_0: entered promiscuous mode [ 325.564811][T15227] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.571905][T15227] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.579038][T15227] bridge_slave_1: entered allmulticast mode [ 325.585343][T15227] bridge_slave_1: entered promiscuous mode [ 325.645373][T15227] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.652494][T15227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.659835][T15227] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.666888][T15227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.690888][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.698622][ T2970] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.708348][ T487] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 325.717134][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.724257][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.732397][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.739518][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.749882][ T487] usb 5-1: device descriptor read/8, error -71 [ 325.765738][T15227] veth0_vlan: entered promiscuous mode [ 325.778943][T15227] veth1_macvtap: entered promiscuous mode [ 325.878734][ T487] usb 5-1: device descriptor read/8, error -71 [ 325.987893][ T487] usb usb5-port1: unable to enumerate USB device [ 326.671833][T15244] rust_binder: validate_parent_fixup: new_min_offset=131126, sg_entry.length=238 [ 326.671856][T15244] rust_binder: Error while translating object. [ 326.681198][T15244] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 326.687416][T15244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5 [ 326.713869][T15246] rust_binder: Error while translating object. [ 326.723077][T15246] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 326.729697][T15246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 326.773423][T15254] rust_binder: Error while translating object. [ 326.782631][T15254] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 326.788898][T15254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:138 [ 326.807931][T15256] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4944'. [ 326.859080][T15262] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 238) [ 326.859120][T15262] rust_binder: Error while translating object. [ 326.869807][T15262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 326.876001][T15262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 328.544892][T15275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152 [ 328.559163][ T330] rust_binder: 15274: removing orphan mapping 0:24 [ 328.574964][ T330] rust_binder: 0: removing orphan mapping 24:1112 [ 329.311182][T15297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4956'. [ 329.483560][ T36] audit: type=1400 audit(2000000033.510:41125): avc: denied { view } for pid=15308 comm="syz.4.4962" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 329.512741][T15312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.521648][T15312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.747722][ T330] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 329.886813][T15320] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 329.907751][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 329.913329][ T330] usb 5-1: no configurations [ 329.918138][ T330] usb 5-1: can't read configurations, error -22 [ 329.943071][T15321] rust_binder: 15320 RLIMIT_NICE not set [ 330.047779][ T330] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 330.207763][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 330.213372][ T330] usb 5-1: no configurations [ 330.218052][ T330] usb 5-1: can't read configurations, error -22 [ 330.224443][ T330] usb usb5-port1: attempt power cycle [ 330.484827][ T8779] rust_binder: 15319: removing orphan mapping 0:4240 [ 330.587803][ T330] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 330.618082][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 330.623707][ T330] usb 5-1: no configurations [ 330.637678][ T330] usb 5-1: can't read configurations, error -22 [ 330.693649][T15335] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.700903][T15335] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.708063][T15335] bridge_slave_0: entered allmulticast mode [ 330.714378][T15335] bridge_slave_0: entered promiscuous mode [ 330.721875][T15335] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.729537][T15335] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.736699][T15335] bridge_slave_1: entered allmulticast mode [ 330.743164][T15335] bridge_slave_1: entered promiscuous mode [ 330.767745][ T330] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 330.788068][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 330.793737][ T330] usb 5-1: no configurations [ 330.798967][ T330] usb 5-1: can't read configurations, error -22 [ 330.805396][ T330] usb usb5-port1: unable to enumerate USB device [ 330.823264][T15335] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.830379][T15335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.837756][T15335] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.844824][T15335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.868449][ T2968] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.876005][ T2968] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.886003][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.893101][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.898453][ T487] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 330.909124][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.916204][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.940838][T15335] veth0_vlan: entered promiscuous mode [ 330.953110][T15335] veth1_macvtap: entered promiscuous mode [ 331.057888][ T487] usb 4-1: Using ep0 maxpacket: 32 [ 331.064535][ T487] usb 4-1: unable to get BOS descriptor or descriptor too short [ 331.073089][ T487] usb 4-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64 [ 331.083101][ T487] usb 4-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.096368][ T487] usb 4-1: config 1 interface 0 has no altsetting 0 [ 331.105140][ T487] usb 4-1: string descriptor 0 read error: -22 [ 331.111518][ T487] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 331.120697][ T487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.130182][T15334] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 331.137424][T15334] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 331.346973][ T487] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8 [ 331.359245][ T487] usb 4-1: USB disconnect, device number 22 [ 331.365852][ T487] usblp0: removed [ 332.107762][ T330] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 332.258927][ T330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.269201][ T330] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 332.280333][ T330] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 332.294305][ T330] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.303428][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 332.311517][ T330] usb 4-1: SerialNumber: syz [ 332.318297][ T330] cdc_acm 4-1:1.0: skipping garbage [ 332.323564][ T330] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 332.331487][ T330] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 332.338133][ T330] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 332.523573][T15355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.535817][T15355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.544894][ T45] usb 4-1: USB disconnect, device number 23 [ 332.907760][ T330] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 333.057957][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 333.066032][ T330] usb 5-1: unable to get BOS descriptor or descriptor too short [ 333.074550][ T330] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.084714][ T330] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 333.097715][ T330] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 333.106788][ T330] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8192, setting to 64 [ 333.119250][ T330] usb 5-1: New USB device found, idVendor=1d6b, idProduct=4a23, bcdDevice=cc.c0 [ 333.128400][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.136408][ T330] usb 5-1: Product: syz [ 333.140613][ T330] usb 5-1: Manufacturer: syz [ 333.145256][ T330] usb 5-1: SerialNumber: syz [ 333.297728][ T45] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 333.358362][ T330] usb 5-1: USB disconnect, device number 31 [ 333.369389][T13739] udevd[13739]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 333.449846][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.460844][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.470668][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 333.483655][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 333.492792][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.501510][ T45] usb 4-1: config 0 descriptor?? [ 333.707801][T15364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.716437][T15364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.884191][ T36] audit: type=1400 audit(2000000037.910:41126): avc: denied { setattr } for pid=15365 comm="syz.4.4977" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 333.926189][ T45] plantronics 0003:047F:FFFF.0019: unknown main item tag 0xe [ 333.933925][ T45] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 333.941822][ T45] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 333.950941][ T45] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 334.147753][ T330] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 334.178629][T15364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.187201][T15364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.196813][ T487] usb 4-1: USB disconnect, device number 24 [ 334.297704][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 334.303908][ T330] usb 5-1: config 128 has an invalid interface number: 113 but max is 0 [ 334.312362][ T330] usb 5-1: config 128 has no interface number 0 [ 334.318659][ T330] usb 5-1: config 128 interface 113 has no altsetting 0 [ 334.327018][ T330] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice=d5.9d [ 334.336133][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.344175][ T330] usb 5-1: Product: syz [ 334.348385][ T330] usb 5-1: Manufacturer: syz [ 334.353016][ T330] usb 5-1: SerialNumber: syz [ 334.562514][ T330] usb 5-1: unknown interface protocol 0x43, assuming v1 [ 334.569661][ T330] usb 5-1: cannot find UAC_HEADER [ 334.576418][ T330] snd-usb-audio 5-1:128.113: probe with driver snd-usb-audio failed with error -22 [ 334.586778][ T330] usb 5-1: USB disconnect, device number 32 [ 334.594519][T13739] udevd[13739]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.113/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 335.614828][ T36] audit: type=1400 audit(2000000039.646:41127): avc: denied { read } for pid=15393 comm="syz.3.4986" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 335.621660][T15394] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551610) [ 335.638034][ T36] audit: type=1400 audit(2000000039.656:41128): avc: denied { open } for pid=15393 comm="syz.3.4986" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 335.638657][T15394] rust_binder: Error while translating object. [ 335.673908][T15394] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 335.680210][T15394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 335.707161][T15399] overlayfs: maximum fs stacking depth exceeded [ 335.877212][T15406] rust_binder: Read failure Err(EAGAIN) in pid:69 [ 336.536834][T15412] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 336.543389][T15412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:216 [ 336.662636][T15420] /dev/rnullb0: Can't lookup blockdev [ 336.704971][T15424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:228 [ 336.738943][ T36] audit: type=1326 audit(2000000040.776:41129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15428 comm="syz.3.5001" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5783b8ebe9 code=0x0 [ 336.829013][ T36] audit: type=1400 audit(2000000040.866:41130): avc: denied { setattr } for pid=15441 comm="syz.4.5004" name="binder1" dev="binder" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 336.830667][T15442] rust_binder: Write failure EFAULT in pid:241 [ 336.867554][T15444] netlink: 'syz.4.5005': attribute type 58 has an invalid length. [ 337.290758][ T487] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 337.447693][ T487] usb 5-1: Using ep0 maxpacket: 16 [ 337.454071][ T487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.465025][ T487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.474823][ T487] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 337.483924][ T487] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.492880][ T487] usb 5-1: config 0 descriptor?? [ 337.593328][T15461] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 337.610926][T15460] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 337.783727][T15481] SELinux: security_context_str_to_sid (sytem_uGй :0x0000000000000015) failed with errno=-22 [ 337.788301][ T36] audit: type=1326 audit(2000000041.816:41131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.3.5016" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5783b8ebe9 code=0x0 [ 337.835179][T15472] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.842408][T15472] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.849821][T15472] bridge_slave_0: entered allmulticast mode [ 337.856515][T15472] bridge_slave_0: entered promiscuous mode [ 337.864420][T15472] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.871569][T15472] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.878768][T15472] bridge_slave_1: entered allmulticast mode [ 337.885109][T15472] bridge_slave_1: entered promiscuous mode [ 337.972565][T15472] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.979764][T15472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.987087][T15472] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.994198][T15472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.063083][T15472] veth0_vlan: entered promiscuous mode [ 338.079296][T15472] veth1_macvtap: entered promiscuous mode [ 338.366102][T15497] rust_binder: Fixups oob 164 166 363 196 [ 338.366135][T15497] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 338.372629][T15497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 338.381484][T15497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 338.392382][ T487] usbhid 5-1:0.0: can't add hid device: -71 [ 338.414027][ T487] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 338.414301][ T36] audit: type=1326 audit(2000000042.446:41132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15498 comm="syz.7.5022" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0bf98ebe9 code=0x0 [ 338.438934][ T487] usb 5-1: USB disconnect, device number 33 [ 338.513437][T15501] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 338.520781][T15501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:254 [ 338.562373][T15509] binder: Bad value for 'max' [ 338.604144][ T36] audit: type=1400 audit(2000000042.636:41133): avc: denied { unmount } for pid=15227 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 338.627778][T15518] netlink: 'syz.2.5029': attribute type 11 has an invalid length. [ 338.652878][ T36] audit: type=1400 audit(2000000042.686:41134): avc: denied { getattr } for pid=15519 comm="syz.2.5031" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 338.686097][T15522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.686131][T15522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.692690][T15522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.699730][T15522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.706403][T15522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.713125][T15522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.719623][T15522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.726170][T15522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.732794][T15522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.739483][T15522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.745973][T15522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.766020][T15527] SELinux: security_context_str_to_sid () failed with errno=-22 [ 338.806450][T15531] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5035'. [ 338.815912][ T36] audit: type=1400 audit(2000000042.846:41135): avc: denied { setopt } for pid=15530 comm="syz.2.5035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 338.856582][T15533] syzkaller1: entered allmulticast mode [ 339.097722][ T330] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 339.150785][ T36] audit: type=1400 audit(2000000043.186:41136): avc: denied { setattr } for pid=15538 comm="syz.3.5039" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 339.220890][T15546] netlink: 'syz.7.5040': attribute type 4 has an invalid length. [ 339.228760][T15546] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.5040'. [ 339.258787][ T330] usb 3-1: config 16 has an invalid interface number: 19 but max is 0 [ 339.267196][ T330] usb 3-1: config 16 has no interface number 0 [ 339.276108][ T330] usb 3-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 339.286389][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.300649][ T330] usb 3-1: Product: syz [ 339.305160][ T330] usb 3-1: Manufacturer: syz [ 339.310196][ T330] usb 3-1: SerialNumber: syz [ 339.455552][T15559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 339.456453][T15559] rust_binder: Error while translating object. [ 339.465601][T15559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 339.471828][T15559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 339.534981][ T330] usb 3-1: USB disconnect, device number 42 [ 339.582937][T13739] udevd[13739]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 339.636940][T15563] rust_binder: Failed copying remainder into alloc: EFAULT [ 339.636961][T15563] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 339.644318][T15563] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 339.652717][T15563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:109 [ 340.290643][T15584] rust_binder: Error while translating object. [ 340.299878][T15584] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 340.306079][T15584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:122 [ 340.434631][T15606] rust_binder: Write failure EFAULT in pid:142 [ 340.434653][T15607] rust_binder: Write failure EFAULT in pid:142 [ 340.462616][T15609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 340.468860][T15609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 340.907660][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 340.907732][ T36] audit: type=1326 audit(2000000044.936:41141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15625 comm="syz.2.5069" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f830cb8ebe9 code=0x0 [ 341.445019][T15631] overlayfs: maximum fs stacking depth exceeded [ 341.518504][T15640] rust_binder: 168: no such ref 2 [ 341.523611][T15640] rust_binder: 168: no such ref 2 [ 341.750601][T15643] fuse: Bad value for 'fd' [ 342.279234][T15648] overlayfs: failed to clone upperpath [ 342.364011][T15657] overlayfs: maximum fs stacking depth exceeded [ 342.409332][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 343.207221][T15677] fuse: Bad value for 'fd' [ 343.221758][T15679] overlayfs: maximum fs stacking depth exceeded [ 343.477751][ T45] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 343.628778][ T45] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 343.637109][ T45] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 343.646416][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.655201][ T45] usb 4-1: config 0 descriptor?? [ 343.661332][ T45] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG [ 343.867505][ T517] usb 4-1: USB disconnect, device number 25 [ 343.925900][T15715] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5102'. [ 344.427300][ T36] audit: type=1400 audit(2000000048.456:41142): avc: denied { lock } for pid=15746 comm="syz.7.5116" path="/dev/binderfs/binder1" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 344.435549][T15749] rust_binder: 190: no such ref 2 [ 345.124974][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5121'. [ 345.134186][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5121'. [ 345.547725][ T8780] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 345.697724][ T8780] usb 4-1: Using ep0 maxpacket: 16 [ 345.703995][ T8780] usb 4-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.716994][ T8780] usb 4-1: config 0 interface 0 has no altsetting 0 [ 345.723678][ T8780] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 345.732760][ T8780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.741707][ T8780] usb 4-1: config 0 descriptor?? [ 346.350989][T15768] /dev/rnullb0: Can't lookup blockdev [ 346.356907][ T8780] usb 4-1: USB disconnect, device number 26 [ 347.541471][ T36] audit: type=1400 audit(2000000051.576:41143): avc: denied { write } for pid=15833 comm="syz.3.5147" path="socket:[67857]" dev="sockfs" ino=67857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 347.648070][T15835] rust_binder: Error while translating object. [ 347.648110][T15835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 347.654330][T15835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:78 [ 349.726911][T15845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.736112][T15847] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 349.791035][T15851] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 349.799210][T15851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:92 [ 349.809276][T15852] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.686664][T15878] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 350.693273][T15878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 350.701909][T15878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:208 [ 350.706273][ T36] audit: type=1400 audit(2000000054.736:41144): avc: denied { map } for pid=15879 comm="syz.7.5159" path="socket:[67999]" dev="sockfs" ino=67999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 350.816979][T15889] binder: Unknown parameter 't01777777777777777777777' [ 350.908228][ T36] audit: type=1400 audit(2000000054.946:41145): avc: denied { create } for pid=15901 comm="syz.7.5167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 350.955205][T15907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.964084][T15907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.097716][ T31] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 351.140832][T15912] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 351.248934][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.260498][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 351.271461][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 351.281264][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.294190][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.303269][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.312197][ T31] usb 4-1: config 0 descriptor?? [ 351.723694][ T36] audit: type=1400 audit(2000000055.756:41146): avc: denied { setattr } for pid=15893 comm="syz.3.5164" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 351.750152][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 351.759749][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 351.772256][ T31] usb 4-1: USB disconnect, device number 27 [ 351.813829][T15927] overlayfs: failed to clone upperpath [ 352.268517][T15933] pim6reg1: entered promiscuous mode [ 352.273847][T15933] pim6reg1: entered allmulticast mode [ 352.352451][T15935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=15935 comm=syz.3.5178 [ 353.223867][ T36] audit: type=1400 audit(2000000057.256:41147): avc: denied { write } for pid=15939 comm="syz.3.5180" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 353.225946][ T31] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 353.255159][ T31] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 353.274352][T15941] fido_id[15941]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 353.319333][ T36] audit: type=1400 audit(2000000057.356:41148): avc: denied { mounton } for pid=15939 comm="syz.3.5180" path="/78/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 353.370408][ T36] audit: type=1400 audit(2000000057.406:41149): avc: denied { ioctl } for pid=15939 comm="syz.3.5180" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 353.425456][T15944] overlay: ./cgroup.cpu/cpuset.cpus is not a directory [ 353.710680][T15952] rust_binder: Read failure Err(EAGAIN) in pid:234 [ 353.981431][T15960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 353.988060][T15960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:132 [ 353.998074][T15961] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.022345][T15965] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 354.646529][T15968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5190'. [ 354.755299][T15969] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.762854][T15969] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.770184][T15969] bridge_slave_0: entered allmulticast mode [ 354.776945][T15969] bridge_slave_0: entered promiscuous mode [ 354.784093][T15969] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.791415][T15969] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.798777][T15969] bridge_slave_1: entered allmulticast mode [ 354.805285][T15969] bridge_slave_1: entered promiscuous mode [ 354.871042][T15969] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.878225][T15969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.885499][T15969] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.892561][T15969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.945368][ T31] rust_binder: 15967: removing orphan mapping 0:24 [ 354.947109][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.954277][ T31] rust_binder: 0: removing orphan mapping 24:96 [ 354.972059][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.984460][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.991563][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.009467][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.016581][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.045704][T15969] veth0_vlan: entered promiscuous mode [ 355.062733][T15969] veth1_macvtap: entered promiscuous mode [ 355.112231][T15991] tc_dump_action: action bad kind [ 355.547981][ T1359] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 355.697773][ T1359] usb 4-1: Using ep0 maxpacket: 8 [ 355.714127][ T1359] usb 4-1: unable to get BOS descriptor or descriptor too short [ 355.729131][ T1359] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 355.747488][ T1359] usb 4-1: config 0 has no interface number 0 [ 355.770184][ T1359] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 355.798016][ T1359] usb 4-1: config 0 interface 88 has no altsetting 0 [ 355.829364][ T1359] usb 4-1: string descriptor 0 read error: -22 [ 355.839853][ T1359] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 355.849858][ T1359] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 355.905398][T16003] overlayfs: failed to resolve './file1': -2 [ 355.907975][ T1359] usb 4-1: config 0 descriptor?? [ 355.930891][ T1359] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input45 [ 356.010163][T16014] tipc: Started in network mode [ 356.015090][T16014] tipc: Node identity , cluster identity 4711 [ 356.021443][T16014] tipc: Failed to set node id, please configure manually [ 356.028789][T16014] tipc: Enabling of bearer rejected, failed to enable media [ 356.048381][T16016] fuse: Bad value for 'fd' [ 356.169403][T16000] kvm: Disabled LAPIC found during irq injection [ 356.183272][T16000] bpf: Bad value for 'uid' [ 356.237704][ T1359] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 356.278276][ T487] usb 4-1: USB disconnect, device number 28 [ 356.367739][ T1359] usb 9-1: device descriptor read/64, error -71 [ 356.607875][ T1359] usb 9-1: device descriptor read/64, error -71 [ 356.847726][ T1359] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 356.977748][ T1359] usb 9-1: device descriptor read/64, error -71 [ 357.247695][ T1359] usb 9-1: device descriptor read/64, error -71 [ 357.267692][ T8779] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 357.357833][ T1359] usb usb9-port1: attempt power cycle [ 357.417760][ T8779] usb 4-1: Using ep0 maxpacket: 32 [ 357.424238][ T8779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.435248][ T8779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.445233][ T8779] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 357.454405][ T8779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.463219][ T8779] usb 4-1: config 0 descriptor?? [ 357.469215][ T8779] hub 4-1:0.0: USB hub found [ 357.669330][ T8779] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 357.707729][ T1359] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 357.728796][ T1359] usb 9-1: device descriptor read/8, error -71 [ 357.858692][ T1359] usb 9-1: device descriptor read/8, error -71 [ 358.073246][ T8779] hid-generic 0003:046D:C31C.001C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 358.098023][ T1359] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 358.118867][ T1359] usb 9-1: device descriptor read/8, error -71 [ 358.248876][ T1359] usb 9-1: device descriptor read/8, error -71 [ 358.357767][ T1359] usb usb9-port1: unable to enumerate USB device [ 358.417904][ T487] usb 4-1: USB disconnect, device number 29 [ 358.977530][T16053] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 358.977559][T16053] rust_binder: Read failure Err(EFAULT) in pid:275 [ 358.986220][T16053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:275 [ 359.197663][ T36] audit: type=1326 audit(2000000063.226:41150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16062 comm="syz.8.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa638ebe9 code=0x50000 [ 359.231887][ T36] audit: type=1326 audit(2000000063.226:41151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16062 comm="syz.8.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa638ebe9 code=0x50000 [ 359.255490][ T36] audit: type=1326 audit(2000000063.226:41152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16062 comm="syz.8.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa638ebe9 code=0x50000 [ 359.278924][ T36] audit: type=1326 audit(2000000063.226:41153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16062 comm="syz.8.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa638ebe9 code=0x50000 [ 359.302564][ T36] audit: type=1326 audit(2000000063.226:41154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16062 comm="syz.8.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa638ebe9 code=0x50000 [ 359.325969][ T36] audit: type=1326 audit(2000000063.226:41155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16062 comm="syz.8.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa638ebe9 code=0x50000 [ 359.349446][ T36] audit: type=1326 audit(2000000063.226:41156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16062 comm="syz.8.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa638ebe9 code=0x50000 [ 359.373106][ T36] audit: type=1326 audit(2000000063.226:41157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16062 comm="syz.8.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa638ebe9 code=0x50000 [ 359.396613][ T36] audit: type=1326 audit(2000000063.226:41159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16062 comm="syz.8.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa638ebe9 code=0x50000 [ 359.420314][ T36] audit: type=1326 audit(2000000063.226:41158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16062 comm="syz.8.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa638ebe9 code=0x50000 [ 359.878261][T16088] netlink: 1336 bytes leftover after parsing attributes in process `syz.7.5229'. [ 360.047690][ T487] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 360.187676][ T487] usb 4-1: device descriptor read/64, error -71 [ 360.427678][ T487] usb 4-1: device descriptor read/64, error -71 [ 360.667726][ T487] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 360.847664][ T487] usb 4-1: device descriptor read/64, error -71 [ 361.097667][ T487] usb 4-1: device descriptor read/64, error -71 [ 361.218892][ T487] usb usb4-port1: attempt power cycle [ 361.567670][ T487] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 361.611180][ T487] usb 4-1: device descriptor read/8, error -71 [ 361.738729][ T487] usb 4-1: device descriptor read/8, error -71 [ 361.981155][ T487] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 362.008776][ T487] usb 4-1: device descriptor read/8, error -71 [ 362.138994][ T487] usb 4-1: device descriptor read/8, error -71 [ 362.249002][ T487] usb usb4-port1: unable to enumerate USB device [ 362.270145][T16150] overlayfs: failed to clone upperpath [ 362.294668][T16153] binder: Bad value for 'stats' [ 362.452244][T16158] binder: Bad value for 'max' [ 362.561042][T16161] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 362.561065][T16162] rust_binder: Write failure EINVAL in pid:27 [ 362.561090][T16162] rust_binder: Write failure EINVAL in pid:27 [ 362.574286][T16162] rust_binder: Write failure EINVAL in pid:27 [ 362.580496][T16162] rust_binder: Write failure EINVAL in pid:27 [ 362.586580][T16162] rust_binder: Write failure EINVAL in pid:27 [ 362.592724][T16162] rust_binder: Write failure EINVAL in pid:27 [ 362.598896][T16162] rust_binder: Write failure EINVAL in pid:27 [ 362.604987][T16162] rust_binder: Write failure EINVAL in pid:27 [ 362.611235][T16162] rust_binder: Write failure EINVAL in pid:27 [ 362.621800][ T487] rust_binder: 16160: removing orphan mapping 0:112 [ 362.960570][T16175] SELinux: security_context_str_to_sid () failed with errno=-22 [ 362.997297][T16186] netlink: 5 bytes leftover after parsing attributes in process `syz.7.5262'. [ 363.006468][T16186] 0M: renamed from gretap0 (while UP) [ 363.013439][T16186] 0M: entered allmulticast mode [ 363.019063][T16186] A link change request failed with some changes committed already. Interface 30M may have been left with an inconsistent configuration, please check. [ 363.085571][T16197] vlan0: entered promiscuous mode [ 363.090778][T16197] vlan0: entered allmulticast mode [ 363.095995][T16197] veth0_vlan: entered allmulticast mode [ 363.697713][ T31] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 363.834120][T16232] fuseblk: Unknown parameter 'groj' [ 363.859667][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.878490][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.898464][ T31] usb 9-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 363.907597][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.931887][ T31] usb 9-1: config 0 descriptor?? [ 364.116602][T16253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=16253 comm=syz.3.5286 [ 364.339160][ T31] kye 0003:0458:5014.001D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 364.350583][ T31] kye 0003:0458:5014.001D: hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.8-1/input0 [ 364.361687][ T31] kye 0003:0458:5014.001D: tablet-enabling feature report not found [ 364.369889][ T31] kye 0003:0458:5014.001D: tablet enabling failed [ 364.541290][ T31] usb 9-1: USB disconnect, device number 6 [ 364.547549][T16262] /dev/loop0: Can't lookup blockdev [ 364.565787][T16264] overlayfs: failed to resolve './file0': -2 [ 365.077352][T16284] /dev/rnullb0: Can't lookup blockdev [ 365.145852][ T36] kauditd_printk_skb: 32191 callbacks suppressed [ 365.145872][ T36] audit: type=1400 audit(2000000071.176:73351): avc: denied { create } for pid=16297 comm="syz.7.5301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 365.327699][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 365.358431][T16316] rust_binder: 335: no such ref 1 [ 365.363573][T16316] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 365.370678][T16316] rust_binder: Write failure EINVAL in pid:335 [ 365.370980][T16316] rust_binder: Write failure EINVAL in pid:335 [ 365.477674][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 365.490592][ T9] usb 9-1: config 0 has an invalid interface number: 214 but max is 0 [ 365.498817][ T9] usb 9-1: config 0 has no interface number 0 [ 365.504933][ T9] usb 9-1: config 0 interface 214 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 477 [ 365.515073][ T9] usb 9-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 365.525137][ T9] usb 9-1: config 0 interface 214 has no altsetting 0 [ 365.533460][ T9] usb 9-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 365.542587][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.550641][ T9] usb 9-1: Product: syz [ 365.554829][ T9] usb 9-1: Manufacturer: syz [ 365.559553][ T9] usb 9-1: SerialNumber: syz [ 365.565009][ T9] usb 9-1: config 0 descriptor?? [ 365.570374][T16287] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 365.577688][T16287] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 365.785298][T16287] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 365.792652][T16287] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 366.102803][T16322] cgroup: Need name or subsystem set [ 366.111797][ T36] audit: type=1400 audit(2000000072.146:73352): avc: denied { shutdown } for pid=16321 comm="syz.3.5307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 366.347700][ T31] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 366.498784][ T31] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 366.508045][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.516713][ T31] usb 4-1: config 0 descriptor?? [ 366.522897][ T31] usb 4-1: selecting invalid altsetting 1 [ 366.530925][ T31] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 366.533702][T13913] udevd[13913]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 366.718185][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 366.730213][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 366.732064][ T31] usb 4-1: USB disconnect, device number 34 [ 366.749424][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 366.777727][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 366.789322][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 366.800666][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 366.812533][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 366.823669][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 366.834859][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 366.845977][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 366.857144][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 366.874580][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 366.879718][T16338] 9pnet_fd: Insufficient options for proto=fd [ 366.887735][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 366.920094][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 366.946456][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 366.962481][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 366.964602][T16347] rust_binder: Error while translating object. [ 366.973503][T16347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 366.979954][T16347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:75 [ 366.987680][ T36] audit: type=1326 audit(2000000073.016:73353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16344 comm="syz.7.5313" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff0bf98ebe9 code=0x0 [ 367.023754][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 367.030135][T16349] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 367.035757][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 367.055886][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 367.067454][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 367.087706][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 367.099124][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 367.112211][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 367.123572][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 367.137202][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 367.148450][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 367.149038][T16352] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.159739][ T9] ax88179_178a 9-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 367.166526][T16352] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.184385][T16352] bridge_slave_0: entered allmulticast mode [ 367.190696][T16352] bridge_slave_0: entered promiscuous mode [ 367.199037][T16352] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.206102][ T9] ax88179_178a 9-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.8-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, b6:82:17:bf:ae:21 [ 367.206720][T16352] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.225832][ T9] usb 9-1: USB disconnect, device number 7 [ 367.233264][T16352] bridge_slave_1: entered allmulticast mode [ 367.235795][ T9] ax88179_178a 9-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.8-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 367.242644][T16352] bridge_slave_1: entered promiscuous mode [ 367.313140][T16352] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.320239][T16352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.327505][T16352] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.334557][T16352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.364643][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.374549][ T2970] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.385428][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.392576][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.402896][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.407574][ T36] audit: type=1400 audit(2000000073.436:73354): avc: denied { create } for pid=16364 comm="syz.3.5317" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 367.409974][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.464599][T16352] veth0_vlan: entered promiscuous mode [ 367.476652][T16352] veth1_macvtap: entered promiscuous mode [ 367.527439][ T36] audit: type=1400 audit(2000000073.556:73355): avc: denied { lock } for pid=16369 comm="syz.3.5318" path="socket:[70722]" dev="sockfs" ino=70722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 367.808833][T16377] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5320'. [ 367.819496][T16378] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5320'. [ 367.954002][T16405] tipc: Enabling of bearer rejected, failed to enable media [ 367.965297][T16405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 367.965331][T16405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:355 [ 367.965967][T16407] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5330'. [ 368.587684][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 368.737709][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 368.744150][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 368.753311][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.762019][ T9] usb 2-1: config 0 descriptor?? [ 368.787772][ T31] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 368.937697][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 368.944248][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 368.953094][ T31] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 368.963004][ T31] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64 [ 368.972978][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 368.981119][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.990229][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.998280][ T31] usb 4-1: Product: syz [ 369.002455][ T31] usb 4-1: Manufacturer: Ф [ 369.007004][ T31] usb 4-1: SerialNumber: syz [ 369.012833][T16421] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 369.020195][T16421] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 369.170519][ T9] wacom 0003:056A:0116.001E: unknown main item tag 0x0 [ 369.181818][ T9] wacom 0003:056A:0116.001E: unknown main item tag 0x0 [ 369.188951][ T9] wacom 0003:056A:0116.001E: unknown main item tag 0x0 [ 369.195872][ T9] wacom 0003:056A:0116.001E: unknown main item tag 0x0 [ 369.202845][ T9] wacom 0003:056A:0116.001E: unknown main item tag 0x0 [ 369.211020][ T9] wacom 0003:056A:0116.001E: hidraw0: USB HID v0.05 Device [HID 056a:0116] on usb-dummy_hcd.1-1/input0 [ 369.223398][T16444] tipc: Enabling of bearer rejected, media not registered [ 369.237782][ T31] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 369.250360][ T31] usb 4-1: USB disconnect, device number 35 [ 369.371126][ T36] audit: type=1400 audit(2000000075.406:73356): avc: denied { remount } for pid=16408 comm="syz.1.5331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 369.393384][T16409] rust_binder: Error in use_page_slow: ESRCH [ 369.393407][T16409] rust_binder: use_range failure ESRCH [ 369.399464][T16409] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 369.405035][T16409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 369.413163][T16409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:4 [ 369.423105][ T517] usb 2-1: USB disconnect, device number 37 [ 370.072040][ T36] audit: type=1400 audit(2000000076.106:73357): avc: denied { link } for pid=16457 comm="syz.7.5350" name="file1" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 370.072297][T16459] overlayfs: failed to clone upperpath [ 370.128877][T16463] devpts: called with bogus options [ 370.134884][T16463] 9pnet_fd: Insufficient options for proto=fd [ 370.716504][T16488] bridge0: port 3(syz_tun) entered blocking state [ 370.723113][T16488] bridge0: port 3(syz_tun) entered disabled state [ 370.729794][T16488] syz_tun: entered allmulticast mode [ 370.735552][T16488] syz_tun: entered promiscuous mode [ 370.740945][T16488] bridge0: port 3(syz_tun) entered blocking state [ 370.747506][T16488] bridge0: port 3(syz_tun) entered forwarding state [ 370.804506][T16496] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5362'. [ 370.815013][T16496] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5362'. [ 370.841990][T16496] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5362'. [ 370.864247][T16499] SELinux: failed to load policy [ 370.870394][T16499] SELinux: failed to load policy [ 370.886516][T16504] overlayfs: failed to resolve './file0/file0': -2 [ 370.940534][ T36] audit: type=1400 audit(2000000076.976:73358): avc: denied { append } for pid=16507 comm="syz.1.5366" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 371.007359][T16517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87 [ 371.037583][T16527] SELinux: security_context_str_to_sid () failed with errno=-22 [ 371.101458][ T36] audit: type=1400 audit(2000000077.126:73359): avc: denied { unmount } for pid=16352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 371.193757][T16549] fuse: Unknown parameter '000000000000000000000030x0000000000000004' [ 371.247981][T16564] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5386'. [ 371.851369][T16582] overlayfs: failed to clone upperpath [ 372.154629][ T36] audit: type=1400 audit(2000000078.186:73360): avc: denied { map } for pid=16618 comm="syz.1.5406" path="/proc/75/net/ip6_tables_targets" dev="proc" ino=4026534568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 372.477736][ T517] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 372.627678][ T517] usb 2-1: Using ep0 maxpacket: 32 [ 372.633918][ T517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.644845][ T517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.655044][ T517] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 372.664214][ T517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.673066][ T517] usb 2-1: config 0 descriptor?? [ 372.935916][T16665] 9pnet_fd: Insufficient options for proto=fd [ 373.047922][ T1359] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 373.084931][ T517] savu 0003:1E7D:2D5A.001F: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 373.199051][ T1359] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.209598][ T1359] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.219266][ T1359] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 373.228363][ T1359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 373.236442][ T1359] usb 4-1: SerialNumber: syz [ 373.343614][ T8780] usb 2-1: USB disconnect, device number 38 [ 373.496135][ T1359] usb 4-1: 0:2 : does not exist [ 373.502811][ T1359] usb 4-1: USB disconnect, device number 36 [ 373.511414][T13739] udevd[13739]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 374.003975][ T517] rust_binder: 16654: removing orphan mapping 0:24 [ 374.107667][ T45] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 374.268747][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 374.280346][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 374.291634][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 374.301618][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 374.314787][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 374.324060][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.336148][ T45] usb 2-1: config 0 descriptor?? [ 374.597706][ T487] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 374.749583][ T487] usb 4-1: Using ep0 maxpacket: 8 [ 374.756056][ T45] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 374.765702][ T45] plantronics 0003:047F:FFFF.0020: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 374.778255][ T487] usb 4-1: unable to get BOS descriptor or descriptor too short [ 374.788846][ T487] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 374.797401][ T487] usb 4-1: config 0 has no interface number 0 [ 374.803895][ T487] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 374.815304][ T487] usb 4-1: config 0 interface 88 has no altsetting 0 [ 374.824042][ T487] usb 4-1: string descriptor 0 read error: -22 [ 374.830284][ T487] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 374.839378][ T487] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 374.848266][ T487] usb 4-1: config 0 descriptor?? [ 374.855027][ T487] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input52 [ 375.056446][ T9] usb 4-1: USB disconnect, device number 37 [ 375.061161][T16829] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 375.189228][T16839] overlayfs: failed to clone upperpath [ 375.454952][ T36] audit: type=1400 audit(2000000081.486:73361): avc: denied { map } for pid=16840 comm="syz.7.5480" path="socket:[72780]" dev="sockfs" ino=72780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 375.650851][T16848] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 375.793941][T16864] bridge0: port 3(erspan0) entered blocking state [ 375.800732][T16864] bridge0: port 3(erspan0) entered disabled state [ 375.807310][T16864] erspan0: entered allmulticast mode [ 375.814503][T16864] erspan0: entered promiscuous mode [ 375.820351][T16864] bridge0: port 3(erspan0) entered blocking state [ 375.826877][T16864] bridge0: port 3(erspan0) entered forwarding state [ 375.835001][T16864] erspan0: left allmulticast mode [ 375.840226][T16864] erspan0: left promiscuous mode [ 375.845380][T16864] bridge0: port 3(erspan0) entered disabled state [ 376.074975][T16871] rust_binder: Write failure EFAULT in pid:401 [ 376.393178][T16898] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588) [ 376.399401][T16898] rust_binder: Error while translating object. [ 376.411815][T16898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 376.418042][T16898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:428 [ 376.453243][T16906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5504'. [ 376.598243][T16915] binder: Unknown parameter 'hash' [ 376.635704][T16919] overlayfs: failed to clone lowerpath [ 376.657092][ T36] audit: type=1400 audit(2000000082.686:73362): avc: denied { create } for pid=16920 comm="syz.8.5509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 376.677064][ T36] audit: type=1326 audit(2000000082.706:73363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16920 comm="syz.8.5509" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fa638ebe9 code=0x0 [ 376.771149][T16935] rust_binder: Write failure EINVAL in pid:444 [ 376.789355][T16939] netlink: 182 bytes leftover after parsing attributes in process `syz.3.5515'. [ 376.805882][T16938] netlink: 182 bytes leftover after parsing attributes in process `syz.3.5515'. [ 376.838186][ T45] usb 2-1: USB disconnect, device number 39 [ 376.873789][T16939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.886222][T16939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.107784][ T517] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 377.258933][ T517] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 377.270810][ T517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 377.282159][ T517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 377.292363][ T517] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 377.305670][ T517] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 377.314995][ T517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.327995][ T517] usb 4-1: config 0 descriptor?? [ 377.549061][ T517] plantronics 0003:047F:FFFF.0021: ignoring exceeding usage max [ 377.572430][ T517] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 377.599794][ T517] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 377.672163][ T36] audit: type=1400 audit(2000000083.706:73364): avc: denied { create } for pid=16966 comm="syz.8.5525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 377.755168][T16968] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5525'. [ 377.817723][ T1359] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 377.987700][ T1359] usb 2-1: Using ep0 maxpacket: 16 [ 377.995178][ T1359] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 378.004483][ T1359] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 378.015470][ T1359] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 378.026485][ T1359] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 378.036019][ T1359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.044347][ T1359] usb 2-1: Product: 趵搷쉭햼◒㻺 [ 378.050321][ T1359] usb 2-1: Manufacturer: 倊 [ 378.055178][ T1359] usb 2-1: SerialNumber:   [ 378.270635][ T1359] usb 2-1: 0:2 : does not exist [ 378.293422][ T1359] usb 2-1: USB disconnect, device number 40 [ 378.306470][T13739] udevd[13739]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 378.593442][T16970] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5526'. [ 378.977691][ T31] usb 4-1: reset high-speed USB device number 38 using dummy_hcd [ 379.088282][T16993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5533'. [ 379.595729][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5538'. [ 379.737091][T17021] 9pnet_fd: Insufficient options for proto=fd [ 379.744670][T17021] 9pnet_fd: Insufficient options for proto=fd [ 379.967855][T17058] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 380.077812][T17078] tmpfs: Unknown parameter 'nroblocksgp' [ 380.447750][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 380.597806][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 380.598260][ T517] usb 4-1: USB disconnect, device number 38 [ 380.604233][ T9] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 380.617519][ T9] usb 2-1: config 4 has no interface number 0 [ 380.623838][ T9] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.660187][ T9] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.675915][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 380.686095][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.697804][T17109] fuse: Bad value for 'max_read' [ 380.698206][ T9] hub 2-1:4.128: USB hub found [ 380.898152][ T9] hub 2-1:4.128: 6 ports detected [ 380.903235][ T9] hub 2-1:4.128: Using single TT (err -22) [ 380.909307][ T9] hub 2-1:4.128: insufficient power available to use all downstream ports [ 381.249059][ T2969] Bluetooth: hci0: Frame reassembly failed (-90) [ 381.255692][T17116] Bluetooth: hci0: Frame reassembly failed (-84) [ 381.313621][T17120] rust_binder: 17116 RLIMIT_NICE not set [ 381.363865][T17116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:463 [ 381.727886][T17122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.745681][T17122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.754669][T17122] incfs: Backing dir is not set, filesystem can't be mounted. [ 381.762232][T17122] incfs: mount failed -2 [ 381.768788][T17122] GUP no longer grows the stack in syz.1.5579 (17122): 200000005000-200000008000 (200000004000) [ 381.779564][T17122] CPU: 1 UID: 0 PID: 17122 Comm: syz.1.5579 Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 381.779604][T17122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.779621][T17122] Call Trace: [ 381.779630][T17122] [ 381.779640][T17122] __dump_stack+0x21/0x30 [ 381.779699][T17122] dump_stack_lvl+0x10c/0x190 [ 381.779732][T17122] ? __cfi_dump_stack_lvl+0x10/0x10 [ 381.779766][T17122] ? futex_lock_pi_atomic+0xdd/0xc70 [ 381.779798][T17122] dump_stack+0x19/0x20 [ 381.779829][T17122] fixup_user_fault+0x63d/0x6d0 [ 381.779860][T17122] fault_in_user_writeable+0x76/0xe0 [ 381.779884][T17122] futex_lock_pi+0x258/0xa10 [ 381.779913][T17122] ? __cfi_futex_lock_pi+0x10/0x10 [ 381.779942][T17122] ? __kasan_check_write+0x18/0x20 [ 381.779978][T17122] ? wake_up_q+0x10f/0x1c0 [ 381.780017][T17122] ? __cfi_futex_wake_mark+0x10/0x10 [ 381.780049][T17122] ? mas_find+0x358/0x5f0 [ 381.780094][T17122] ? __kasan_check_write+0x18/0x20 [ 381.780135][T17122] do_futex+0x25c/0x500 [ 381.780160][T17122] ? __cfi_do_futex+0x10/0x10 [ 381.780185][T17122] ? __vm_munmap+0x2c7/0x370 [ 381.780209][T17122] __se_sys_futex+0x28f/0x300 [ 381.780236][T17122] ? __x64_sys_futex+0x110/0x110 [ 381.780263][T17122] ? __kasan_check_write+0x18/0x20 [ 381.780300][T17122] __x64_sys_futex+0xe9/0x110 [ 381.780326][T17122] x64_sys_call+0x227f/0x2ee0 [ 381.780363][T17122] do_syscall_64+0x58/0xf0 [ 381.780398][T17122] ? clear_bhb_loop+0x50/0xa0 [ 381.780427][T17122] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 381.780455][T17122] RIP: 0033:0x7f0791d8ebe9 [ 381.780482][T17122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.780518][T17122] RSP: 002b:00007f0792c4e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 381.780575][T17122] RAX: ffffffffffffffda RBX: 00007f0791fb5fa0 RCX: 00007f0791d8ebe9 [ 381.780595][T17122] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 381.780614][T17122] RBP: 00007f0791e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 381.780632][T17122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.780648][T17122] R13: 00007f0791fb6038 R14: 00007f0791fb5fa0 R15: 00007ffe1a64c088 [ 381.780671][T17122] [ 381.978644][ T9] hub 2-1:4.128: hub_hub_status failed (err = -32) [ 382.018501][ T9] hub 2-1:4.128: config failed, can't get hub status (err -32) [ 382.309787][T17130] 9pnet_fd: Insufficient options for proto=fd [ 382.401683][T17143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.410455][T17143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.287703][ T1994] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 383.288598][ T1993] Bluetooth: hci0: command 0x1003 tx timeout [ 383.310491][ T9] rust_binder: 17115: removing orphan mapping 0:24 [ 383.317770][ T9] rust_binder: 0: removing orphan mapping 24:1112 [ 383.372836][T17195] rust_binder: Failed copying remainder into alloc: EFAULT [ 383.372866][T17195] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 383.380395][T17195] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 383.389112][T17195] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:470 [ 383.424007][T17198] tmpfs: Unknown parameter 's' [ 383.439991][T17198] rust_binder: Write failure EFAULT in pid:472 [ 383.448272][T17200] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17200 comm=syz.1.5604 [ 383.472614][T17200] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17200 comm=syz.1.5604 [ 383.562152][T17215] FAULT_INJECTION: forcing a failure. [ 383.562152][T17215] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 383.575424][T17215] CPU: 1 UID: 0 PID: 17215 Comm: syz.3.5609 Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 383.575451][T17215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.575461][T17215] Call Trace: [ 383.575467][T17215] [ 383.575474][T17215] __dump_stack+0x21/0x30 [ 383.575502][T17215] dump_stack_lvl+0x10c/0x190 [ 383.575525][T17215] ? __cfi_dump_stack_lvl+0x10/0x10 [ 383.575547][T17215] ? __seq_puts+0xee/0x140 [ 383.575570][T17215] dump_stack+0x19/0x20 [ 383.575591][T17215] should_fail_ex+0x3d9/0x530 [ 383.575618][T17215] should_fail+0xf/0x20 [ 383.575641][T17215] should_fail_usercopy+0x1e/0x30 [ 383.575659][T17215] _copy_to_iter+0x3bb/0x14b0 [ 383.575677][T17215] ? __cfi_proc_pid_status+0x10/0x10 [ 383.575696][T17215] ? __cfi__copy_to_iter+0x10/0x10 [ 383.575712][T17215] ? __check_object_size+0x50a/0x810 [ 383.575729][T17215] ? __cfi___check_object_size+0x10/0x10 [ 383.575744][T17215] ? __kasan_check_write+0x18/0x20 [ 383.575768][T17215] ? proc_single_show+0x17f/0x1b0 [ 383.575788][T17215] seq_read_iter+0xd39/0xfe0 [ 383.575810][T17215] seq_read+0x2e3/0x3d0 [ 383.575829][T17215] ? __cfi_seq_read+0x10/0x10 [ 383.575848][T17215] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 383.575870][T17215] ? bpf_lsm_file_permission+0xd/0x20 [ 383.575895][T17215] ? __cfi_seq_read+0x10/0x10 [ 383.575913][T17215] vfs_read+0x278/0xb60 [ 383.575928][T17215] ? __cfi_vfs_read+0x10/0x10 [ 383.575953][T17215] ? __kasan_check_write+0x18/0x20 [ 383.575976][T17215] ? mutex_lock+0x92/0x1c0 [ 383.575993][T17215] ? __cfi_mutex_lock+0x10/0x10 [ 383.576009][T17215] ? __fget_files+0x2c5/0x340 [ 383.576028][T17215] ksys_read+0x141/0x250 [ 383.576043][T17215] ? __cfi_ksys_read+0x10/0x10 [ 383.576058][T17215] ? __kasan_check_read+0x15/0x20 [ 383.576082][T17215] __x64_sys_read+0x7f/0x90 [ 383.576096][T17215] x64_sys_call+0x2638/0x2ee0 [ 383.576120][T17215] do_syscall_64+0x58/0xf0 [ 383.576142][T17215] ? clear_bhb_loop+0x50/0xa0 [ 383.576161][T17215] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 383.576180][T17215] RIP: 0033:0x7f5783b8ebe9 [ 383.576193][T17215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.576208][T17215] RSP: 002b:00007f57825f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 383.576226][T17215] RAX: ffffffffffffffda RBX: 00007f5783db5fa0 RCX: 00007f5783b8ebe9 [ 383.576240][T17215] RDX: 0000000000002020 RSI: 0000200000003000 RDI: 0000000000000003 [ 383.576251][T17215] RBP: 00007f57825f7090 R08: 0000000000000000 R09: 0000000000000000 [ 383.576262][T17215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.576274][T17215] R13: 00007f5783db6038 R14: 00007f5783db5fa0 R15: 00007fff2cad44c8 [ 383.576288][T17215] [ 383.875693][T17221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=17221 comm=syz.3.5611 [ 384.470114][T17240] FAULT_INJECTION: forcing a failure. [ 384.470114][T17240] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 384.483494][T17240] CPU: 1 UID: 0 PID: 17240 Comm: syz.1.5618 Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 384.483529][T17240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.483544][T17240] Call Trace: [ 384.483552][T17240] [ 384.483561][T17240] __dump_stack+0x21/0x30 [ 384.483599][T17240] dump_stack_lvl+0x10c/0x190 [ 384.483640][T17240] ? __cfi_dump_stack_lvl+0x10/0x10 [ 384.483673][T17240] ? check_preempt_wakeup_fair+0x694/0xae0 [ 384.483712][T17240] dump_stack+0x19/0x20 [ 384.483741][T17240] should_fail_ex+0x3d9/0x530 [ 384.483776][T17240] should_fail_alloc_page+0xeb/0x110 [ 384.483802][T17240] __alloc_pages_noprof+0x19b/0x7b0 [ 384.483833][T17240] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 384.483868][T17240] __folio_alloc_noprof+0x14/0x80 [ 384.483897][T17240] folio_prealloc+0x46/0x240 [ 384.483924][T17240] do_pte_missing+0x164c/0x4240 [ 384.483954][T17240] ? pte_marker_clear+0x1b0/0x1b0 [ 384.483982][T17240] ? number+0xd21/0xf80 [ 384.484012][T17240] ? __pte_offset_map+0x1b0/0x230 [ 384.484045][T17240] ? pte_offset_map_rw_nolock+0xba/0x110 [ 384.484077][T17240] handle_mm_fault+0x1166/0x1b90 [ 384.484107][T17240] ? __cfi_handle_mm_fault+0x10/0x10 [ 384.484131][T17240] ? find_vma+0xcd/0x110 [ 384.484168][T17240] ? lock_mm_and_find_vma+0xb8/0x3a0 [ 384.484195][T17240] do_user_addr_fault+0x4ca/0x1200 [ 384.484230][T17240] ? num_to_str+0x1/0x4d0 [ 384.484260][T17240] exc_page_fault+0x59/0xc0 [ 384.484286][T17240] asm_exc_page_fault+0x2b/0x30 [ 384.484311][T17240] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 384.484340][T17240] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 e9 cf 5d 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 384.484361][T17240] RSP: 0018:ffffc900046ff8f8 EFLAGS: 00050202 [ 384.484384][T17240] RAX: ffffffff82a33c01 RBX: ffff888157998000 RCX: 000000000000112f [ 384.484404][T17240] RDX: 0000000000000000 RSI: ffff888157998000 RDI: 0000200000003000 [ 384.484422][T17240] RBP: ffffc900046ffa48 R08: ffff88815799912e R09: 1ffff1102af33225 [ 384.484446][T17240] R10: dffffc0000000000 R11: ffffed102af33226 R12: 0000200000003000 [ 384.484465][T17240] R13: 0000000000000000 R14: 000000000000112f R15: ffffc900046ffbf8 [ 384.484484][T17240] ? _copy_to_iter+0x391/0x14b0 [ 384.484510][T17240] ? _copy_to_iter+0x444/0x14b0 [ 384.484535][T17240] ? __cfi_proc_pid_status+0x10/0x10 [ 384.484562][T17240] ? __cfi__copy_to_iter+0x10/0x10 [ 384.484585][T17240] ? __check_object_size+0x50a/0x810 [ 384.484615][T17240] ? __cfi___check_object_size+0x10/0x10 [ 384.484638][T17240] ? __kasan_check_write+0x18/0x20 [ 384.484672][T17240] ? proc_single_show+0x17f/0x1b0 [ 384.484701][T17240] seq_read_iter+0xd39/0xfe0 [ 384.484732][T17240] seq_read+0x2e3/0x3d0 [ 384.484761][T17240] ? __cfi_seq_read+0x10/0x10 [ 384.484788][T17240] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 384.484821][T17240] ? bpf_lsm_file_permission+0xd/0x20 [ 384.484854][T17240] ? __cfi_seq_read+0x10/0x10 [ 384.484881][T17240] vfs_read+0x278/0xb60 [ 384.484903][T17240] ? __cfi_vfs_read+0x10/0x10 [ 384.484937][T17240] ? __kasan_check_write+0x18/0x20 [ 384.484971][T17240] ? mutex_lock+0x92/0x1c0 [ 384.484994][T17240] ? __cfi_mutex_lock+0x10/0x10 [ 384.485017][T17240] ? __fget_files+0x2c5/0x340 [ 384.485045][T17240] ksys_read+0x141/0x250 [ 384.485066][T17240] ? __cfi_ksys_read+0x10/0x10 [ 384.485088][T17240] ? __kasan_check_read+0x15/0x20 [ 384.485122][T17240] __x64_sys_read+0x7f/0x90 [ 384.485144][T17240] x64_sys_call+0x2638/0x2ee0 [ 384.485179][T17240] do_syscall_64+0x58/0xf0 [ 384.485210][T17240] ? clear_bhb_loop+0x50/0xa0 [ 384.485236][T17240] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 384.485262][T17240] RIP: 0033:0x7f0791d8ebe9 [ 384.485280][T17240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.485300][T17240] RSP: 002b:00007f0792c4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 384.485324][T17240] RAX: ffffffffffffffda RBX: 00007f0791fb5fa0 RCX: 00007f0791d8ebe9 [ 384.485343][T17240] RDX: 0000000000002020 RSI: 0000200000003000 RDI: 0000000000000003 [ 384.485359][T17240] RBP: 00007f0792c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 384.485376][T17240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.485391][T17240] R13: 00007f0791fb6038 R14: 00007f0791fb5fa0 R15: 00007ffe1a64c088 [ 384.485412][T17240] [ 384.504756][ T36] audit: type=1400 audit(2000000090.536:73365): avc: denied { mount } for pid=17241 comm="syz.3.5619" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 384.545961][T17246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.574857][T17248] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 384.577386][T17246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.087928][ T36] audit: type=1400 audit(2000000091.126:73366): avc: denied { lock } for pid=17253 comm="syz.8.5623" path="socket:[74725]" dev="sockfs" ino=74725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 385.217697][ T31] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 385.368903][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.381503][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 385.390631][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.398676][ T31] usb 4-1: Product: syz [ 385.402855][ T31] usb 4-1: Manufacturer: syz [ 385.407455][ T31] usb 4-1: SerialNumber: syz [ 385.601303][T17274] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5630'. [ 385.610776][T17274] fuse: Unknown parameter 'd' [ 386.132516][T17281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.141137][T17281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.231840][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5636'. [ 386.417748][ T31] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 386.424404][ T31] cdc_ncm 4-1:1.0: dwNtbInMaxSize=11 is too small. Using 2048 [ 386.432020][ T31] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 386.457691][T17297] 8021q: VLANs not supported on lo [ 386.465084][T17297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.473694][T17297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.721904][T17301] loop6: detected capacity change from 0 to 32754 [ 386.777310][ T36] audit: type=1326 audit(2000000092.806:73367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.8.5641" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fa638ebe9 code=0x0 [ 387.049447][T17315] netlink: 'syz.7.5645': attribute type 4 has an invalid length. [ 387.061069][T17315] netlink: 'syz.7.5645': attribute type 4 has an invalid length. [ 387.135997][T17326] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5650'. [ 387.646442][ T36] audit: type=1400 audit(2000000093.676:73368): avc: denied { create } for pid=17345 comm="syz.8.5657" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B83632F2F94169AE115DDD [ 387.700962][ T36] audit: type=1400 audit(2000000093.676:73369): avc: denied { associate } for pid=17345 comm="syz.8.5657" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B83632F2F94169AE115DDD [ 388.154784][ T36] audit: type=1400 audit(2000000094.186:73370): avc: denied { unlink } for pid=15969 comm="syz-executor" name="file0" dev="tmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B83632F2F94169AE115DDD [ 388.233536][T17359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=17359 comm=syz.8.5662 [ 388.246513][T17359] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5662'. [ 388.380844][T17373] /dev/nullb0: Can't lookup blockdev [ 388.471372][T17386] can: request_module (can-proto-0) failed. [ 388.809676][T17411] netlink: 'syz.7.5677': attribute type 4 has an invalid length. [ 388.819056][T17411] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5677'. [ 388.850313][T17417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.859044][T17417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.186527][T17444] netlink: 'syz.8.5687': attribute type 2 has an invalid length. [ 389.208131][T17446] overlayfs: failed to clone lowerpath [ 389.822055][T17459] bridge0: port 4(macsec0) entered blocking state [ 389.828558][T17459] bridge0: port 4(macsec0) entered disabled state [ 389.835124][T17459] macsec0: entered allmulticast mode [ 389.840503][T17459] veth1_macvtap: entered allmulticast mode [ 389.846826][T17459] macsec0: entered promiscuous mode [ 389.852294][T17459] bridge0: port 4(macsec0) entered blocking state [ 389.858780][T17459] bridge0: port 4(macsec0) entered forwarding state [ 390.270311][T17481] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5700'. [ 390.355917][T17485] loop2: detected capacity change from 0 to 32754 [ 390.552295][T17501] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5705'. [ 390.564274][T17501] 9pnet_fd: Insufficient options for proto=fd [ 390.594416][ T36] audit: type=1400 audit(2000000096.626:73371): avc: denied { nlmsg_tty_audit } for pid=17505 comm="syz.8.5707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 390.636246][T17510] netlink: 188 bytes leftover after parsing attributes in process `syz.8.5709'. [ 390.998665][T17566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17566 comm=syz.8.5724 [ 391.448029][ T31] cdc_ncm 4-1:1.0: setting tx_max = 40 [ 391.455349][ T31] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 393.875402][T17599] netlink: 'syz.7.5732': attribute type 46 has an invalid length. [ 393.883342][T17599] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5732'. [ 398.736110][ T2969] bridge_slave_1: left allmulticast mode [ 398.741956][ T2969] bridge_slave_1: left promiscuous mode [ 398.747710][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.755410][ T2969] bridge_slave_0: left allmulticast mode [ 398.761352][ T2969] bridge_slave_0: left promiscuous mode [ 398.767119][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.890903][ T2969] veth1_macvtap: left promiscuous mode [ 398.896520][ T2969] veth0_vlan: left promiscuous mode [ 399.769141][T17617] 9pnet_fd: Insufficient options for proto=fd [ 400.338707][T17656] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5749'. [ 400.403040][T17650] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.411371][T17650] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.420647][T17650] bridge_slave_0: entered allmulticast mode [ 400.427294][T17650] bridge_slave_0: entered promiscuous mode [ 400.435510][T17650] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.442692][T17650] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.449932][T17650] bridge_slave_1: entered allmulticast mode [ 400.456645][T17650] bridge_slave_1: entered promiscuous mode [ 400.550707][T17650] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.557824][T17650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.565184][T17650] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.572268][T17650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.603798][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.611942][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.627565][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.634694][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.643032][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.650135][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.682937][T17650] veth0_vlan: entered promiscuous mode [ 400.699741][T17650] veth1_macvtap: entered promiscuous mode [ 400.745719][T17687] 9pnet_fd: Insufficient options for proto=fd [ 400.754868][T17690] fuseblk: Bad value for 'fd' [ 400.913196][T17699] fuseblk: Unknown parameter 'blksiz.000000400' [ 400.935151][T17702] binder: Bad value for 'max' [ 401.053127][T17708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 401.106405][T17709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17709 comm=syz.9.5764 [ 401.183843][T17709] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 401.183875][T17709] rust_binder: Error while translating object. [ 401.192680][T17709] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 401.198993][T17709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 402.376857][T17733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=17733 comm=syz.8.5773 [ 402.489586][ T36] audit: type=1326 audit(2000000108.526:73372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17739 comm="syz.8.5776" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fa638ebe9 code=0x0 [ 402.878245][T17748] rust_binder: Write failure EFAULT in pid:31 [ 403.118214][T17753] /dev/loop0: Can't lookup blockdev [ 403.150156][ T36] audit: type=1326 audit(2000000109.186:73373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17756 comm="syz.7.5782" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff0bf98ebe9 code=0x0 [ 403.343910][T17764] netlink: 'syz.8.5785': attribute type 16 has an invalid length. [ 403.352029][T17764] netlink: 64138 bytes leftover after parsing attributes in process `syz.8.5785'. [ 403.457410][ T36] audit: type=1400 audit(2000000109.486:73374): avc: denied { ioctl } for pid=17774 comm="syz.9.5790" path="socket:[77550]" dev="sockfs" ino=77550 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 403.569262][T17786] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 403.578116][T17786] rust_binder: Write failure EINVAL in pid:44 [ 403.608512][ T2968] Bluetooth: hci0: Frame reassembly failed (-84) [ 403.631616][T17790] Bluetooth: hci0: Frame reassembly failed (-84) [ 404.058608][T17807] fuseblk: Bad value for 'blksize' [ 404.092357][T17811] netlink: 'syz.7.5805': attribute type 15 has an invalid length. [ 404.100267][T17811] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5805'. [ 404.720523][T17837] overlayfs: failed to clone upperpath [ 404.741395][T17840] 9pnet: Could not find request transport: rdma [ 405.363549][ T36] audit: type=1326 audit(2000000111.396:73375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17864 comm="syz.8.5824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fa638ebe9 code=0x0 [ 405.407769][ T8779] usb 2-1: USB disconnect, device number 41 [ 405.441219][T17866] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.448569][T17866] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.455691][T17866] bridge_slave_0: entered allmulticast mode [ 405.462457][T17866] bridge_slave_0: entered promiscuous mode [ 405.469275][T17866] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.476335][T17866] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.483737][T17866] bridge_slave_1: entered allmulticast mode [ 405.490151][T17866] bridge_slave_1: entered promiscuous mode [ 405.563103][T17866] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.570221][T17866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.577522][T17866] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.584694][T17866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.610159][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.618257][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.629432][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.636684][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.646642][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.653735][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.685926][T17866] veth0_vlan: entered promiscuous mode [ 405.691771][ T1994] Bluetooth: hci0: command 0x1003 tx timeout [ 405.691782][ T1993] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 405.701521][T17866] veth1_macvtap: entered promiscuous mode [ 405.977682][ T517] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 405.998063][ T1359] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 406.115338][T17889] TCP: TCP_TX_DELAY enabled [ 406.129036][ T517] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 406.140649][ T517] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 406.150070][ T517] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.158423][ T1359] usb 6-1: no configurations [ 406.158451][ T517] usb 10-1: Product: syz [ 406.158477][ T1359] usb 6-1: can't read configurations, error -22 [ 406.163077][ T517] usb 10-1: Manufacturer: syz [ 406.163101][ T517] usb 10-1: SerialNumber: syz [ 406.164563][ T517] usb 10-1: config 0 descriptor?? [ 406.287736][ T1359] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 406.407245][ T517] usb 10-1: USB disconnect, device number 27 [ 406.439076][ T1359] usb 6-1: no configurations [ 406.449518][ T1359] usb 6-1: can't read configurations, error -22 [ 406.458423][ T1359] usb usb6-port1: attempt power cycle [ 406.807921][ T1359] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 406.828403][ T1359] usb 6-1: no configurations [ 406.833122][ T1359] usb 6-1: can't read configurations, error -22 [ 406.948022][T17911] kvm: pic: non byte write [ 406.978565][ T1359] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 406.998436][ T1359] usb 6-1: no configurations [ 407.003136][ T1359] usb 6-1: can't read configurations, error -22 [ 407.009631][ T1359] usb usb6-port1: unable to enumerate USB device [ 407.091111][T17918] rust_binder: Failed copying remainder into alloc: EFAULT [ 407.091132][T17918] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 407.098651][T17918] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 407.107079][T17918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:58 [ 407.197743][T17932] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 407.229280][T17932] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 407.235802][T17932] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 407.246340][T17942] bpf: Bad value for 'uid' [ 407.299109][T17932] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 407.299145][T17932] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 407.305720][T17932] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 408.793601][T17982] rust_binder: Error while translating object. [ 408.831642][T17982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 408.840789][T17982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:91 [ 408.908417][T17990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 408.931027][T17990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 408.939267][T17990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:96 [ 409.022467][T17992] overlayfs: failed to resolve './file1/file0': -2 [ 409.143960][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5860'. [ 409.730100][T17944] syz.9.5843 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 409.756328][T17944] CPU: 1 UID: 0 PID: 17944 Comm: syz.9.5843 Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 409.756370][T17944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.756387][T17944] Call Trace: [ 409.756395][T17944] [ 409.756406][T17944] __dump_stack+0x21/0x30 [ 409.756444][T17944] dump_stack_lvl+0x10c/0x190 [ 409.756476][T17944] ? __cfi_dump_stack_lvl+0x10/0x10 [ 409.756515][T17944] ? ___ratelimit+0x3f7/0x5a0 [ 409.756553][T17944] dump_stack+0x19/0x20 [ 409.756582][T17944] dump_header+0xd7/0x490 [ 409.756607][T17944] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 409.756641][T17944] oom_kill_process+0x4c0/0x7e0 [ 409.756669][T17944] ? sched_clock_cpu+0x75/0x400 [ 409.756702][T17944] out_of_memory+0x7ee/0xbd0 [ 409.756729][T17944] ? __cfi_out_of_memory+0x10/0x10 [ 409.756755][T17944] ? mutex_lock_killable+0x92/0x1c0 [ 409.756782][T17944] ? __cfi_mutex_lock_killable+0x10/0x10 [ 409.756809][T17944] mem_cgroup_out_of_memory+0x279/0x350 [ 409.756834][T17944] ? drain_obj_stock+0xed0/0xed0 [ 409.756859][T17944] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 409.756886][T17944] try_charge_memcg+0x8f7/0xde0 [ 409.756920][T17944] ? __cfi_try_charge_memcg+0x10/0x10 [ 409.756951][T17944] ? __alloc_pages_noprof+0x31f/0x7b0 [ 409.756983][T17944] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 409.757013][T17944] ? __folio_batch_add_and_move+0x2ab/0x370 [ 409.757044][T17944] __mem_cgroup_charge+0xf6/0x410 [ 409.757079][T17944] ? _raw_spin_lock+0x8c/0x120 [ 409.757110][T17944] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 409.757147][T17944] shmem_alloc_and_add_folio+0x86d/0x1050 [ 409.757179][T17944] ? put_swap_device+0x130/0x130 [ 409.757206][T17944] ? shmem_huge_global_enabled+0x2da/0x360 [ 409.757232][T17944] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 409.757256][T17944] ? __kasan_check_write+0x18/0x20 [ 409.757291][T17944] ? _raw_spin_lock+0x8c/0x120 [ 409.757322][T17944] shmem_get_folio_gfp+0x5f0/0x1380 [ 409.757350][T17944] ? shmem_get_folio+0xc0/0xc0 [ 409.757372][T17944] ? follow_page_pte+0xa5c/0xb90 [ 409.757401][T17944] ? inode_to_bdi+0x6d/0x100 [ 409.757434][T17944] shmem_write_begin+0xf4/0x270 [ 409.757461][T17944] generic_perform_write+0x330/0x960 [ 409.757509][T17944] ? __cfi_generic_perform_write+0x10/0x10 [ 409.757542][T17944] ? down_write+0xe9/0x2a0 [ 409.757569][T17944] ? file_update_time+0xa3/0x220 [ 409.757605][T17944] shmem_file_write_iter+0x105/0x130 [ 409.757634][T17944] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 409.757663][T17944] __kernel_write_iter+0x395/0x830 [ 409.757683][T17944] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 409.757714][T17944] ? __cfi___kernel_write_iter+0x10/0x10 [ 409.757736][T17944] ? get_dump_page+0x160/0x220 [ 409.757764][T17944] ? __asan_memset+0x39/0x50 [ 409.757798][T17944] ? iov_iter_bvec+0xc0/0x180 [ 409.757825][T17944] dump_user_range+0xb06/0xdf0 [ 409.757850][T17944] ? __cfi_dump_emit+0x10/0x10 [ 409.757887][T17944] ? __cfi_dump_user_range+0x10/0x10 [ 409.757909][T17944] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 409.757947][T17944] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 409.757983][T17944] elf_core_dump+0x2cd9/0x3810 [ 409.758015][T17944] ? __cfi_elf_core_dump+0x10/0x10 [ 409.758051][T17944] ? dump_interrupted+0xf0/0xf0 [ 409.758086][T17944] ? filp_open+0x182/0x1d0 [ 409.758116][T17944] ? 0xffffffffff600000 [ 409.758136][T17944] do_coredump+0x1bf7/0x2bd0 [ 409.758175][T17944] ? __cfi_do_coredump+0x10/0x10 [ 409.758210][T17944] ? asm_exc_page_fault+0x2b/0x30 [ 409.758244][T17944] ? __kasan_slab_free+0x6a/0x80 [ 409.758269][T17944] ? kmem_cache_free+0x1c1/0x510 [ 409.758305][T17944] ? get_signal+0xa75/0x14f0 [ 409.758336][T17944] get_signal+0x11fd/0x14f0 [ 409.758369][T17944] arch_do_signal_or_restart+0x96/0x720 [ 409.758406][T17944] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 409.758445][T17944] irqentry_exit_to_user_mode+0x4e/0xb0 [ 409.758474][T17944] irqentry_exit+0x16/0x60 [ 409.758507][T17944] exc_page_fault+0x66/0xc0 [ 409.758533][T17944] asm_exc_page_fault+0x2b/0x30 [ 409.758557][T17944] RIP: 0033:0x7fd306e4f927 [ 409.758576][T17944] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 409.758597][T17944] RSP: 002b:00007fd307d50120 EFLAGS: 00010202 [ 409.758620][T17944] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fd306f8ebe9 [ 409.758638][T17944] RDX: 00007fd307d50140 RSI: 00007fd307d50270 RDI: 000000000000000b [ 409.758656][T17944] RBP: 00007fd307011e19 R08: 0000000000000000 R09: 0000000000000000 [ 409.758672][T17944] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 409.758687][T17944] R13: 00007fd3071b6128 R14: 00007fd3071b6090 R15: 00007ffcfae675a8 [ 409.758709][T17944] [ 409.934903][T18010] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 409.937550][ T36] audit: type=1400 audit(2000000115.886:73376): avc: denied { append } for pid=18007 comm="syz.9.5866" name="pfkey" dev="proc" ino=4026532446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 409.955885][T18010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:9 [ 409.960355][T17944] memory: usage 307132kB, limit 307200kB, failcnt 14877 [ 410.019419][ T1359] rust_binder: 18006: removing orphan mapping 0:24 [ 410.024108][T17944] memory+swap: usage 431972kB, limit 9007199254740988kB, failcnt 0 [ 410.096737][T18028] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551610) [ 410.100272][T17944] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 410.144002][T18028] rust_binder: Error while translating object. [ 410.145436][T17944] Memory cgroup stats for [ 410.160219][T18028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 410.169815][T17944] /syz9 [ 410.189477][T18028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 410.193215][T17944] : [ 410.346731][T17944] cache 313880576 [ 410.353365][T17944] rss 540672 [ 410.356631][T17944] rss_huge 0 [ 410.360535][T17944] shmem 313880576 [ 410.364203][T17944] mapped_file 0 [ 410.368174][T17944] dirty 0 [ 410.371163][T17944] writeback 0 [ 410.375478][T17944] workingset_refault_anon 36 [ 410.380467][T17944] workingset_refault_file 0 [ 410.385300][T17944] swap 127840256 [ 410.390098][T18045] netlink: 'syz.7.5879': attribute type 6 has an invalid length. [ 410.392939][T17944] swapcached 155648 [ 410.402210][T17944] pgpgin 227252 [ 410.406909][T17944] pgpgout 150469 [ 410.411107][T17944] pgfault 64390 [ 410.414781][T17944] pgmajfault 9 [ 410.425037][T17944] inactive_anon 128950272 [ 410.429554][T17944] active_anon 185552896 [ 410.434188][T17944] inactive_file 0 [ 410.438459][T17944] active_file 0 [ 410.442068][T17944] unevictable 0 [ 410.445656][T17944] hierarchical_memory_limit 314572800 [ 410.451953][T17944] hierarchical_memsw_limit 9223372036854771712 [ 410.458879][T17944] total_cache 313880576 [ 410.463352][T17944] total_rss 540672 [ 410.467207][T17944] total_rss_huge 0 [ 410.471379][T17944] total_shmem 313880576 [ 410.475727][T17944] total_mapped_file 0 [ 410.502927][T17944] total_dirty 0 [ 410.506653][T17944] total_writeback 0 [ 410.511048][T17944] total_workingset_refault_anon 36 [ 410.516321][T17944] total_workingset_refault_file 0 [ 410.522405][T17944] total_swap 127840256 [ 410.526592][T17944] total_swapcached 155648 [ 410.531313][T18058] rust_binder: Error while translating object. [ 410.531365][T18058] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 410.538034][T18058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:25 [ 410.547437][T17944] total_pgpgin 227252 [ 410.567797][T17944] total_pgpgout 150469 [ 410.572798][T17944] total_pgfault 64390 [ 410.577088][T17944] total_pgmajfault 9 [ 410.581516][T17944] total_inactive_anon 128950272 [ 410.589279][T17944] total_active_anon 185552896 [ 410.594093][T17944] total_inactive_file 0 [ 410.598613][T17944] total_active_file 0 [ 410.602670][T17944] total_unevictable 0 [ 410.606720][T17944] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.5843,pid=17938,uid=0 [ 410.622846][T17944] Memory cgroup out of memory: Killed process 17938 (syz.9.5843) total-vm:89900kB, anon-rss:1072kB, file-rss:60160kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 410.690732][T17935] syz.9.5843 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 410.710586][T18071] rust_binder: Error while translating object. [ 410.710633][T18071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 410.732470][T18071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31 [ 410.747522][T17935] CPU: 1 UID: 0 PID: 17935 Comm: syz.9.5843 Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 410.747561][T17935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 410.747577][T17935] Call Trace: [ 410.747585][T17935] [ 410.747600][T17935] __dump_stack+0x21/0x30 [ 410.747637][T17935] dump_stack_lvl+0x10c/0x190 [ 410.747668][T17935] ? __cfi_dump_stack_lvl+0x10/0x10 [ 410.747699][T17935] ? ___ratelimit+0x3f7/0x5a0 [ 410.747735][T17935] dump_stack+0x19/0x20 [ 410.747765][T17935] dump_header+0xd7/0x490 [ 410.747789][T17935] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 410.747821][T17935] oom_kill_process+0x4c0/0x7e0 [ 410.747849][T17935] ? sched_clock_cpu+0x75/0x400 [ 410.747882][T17935] out_of_memory+0x7ee/0xbd0 [ 410.747910][T17935] ? __cfi_out_of_memory+0x10/0x10 [ 410.747936][T17935] ? mutex_lock_killable+0x92/0x1c0 [ 410.747963][T17935] ? __cfi_mutex_lock_killable+0x10/0x10 [ 410.747990][T17935] mem_cgroup_out_of_memory+0x279/0x350 [ 410.748015][T17935] ? drain_obj_stock+0xed0/0xed0 [ 410.748039][T17935] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 410.748063][T17935] try_charge_memcg+0x8f7/0xde0 [ 410.748094][T17935] ? __cfi_try_charge_memcg+0x10/0x10 [ 410.748125][T17935] ? __alloc_pages_noprof+0x31f/0x7b0 [ 410.748169][T17935] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 410.748199][T17935] ? __folio_batch_add_and_move+0x2ab/0x370 [ 410.748229][T17935] __mem_cgroup_charge+0xf6/0x410 [ 410.748263][T17935] ? _raw_spin_lock+0x8c/0x120 [ 410.748294][T17935] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 410.748331][T17935] shmem_alloc_and_add_folio+0x86d/0x1050 [ 410.748361][T17935] ? put_swap_device+0x130/0x130 [ 410.748385][T17935] ? shmem_huge_global_enabled+0x2da/0x360 [ 410.748409][T17935] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 410.748434][T17935] ? __kasan_check_write+0x18/0x20 [ 410.748466][T17935] ? _raw_spin_lock+0x8c/0x120 [ 410.748497][T17935] shmem_get_folio_gfp+0x5f0/0x1380 [ 410.748524][T17935] ? shmem_get_folio+0xc0/0xc0 [ 410.748546][T17935] ? follow_page_pte+0xa5c/0xb90 [ 410.748576][T17935] ? inode_to_bdi+0x6d/0x100 [ 410.748608][T17935] shmem_write_begin+0xf4/0x270 [ 410.748635][T17935] generic_perform_write+0x330/0x960 [ 410.748670][T17935] ? __cfi_generic_perform_write+0x10/0x10 [ 410.748703][T17935] ? down_write+0xe9/0x2a0 [ 410.748730][T17935] ? file_update_time+0xa3/0x220 [ 410.748763][T17935] shmem_file_write_iter+0x105/0x130 [ 410.748793][T17935] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 410.748821][T17935] __kernel_write_iter+0x395/0x830 [ 410.748840][T17935] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 410.748870][T17935] ? __cfi___kernel_write_iter+0x10/0x10 [ 410.748892][T17935] ? get_dump_page+0x160/0x220 [ 410.748920][T17935] ? __asan_memset+0x39/0x50 [ 410.748952][T17935] ? iov_iter_bvec+0xc0/0x180 [ 410.748979][T17935] dump_user_range+0xb06/0xdf0 [ 410.749002][T17935] ? __cfi_dump_emit+0x10/0x10 [ 410.749037][T17935] ? __cfi_dump_user_range+0x10/0x10 [ 410.749057][T17935] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 410.749095][T17935] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 410.749129][T17935] elf_core_dump+0x2cd9/0x3810 [ 410.749182][T17935] ? __cfi_elf_core_dump+0x10/0x10 [ 410.749218][T17935] ? dump_interrupted+0xf0/0xf0 [ 410.749251][T17935] ? filp_open+0x182/0x1d0 [ 410.749280][T17935] ? 0xffffffffff600000 [ 410.749299][T17935] do_coredump+0x1bf7/0x2bd0 [ 410.749338][T17935] ? __cfi_do_coredump+0x10/0x10 [ 410.749371][T17935] ? asm_exc_page_fault+0x2b/0x30 [ 410.749407][T17935] ? __kasan_slab_free+0x6a/0x80 [ 410.749431][T17935] ? kmem_cache_free+0x1c1/0x510 [ 410.749467][T17935] ? get_signal+0xa75/0x14f0 [ 410.749497][T17935] get_signal+0x11fd/0x14f0 [ 410.749530][T17935] arch_do_signal_or_restart+0x96/0x720 [ 410.749565][T17935] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 410.749605][T17935] irqentry_exit_to_user_mode+0x4e/0xb0 [ 410.749633][T17935] irqentry_exit+0x16/0x60 [ 410.749659][T17935] exc_page_fault+0x66/0xc0 [ 410.749685][T17935] asm_exc_page_fault+0x2b/0x30 [ 410.749708][T17935] RIP: 0033:0x7fd306e4f927 [ 410.749728][T17935] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 410.749750][T17935] RSP: 002b:00007fd307d50120 EFLAGS: 00010202 [ 410.749772][T17935] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fd306f8ebe9 [ 410.749790][T17935] RDX: 00007fd307d50140 RSI: 00007fd307d50270 RDI: 000000000000000b [ 410.749807][T17935] RBP: 00007fd307011e19 R08: 0000000000000000 R09: 0000000000000000 [ 410.749824][T17935] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 410.749840][T17935] R13: 00007fd3071b6128 R14: 00007fd3071b6090 R15: 00007ffcfae675a8 [ 410.749861][T17935] [ 411.222450][ T36] audit: type=1400 audit(2000000117.216:73377): avc: denied { write } for pid=18084 comm="syz.5.5890" path="socket:[78480]" dev="sockfs" ino=78480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 411.239999][T17935] memory: usage 261516kB, limit 307200kB, failcnt 15538 [ 411.276773][T18089] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 411.285004][T17935] memory+swap: usage 376668kB, limit 9007199254740988kB, failcnt 0 [ 411.287021][T18089] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 411.291732][T17935] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 411.316508][T17935] Memory cgroup stats for /syz9: [ 411.316671][T17935] cache 266616832 [ 411.325391][T17935] rss 421888 [ 411.328641][T17935] rss_huge 0 [ 411.331852][T17935] shmem 266616832 [ 411.335537][T17935] mapped_file 0 [ 411.341090][T17935] dirty 0 [ 411.344091][T17935] writeback 0 [ 411.344252][T18089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 411.347631][T17935] workingset_refault_anon 48 [ 411.361551][T17935] workingset_refault_file 0 [ 411.371111][T17935] swap 118013952 [ 411.374897][T17935] swapcached 667648 [ 411.379326][T17935] pgpgin 228719 [ 411.382814][T17935] pgpgout 163417 [ 411.386380][T17935] pgfault 64639 [ 411.507667][ T31] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 411.564081][T17935] pgmajfault 11 [ 411.574839][T17935] inactive_anon 97955840 [ 411.587667][T17935] active_anon 169521152 [ 411.607731][T17935] inactive_file 0 [ 411.639357][T17935] active_file 0 [ 411.648551][T17935] unevictable 0 [ 411.657503][T17935] hierarchical_memory_limit 314572800 [ 411.667683][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 411.674219][ T31] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 411.684391][ T31] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.692881][T17935] hierarchical_memsw_limit 9223372036854771712 [ 411.695783][ T31] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.717425][ T31] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 411.738102][ T31] usb 6-1: config 7 interface 0 has no altsetting 0 [ 411.744833][ T31] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 411.756119][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.763467][T17935] total_cache 266616832 [ 411.787907][T17935] total_rss 421888 [ 411.791766][T17935] total_rss_huge 0 [ 411.795543][T17935] total_shmem 266616832 [ 411.827690][T18130] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 411.830155][T17935] total_mapped_file 0 [ 411.843273][T18130] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 411.843434][T18130] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 411.855876][ T36] audit: type=1400 audit(2000000117.886:73378): avc: denied { create } for pid=18133 comm="syz.8.5906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 411.867653][T17935] total_dirty 0 [ 411.889762][T18130] rust_binder: Write failure EINVAL in pid:125 [ 411.893989][T17935] total_writeback 0 [ 411.932963][T17935] total_workingset_refault_anon 48 [ 411.942342][T17935] total_workingset_refault_file 0 [ 411.947589][T17935] total_swap 118013952 [ 411.951790][T17935] total_swapcached 667648 [ 411.956169][T17935] total_pgpgin 228719 [ 411.960277][T17935] total_pgpgout 163417 [ 411.964435][T17935] total_pgfault 64639 [ 411.974027][T17935] total_pgmajfault 11 [ 411.980776][T17935] total_inactive_anon 97955840 [ 411.985652][T17935] total_active_anon 169521152 [ 411.990464][T17935] total_inactive_file 0 [ 411.995220][T17935] total_active_file 0 [ 411.999476][T17935] total_unevictable 0 [ 412.003503][T17935] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.5843,pid=17935,uid=0 [ 412.018784][T17935] Memory cgroup out of memory: Killed process 17935 (syz.9.5843) total-vm:89900kB, anon-rss:1052kB, file-rss:58624kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 412.127671][ T1359] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 412.257936][ T31] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.0/0003:0458:5010.0022/input/input54 [ 412.309590][ T1359] usb 10-1: Using ep0 maxpacket: 32 [ 412.318596][ T31] kye 0003:0458:5010.0022: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 412.352415][ T1359] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 412.399462][ T31] usb 6-1: USB disconnect, device number 12 [ 412.417650][ T1359] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 412.470330][ T1359] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 412.525413][ T1359] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 412.552026][ T1359] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.590576][ T1359] usb 10-1: Product: ꊩ魶陵驦꒚읒೾ꀲ㸟鲑쑁盖稫ᴆ煝ᯊ暓巣ﱛ跞쌾␧ൣ秒㓔啁팕ꍁ࠳備㟸쏒国鈶듯퉨ꛌ䅓攩幝爬璓￨嘼뼵搇윝㾿흗祯蔙栋紣엊褁❹柝激㘙繴洞槗ᚐ戝ᰊ灍⎉훞锬鏩셲´᨜ᑀ༔螧⻺䵪傺읋毤싴㴸쭋Ѧ꺎핿≼녯夞勾뾛 [ 412.699646][ T1359] usb 10-1: Manufacturer: ࡠ [ 412.714611][ T1359] usb 10-1: SerialNumber: 喫珽卑렡괬鋷凗Ҟ፯쮲鸳翣㷢잏䞦ᦸ浝樽줁쀏᥄炃륜鴩墱쟕ᜇӷ巫갱ꕊ뿰뚆苵ꯖ⼓捴㫆⌤ퟝ렞汆죜뚯瓣枅ꥥ鉀塰짌毩㕏科馪㠵ꡁ⧦瀻皓࣎ꌝ萙粀菃㳰㱻눓꘨넓㚥﹕﵌叨ퟛꙑ鍍䧋礘쉘ૠꦒ一뚂ൻꗏ흲 [ 412.991769][ T1359] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 412.998784][ T1359] cdc_ncm 10-1:1.0: bind() failure [ 413.005219][ T1359] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 413.012177][ T1359] cdc_ncm 10-1:1.1: bind() failure [ 413.018899][ T1359] usb 10-1: USB disconnect, device number 28 [ 413.440436][ T36] audit: type=1326 audit(2000000119.476:73379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18173 comm="syz.5.5918" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f280c18ebe9 code=0x0 [ 413.518696][T18182] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.747668][ T31] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 413.897663][ T31] usb 10-1: Using ep0 maxpacket: 8 [ 413.904382][ T31] usb 10-1: unable to get BOS descriptor or descriptor too short [ 413.912913][ T31] usb 10-1: config 0 has an invalid interface number: 88 but max is 0 [ 413.921313][ T31] usb 10-1: config 0 has no interface number 0 [ 413.927508][ T31] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 413.938782][ T31] usb 10-1: config 0 interface 88 has no altsetting 0 [ 413.947727][ T31] usb 10-1: string descriptor 0 read error: -22 [ 413.954164][ T31] usb 10-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 413.963353][ T31] usb 10-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 413.972467][ T31] usb 10-1: config 0 descriptor?? [ 413.979442][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.88/input/input55 [ 414.115565][T18176] incfs_lookup_dentry err:-107 [ 414.120547][T18176] incfs: Can't find or create .index dir in ./file0 [ 414.127421][T18176] incfs: mount failed -107 [ 414.346027][T18241] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1017 sclass=netlink_tcpdiag_socket pid=18241 comm=syz.8.5941 [ 414.544198][ T36] audit: type=1326 audit(2000000120.576:73380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.5.5945" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f280c18ebe9 code=0x0 [ 414.770438][T18272] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 415.155052][T18276] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=95 sclass=netlink_tcpdiag_socket pid=18276 comm=syz.8.5953 [ 415.368633][ T37] INFO: task syz.1.4393:13630 blocked for more than 122 seconds. [ 415.376989][ T37] Not tainted syzkaller #0 [ 415.382289][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.391481][ T37] task:syz.1.4393 state:D stack:0 pid:13630 tgid:13629 ppid:13107 flags:0x00004004 [ 415.401997][ T37] Call Trace: [ 415.405431][ T37] [ 415.408728][ T37] __schedule+0x1322/0x1df0 [ 415.413413][ T37] ? __sched_text_start+0x10/0x10 [ 415.418871][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 415.424469][ T37] ? mutex_unlock+0xdc/0x240 [ 415.429482][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 415.435515][ T37] schedule+0xc6/0x240 [ 415.439818][ T37] super_lock+0x150/0x300 [ 415.444248][ T37] ? user_get_super+0x350/0x350 [ 415.449291][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 415.455089][ T37] ? __kasan_check_write+0x18/0x20 [ 415.460354][ T37] iterate_supers+0x8a/0x560 [ 415.465029][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 415.470686][ T37] ksys_sync+0x95/0x160 [ 415.475180][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 415.480076][ T37] ? switch_fpu_return+0x12/0x20 [ 415.485176][ T37] __ia32_sys_sync+0x12/0x20 [ 415.489856][ T37] x64_sys_call+0x2a58/0x2ee0 [ 415.494605][ T37] do_syscall_64+0x58/0xf0 [ 415.499123][ T37] ? clear_bhb_loop+0x50/0xa0 [ 415.503871][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 415.509870][ T37] RIP: 0033:0x7fa03f38ebe9 [ 415.514366][ T37] RSP: 002b:00007fa040217038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 415.522951][ T37] RAX: ffffffffffffffda RBX: 00007fa03f5b5fa0 RCX: 00007fa03f38ebe9 [ 415.531116][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 415.539313][ T37] RBP: 00007fa03f5b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 415.547414][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.555609][ T37] R13: 00007fa03f5b6038 R14: 00007fa03f5b5fa0 R15: 00007ffe5d40e948 [ 415.563712][ T37] [ 415.566893][ T37] INFO: task syz.1.4393:13631 blocked for more than 123 seconds. [ 415.574751][ T37] Not tainted syzkaller #0 [ 415.579792][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.588531][ T37] task:syz.1.4393 state:D stack:0 pid:13631 tgid:13629 ppid:13107 flags:0x00004004 [ 415.598784][ T37] Call Trace: [ 415.602099][ T37] [ 415.605066][ T37] __schedule+0x1322/0x1df0 [ 415.609643][ T37] ? __sched_text_start+0x10/0x10 [ 415.614717][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 415.620231][ T37] ? mutex_unlock+0x8b/0x240 [ 415.624874][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 415.630726][ T37] schedule+0xc6/0x240 [ 415.634841][ T37] super_lock+0x150/0x300 [ 415.639217][ T37] ? user_get_super+0x350/0x350 [ 415.644115][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 415.649619][ T37] ? __kasan_check_write+0x18/0x20 [ 415.654777][ T37] iterate_supers+0x8a/0x560 [ 415.659413][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 415.664999][ T37] ksys_sync+0x95/0x160 [ 415.669243][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 415.674221][ T37] ? __kasan_check_read+0x15/0x20 [ 415.679291][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 415.685396][ T37] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 415.691524][ T37] __ia32_sys_sync+0x12/0x20 [ 415.696155][ T37] x64_sys_call+0x2a58/0x2ee0 [ 415.700882][ T37] do_syscall_64+0x58/0xf0 [ 415.705358][ T37] ? clear_bhb_loop+0x50/0xa0 [ 415.710092][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 415.716018][ T37] RIP: 0033:0x7fa03f38ebe9 [ 415.720479][ T37] RSP: 002b:00007fa0401f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 415.728939][ T37] RAX: ffffffffffffffda RBX: 00007fa03f5b6090 RCX: 00007fa03f38ebe9 [ 415.736948][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 415.744959][ T37] RBP: 00007fa03f5b6090 R08: 0000000000000000 R09: 0000000000000000 [ 415.752996][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.761008][ T37] R13: 00007fa03f5b6128 R14: 00007fa03f5b6090 R15: 00007ffe5d40e948 [ 415.769093][ T37] [ 415.776258][ T37] NMI backtrace for cpu 0 [ 415.776274][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 415.776300][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.776314][ T37] Call Trace: [ 415.776321][ T37] [ 415.776329][ T37] __dump_stack+0x21/0x30 [ 415.776365][ T37] dump_stack_lvl+0x10c/0x190 [ 415.776390][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 415.776417][ T37] dump_stack+0x19/0x20 [ 415.776442][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 415.776469][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 415.776492][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 415.776518][ T37] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 415.776542][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 415.776568][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 415.776593][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 415.776619][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 415.776643][ T37] watchdog+0xd8f/0xed0 [ 415.776671][ T37] ? __cfi_watchdog+0x10/0x10 [ 415.776696][ T37] ? __kasan_check_read+0x15/0x20 [ 415.776724][ T37] ? __kthread_parkme+0x138/0x180 [ 415.776743][ T37] ? schedule+0xc6/0x240 [ 415.776781][ T37] kthread+0x2c7/0x370 [ 415.776802][ T37] ? __cfi_watchdog+0x10/0x10 [ 415.776827][ T37] ? __cfi_kthread+0x10/0x10 [ 415.776846][ T37] ret_from_fork+0x67/0xa0 [ 415.776873][ T37] ? __cfi_kthread+0x10/0x10 [ 415.776894][ T37] ret_from_fork_asm+0x1a/0x30 [ 415.776925][ T37] [ 415.776969][ T37] Sending NMI from CPU 0 to CPUs 1: [ 415.933366][ C1] NMI backtrace for cpu 1 [ 415.933381][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 415.933402][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.933414][ C1] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 415.933440][ C1] Code: cc cc cc b8 f1 d1 8a 16 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 51 3b 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 415.933461][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c6 [ 415.933480][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366cc00 RCX: ffffffff858c009e [ 415.933494][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000541124 [ 415.933505][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f39733 R09: 1ffff1103ede72e6 [ 415.933517][ C1] R10: dffffc0000000000 R11: ffffed103ede72e7 R12: 1ffff110206cd980 [ 415.933530][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87cae8e8 [ 415.933541][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 415.933555][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.933568][ C1] CR2: 00007f5fa6584198 CR3: 000000010aab4000 CR4: 00000000003526b0 [ 415.933583][ C1] DR0: 0000000000008009 DR1: 0000000000000000 DR2: 0000000000000000 [ 415.933595][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 415.933611][ C1] Call Trace: [ 415.933618][ C1] [ 415.933626][ C1] default_idle+0x17/0x30 [ 415.933647][ C1] arch_cpu_idle+0xd/0x20 [ 415.933665][ C1] default_idle_call+0x3f/0x80 [ 415.933684][ C1] do_idle+0x1a0/0x470 [ 415.933702][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 415.933720][ C1] cpu_startup_entry+0x48/0x70 [ 415.933747][ C1] start_secondary+0x12e/0x140 [ 415.933773][ C1] common_startup_64+0x13b/0x157 [ 415.933796][ C1]