last executing test programs: 10m42.39232899s ago: executing program 32 (id=1254): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6c, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10m39.158858202s ago: executing program 33 (id=1099): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c3691"], 0x0, 0x0, 0x0, 0x0}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0x501c4814, &(0x7f00000000c0)={0x6}) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="150e000065ffff0010000008003950323030302e75"], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x400c800) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@md0, 0xee01, &(0x7f0000000140)='./file0\x00') read$FUSE(r7, &(0x7f00000029c0)={0x2020}, 0x2020) 6m19.345452655s ago: executing program 34 (id=5430): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd2c, 0x25dfdbfe, 0x52, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x7e, 0x0, &(0x7f0000001d40)="1d488055d3f1688c4e797b10f650c33bb295362f0d05fd380896aba267b2b8cad21dae8af42636cd1ca4f92ffd194cd6519e07c189705bbc9b9fc2fd1ac553684decb13566191e525ee138cbdd4dc3add35eb1f113f54244188e560e4faaecb1240498f80255f807faf24afb597d624a3299132e9c5818a54f4764f89a0b"}) 5m0.071503715s ago: executing program 35 (id=6774): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r4 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat(0xffffffffffffffff, 0x0, 0x3481, 0x289707045d425f9e) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x20000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000380)="c744240017510000c74424020a000000c7442406000000000f0114243e64f30fc774fecab9b8030000b8f7ff0000ba000000000f30f4c4e1795adecfc4e1b558d0b9800000c00f3235002000000f30f26467670f005a060f01c2", 0x5a}], 0x1, 0x0, 0x0, 0x0) socket(0x1, 0x2, 0x0) r9 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$printer(r9, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r10, &(0x7f0000000300)=[{&(0x7f0000000180)="ff", 0x1}], 0xde90a759104f908, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3m49.607483161s ago: executing program 36 (id=7384): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setfsuid(0xee00) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) syz_open_dev$usbmon(&(0x7f0000000180), 0x400000000e9, 0x200100) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) 3m34.14470308s ago: executing program 4 (id=7575): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x9, 0x10, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0]}) (async) splice(r0, &(0x7f0000000100), r0, &(0x7f0000000140)=0x7, 0x1, 0xb) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x789642, 0x0) getdents(r1, &(0x7f00000002c0)=""/19, 0x13) (async) write(r0, &(0x7f0000000300)="cd56b03a4852021a198f860e854405dc1238f0f755e1e15273bb058a6826f3993cf31ebf22ff4edada967d0385f51a99ee8195ed67d3e58b6f50f9fa167d11b9626f5cd07e3f8d8956f867563677d7ef1ce78c6f9cefbfeaf37c4f02b2", 0x5d) (async) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f00000003c0)={0x40000000}) write$cgroup_int(r3, &(0x7f0000000400)=0x9, 0x12) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r3) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x10) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000580)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x64}}, 0x24000044) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) (async) getresuid(&(0x7f0000000800)=0x0, &(0x7f0000000840), &(0x7f0000000880)) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0}, &(0x7f0000000900)=0xc) mount$overlay(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x2000, &(0x7f0000000940)={[{@xino_on}], [{@fowner_lt={'fowner<', r5}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@uid_lt={'uid<', r7}}, {@obj_user}]}) (async) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) getsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000000a00)={@multicast2, @broadcast}, &(0x7f0000000a40)=0xc) (async) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000000ac0)=@req={0x28, &(0x7f0000000a80)={'dvmrp0\x00', @ifru_names='veth0_to_hsr\x00'}}) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r10, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x3c, r11, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4840) (async) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), r9) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xe8, r12, 0x2, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040804) (async) r13 = openat$cgroup_pressure(r0, &(0x7f0000000e40)='memory.pressure\x00', 0x2, 0x0) tee(r13, r9, 0x95, 0x8) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x33) 3m34.14083446s ago: executing program 4 (id=7576): r0 = getpid() ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000100), 0x4001) r1 = syz_pidfd_open(r0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x80) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@loopback, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x4c, 0x12, {{'aegis128-aesni\x00'}, 0x11, 0x40}}]}, 0x13c}}, 0x804) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0xffffffffffffffda, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aeda625e00000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000973500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b29fa7ee333dcc200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c5672300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053741e983e1e0a1e0000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050b50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f20000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x90, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff01000000000000000200000000000000030000000000000002000000000000000500000008000000060000000000000009000000000000000000000000000000ff0000000000000003000000000000000080000000000000ffffff7f57000000030000898ef9800620ed1896", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="040000000400000000000000050000000000000037050000000000002b"], 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f0000000000)='./file1\x00', 0xee01, r6, 0x1000) 3m33.181774979s ago: executing program 4 (id=7586): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000005c0)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x8, 0x7, 0xb, 0x0, 0xeb, 0x9, 0x81, 0x9, 0x4, [0x48e7, 0x283, 0x7ffdffff, 0x8, 0x529, 0x7, 0x4d, 0xb9ac]}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, &(0x7f0000000480)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=[@dead_binder_done, @decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) 3m33.181311639s ago: executing program 4 (id=7587): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000785700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x0, 0x3, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x300000b, 0x13, r3, 0xeb3f3000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000100)=0x7) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x7, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m33.181120239s ago: executing program 4 (id=7588): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x7aa7000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000002140)="4627563e95d073e9c44031e486c6c3c887234dab29bb5d4444d206b6ed7b2b3001b6ed59a692ab0f0251ebf104d3747ab90777b96df4449e5275f86a62902df16f5fba75e202cbdf6fe7cc018a76b412f6485398037d6cb464f1dcf7fda3c76e43cdf64a53f6182a0b7e6476035e8bce74d0582b1ccf32dc8b0cc3b610b143afb4d3c163308a66f2dedd0d45f392d7899f5c4d2ded35c1602f7338dea29e0dff356a32c9e921eeebf8b9845ec2a40b68a8bdcb88009c910e110de23a02648667d740186ee2a3f4a59672477230c4a3a62a1417659b1978cf2b671f836d49fd361ad0af9157916d29cb4fcc1e873a336660b639383485a5322faca6694c74f58fa428582950bd136778dff61da52778dade8b2c3331b31a89259469b0900ab4173202f6256b2d23d3feb8517556292de52662192eca03da5744515c4a92cd3f0f296209bacb28a0267776c9797a784cfd95a52f9de496a5ed70459d55041b663a70d7d471da4f86cd187fd53e667422a0fdfe5eb34e2f2b8c133f2271fe5b1e71533b698169ac8107187533e37765fbd69c327ec608249c44018e3496b2f66fb8bb942f4bd26ed687ee1f7d2a53d7233fbde91cd03f4b4db0c23ed56ff9a61e0d5a1bf6ed50c308e8af0c32b2e0b15df009046ed88d60b772e0cdbfb3d765251aae01b01660df364dce51971ea2034b316a0b0071cb1d28bb86279de377ccb5a18ce981241b5d566e248866f280d71c6775e14fad44342945663bd56ad056f79e49f8071153391f8de78b05496a5f174e812ee0b102e0421c632e4a9f8ffd87ea68df1d7e85af4b30024b2a3cf0e1106871b3427eedfe857f3bc2a021d42fc09224ece3c56e57806a2da229231cc8e3ed5dbd82fd2d3894cba01e36c2ba91a42456eb570446fa3e2eddfe30264572d5d778cbf5d676ad4bd37d11e09573a5566b3656a760c9d3030b2bcd90be0d670866010e2d33c93f223a79ca167bce1a46670db33470c75776582f26b5d9ce847493ddb34612bc829f93f473c24263246011c4ca689f62f4539550ee13b246aeeec477fb2e9e4b223f66c006303abdb003809b9cd4e993b90821750b86608882355e5f587182c1ac6c677b07c26956073ff3a78d4f325139d9c0b8aead052e73fd21b3615ea22acc084bf5060f72936796311e31c038426f0a0e6c304cd2d9c363e7a1a21752032be17adca8b476b0e571b591c9dd923b0066fd5e32e045494c0a9e1e511f147988e0a5fe9652b92ed0e015ef54e3ed2a510b9383f1938dece777ca866f1a21082052827f3a48c2f38482fe3a8286c0ff17d4c24a468a5a0ec0a2eb1165f48cf76fc07450c82294d973a1793dd58008834f0d3aba4e097ceff0ba44656c67839ff3e489975297b334ecf6c7ce4634afbe3d8ab70827563aa75ffafc43429170c3fe3854238485c5a9b567a959a746010c22a92e863e318312e0efc06ab86d1435e06aca5f4b7b7f06a78f90795545c145c9941b74adb9a31ab4f749f81665dd9308acba8d7861856b548eab226377be82611ad79c8d25b176de98003c1ea28b556a2b90360913c39f8f64f0d122c732af5a990603429b354ecd4de797e17722c66546cc38349cb09c40ea54972562734e9816c83103e0bd19451e6144d005e6ce6d6d6fc1ce90238b73d1e0aaa4ee9fd0545054cea97639a404edf3b27c0073be84961084ea685e8ace53c7d7f52b62e378d9ee167aec3e5cbd60ff36c0d3ad40181bad59f111c30e9414112fbc71ad7ede21c288c878dd2509c36f93c31dab5d091107c8e8bdcadffdcb3053eba35b44c70a6421b343922cb11c69b886db0f412e5c23f89dbaff9e5847fd749e28356cab3999f1142449047a3a6c43bf670244e55d888f36ef1dc87bc5bb1460b6c8d1e69efca9a02ba834591906a65102c3e1c1c7dbdeccc7e261795f349d110836445d8ba19cbc699c46d4edc34942a488de1cc1140dc6acf23c8ec1f475e613c85ba025ff7ae639cb2499629eb5f5c88c4057e30bcf41767424af763c9204084856d87cd99f0da06ae6ee5b7382c1f6f2cbb2cf2dfd8320271f16ba7ebd8f0e3c742482f5426530b1ab946c7118f70aa4eac41dd78569341a0f3dd250531aaefdff4cab9e9eed7efdaa865f9b804ade79ced061a1fcd18a6c61a708fdf119841dc232cc5c4e5343cb8a82e9dd9647779bca053b5a2c43481c06ce2a593e388f5f5f4e681771021aaaf0589dac69db22c7285035d1eb89c75935fa4208b3786f2640ce9d65b0e671967dc27808fea5d17ac70a3ac2802f65d45d9c0372aeed530ee58bf04e190f50dac25139caec0b253d17af28eaed173c7043d66567188f04ea51733835c1c66ac7a634d7b90bdac4a6d1075bb277dc6ca420b24485012db44aed5a2e8099f4f3ed53bdb0b35b35905db28169b3e3b3d13ff94bdf2c9549f4a54c64b8d27098b86ff46cfd515f35b1d5a1bbf1bb29df16cdf296e804977a6b583d018c4fdb66264d5f2d9e162059017d6b6cbc6d6c2f1009717c67093f6feaafce1f242f4b730a2e714e9bba79f18c42a158425147b7b2cd9add4ac1d2c1a95b13a4f352d51982a5d967cd611911e6d0777afbc10883c6293f056acc69da89a0a64913be996466ed63f969d5ccd124cd3052d6654e6db0519449f3cbf3a2011541d26e5b76c3c192857905bcf989fd943d42aee9ebd40fee33094eae69154092e9514819ff126040ea7d43a927809149cfaffcc76cb1e332426bf0eb1ac1a3968c70030453a284a0fe39b9ebd704f0950cb5350d4c60d65566b3f24ec4636cd5bb3e23066f4d4f1814e60f286f3ad2d3c10e79c5991c8bf5fdb561723873fe0c75c7bb6ba262aa3a6655349df95f07abb0200d5b9152da4bfdd66a311b29a15755e8465b7b0d99f7f8ccefe9cb3561b5619d4c21b36c9b29442ccd5949882d0167244d84b677685d62074f63b8dc66941f317c78bb093491e2acb7207cc80fe51c22199aae878170af9fa1eb164854587007eb108f23d1c7946bf75aee50eee6fffdae24b992393bd37d268a136b3dcb1b7d2c9b9fbfe0c860b0d344f488e85de2a65a20eb057f0047d0b6b8898bdd68e21f2234a2c66b963a2d86f62297a7d1176c14acaddd4861f5bb74ee91eb3b6ba0c7328433b977e23c02ab67d82a12d620fc034f1c9c3a99a6a07ddf59eaa18384e429101dacbd93ee794e27b774242446fa433a8c03e4312ad56f6c4dfd1ad014d07932480e07caedabda36caaeaaf405dfa1a650843f2e09ae89c666ab8754d9bf9b290f4c4c9242d8f98533bfdbae191a6fbcba6bdb9096427d2d8efb5dcfbd58df7763cc445bf44a0be6de2335a395ab8157dee25794be81c3d87a7d457b52d88f86cabf91f2ec16a8e05a00f72277943737839a5242163025704c7b938f3f424ef5db6b60d3181e3ef94cbdc6516f0ecf01b52164b92f2e12ed55db595fd8de6862a3b12ebe06b19d1f93132b83b2f5ddbc9808b3ce8fa40352c84664d824edd2631a5e2fddaae887689092007d3d0f22a948f54bfd5c42bea5f0d6bf5018cee5ef232c8b6ea3f54ee6f4997c8ad5ccfd28227eeca811312375a849bdf4d343c1b0ec7035279d1bc0892ef193a74018d5ccd5ccaf0503a697b23abb44b7aa3beced0626daa5e1fbfc4d29d2804292fcc60b775f656179510168bf05929dbc92e009d94561d946f7b4b5a18c08d29678c482d90e07abb029e80546e5cee6c4a30712a9b92d556a29b2de021bd49b6398340a9363b689bedc007416bcb659c0c4b6eaa31ec4976ee4896ff87a7dfab48dc7046d44c9c2db6881f7d6b252e582eb878b0be9b24666e74e8eb565c07582f17817ea2422de5da79cb367e76b9b8a9d056de06ad0483986fef2a3b62d64d5d2128cf55499025ad0739ad3ce5e1bfa6aaac16828bdacad2f86b32ed933a2f672efd1f4a32dd23e59aed872d1015eaaf701a0ef8e1427d59728450c4f1bd561e7ef6f8e34d12ae2120a51746a5c346e739c09854caeec07af0d70dd4d9164b3ae8a098a41c081465fdb5537cb560426bc0de4b735f253dbc779b9dce429d99700cd6c0cbd778caeb56401b2bb5c1ca310ab0c91e1d9f4578b5fb3b4f0dad4c565495797e8e83603f3ef188a896fad5bfec24457e0f6f962b8613434f16acf74308171567eae5ad9ec11186a56493a5394042bd1b29fbe0ce64e5f1b0b56e8910343666d627d71c729c0c90bfae0134e117842d67b160ff50688f7b45f0ae330c2d4890732ace7795ff74b6e36466da623c8eef75528b22199c9bf589a1fcd2aca6c5fe3cce2eddabf1ddc8e87380b815ed5928222613383db7941eb9d55b45487b399a9a35ca4cbd9eaf08c71273fc3334b0acdbd117b13697a9ae475e79a44911ce4fed1490a2ec654fe469c9ea933999dae3616b063769446cfefb4562bd124e42f62a3dd0385fe3d21029ad8fd1c58b0badd42e415a76e3e92f246629d3579dd80d940e6dd9bee3d9a6ef8a7840fb253507e718eca32ff4119eb0bcc02aa210939a3bc41704a63202139c68e276254395ab6b858f4528ea2b3a57328e0b31816de3ad85e50e7f4ec9445eaf21a8b9916ed209bb7e79a7a08c2e4e09644ab831c0ba68d05d5ebf57a9eb36bb9caa8e7ac78a8ccca1bcb03cef0c5eb31fafa6e283632c117031aa3919f72aa80a2b9b2557749951348d5294ed2414ffcbafdf976bfb7a401bedb208fe1285738df515af493047aec962bcacb8ea7bad5fc12d5bf415e66c06c4c87044e694291e104ef53850cbc7ef73ab57982d77a3f941c226a915163e8eebd256cb8a1f0130023d2c5d3be77cab39bae4449711d6f39e50cc83eefaf6cc727b1c0b3fc4f7bd110d18262cd872cee8ca95f1be8005d5b339abbde923ef2d4290d5579e4420ff2beb705c16e96101c38c31cfd05639f252730c145182e4406aab68f556e0290ccf05e25a7bf13cdb5db47a8a0841fbeb880d4f0add608d1badb8992924b548ef1426ec774ec9d86678d4c2aae8f1e3b2dfb295802f75727a308dd1b39460f26858eff99fae8d27f24ea6902adabc89311a5fd18c3d9c606db7295f25acd22624bcc753c4c3acdb3f6c563174441333b69a126e4fcc6b06165f6221539c5ed277c20dac4b7978619e10616475de88810bbac714f3651efaa59b75791080a1086c0f3f1b5edb4b3976cc936665855f6a56788d76c6e771b1c968c859fd1ba995d336d301695fc012b8031a14ca529e3e9bf622db6813417925bb4e1a7a5b786aa90f4d048f1f442a2696970dd442d3a6ee117a3e768644c99951b75e51e98de61bc7ed8eb9e87fd43ec75e948829bd19fc545cddefee7a6f068a419e216982ca4ce6ad3256f1e64d203ba1da27e9e175738124ca86a312d0dd0caae6d64751d459d8134830ebb4f4c7931aa90c1ad6fefd99ea4ded3d246236719d6fd48979ee31eaabbea385e91aea0557a58d73a63660ecee981e3da40a39fec3f01caaffafee3504e9f8dc990cc2d69c513db25f6e722ea4811f778af8a338498b6b908682aca6e02e898cb65377f820529d35707cb83ba69b16c92b571728c58188fb08ed6f6c27d6b70e963b147605714468b90966f082d7175fcbc6e770835efb6e7bac5eeaeb5b2c23eb30ecc102e647f1ff71bc6b35f629a55dd305f8ed5287e35403a91b4dc77a6df2fff354460bf563c071846c84617da4df4c46a9e359c45d217a2b096c830ac8614947d110334ca17f587d86825b2b7ae1039fc11109687c1ad0a16f0180d1700414a4694e7ab73c715436dce437a9b3dff55f62fc1ffffc33d3be037c34c9ee7a0fcfeaec1778268565663f39b69c141304c892ae80da42cc854a87c955e6d8060a731eb16ee91e8ea27f90da85196e4f034d40b85ff59eb4b7c76218342f9c9f8d3749c874562829b7ad0c786c5c25ed240aa14755ff7f5ba5298f9f6b6ec3a46ac36d6a39c59c2ecf7781da77931214ac9a8697691d933b20cb64acde409fc159d748e4f92d83ff7767260fdec04b2e80cc524a2366e8fa5b70eb8684d164dec49fa95f42e7e75daa8c268204beec1fbc58cbbe3317af0993a8676dfdb13db7875f50cebdbc629bcd605dd4c4a65c31870495fb9a9ec51c1867ca8b117a6f9507aa26cee54c4c12f8f22b9d88072639ad765bb7906435128d1c146b9e2029880eccbdf78449bd0630381ad16c13444d709a11890d80fae0d24c037180a8726143306a7cd67abbc830167f524008f9a8e3172df597a63af2e87a92e90b70ce53069657f9b46acc9da241a1b00571540ec5fed4a9acfdd0066ba248cb2bf24540d7296256d4c9a5a5bc821817ada912cdde59876d86d4c53c1d047c6bc3442c2ee78326d7c51b6d01bd4f7ff5bc45db88649220d44099b406ac2e4744996b869ea688ecb4e758e755b29717869d5dfccbf5fd553ad83de0c4cd16b3fd4913451734226e4cf29bc0a860943b3e854d8cf49f07d2bfba1c280efaa85bb8f0f8818d1e58178c338c9e46c873adc0a4b6c832aaf0878956d8a04fcc043ff307f60a263cf1bc57ad0434b6a6f99075d932ff75deb8b017cbd16b272139a4addc24749d9551ba44d5bef0536e58de5e9d0b8985f1044163d542859c699f27f033b01d1e5d4c5598bcc4279f29c56eca82cf40c3b2799277e9b0aea04ba5cdd679e3eb63ceb0eafc21c373356caadc0f5730054a0979d7e32117962af0444b7e0e75bf1d30fd1af656956367bbbddf018531833f6c383b76cd63d014c91f67b41548e558cfae6a953a78c36ba3a896b3a0bf48aaa947d042a456a48c8f323682f560f2679f53578f00746cb04c4ef12b905b37f1b1bac9c75a85d6f173d531198f150ee6dbe7fcdbed4e0baf7610b82a793c17124970924ae32c86f9b7b40a229219958cd2445fca613e264adbf29644b1f405c68ef8afff7f4c1dc86f0e578e3716fa86c53f776dc42e7d28978f1e694428560b923b5d44e3aacb18cb38d3efd90ca0812027d336b011557e9e953cbff769e9ba84b903f5fcf1e6b4ab3e210ceaac574f80607116b196b6ded8668729f9be216bfdd049e88d1cb45581701c6ca7c991488a73e6ae5decdfc6416fa69b76f82e92246ee2b29c91885be24e96ea72438499c5c421ffd199f172667adf7d257947bb47945817930a7f2f0dfc73c2a5f6002fd40b9ea51c4a0c610e9759d43c082ed0c126c0de63c5a079b4c8bac46fcc8a1f74d8929ee2b7878430e3caed5f5aad7378fcbc4d659144a7cdbd654185ffdabd9b36257993ca823990df4aa7809ee58b7a278f38085202f3618fefef67f71b39f8ed35a28b3ff47e6caa3cecdbb41b899ea7ef3179ec3d67d0e3380f61d5a57453b9b790d171e1838c68f988a6914f4b81a7a12a0f50612182de8844a5f18026bc4110a10a31a88dae4bb40a3fea22360830784cf82ccde8187d04635e7e5bc6cda8252fa77d7022ae5fdeb978315f925cdbe7cbe0e3894965795fda4b94068bee89f79f86c420b211411929b9b3074703583c0ba0703a4d282441495110dd167c228079db163febc9ea0bcb02ab400999abfecfbca274fca55a055859eb256fcddc1d1773d72d5c3793ca3ff5f2fbe647b04f5ff2b2dc50a3a897e03634a36d21e391e6b6290cf85064711600de9a74057b78d9c04857017bc762300872f674eed1b68fac65025f3252bb803a9ff8ccf4b2b49028622168439db3bc01ea9ae7618b73dc7f858ba388891da14b88f7fee4f5f49abd687ba947969b8b923c2e119fe172126835ab4d1429133a38bbb80f1f6c308ffd180a179c05d9fb112a70e7658f9e3c7b6545556726e6589ba479edf21afd08da62963b5b724fa7b618c27fba201297dd465217de92395734355e9b34e27ff4916d78dbe0424df3d6110297a7847efda2675f12a3bf5e4b07827cdae6c61b0d969f6bb15be656b394a3f3ca8d705a4cac9c78c66c4be58c40888d49ceb08eb9a90c230faace7e4c837a8cb1aa69b020f9f43532cb7315cd698dfffb0179fb24e135480af4c437170c010e6e8f94108523dca95598c59b9e483753b79bafb02a455ceec727fd271b4cb4af7d958751a747afe6625c1e8b0316af5e13e42dc8d97dc42d5960edcaa391164693250a6f98653fa20c78823e1c1a77b798491f197a647b291cdd04087b3143e5b0fc550ecbbff19666b1c8e2a5bf2cb40f9f54c11828a8dd16489f36583e3128cda7a9abde8abbf61294450af638f56444176b5a11f84e67e4e666d6df58c45c0adc45938a2639fb1717a44c8dedf8471ac82fc1771a704f778fb812acb953493a831be5b28b16b20a112aafcee4e44640a6653c4b3035d5de4fcc16312057046bc3c650057dd9be4450b3e837ff8ac19019e67550a124416d671ccc76de36946c2d91f3d63b212111f4f09f39c24c1a981a7e63dd37a8d94ebfae1df5796d971193a8c723f172a9266af23d1d0e48aae73de4e7545a13f09a1ae3feb147ba1c700776148f027abc7dbdd1f3cb823b9a4c0e9dd43fd0bc411dc3eac2369f10fc9669ffaec5ef76da6b7f8884430b3a00da63a0e5272de159ea047584f4804a14159b1321309db45c55af563081d126300dc3ac446936f6653db92fc09d225716f425997dc247939b8c1e09a11f8b10c36b671cc590922051871ce19f6db85eefac9a666c3cec6fd5a69e7610ae5123413b458024b02521420d8c50c265d7b763f070b8fd1981824da47079135a667ee2395e43cae172e6a5ae96aeb7ce490212792498e427b80036f52cc557d3f94b118b2248af9a75a6d27d084ba423edc616981864cb0069a06f359a953a6e7df6b765d222626030248253e4e93eb0979b0a5550ee15d1489f56cc1d30b1584f37b51dfa029af5b45a85b141f4f8ffdc809a19e01f22f80c8a11e9d35f790a6de2d898462a19f412de4df26896a3d107baa7a661b5482cd71453b5f88f889b93ee6df84363ecaf04cb0dcd4369f9d1a827b955182334a998e8f2edbfe74beb14e9ff50134f03d24d70b068801684e25370c1cfc065d88582389713500f974e8a6c6e7f015b8e84e5b9861e45d4ce4eef79f0e8d4f15eaf7c1b33e64287470b5b3c0b8b6bdadae567f977341b57486c1eb279be8ee1cdf11b6e0dbd42d32c95b6801cea98e6000ea80777c6ad3f62012732859497080b3aa127a0f3a7b80a99182406ccfd54affb463f8eaf01b0c65ab582628b3c2237d039ee68d307dd113e4b593b243bd64eb6f58a0ccdd8e9a78f9ed393e2affde8d616d57c7aa1d12ebb4be718b49843ec6a90d5d8c197f154f27805046c410d4e1b66cbf4a8e495a3a229a2a1d58b4909a240d7ae6ea9e740c055b06e756e57e2ff19c148cbaf37357c0d3273b7f2ec631565e9f6c6c8722ddb0c1180695fb204f35917dc2fe11469801c545b2560a59d0666ec129b88e4f427989e820982329c2c39321f25648666af651f87b495195a95a5d158fd161324796272303114d99d22890385853dbc66d37ce22de0db447260217cf51aaed240e4f4963ca7510522fc6e7dbe164ccdedc334787ddb24bbc8205bf3353d447a1de2407c248775fa7e318d83e3ff18150b3cd9a7cbb0df0703aab6ef8d0f71bf9b5a305dc25fbd200e06b73c7f298320bd90dab05ec62b5f885e7cf95274c656051c71628f31196354460b001b6366c26fd2e92f6ad68ea37d7e3fe91fe98223563b4d23f802b3911a5241a793cb9f5b4f80081ace5877f95da7499f728ab09837120ca75c63d725e46f9f77c3da16318c9bcdd4a9d68379b627c1a71a34b684e5614ab3fabceab8d2741aca921b1b018098060686c56d7ed190e7470f529f6e680ed72e749fe7c9c2f37ea8cf08d4520e496361d2437018bbda93396c05abb2aeba443ea1ee56a3da04a8b880452a3610cb4163154e02df8a08a5e48c03fb0b0cdd4d355142cc736b344b9fd987b49b85791e5bf7805250dfe63b04c7ff56608129ef43664aa2acf82f18b49cdfd2ae5551ea4d486b35cd2ea60e3f032c58f531d4d36054f5ce268a29862ded0a3cc0ff1d30882f7c85b95e9a8599bf1d143d2d25555bbaa6f8b673b76ca8cc17b693519194784833d902581fec4e656ca546eade53abfd7e4650df648cb61a146bef5382f9255bf4a7c380854568495bdb7b33f490d240ead3d1851ce3b6400eda5a370f13ec998605f46b234bc9293c026bd1d648647bf52d506deb522012ae89c4ea75414ae6677c4aef28dd756f877af23d1a5ae3cb2205850c14f27f595d1a1542bb1eaf641293e3ba40e0bb54193a1e5db969d37c97709efbc34ab509f08a51ba71ecc4f9f66c27190115948cffaae914e7eb4e8d0c59ef7368e9b08a05bbbd340e1c1d34319f150d299c0ddf3bb2138359e826f4997068b99d13cc454fea46b8664d413b79b19656d62cbb5b31744aa33f99651fa56703eaec2e6998c7321f69f6cd110c89ae0c612a96f9a84dd751fd81ff66c80563e7091f5c5b67f89d52e7c58eb26218cddeaf5c6def3ad07a610bd4e5785675580c199b8550cbb02e3b4e1d240bb8df8e514fb505f39fd222209584331bef5d271056accaef84c88741ebd9f116cce3fe7b07b78ac4bad346c0d6e71c9daecd8d60aa8ea0914f85c9078dfaff04ba5e9bbbacddbc0cb40fe20f869d7f196c5edb6657c50b82c67f1abab663bff0a8da16422fe31a4a17995ee25081a06154d1c03f1a87a9d4ad5141a9227849bd920d2515ca16a245b635c85a77884cce0b8ae56929b5e22c52f971c2eed4ccfd64f7790a616f719fc0305af71405abae9407ed1cdaa26606331fdcf9b3c19b90e561f646ea15e0e668ef37b349594a335baf26962b89ef33c98aec3ca3e7df47c20dc2928d074e5f87c0edcf37cb25d3b8304f57f8257a5ae96791697e3c6d04f4ec2eb6a69f25346defed5b509368dea2b1960218bc6dd21b567583c229fc7b5fc85f7f2032eb304c3a1f72204f75ee950344cdef846d94e916b29a43d00c789256810de5fff6f9fd1af0fcfc2edd3fff9e2010d88083fc0b9e6a291e9a7a08af62433689a39e34bed8dafc90fec82be5c63a843d82132ce8916e395791dc86c8d11caf57f7fd096c28537ec38d6c14df9782312abc85fba2d04b0b159637b0e09f7e9faa1a6136359d17cf7c58b83994d58674ddbc248b804a82156900ca95a5002ef62de046e2f5ddf8e1e19f00189d4f5169bfc3c67afc149c6bc155767e64eac433cfb787be7f7bae7f869c0ec3d142668c2f90d383af7207a635850c515d69c6a62e24e0d58c5da244a917a17caa6be01992c4f8be0b9fff57522db4756840bdf72cafa6061ff2b86305c180c470b3af589e7c9e5328d98cf737bf01d80762e1e41a4d63a8655387be7f295862fdea629aa97b40c2ba1b563f1a103a860f7dff7fd5ee8423ce3dbf0fad41b66965c67299e35483130d461ac6c68215850fd441323bb856cdf03f624520743f7b445641c72e08994c8f252fe179b29226637b533f0ed6c94a0b84efc1a884af940fbc05c654b59d37a54047de233c496103bb27b657e7f63c24ef3ce29709622f67653f398dc7c4e44", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="10"], 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) (async) timer_settime(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0xb6, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)) 3m33.11321731s ago: executing program 4 (id=7592): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) (async) unshare(0x62040200) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000000c0)='net/arp\x00') (async) syz_open_procfs(r1, &(0x7f00000000c0)='net/arp\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m33.085834501s ago: executing program 37 (id=7592): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) (async) unshare(0x62040200) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000000c0)='net/arp\x00') (async) syz_open_procfs(r1, &(0x7f00000000c0)='net/arp\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m18.164675298s ago: executing program 8 (id=7742): unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0xf0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x224bc0, 0x0) r3 = dup(r2) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000740), 0x4900, 0x0) accept(r1, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x80) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40603d10, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) 3m18.106002519s ago: executing program 8 (id=7743): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0), 0x7fffffff, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r5, 0x0, 0x0) write(r3, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14a41fc60000b4", @ANYRES16=r7, @ANYBLOB="010000000000fddbdf2523000000"], 0x14}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r8 = socket$can_raw(0x1d, 0x3, 0x1) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x9c, r9, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) getpid() getsockname(r8, 0x0, &(0x7f0000000180)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xfff9, &(0x7f0000000780)={&(0x7f00000007c0)={0x5c, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x0, 0x99, {0xd42, 0x11}}}}, [@NL80211_ATTR_COOKIE={0x0, 0x58, 0x70}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040840}, 0x0) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x18080, 0x0) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_SNDMTU(r11, 0x112, 0xc, 0x0, &(0x7f0000000040)) ioctl$PIO_SCRNMAP(r10, 0x4b41, &(0x7f0000000540)="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") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0x75, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @flat=@binder={0x73622a85, 0x15, 0x3}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)={0x2c, 0x18, 0x15, 0x70bd28, 0xfefffbff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x10, 0x6, 0x0, 0x1, [@typed={0xb, 0x0, 0x0, 0x0, @str='FROZEN\x00'}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000b40)={0x13c, r2, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x104, 0x3, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xf9, 0x2, "8bb2a03d084ca42e177e6d33f6107480c3f78a073c3923c25f148daa6d4b2ca7b45cacb753c8b6765eddd7160c69f7d7c2a625a027b210615ae98fd55df45f4732854704939ac7f6d10872cb4cce0d110aebc686d9b5e2d9c5401d20ce1a09f925ea22abedcb6401d2ecd0a2ee6079608f2934b64a5f5567dc8ecbd44ccd74ac87965618fc436ad6a03690721405f6f6b2f88e7e4f80f08585e964b2a5559531c0a19bce0966c980c9a131c848e3d8b61ab0d537983b7ae034dbaa9eb113fe95b70fc8846ae6946677dc2830e921e590ea7dac6d6b8c691f2b3dc51fb150eee33d4b6d01381ca85c4472946ff01c45994dbd114409"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xac17}]}, 0x13c}, 0x1, 0x0, 0x0, 0x44005}, 0x44840) 3m18.1055021s ago: executing program 8 (id=7744): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000040)) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/204, 0xcc}, {&(0x7f0000000180)=""/157, 0x9d}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/227, 0xe3}, {&(0x7f0000000500)=""/159, 0x9f}, {&(0x7f00000005c0)=""/215, 0xd7}], 0x9, 0x5ddd7bc0, 0x7) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000780), &(0x7f00000007c0)=0x4) r2 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002b00)={0x0, 0x0}, &(0x7f0000002b40)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002b80)={0x0, 0x0, 0x0}, &(0x7f0000002bc0)=0xc) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000002c80)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002cc0)='./file0\x00', &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lstat(&(0x7f0000002f40)='./file0\x00', &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000003000)=0x0, &(0x7f0000003040), &(0x7f0000003080)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000030c0)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f00000031c0)=0xe8) r10 = getgid() ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000003200)=0x0) stat(&(0x7f0000003240)='./file0\x00', &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003300)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000003400)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003440)={0x0, 0x0, 0x0}, &(0x7f0000003480)=0xc) statx(r0, &(0x7f0000003780)='./file0\x00', 0x6000, 0x200, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getegid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000039c0)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast1}}, &(0x7f0000003ac0)=0xe8) stat(&(0x7f0000003b00)='./file0\x00', &(0x7f0000003b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000800)="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", 0x2000, &(0x7f0000003d00)={&(0x7f0000002800)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x2, 0x140, 0x5, 0x5, 0x9, 0x6, 0x0, 0x0, 0x10, 0x8}}, &(0x7f0000002880)={0x18, 0x0, 0x4, {0x3ff}}, &(0x7f00000028c0)={0x18, 0xfffffffffffffffe, 0x100000000, {0x8}}, &(0x7f0000002900)={0x18, 0x0, 0x9, {0x8000}}, &(0x7f0000002940)={0x18, 0x0, 0x636, {0x3}}, &(0x7f0000002980)={0x28, 0x0, 0x9, {{0x9, 0x8, 0x1, r2}}}, &(0x7f00000029c0)={0x60, 0x0, 0x5, {{0xc8, 0x1, 0x9, 0x3ec, 0x8, 0x94, 0x4, 0xfffffffa}}}, &(0x7f0000002a40)={0x18, 0xfffffffffffffff5, 0x4, {0xf43}}, &(0x7f0000002a80)={0x2d, 0x0, 0x7fff, {'/selinux/avc/cache_threshold\x00'}}, &(0x7f0000002ac0)={0x20, 0x0, 0x400, {0x0, 0x17}}, &(0x7f0000002c00)={0x78, 0x0, 0x7, {0x742, 0xe, 0x0, {0x0, 0x1, 0x9, 0x101, 0x1, 0x0, 0x1000, 0x8, 0x80, 0x6000, 0x6, r3, r4, 0x4, 0x6}}}, &(0x7f0000002d80)={0x90, 0x0, 0x9, {0x2, 0x1, 0x4, 0x401, 0x5, 0x4, {0x1, 0x9, 0x10, 0x8, 0x9, 0x3, 0x8, 0x7, 0xffffffff, 0xc000, 0x5ff, r5, r6, 0x6, 0x2}}}, &(0x7f0000002e40)={0xf0, 0x0, 0x2, [{0x3, 0x3, 0x1d, 0x8, '/selinux/avc/cache_threshold\x00'}, {0x5, 0x800, 0x1d, 0x6, '/selinux/avc/cache_threshold\x00'}, {0x2, 0xa7b, 0x1d, 0x9, '/selinux/avc/cache_threshold\x00'}, {0x5, 0x5, 0x1d, 0xa, '/selinux/avc/cache_threshold\x00'}]}, &(0x7f00000034c0)={0x2c0, 0x0, 0x4, [{{0x6, 0x0, 0x5, 0x8, 0xfffffff8, 0x7, {0x0, 0x5, 0x1, 0x2, 0x6, 0xe1, 0x1, 0x0, 0xfffff818, 0x2000, 0x9, r7, r8, 0x8, 0x6}}, {0x6, 0x3, 0x1d, 0x8, '/selinux/avc/cache_threshold\x00'}}, {{0x0, 0x1, 0xee, 0x8, 0xffff8001, 0x80000000, {0x3, 0x1000, 0xc73d, 0x8, 0x0, 0x4, 0xf, 0x7f, 0x1, 0x4000, 0xeb, r9, r10, 0x7ff, 0x223b}}, {0x4, 0x1ff, 0x1d, 0x10, '/selinux/avc/cache_threshold\x00'}}, {{0x5, 0x2, 0x5, 0x1, 0x7, 0xdcc, {0x0, 0x6, 0x3, 0x80000001, 0x1, 0x1000, 0xb1b, 0xecc, 0x0, 0x6000, 0x0, r11, r12, 0xc, 0x5}}, {0x6, 0x800, 0x5, 0x4, '*[$}&'}}, {{0x1, 0x2, 0xffffffffffff8000, 0x0, 0x9, 0x7, {0x1, 0x7, 0x7, 0x7, 0xe22, 0x75, 0x1, 0x2, 0x3ff, 0xa000, 0x3, r13, r14, 0xf4c9, 0x8}}, {0x2, 0x8001, 0x3, 0x7, ')@['}}]}, &(0x7f00000038c0)={0xa0, 0xfffffffffffffffe, 0x7f, {{0x1, 0x3, 0x48, 0x3512, 0x800, 0x1, {0x6, 0xe, 0xffffffffffffff25, 0x7fffffff, 0x3, 0x5, 0x3814, 0xb26, 0xecd, 0x1000, 0x1, r15, r16, 0x4, 0x401}}, {0x0, 0x4}}}, &(0x7f0000003980)={0x20, 0xfffffffffffffffe, 0x8000000000000001, {0x80000000, 0x0, 0x0, 0x7fff}}, &(0x7f0000003bc0)={0x130, 0x0, 0x7, {0x4, 0x4, 0x0, '\x00', {0x8000, 0xfffffff7, 0x0, 0x6, r17, r18, 0x8000, '\x00', 0x1, 0x2400000000000000, 0x1, 0x3ff, {0x10000, 0x4}, {0x5, 0x8}, {0x7fff}, {0xdd6, 0x80000001}, 0xc, 0x1ff, 0x3, 0x10}}}}) lsetxattr$trusted_overlay_redirect(&(0x7f0000003dc0)='./file0\x00', &(0x7f0000003e00), &(0x7f0000003e40)='./file0\x00', 0x8, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003e80)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000003f80)=0xe8) setresuid(r15, r17, r19) mount$9p_unix(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000)='./file1\x00', &(0x7f0000004040), 0x20400, &(0x7f0000004080)={'trans=unix,', {[{@access_uid={'access', 0x3d, r13}}, {@directio}, {@cache_mmap}, {@uname={'uname', 0x3d, '^/'}}], [{@subj_role={'subj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@hash}, {@permit_directio}, {@obj_user={'obj_user', 0x3d, '/selinux/avc/cache_threshold\x00'}}]}}) getsockname(r1, &(0x7f0000004140)=@hci, &(0x7f00000041c0)=0x80) setxattr$security_ima(&(0x7f0000004200)='./file1\x00', &(0x7f0000004240), &(0x7f0000004280)=@v2={0x3, 0x2, 0xf, 0x7a8d07ec, 0x47, "af7c0c2643ae5ca6d4fa72444a3c3959c415bdfea60cd0ecfc153a0e7037034c4c370251c94d99611a268f50fcf08d49ae71e7a0554921d58f4ad94c22657563fbec7ee4c3b147"}, 0x50, 0x2) 3m18.09173509s ago: executing program 8 (id=7745): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, 0x1a, 0x1, 0x70bd28, 0x4, {0x2}}, 0x14}}, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80802, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xe) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x64) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r6 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r6) r7 = openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0xc058671e, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f23d50f07f283f9c7410f06769cc9759971716266baf80cb89c1bdd82ef66bafc0cb0f1ee9a110f01380f20e035200000000f01c48f7178d1812e4b80001740ab46be46bec7f08a", 0x73}], 0x1, 0x6c, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x2d, 0x0, 0x1, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) dup(r2) 3m18.07103034s ago: executing program 8 (id=7746): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000140)='fdinfo\x00') ptrace$setsig(0x4203, r1, 0x0, &(0x7f00000000c0)={0x3d, 0x9, 0x6}) (async) ptrace$setsig(0x4203, r1, 0x0, &(0x7f00000000c0)={0x3d, 0x9, 0x6}) ppoll(&(0x7f0000000040)=[{r0, 0xc4}, {r2, 0x508e}, {r2, 0x4}], 0x3, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000040)=[{r0, 0xc4}, {r2, 0x508e}, {r2, 0x4}], 0x3, 0x0, 0x0, 0x0) 3m17.970218702s ago: executing program 8 (id=7747): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000000380)=""/141, 0x8d}, {0x0}], 0x2, 0xffffffff, 0xb, 0xd) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)=""/171, &(0x7f0000000040)=0xab) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) pidfd_getfd(r3, r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000080)) ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0x503) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES64=r5], 0x28) sendto(r5, &(0x7f0000000000)="5d6008343da1b44346197cba076e71c4a6dde90fe9cdc0c76e3d6763852f68519a3bc6246c12b35a1e365f677492de57ba77fbe3a156774ee81b1f5d", 0x3c, 0x40, 0x0, 0x0) 3m17.964420712s ago: executing program 38 (id=7747): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000000380)=""/141, 0x8d}, {0x0}], 0x2, 0xffffffff, 0xb, 0xd) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)=""/171, &(0x7f0000000040)=0xab) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) pidfd_getfd(r3, r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000080)) ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0x503) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES64=r5], 0x28) sendto(r5, &(0x7f0000000000)="5d6008343da1b44346197cba076e71c4a6dde90fe9cdc0c76e3d6763852f68519a3bc6246c12b35a1e365f677492de57ba77fbe3a156774ee81b1f5d", 0x3c, 0x40, 0x0, 0x0) 2m38.017239799s ago: executing program 3 (id=7967): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10000000000026) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) socket(0xa, 0x3, 0x3a) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000380)=[0x0, 0xee00, 0xee00, 0xee00, 0xee01]) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000500)={0x72, 0x7d, 0x1, {{0x0, 0x4a, 0x7ff, 0x6, {0x40, 0x1, 0x8}, 0x0, 0x9, 0x15, 0x504, 0x9, '/dev/kvm\x00', 0x9, '/dev/kvm\x00', 0x3, '{]#', 0x2, '!#'}, 0x13, './binderfs/custom0\x00', r8, r9, r10}}, 0x72) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x8, r7}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r11, &(0x7f0000005340), 0x0, 0x2100, 0x0) getsockopt(r6, 0x2, 0x1ff, &(0x7f0000000240)=""/242, &(0x7f0000000100)=0xf2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2m37.854077652s ago: executing program 3 (id=7968): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x20b, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/47, 0x2f, 0x1, 0x5}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x1000}, @free_buffer], 0x0, 0x0, 0x0}) 2m37.853338312s ago: executing program 3 (id=7969): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2711, @host}, 0x10) listen(r0, 0xffdffffe) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0xd0303, 0x140) flock(r3, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r4, 0x4) r5 = open(&(0x7f0000000240)='.\x00', 0x4e81, 0x13f) flock(r5, 0xc) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r6, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pipe2$9p(0x0, 0x4080) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000400)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1", 0x14}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x6, r7, 0xffffffffffffffff, 0x4) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000180)=""/150) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) 2m37.852589122s ago: executing program 3 (id=7970): ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x10001) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x1, 0x6, 0x0, 0x500, 0x4, 0x540000, r2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x6, 0x0, 0x500, 0x2, 0x2, r2}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder1\x00', 0x0, 0x0) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000380)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x3a, 0x80, 0x0, {r4}}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x100}) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r7}) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r8) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000}) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') r10 = dup(r9) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r10) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2m37.848795732s ago: executing program 3 (id=7971): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300090c00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000000400000000030005006c00000002000000e000000100000000000000000100f5ff4d200000010014"], 0x60}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, 0x0, 0xb) splice(r3, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = dup2(r8, r7) close_range(r9, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 2m37.803547393s ago: executing program 3 (id=7972): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='user\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r0, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x101b02, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 2m37.768987654s ago: executing program 39 (id=7972): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='user\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r0, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x101b02, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 1m12.73424868s ago: executing program 9 (id=8953): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=0x60) openat$binderfs(0xffffffffffffff9c, 0x0, 0x804, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/2, 0x2}], 0x1) ioctl$int_out(r3, 0x0, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) 1m12.72614808s ago: executing program 9 (id=8954): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000011c0)=""/4105, 0x1010}, {0x0, 0xfffffffffffffc76}], 0x2) 1m12.72510491s ago: executing program 9 (id=8955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10001, 0x7d}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xe993}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x10001}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa8, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c325797f6500d7c72848b70427c25787"}, @NL80211_ATTR_SSID={0x7, 0x34, @random="9789de"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x12, 0x34, @random="d6f440f0c2ddf029def22755c79d"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="ece0163c97d146fdf50d0e61afb0b4170f7dc785f8b0bada"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc041}, 0x20005001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1d4cb22a}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040803}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000006c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000b00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000780)={0x314, 0x34, 0x20, 0x70bd25, 0x25dfdbfe, {0xf}, [@nested={0xd2, 0x7, 0x0, 0x1, [@typed={0x8, 0xe3, 0x0, 0x0, @uid=r5}, @generic="7e1890919b5e1a70480673ed95ee90b754aed2b18a139140e3a8f5a5e0cdb4faf7dc7f9046b549a6385c70b1a24f55e7050fb106971be6725ebff006a5757966774b8ffb80a4b8868070a46b4c26dd326375ca54c8913c6de3cc4fe166945859f49dc26e7ade15e86b08579032eb68e1def6df9edc71ee9ffc858ea881d524589596c88e6a01759ff1c8c903bc844538809a8e1d15d36dc6ff076f1ae9f1aa539490c9423f96a2a2e1facce3dfa13bb9336c2f4991b8de8a508eed026e33f1696e49c08eea58"]}, @nested={0xa0, 0x86, 0x0, 0x1, [@typed={0xb, 0x2c, 0x0, 0x0, @str='?{]#-:\x00'}, @generic="64fe926691e214c5696d43a224f138d36f22b0f38c039635b641f680ba7a5141c510a3a595925365a981949ae1b78f495b2b99a3257a57d6e7d7f2bb2817fb479c466bd16053036cf783d737fe47d6c015d47b25334f2860667c3445a3d7e0a60af9d594326937a432a8315cda148e9696e09ce23ba631b0", @typed={0x14, 0x86, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @nested={0x4, 0x62}]}, @nested={0x14, 0xd6, 0x0, 0x1, [@nested={0x4, 0x73}, @nested={0x4, 0x2d}, @nested={0x4, 0x2d}, @nested={0x4, 0x131}]}, @nested={0xae, 0x80, 0x0, 0x1, [@typed={0xc, 0x12b, 0x0, 0x0, @u64=0x80000001}, @nested={0x4, 0xc9}, @nested={0x4, 0x12f}, @typed={0x8, 0x59, 0x0, 0x0, @pid=r6}, @generic="2a8e7dd071e52b0902999b848830cc97125bbe8a2df6576e2093b61d2b5bc65c2cd1a09d85b729b2f75c0c2b4c9b56d41ca9b83241179a7a350f3fc40743f77cfba4a07cc9db31f1833463a8c72915a779f70dcfa4bd4728ac7de76a83c3218b530559bc706b55723e8c867dafefa1298c12da74807cf255e9cecf0810969d5a6ac622623a73c6ad636713741648"]}, @generic="70a65f87dfca270b863fe0233b2ab5e9f5a30d75124818eff29561dfa0b08b9d9a193876e4c0a95c5d715956ff91a3633eeaeac3c0b4e83d988c9cfa6da97392c102eb8b4f54040517664831365901930da11532864dff359b0aeff1a0a5", @typed={0x8, 0xf9, 0x0, 0x0, @uid=r7}, @nested={0x5e, 0x0, 0x0, 0x1, [@typed={0x14, 0xf4, 0x0, 0x0, @ipv6=@mcast1}, @generic="1c5f7ad979f805aa063181ccea0d00d57c241606ad165912baf3b43d468fff78c875d1a61c0961e93f46c46e01aea0143427efac5d5fcce86f77c84af5fe0c3850227cfdd628"]}]}, 0x314}, 0x1, 0x0, 0x0, 0x1}, 0x40c0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000b40)={'filter\x00', 0x4}, 0x68) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000cc0)={'tunl0\x00', &(0x7f0000000c00)={'syztnl2\x00', r3, 0x1, 0x1, 0x5, 0x7790, {{0x1c, 0x4, 0x1, 0x4, 0x70, 0x68, 0x0, 0x8, 0x4, 0x0, @private=0xa010100, @loopback, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x4f, 0x1, 0x7, [{@loopback, 0x7fff}, {@empty, 0x43}, {@multicast2, 0x8000}, {@private=0xa010101, 0xc1}, {@local}, {@local, 0x1ff}]}, @timestamp={0x44, 0x24, 0x56, 0x0, 0x6, [0x4d0, 0x8, 0x1, 0x9, 0x7fffffff, 0x74d58eb0, 0x5, 0x9afb]}]}}}}}) sendmsg$nl_route_sched_retired(r9, &(0x7f0000002640)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002600)={&(0x7f0000000d00)=@newtfilter={0x18e0, 0x2c, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xffe0, 0xd}, {0xf, 0x8}, {0xa, 0x10}}, [@f_tcindex={{0xc}, {0x1c, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x3}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x200}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}]}}, @f_rsvp6={{0xa}, {0x1888, 0x2, [@TCA_RSVP_ACT={0xfac, 0x6, [@m_ife={0x138, 0xb, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_TYPE={0x6, 0x5, 0x800}]}, {0xed, 0x6, "246fea4cc763c90628297813d6bc669f7e11e31ecb1c756c90c5ebb9ccd09b9de76656e1d4987960db831f0ccf3823d187ba0b03ba008c055e71bede2ab9107d0aaa3c006947c7cfc9de5bce2f520fff9d882a31bf0a295ea8ee9d256def55a9266fc014acbfc47cb57a3d80432dcaab7c16ec39d535b1cfa4cf91bc5891513e8ab1490be41cba4561571fb7609df6b0049351618824e20abf4d52d405cf79fc6aaae40493aea58345eb7a34b5d7fbd75bbed2542ac6aaa7f6b03cab42df365436d1063bc88ef789a5c5d458d6403746e66ca982d794c117928e7d0a574bb4ec533c768a76a8d4c92b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x1c4, 0xa, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x9, 0x5, 0x9, 0xe11}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xe, 0x2, 0x4, 0xa}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x81, 0x2, 0x7, 0x3, 0x1}}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0xb61, 0x1b, 0x2, 0xa236}, {0x3, 0x4, 0xf}, {0xd24, 0xf2, 0x2d, 0x8}, {0x9, 0x81, 0xb2, 0x9}, {0x9e7, 0x70, 0x6, 0x7}, {0x1, 0x4, 0x3, 0x200}]}]}, {0xef, 0x6, "a41273fcb9c94498f35b1048cb2820c25f89c4bd1737642149578a6bb1fd3d3924b1bef4f8da56e7d06905a504668987a67a1bc855ad308f85227459344256914df234c661d8996ec04afcf632ef8cf1a5f2cfb2b0855cbf4e9068bb81a575fa0d18ffaaa14571943e609a2a09fe218ca9ccf4cc34f7eb51d7318743fd5f072e1bab8c1774f438c91de0b61d32bd7184b7b0bf00ae66c65d30147ba6798f596944605af8991459c1e66097291e43d82a8598df744b9b468298c21179d0fa3f268a5c3d6d9690808d926d60bd3476c27a9ece7c94ab9de2323e988edad1197f812ebb6be4419297e7025878"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x5}}}}, @m_police={0x93c, 0x10, 0x0, 0x0, {{0xb}, {0x888, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8000}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x2, 0x4, 0x8, 0x1000, 0x2, 0x8, 0x5, 0x1, 0x6, 0x3, 0x1, 0x8, 0x9, 0xeb0b05b8, 0xe56, 0x1ff, 0x9, 0x2, 0xaf, 0x225, 0xcecc, 0x4, 0x9, 0x2, 0x0, 0x8d8, 0x7, 0x9, 0x0, 0x9, 0x9, 0xff, 0x80000001, 0xc8, 0x8, 0xe63a7fe9, 0xc, 0x1, 0xd, 0x5, 0x5, 0x4, 0x5, 0x1, 0x8, 0x9, 0x6, 0x9c3, 0xb460, 0x62b, 0x7, 0x2, 0xa, 0x0, 0x6, 0x8, 0x1, 0x101, 0x8000, 0x1000, 0x8, 0x1ff, 0x4, 0x5, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x9, 0xfffff801, 0x101, 0x38000000, 0x7, 0xcdb2, 0x7, 0xfffffffd, 0x9, 0x5, 0x5, 0x5, 0x7, 0xff, 0x80, 0x10, 0x6, 0x4, 0x2, 0x7, 0x10, 0xcb, 0x2, 0x180, 0xffff, 0x2e, 0xff, 0x672, 0x5, 0x9, 0xe21, 0x8, 0xfffff001, 0xbe, 0x7b9, 0x4, 0x7, 0x8, 0x200, 0x401, 0xffffff01, 0x4, 0x3, 0x6, 0x7, 0x9, 0x55, 0x10, 0xb087, 0x100, 0x2, 0x2, 0x8, 0x8, 0x0, 0x3, 0x0, 0xd, 0x6, 0x3, 0x2, 0xd40a, 0xf, 0x7, 0x3, 0x3, 0xfffffffe, 0x6, 0x3e, 0x4, 0xbb, 0xfff, 0x0, 0x2, 0x9, 0x30b9, 0x40000, 0x85e, 0x9, 0x400, 0x10001, 0xfffffffb, 0x1ad, 0x7fff, 0x8, 0x401, 0xf, 0xffffffff, 0x5064434, 0x10, 0xc0b, 0x81, 0x4, 0x80000000, 0x6365, 0x8, 0x2, 0x9, 0x6a, 0x10, 0x4, 0x0, 0xfffffffa, 0x4, 0x5f14, 0xfffffffb, 0x1, 0x99, 0x8000, 0x7, 0xffffff00, 0x8, 0xffff8000, 0x6, 0x8000, 0x80000001, 0xc000000, 0x2, 0x4, 0x8000, 0x7, 0x3, 0x7ff, 0xfffffff0, 0x0, 0x3, 0xa059, 0x3, 0x6, 0x4, 0x4, 0x8000, 0xfff, 0xd, 0x11f, 0x2a, 0x5, 0xf918, 0x3, 0x2, 0x101, 0x7, 0x9, 0x8001, 0x5, 0x9, 0x7, 0x2, 0x40, 0x5, 0x5, 0x7, 0x7ff, 0x10000, 0x80, 0x7, 0xd, 0xffff0001, 0x1000, 0x9620, 0x0, 0x6, 0x6, 0x8000, 0x6, 0x3, 0x6, 0x1, 0xa69, 0x800, 0x9, 0x9, 0xfffff800, 0x5167, 0x81, 0x6, 0x9, 0x95b5, 0x6c1e, 0x100, 0xbcf, 0xc1, 0x1, 0x1, 0x5]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffb}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x4, 0x0, 0xb5, 0x1, 0xbc2d, 0x2, 0x9, 0x7, 0x9, 0x100, 0x3ff, 0x1, 0x4, 0x1000, 0x8c, 0x81, 0x3, 0x10, 0x7, 0xfff, 0x0, 0x4, 0x6, 0xa, 0x6, 0x5, 0x200, 0x9, 0x9, 0xaecb, 0x68, 0x6, 0x5, 0x3, 0x7, 0xcf, 0x3, 0xffffffff, 0x2, 0x3, 0x6, 0x0, 0x0, 0x10, 0x7, 0xb16, 0x8, 0x9, 0x7f, 0x80000001, 0x5, 0x8, 0x400, 0x1000, 0xddc, 0x7fff, 0x8, 0x7, 0x6, 0xa, 0x8, 0x8a2, 0x4, 0x97, 0x5, 0x53d8, 0x4e, 0x40, 0x0, 0x3, 0x80000001, 0x1, 0xf16f, 0x2, 0xc7, 0xf1d, 0x582af135, 0x0, 0x4, 0xfffffffa, 0x5, 0xb6, 0x5, 0x4, 0x3a239dd8, 0x3, 0x7f, 0x3, 0x5, 0xfff, 0xfff, 0x5, 0xf, 0xfff, 0x4, 0x8, 0x630, 0x1, 0x60, 0x2, 0xfffffff2, 0xe, 0x1000, 0x8, 0x7fffffff, 0xa, 0x3ff, 0x9, 0x1, 0x5, 0x6, 0xfffffffb, 0x0, 0x42, 0x10000, 0x9, 0x3, 0x7, 0xfff, 0x80000000, 0x6, 0x100, 0x0, 0x8, 0x2, 0x0, 0x2, 0xc4be, 0xb7, 0x0, 0x7fff, 0x6, 0x7ff, 0x3, 0x0, 0x5, 0x1, 0x3, 0x9, 0x7, 0xd, 0x6, 0x3, 0x9, 0x9532, 0x1, 0x4c9c, 0x100, 0x1, 0xef0d, 0x6, 0x6, 0x4, 0x9a3, 0x2, 0xfffffa36, 0x6, 0x9, 0x1beab095, 0x2, 0x5, 0x1, 0x7, 0x7, 0x6, 0x6, 0xb, 0x0, 0x2, 0x4, 0x9ec, 0x0, 0x9a43, 0x9, 0x4, 0x9, 0x9ec8, 0x5, 0xb, 0x7, 0x8001, 0x1, 0x8001, 0x2, 0x1, 0x2, 0x9, 0xfffffffb, 0x9, 0x0, 0x6, 0xfffffffb, 0x1, 0x1000, 0x6, 0x81, 0x2, 0x9, 0x6, 0xa, 0x9, 0x8, 0x9f, 0x5, 0x3, 0x0, 0x3, 0x80, 0x9, 0x4, 0x7fff, 0x9, 0x7, 0x8, 0x200, 0x8, 0x101, 0x2, 0x8, 0xe4, 0xf6de, 0xfffffff8, 0x2, 0x7, 0x618, 0x4, 0xd, 0x2, 0x9, 0x7, 0x234c7ff7, 0x5, 0xfffffff8, 0x4, 0x1, 0x6, 0x80000000, 0x9, 0x8001, 0x652, 0x101, 0x8, 0xc0000000, 0x8, 0x5, 0x1, 0x9, 0x0, 0x932, 0x3, 0x4, 0x0, 0x8, 0x6, 0xff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x8e, 0x1, 0x3, {0x4, 0x1, 0x0, 0x2, 0x0, 0x625}, {0x7, 0x0, 0x3, 0x8, 0x1, 0x3}, 0x80, 0x7, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]]}, {0x8b, 0x6, "9a0ed05c930f67be2040e7129828bd7f5def5654bffc0670b0b7a9f5337cddcd4d872e4ef3232d06f689fdf6d22a043b895aeff2f6363988c36f346fa270d3907a01bef9374a9f27e9abc6985d9514730aee49c5a21c6589cfc27c241250e275175e23378b4a09896cf797182d63c769fbbbc5fead1a887ca87e9761982471fef3676c5f7b6c70"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0xe4, 0x10, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}]}, {0x9e, 0x6, "17b573e17bb15ba157ba9e1304a00bb7f7d40eb156d182bc0eb98f5e8191c7735967d3fd95f560777b39fda51fa8769fbfab935218210889547b9cff2301e2bbfa9b76806d0b5407662c2a9e472615393d9695b3eee9031e649bcbd905456c8aac3260f3c3d342993d4b555bb2dfcf4c6a9def340a93b53516ed944a34ce6a9b8499c3f996ed1affc9a50e63dd59dd8bc7aa9fa1b96fb843456e"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x180, 0xb, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000000, 0x2, 0x8, 0x6, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x10000, 0x20000000, 0x2}}, @TCA_DEF_DATA={0xb, 0x3, 'filter\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'wlan1\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'filter\x00'}, @TCA_DEF_DATA={0x6, 0x3, '\xff\xff'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x4, 0x7, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x8, 0xffffffffffffffff, 0x7, 0x5}}]}, {0xc7, 0x6, "589518fa5ba15d1c898bf1a8d40af5228a5a95d218f567321a6e2952da0b9f8c18f056e127306e5b2eecd6f956e02c810ebdbb922ec4057281a3b2f3eeab829631ecb7164a09561e640a694d099434bddd1c7f87bc3f729461f3ae2238cc34208143b88c0008e5e7f10ec3089f10fb20c42ff2ceece1b3a81e432735ba5cb8a9bb7552c388ad8566e2d2afef122ff7400cbc96e05d43eb3486e06f40fd89ecb45bff4eab5cf50de39617343b93a006dcb08ba8ca54d01892f5ffb4bbd8c2f8f2488066"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_simple={0x10c, 0x12, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, 'firstname\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x7d76, 0x0, 0x80000001, 0x9bc8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x4, 0x7, 0x2, 0x80000000}}, @TCA_DEF_DATA={0xe, 0x3, 'firstname\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x16f, 0x8, 0x2000000b, 0x10, 0x6}}]}, {0x75, 0x6, "cc0683a521db3d6d67391bade4ff94134416fb263d533b43a4ed935509aeeb54cfc3a70302cf47f3531191d13ff57ca251626cc2515394c9bf2b8c7ad9da97e2c62b4e23a3b1bcb6a222b27727380567ac75fba251f1e66d15f3d50244c2c5faeefe88bf04b8111a04d065ade81fd93198"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5}}}}]}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @TCA_RSVP_POLICE={0xa4, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xda}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x9, 0x8, 0xfffffffb, {0x10, 0x1, 0x100, 0x2, 0xdb3, 0x6}, {0x1c, 0x2, 0x401, 0x9, 0x5, 0xff}, 0x1bed, 0x25d}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x1, 0x7fff, 0x3, 0x2, {0x98, 0x1, 0x26, 0x2, 0xc22, 0x5}, {0x7, 0x1, 0x965, 0x0, 0x4, 0x400}, 0x401, 0x7, 0x1}}]}, @TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fff, 0x3e6, 0x8, 0x8b, 0xa60, 0x0, 0x1, 0x84, 0xd, 0x77, 0x6, 0x8, 0x9, 0xfffffff7, 0x1, 0x4da, 0x4, 0x1000, 0x8, 0x1, 0x2, 0x6, 0x6, 0x3, 0x10000, 0x4, 0x2, 0x1000, 0x0, 0x0, 0x6, 0x2, 0x7, 0x81, 0x0, 0x81, 0x7, 0x401, 0xffffffff, 0xf0, 0x401, 0x1, 0x7f, 0x2, 0x382, 0x4, 0x8001, 0x3, 0xfffffffc, 0x9, 0x5, 0x8001, 0xb0, 0x27cd, 0x7, 0xffff92c5, 0x3, 0x7, 0x1, 0x6, 0xb9ac, 0x0, 0x1596, 0xa95c, 0x9, 0x5, 0x0, 0xe, 0x88, 0x1, 0x3, 0xb, 0x6, 0x9, 0x8, 0x0, 0x6, 0x4, 0x4, 0x4, 0xbd, 0x4, 0x0, 0x6b59000, 0x7, 0x9, 0x8, 0x0, 0x6, 0x7, 0xd7b, 0x5, 0x0, 0x5, 0x10000, 0xffff, 0x4, 0xa0, 0x7, 0x1, 0x4, 0x401, 0x80000000, 0x80000000, 0x7fff, 0x4, 0x1, 0xfff, 0x949e, 0x7b87, 0xa, 0x6, 0x75a, 0x80000000, 0x3, 0x4, 0x4, 0x1, 0x80000001, 0x9b2, 0x8, 0xfffffffa, 0xffff, 0x800, 0x80000001, 0x7, 0x1, 0xffff, 0x1, 0x88b, 0x3, 0x2, 0x1, 0x1ff, 0xfffffffc, 0xdb05, 0x2, 0x81, 0x808, 0x2, 0x5, 0xfff, 0x7, 0x0, 0x80000000, 0x1, 0x4, 0x6, 0x2, 0xf, 0x1, 0x6, 0x3, 0x2, 0x218b, 0x0, 0x5, 0xc, 0x0, 0x6, 0xa0000000, 0x2000, 0x0, 0x8, 0x0, 0x7ff, 0x7, 0x2, 0x7, 0x101, 0x800, 0x8, 0x8, 0x2, 0x5, 0x81, 0x7, 0x9, 0x0, 0x5, 0x401, 0x80, 0x2, 0x0, 0x80000001, 0xfff, 0x0, 0xe, 0x401, 0x800, 0x6, 0x7, 0xa, 0x200, 0x4, 0x6, 0x58, 0x1, 0x1, 0x80, 0x72, 0xd, 0xfffffbff, 0x0, 0x2, 0x10, 0x4, 0x80000001, 0x1, 0xb, 0x1, 0xd, 0x2, 0x3, 0x9, 0x3, 0x7ff, 0x2, 0xfffffffd, 0xa6b5, 0x7f, 0x8, 0x60, 0x3, 0x7ff, 0x5, 0x54, 0x1, 0x81, 0x3, 0x5, 0x2, 0x7fffffff, 0x5, 0x9, 0x0, 0xc5f2, 0x80000, 0x6c1, 0x3, 0x0, 0x0, 0x1ff, 0x0, 0x9, 0x9, 0x10001, 0x8, 0x7, 0xb88d, 0xfffffffe, 0x4, 0x80000001, 0x3, 0x8, 0xb26]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x3, 0x8001, 0x81, 0x6, 0x1, 0x401, 0x1, 0x10001, 0x8, 0x6, 0x1000, 0xffffff5e, 0xffffffff, 0x2, 0xa, 0x3, 0x2, 0xa206, 0x5, 0x2, 0x8e, 0x3, 0xffffffff, 0x100, 0x7, 0x4, 0x43d7a235, 0x80000001, 0x5, 0x6, 0x7fff, 0x3, 0x10000, 0x24, 0x8, 0x7d, 0x5f7f, 0x59, 0x8, 0xa8, 0x7, 0x5e, 0xff, 0x4, 0x2, 0x5, 0x400, 0xfffff4b2, 0xe, 0x628, 0x9, 0x2, 0xfff, 0xfff, 0x6, 0x8, 0x8, 0x4, 0x1, 0xffff1374, 0x4, 0x3, 0x6, 0xffff3780, 0x6, 0x78, 0xc3400000, 0x81, 0x3ff, 0x80000001, 0x7, 0xfff, 0x5, 0xfffffffd, 0x3, 0xf3c9, 0x6, 0x5, 0x4, 0x7, 0x2, 0x7693ffbb, 0x9, 0xffffffff, 0x8, 0x6, 0x5, 0x0, 0x3, 0x3b, 0x7392, 0x9, 0x2, 0x9, 0x7, 0x3, 0x7fffffff, 0x80, 0x7f, 0x7, 0xc09, 0xa, 0x2, 0x1000, 0x5, 0x2, 0x9, 0x7, 0x7, 0x3, 0xffffff5b, 0x8000, 0x5fa0, 0x4, 0xf, 0x1, 0x0, 0x1, 0xa1cb, 0x2, 0x6, 0x4, 0x3, 0x9, 0x5, 0x2, 0x9, 0xfffffc00, 0xa, 0x6, 0x0, 0xfffffff9, 0x5, 0x3, 0x100, 0xffff, 0x2, 0x6, 0x4a, 0x40, 0x2, 0xfffffbff, 0xd4, 0x8, 0x5, 0x0, 0x9, 0x8000, 0x2, 0x6, 0xadff, 0x6, 0x8001, 0x1, 0x100, 0x3, 0x3, 0xe4, 0x4, 0x3, 0x8, 0x5, 0x0, 0x8, 0x485, 0x4, 0x8, 0xce5, 0x5, 0x9, 0x40, 0x1, 0x2, 0x1, 0xe, 0x4, 0x1, 0x6, 0x6, 0x40d, 0x6, 0xe, 0x1, 0x6, 0x5e8, 0x4, 0x6, 0x2, 0x4, 0x9, 0x7, 0x8, 0x1, 0x6, 0xffff, 0x6, 0x6, 0x10, 0x10, 0x1, 0x5, 0x3, 0x200, 0x73, 0xf18f, 0x8, 0x400, 0x1ff, 0x3, 0x8, 0x0, 0x1, 0x400, 0x844, 0x7, 0x7, 0x3, 0x41a, 0x980a, 0x362, 0x7, 0x7, 0x6, 0xa, 0xfffffffa, 0x80, 0x9, 0x2, 0x4, 0x9, 0x2, 0xae9, 0xfffffffc, 0x7, 0x9, 0x700000, 0xffffffff, 0x9, 0x6b1, 0x3, 0x8aef, 0x5, 0xec, 0xf, 0x3, 0x0, 0x7, 0x400, 0xbf, 0x1, 0xfffffffe, 0x3]}]}, @TCA_RSVP_DST={0x14, 0x2, @empty}]}}]}, 0x18e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008800) writev(r0, &(0x7f0000002680), 0x0) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000002700), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x20, r11, 0x10, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) openat$fuse(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) r12 = syz_open_dev$usbmon(&(0x7f0000002840), 0x7, 0x12000) ioctl$MON_IOCG_STATS(r12, 0x80089203, &(0x7f0000002880)) setsockopt$inet_MCAST_LEAVE_GROUP(r8, 0x0, 0x2d, &(0x7f00000028c0)={0x4, {{0x2, 0x4e21, @local}}}, 0x88) r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002980), 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r13, 0x4008af21, &(0x7f00000029c0)={0x3, r8}) setsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f0000002a00)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r3}, 0xc) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40), r14) 1m12.703209111s ago: executing program 9 (id=8956): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@private2, {0x327, 0x9, 0x0, 0x4, 0x20000000000000, 0x0, 0x1, 0x7}, {0x0, 0x0, 0x2}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x3502, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e22, @in6=@rand_addr=' \x01\x00'}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x20, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@private2, {0x327, 0x9, 0x0, 0x4, 0x20000000000000, 0x0, 0x1, 0x7}, {0x0, 0x0, 0x2}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x3502, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e22, @in6=@rand_addr=' \x01\x00'}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) (async) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x20, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 1m12.702219221s ago: executing program 9 (id=8957): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f0000000280)=0x4, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x208, 0x327e03) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000001480)=@urb_type_iso={0x0, {0xd}, 0x3, 0xc0, &(0x7f00000003c0)="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", 0x1000, 0xb515, 0x8, 0x62, 0x1, 0x4, &(0x7f00000013c0)="181730be2e19c221f085b01a7d12085f7a95f8fe47acb3f0cde73f3a6f6742423d642ac0c742112d8e449e37e90a111d8cf3db0a8e716ac8736310a3849dfe1da87b93d612be1da3b8be4f5585258bd2ab375d2bd13704fa58cd430bb9f05f1274629c50dd00cfa430e24f0e863899ce3041604cf10dd0a57093dcbbb98395eef27b4219c7ff", [{0x80, 0x9, 0x9}, {0x7f, 0x8, 0x9}, {0x4, 0x3}, {0xe1d, 0x8, 0x9}, {0x3, 0x6, 0x45}, {0x5, 0x78c5ef81, 0x7fffffff}, {0x0, 0x8, 0x51}, {0x32d, 0x80, 0x3}, {0xfffffffe, 0x4, 0x1}, {0x6, 0x200, 0xe1c}, {0x7, 0x1, 0x5b99}, {0x3, 0x1, 0xff}, {0x4, 0x6, 0x5}, {0x7, 0x6b5, 0x7}, {0x6, 0x8, 0x3ff}, {0x3e, 0x3, 0x2}, {0x3, 0x7, 0x5}, {0x5, 0x7, 0x1000}, {0x3, 0xfffffff9, 0xb}, {0x401, 0x1000, 0x4}, {0x1, 0x7fff, 0x1}, {0x4, 0xdd, 0x7}, {0x6, 0x4, 0x6}, {0x1, 0x6, 0x3}, {0x8, 0x80000000, 0x7}, {0x3, 0x40, 0xffff}, {0x7, 0x8fd2, 0x40}, {0x0, 0x3, 0x5}, {0x9, 0x0, 0x5}, {0x0, 0x6, 0xd19}, {0x10, 0x0, 0x2}, {0x0, 0x8, 0x6}, {0x7, 0x7, 0xa}, {0x8001, 0x72393080, 0x3}, {0x6, 0x5, 0x8}, {0x7fffffff, 0x4, 0x3}, {0x0, 0x4, 0x2}, {0xff, 0xfffffff9, 0xa61}, {0xffff, 0xffffe7e2, 0x4}, {0x2, 0x1, 0x3}, {0x45c, 0x7, 0x2}, {0x81, 0x7, 0x401}, {0x75d, 0x80, 0xfffffffb}, {0x6, 0x401, 0xe2}, {0x1800, 0x85, 0x100}, {0x7ff, 0x6, 0xb0}, {0x10000, 0x9, 0x7}, {0x2000000, 0x80, 0xffffffff}, {0xffffff9e, 0x8, 0x167}, {0xd5, 0x8f4e, 0x8}, {0x7, 0xc, 0x3a35}, {0x8001, 0xb428, 0x2695}, {0xffffffff, 0x9, 0x52d}, {0x192c, 0x5}, {0x3c07, 0x400, 0x1}, {0x912, 0x7ff, 0x100}, {0x3, 0xf, 0x3}, {0x7, 0x7d0301b8, 0x5}, {0x1, 0x7, 0x1}, {0x1, 0x2, 0x1}, {0x1, 0x8, 0x1}, {0x6, 0x25, 0x7}, {0x0, 0x2, 0x800}, {0x1b53, 0xe, 0x9}, {0x18, 0x80, 0x5}, {0xfc07, 0x1, 0x874}, {0x3ff, 0x5, 0x4}, {0x2, 0x4, 0x1}, {0x6, 0x618c, 0x5}, {0x10000, 0x2, 0x8}, {0x7, 0x7, 0x2d60}, {0x0, 0x5, 0x8}, {0x2, 0x2, 0x301d}, {0x3, 0x8, 0x2}, {0x7, 0x8, 0x8}, {0x2, 0x6, 0x10}, {0xfffffff8, 0x1, 0x81}, {0x81f9, 0xc, 0x83b}, {0x2c3, 0x9, 0x8}, {0x0, 0x3, 0x4}, {0x0, 0x8, 0x1}, {0x0, 0x4, 0xfffffffc}, {0x86fa, 0x4, 0x4}, {0x1, 0x2, 0xf50}, {0x1, 0x7fffffff, 0x101}, {0x10, 0x7f, 0x6}, {0xe79b, 0x6, 0xffffffff}, {0x2, 0xfffffff7, 0x100}, {0xe9, 0x5, 0x4}, {0x1, 0x1, 0xfffffffc}, {0x6, 0x8, 0xb6da}, {0x0, 0x7, 0x2}, {0x7fffffff, 0x7, 0xfffffffa}, {0x75b6, 0x8000, 0x5}, {0xfffffffd, 0x7, 0x5}, {0x7fff, 0x187c0000, 0x6}, {0x1, 0x5, 0xffff}, {0x4, 0x6, 0xf7}]}) r6 = socket$inet(0x2, 0x3, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) userfaultfd(0x80801) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0xfffff001, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r11, 0xaece) syz_usb_disconnect(0xffffffffffffffff) close_range(r8, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000360000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x806937fafa75c6c8) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x1000, &(0x7f0000bc4000/0x1000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m12.426089466s ago: executing program 9 (id=8959): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000840)=""/4096, 0x1000) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_usb_disconnect(r3) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000300)=""/150, 0x96}, {&(0x7f0000000500)=""/166, 0xa6}], 0x2, 0x5, 0x3ff) fchdir(0xffffffffffffffff) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/187, 0xbb}], 0x1, 0x1ff, 0x80a) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) recvfrom(r5, &(0x7f0000000200)=""/102, 0x66, 0x0, &(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x7, 0xa4, 0x5, "a05f3508fe4400f5ed8deeda7773601c7f79c527b44b4e68adbde1ac7ee2af08cde30ea0d32922236d30370095b714e2733841c34010b933b67e09ee0f82a5", 0x1e}, 0x80) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000100)=0x10) socket$nl_generic(0x10, 0x3, 0x10) 1m12.414550517s ago: executing program 40 (id=8959): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000840)=""/4096, 0x1000) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_usb_disconnect(r3) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000300)=""/150, 0x96}, {&(0x7f0000000500)=""/166, 0xa6}], 0x2, 0x5, 0x3ff) fchdir(0xffffffffffffffff) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/187, 0xbb}], 0x1, 0x1ff, 0x80a) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) recvfrom(r5, &(0x7f0000000200)=""/102, 0x66, 0x0, &(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x7, 0xa4, 0x5, "a05f3508fe4400f5ed8deeda7773601c7f79c527b44b4e68adbde1ac7ee2af08cde30ea0d32922236d30370095b714e2733841c34010b933b67e09ee0f82a5", 0x1e}, 0x80) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000100)=0x10) socket$nl_generic(0x10, 0x3, 0x10) 40.909512845s ago: executing program 2 (id=9391): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1040}], 0x53, 0x0, &(0x7f0000000400)="cb2a499fc52c7a386ad917877700d052ef62983aca8ff936fca29e7bc7ec2ca216262dae1f7f32ff497c006ba3cd35c832d7b0320be1eecb3c8ab2ac50bae16cdedcd164b2862c43a8745bafdd94c96182643b"}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f0000000b40)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={@flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x100b}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000b00)}}, @acquire={0x40046305, 0x2}], 0xbf, 0x0, &(0x7f0000000980)="a6d5627e91e29735953904d992e7012c8007ba96391502d6a334298a27105a4881a7ed7ff1cc8c3c495cb825e6287fe34152c2468e368775213fccb127586443e9bab4b47e9d01b39cf7d2cfa8b4ad57ead214b9e77fa49e03e67bfc3df599014263bfd1f18dd7b4ab768c2e57696c83ad1e22b328ab23ada34de2d0cf95187815c12a2e2d9964ff7fc759bab996d97409a0239e44d7b6b1794dc6ab988499ff092f4dc55c98ee6364377492397b7cb6df11361e9c828db75f1a1b529b267d4c783016db8fbe0ff777f2ea00000000b5e13904de26143017a94dad3441902e69a968bf"}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000500)={0x0, 0xb, 0x17, "cbe88301ec94f7544704628eb97e5dd80f0ac8e03541c1"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x2}}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x0, 0x13, 0x4, "b246da5e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, &(0x7f0000000040)={0x14, &(0x7f00000002c0)={0x40, 0xc, 0xcb, {0xcb, 0x21, "e99f56d226bd7614b24dc2069df96fcea0a75e0cfad919cf717663c6a1c82d6d70447bb023a8b4b17f99235745ee5c95761c94a507838900a9d7ab7c83ab941ce6f0854dd2dd7164e1f0140d6b1e1d5d610a6bd10e673355a52fd623284e3a3bcf970af9b334b9ddac0ec116dab18f96236c7958ae01b0dad9d8389b314f43ee5bb111e7c7a59c1b6d173acd7c747066692897ac2ccec24fa4bb678a01e0128757c7b196247313a7185fe1f30b44567fd94dc751a0e4deb9173db390d344d645bd38d89bd313363bb1"}}, &(0x7f0000000580)={0x0, 0x3, 0xea, @string={0xea, 0x3, "ccb13cb3764cf5a2105befcb0843de559ca475d28daa97264acc822e0fcb79f70f294db3df31c64d2d7d42df67682b89bb5683b224e7e792eaa9a757589f6133330c56e8f17350cfacac72c16b2797d097ed96e5df6695dc48992f1f39152132fed830b52e64c5eb5b98be3f1e213ac88554fda9aaf1a10dd5dab2005995f47ad3622e274b796bf5b428324f9f682f9e24081e20c55b5fd7f9bf573e7aa4a07834b79aca1705a73b46252fb70e1205163d908a99e00ba82303cca2664c2301fc91253bdd5c4f27f183263580a6efd3f69a2c0bbb1fef3616dd7d48ff8adafc76d8bb1f400d085cb6"}}}, &(0x7f0000000780)={0x44, &(0x7f0000000180)={0x0, 0x22, 0x2, "f4fc"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x81, 0x3, "56d679"}, &(0x7f0000000680)={0x20, 0x82, 0x2, "92c2"}, &(0x7f00000006c0)={0x20, 0x83, 0x2, "6e14"}, &(0x7f0000000700)={0x20, 0x84, 0x4, "9ba7ab6a"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "3e1f2f"}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@increfs], 0x4c, 0x0, 0x0}) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000008c0)={&(0x7f0000000840)="7e18aad1c9386200ac017686ea76672051d3670f8671b911727d3ab0e234a4128aa259c80d476e8a4e75ad6a35f65cde45229c849a7002e4db2e46624054846abd0185", 0x43}, 0x1, 0x0, 0x0, 0x4004000}, 0x140c0) 38.62011777s ago: executing program 2 (id=9435): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f00000001c0)={{0x3, 0x0, 0x80, {0xffffffffffffffff, 0x1, 0x2}}, "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", "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"}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) (async) unshare(0x62040200) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket(0xa, 0x801, 0x0) getsockopt(r8, 0x0, 0x40, 0x0, &(0x7f00000000c0)=0x54) (async) getsockopt(r8, 0x0, 0x40, 0x0, &(0x7f00000000c0)=0x54) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) fcntl$setflags(r5, 0x2, 0x1) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000400)=0x8000, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000400)=0x8000, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x2, 0x0, 0xfffffffffffffffe}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/228, 0xe4, 0x2, 0x34}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000180)=[@register_looper, @release={0x40046306, 0x1}, @decrefs={0x40046307, 0x2}], 0x3e, 0x0, &(0x7f0000000200)="4476ded53e16e3ee84989044e128114a1cbd9eef03c2859aec5ae0fe88e5618cfb62958ee4b236875e9971c0aca851798ed23cb6c8501386a8a4438a4a52"}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000180)=[@register_looper, @release={0x40046306, 0x1}, @decrefs={0x40046307, 0x2}], 0x3e, 0x0, &(0x7f0000000200)="4476ded53e16e3ee84989044e128114a1cbd9eef03c2859aec5ae0fe88e5618cfb62958ee4b236875e9971c0aca851798ed23cb6c8501386a8a4438a4a52"}) 36.329632866s ago: executing program 2 (id=9468): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x2, 0x2, 0x9, 0xfffffffffffffff8}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 36.266286497s ago: executing program 2 (id=9470): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) unshare(0x22020600) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) (async) 36.214163699s ago: executing program 2 (id=9473): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x5) write(r1, &(0x7f0000000440)="50b2180f83e8210ed0490cf3b25396fa48b5de427c5eb647a1c5a81219dffa194a867bd4efc333d91e33eea5918904d75a03f57d333d0a66e37767277d1ab8c15495f6692887270603ed74078e18c2ef5a33801cea42e7ea2d7c31d9f99abb78dac6054e092e491939ebd76dc2a08f9ff1899594ac39e64af469f031d8d5d0c6bf13771943820795a528dce8f4723f8a0bcfefc518568b78c243440b4c6b7ede8879150a55ad265e1ba625f9dab50314476223e1be344cf1670c0e529129722deead3c26875d547b0f19b211937e782ac664f59a70431249", 0xd8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x77, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="0f"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000202010200000000003fe0a0cdcaf1c459a770a6980d7a1a00000005000008"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) mount$bpf(0x0, 0x0, 0x0, 0x4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003900), 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, 0x0, 0x0) 36.023971402s ago: executing program 2 (id=9481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) (async) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) unshare(0x22020600) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xf, 0x6, @multicast}, 0x14) (async) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r4, &(0x7f0000000180)="0b0312002e1264000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r5}, 0x14) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0x8, 0x8e660, 0x401, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x80004, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f34, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x2, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x1, 0x20000008, 0x4, 0x6d01, 0x6, 0x40000003, 0x10800003, 0x1ff, 0x83, 0x3, 0x4, 0x2950bfae, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbe, 0x4002, 0x3, 0x800, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x2000006, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x1, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14b, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xffffeff9, 0x5, 0x8000003, 0x7f, 0x100, 0x9602, 0x200007, 0x7, 0x8, 0x6, 0x226, 0x5, 0x7, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) (async) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0x8, 0x8e660, 0x401, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x80004, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f34, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x2, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x1, 0x20000008, 0x4, 0x6d01, 0x6, 0x40000003, 0x10800003, 0x1ff, 0x83, 0x3, 0x4, 0x2950bfae, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbe, 0x4002, 0x3, 0x800, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x2000006, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x1, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14b, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xffffeff9, 0x5, 0x8000003, 0x7f, 0x100, 0x9602, 0x200007, 0x7, 0x8, 0x6, 0x226, 0x5, 0x7, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = userfaultfd(0x80801) waitid(0x2, r1, &(0x7f0000000300), 0x1, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r8, 0xc4}], 0x1, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x2000003, 0x4000010, r2, 0x80000000) (async) mmap$xdp(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x2000003, 0x4000010, r2, 0x80000000) 35.997643323s ago: executing program 41 (id=9481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) (async) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) unshare(0x22020600) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xf, 0x6, @multicast}, 0x14) (async) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r4, &(0x7f0000000180)="0b0312002e1264000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r5}, 0x14) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0x8, 0x8e660, 0x401, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x80004, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f34, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x2, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x1, 0x20000008, 0x4, 0x6d01, 0x6, 0x40000003, 0x10800003, 0x1ff, 0x83, 0x3, 0x4, 0x2950bfae, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbe, 0x4002, 0x3, 0x800, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x2000006, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x1, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14b, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xffffeff9, 0x5, 0x8000003, 0x7f, 0x100, 0x9602, 0x200007, 0x7, 0x8, 0x6, 0x226, 0x5, 0x7, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) (async) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0x8, 0x8e660, 0x401, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x80004, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f34, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x2, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x1, 0x20000008, 0x4, 0x6d01, 0x6, 0x40000003, 0x10800003, 0x1ff, 0x83, 0x3, 0x4, 0x2950bfae, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbe, 0x4002, 0x3, 0x800, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x2000006, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x1, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14b, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xffffeff9, 0x5, 0x8000003, 0x7f, 0x100, 0x9602, 0x200007, 0x7, 0x8, 0x6, 0x226, 0x5, 0x7, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = userfaultfd(0x80801) waitid(0x2, r1, &(0x7f0000000300), 0x1, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r8, 0xc4}], 0x1, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x2000003, 0x4000010, r2, 0x80000000) (async) mmap$xdp(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x2000003, 0x4000010, r2, 0x80000000) 32.812991986s ago: executing program 1 (id=9534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x190, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x40}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1e0000}, {0x6, 0x11, 0x6e1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd5}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x200}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x240000}, {0x6, 0x11, 0x41b6}}]}, 0x190}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x36800, 0x0) write$tun(r2, &(0x7f0000000300)={@void, @val={0x2, 0x1, 0x4, 0x200, 0x3, 0x9}, @llc={@snap={0x1, 0x1, "808b", "ec6016", 0x60, "abe06a6b4893f61cd4"}}}, 0x1c) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x20) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000380)={0x673, 0x7}) truncate(&(0x7f00000003c0)='./file0\x00', 0xfffffffffffffe8b) r4 = dup3(r3, r2, 0x80000) fadvise64(r3, 0xc8e, 0x4, 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000400)="77af686e3eb64d46", 0x8, r5}, 0x68) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x44}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000810}, 0x885) r7 = open(&(0x7f0000000600)='./file0\x00', 0x501240, 0x40) r8 = accept4$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2711}, 0x10, 0x80800) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000680)={{r8}, 0x1, 0x7ff}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x400000, 0x0) ppoll(&(0x7f0000000700)=[{r9, 0x1026}], 0x1, &(0x7f0000000740)={0x77359400}, &(0x7f0000000780), 0x8) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000800)={0x8, &(0x7f00000007c0)=[{0x8, 0x70, 0xd, 0xc4}, {0x8, 0x0, 0x5, 0xff}, {0x638, 0xfa, 0xff, 0x8}, {0x0, 0x9, 0x5, 0x4}, {0x8, 0xf, 0x2, 0x8}, {0x67, 0x3d, 0x6, 0x3}, {0xd60, 0x0, 0x5, 0x8}, {0x5, 0x7d, 0xc0, 0x1}]}) r10 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) sendfile(r3, r10, &(0x7f0000000880)=0x8000, 0x5c6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00'}) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000900)=0x0) fcntl$lock(r5, 0x6, &(0x7f0000000940)={0x0, 0x7, 0x4, 0x8, r11}) openat$cgroup_ro(r7, &(0x7f0000000980)='memory.numa_stat\x00', 0x0, 0x0) readv(r7, &(0x7f0000000a00)=[{&(0x7f00000009c0)=""/15, 0xf}], 0x1) creat(&(0x7f0000000a40)='./file0\x00', 0x95) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) 31.912840184s ago: executing program 1 (id=9543): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r2 = syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0xd8, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x1) r3 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='nicvf0\x00') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x101102, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffff0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r4, 0xa03c0000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r5, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="390de85d0c01d3856999d41e070cf5bb9de8be98a09a0a62309574bff64743196f3cb42a343bffaa234c0bdc9d345f24b39327a59fc4d6f794d2e51739322162d4003870fdf45ecd7c3590b7da87b712d57569dd16f96650be8c682a2af0a1aeee8e2c1eafa2dbce492094f189101e4d0bb77c0a3972b285f3646e189c6926416c945b681da4be138a2f488ee864d2a2f75e0ecaf6237365aa623afe949e3d451a6038256c43b4432e38adbf6dcb8d3c511908e3781f456703172c02f5", @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$inet(0x2, 0x2, 0x1) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 28.61810281s ago: executing program 1 (id=9593): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) 28.61633969s ago: executing program 1 (id=9594): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) bind$tipc(r1, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000002600)={{r1}, "533692853ca0c254cc5d13a27af96a0999c41ac83967680b0489b4f60a93880eb8ff8bfeba43f6f43459d6437181aacd687b6ee8a6e5279f1a8b84e084e369fdc0da5f7c739eecd7c2a9adfecd87db1997f4661a7ec6e6daf4b7d1bacc5acf2670746bf5cf28795461ae6f4bd5d51864c49f937c88ad5af5660a40f1fba5ef6628d90f20d30db84b04c82a809dade44e46bd0cea6efddac987d3d76208434e2c8d1e3793bb67d8c83e95ff34f27134926768e9f55aa662e5ca08815818c38e74285b2646c35d34433bac369a17aa026bd2ad0c25c644000c61b6b6a4e258f1e10733e070a27c157d206dbfb08b6f7c9c16f149c21114e7378c3786b66039a95c1117cb125ffc97591083d5b25d2f7c53d3fe92c7de5fdd9281ec3127b056eb459721349390f87244b589837d85315d32870d78ad89a0388436cac0e8c43de5c97beb118824e65ddcc0dc4e8e3e6d3bd2036f9f0a23a59734bce5791f1b414ee1a2f0448eaa9a84ee1efeb323259df3c6fe413a1712b160202015b293a2d9df88f76b63e45143f683c8d25b96984f0e16cdbd24aa54acdaf0f17dc9c822b9bcc9c132c1bcbdd9f2574322d93924d171f9ae21076947a03d3b113a7b8343c3b86aa63efb1c7fc7217dcc67cd74144d6932df5923bb6a0b56a9a5f2e71ae18dbe7511d71c8d80a0b7ff19d27b695021014c87163f9093e0160edfda7bd65ce7a19b429c39907d9381f2cde1d8b1885777bfc93b00ae907192ce869eb39c1687d1966b818657a629385f0ef717c18e6569d0f325e49c9c232bd8e698de7646ff8a982caf460346212078b066fc21db61d770e73fa272384da93d42241bfb8344c78f0896f5dcabe6f96391cf87f418854ae8a5bcb97df512a68978d2f5beb6aeabacc58a40f55b09a5947af65823144da64804655309c978e2110f4db3e07a014dcff12c39974841839c999e7c9650fdd254be284c4082a4b4e60e14dca593f3f8e26e1a16d691c1f59fea818550585c287c0a39ba83cadabd88870c58c91903b3920cee79f6c923565b71cf7284c8c6dc04321dc18b8a5b6a3ed3f13484ac9f4d8f6abea9faf86ca955a4de0e6d48917a09042c919437df794cfa4e39f17416cba01bef82c30bc4b4ce7abc38ca4618f2a44378a64d9ca7359a16c59cf91980467004d4968618b2a04c45a5496ae5c29ca18a767257182d59adaf371d5d5b84bee887b352016fcfa6bac117d7782aff979b8d9b5ed43b89797b50c3f6384a04cbe209da50497668575c13fb507aef14e033b93e37ca95948edc5f3adf1c61fa17213315ee77ef2755a3ee5ddbf14eb5d4513f90375d3cdf763f8112be97d79fde754503b6f7da0793d3e5c238014287b9f724a9322987f1e215b49c15282a38e41fe86d1d0cc6c15d855ae3a3f118281a804f3099cea2a31347d93a98943e858f9e37f3d97f647db2ae60ac2a59551e98fcb07128f19b36a8bb8f1f62523100fc20480048115c585d45b3c7c34d3ede49abf93eabeccf626e59c061d71a58048d037b5f0527ee53a64f6d922fed1b1acdce8743652a672fc08027c07ca652875edf3dc407efeb9a20268e88e8a5b4d24487248862e373019d2d5975b3ed00fb95021c14f305fd74e887736784859db4d5bf08ee76ed6da1403df5f271967a7aac0de300427eebb60c3e435b5bba7e386afe61d68826c5996597c809595e351544dde7346de2433643070f0906d71d22878432ff81ac0981900ba5db80eeb0ee347f81649e8e322d865c0b0dc02975d080e9853b76e785a9d26dd30dc41df365f70bad89c8e1102640ade655d0e99111da4dc683345c231964c1c23d51be4c4e000717c748b9b390d5923d156fbaae597c065a028413eb19e1e4520c90dd51f27155997334741025bedf2933e6a0e03509c0213dea908258927940a216db8c68a9378d313e5e961184645f352ec437cc90630bcf583ecf65e61a74c7795dbc7f735f77a64c6ea827d018ea923ffa06f39fd97bc3628fac320eff4d0f619d06e424d9939e758fa00dee86e23e5c5759161c368355575aab4463bc7660b9b63f3d21f2b1b3d7f7f56c5426aea082835ecdb0d2794508a86cbcb193cb054151dbe805915e8248f71460dda307f65670029022eebeb92e3423c009e597ea2a21238cf2b4ff73b3660fda4dc1caaffe12d2c8b6379ce4e604c18666c2bfa5eda88870861f507d7a0f63b6ec4983fa3f9346064524b149f0d0ab95a58a2e523d9af393796573780f4bd4489f3bc7f5fea9056b73c1863341d718246d971ac1c7252570d440b4fabc4f0d3407f3256bfb6cfa24645aa9b523da943fcd1484c1885fc434edd86354e0b4972cab9ae23715b83b052a6c9d23931bd01680907ac1ad98fe94f71a3880ea50e353827b927cfc7cb8d3b2ac1df9c8dcbe608d15475ee5aedeb7f55afa8a4543f5cc6af1445e056d8983c5457a13964bf89399ad9b628e827ff4d0cde76c4b061d554424fb4f8bdf05b0a70d7fd56fb599559ed295798cd0ebae9e05ee00371aea2fff4c41f3a5a8598d8b538a879978ff747115ca230d342817a59e6b09c72a3b048d75ccc67c0acb0ff5b81ed1298490f4c2922503e9ef827a85c6894fd723fd31f2b197ef7cb36a737cfea0ea6094f5a6b672488c12f10ffd77204b4e1451fd58d154eceaab5936ffbd9bc4e856e06871f6ca30772947bafa2c7b22f26ed66a69d10a29f37c36b9413a48dbe867cbcd7811fda7731466aaad5bc4e0d198a4418ff5aac361628dce0854185823106da975cdc21da85889e5620b3fdd5c575fee43c5ed4b75221c7b6e1b002952c914a9dce6dfb8bdbbc1edfde23cecc7813e72c8ac8340db5c94761ecd4b9149fcf7392b5491345ded91c42a8a3bacf5640fc387db8111f2d0e5e607e5215a465ae35f4eec75acfaa9e5e57a803d07627e8fe5549b20b64ca76c01d9ea1ee474b233e6ec98597b0e1858f2d1a1533b67c93ee56e97c9887b74ec7fa469437fb884fae40717899cc1109f405d287b7153506f6e42678021479ee5bac63513053153d5d8641b91f9da9333cabd1f0e183ff7b99755bb79c56f0b6f4dff1fddc513c2196c10f3005d668d6fc932a6aec1ea333b146db3d9f3a51c1ad21d6ee2f822a8b0c9af260f6b8b8687fea248091214721ea2b068f32d181452ae4abdb4f40036eb9ebb5749aed3d5e65169477e54090760415476c817ce76f7c7186a806080e25254f3592645ed745b286d3906cb7c99df4bbba7e60e31daa56576d6a83475d22370519c23dff6a0ae9ddc62dfaca08a50afca3f30d4b1683368aac0fb519ead77227e01378244cf2660d1a7d18a2f7acf892b1194a807ed1e0999df2028ab1c629383412d43154b5f9b1da95743b7d26f2ae353597c416a692dccb1b2030acc4fe4df5832a42f7cc7fd5f64a11ccd5b8eda65dae75875e45f43bf763de042c388ae5ae7e17cae5e8dead3c6a82d9d37c04b5ec18befd91af8e345304698217e28e1cae0fc6506972b18493eb9310c74a6099a0313fa17e5bd86bc3d0df269f5db90987a996a5760cf4ddac6dfa663d6a05570c6803d2a098f288cb22367bbd4d5d953521d3b2b3420a522dd4a51f82423e14a9d1d87a77b42637d86912adce94355187ec58f67babf0770b6b3048cd5c066363ee79902131c1db8dd8b3276b5332c95a9f8ee907355304be7acc2d2dc2040ce024112dfd846452e1d381b8727b4fbddbd45f19699b14893d48b158dbbe0e96f04521f13fa3267803f049e9e9a31bd17590054262650e4ad09b9158199b1a47fff0e7f4c9b7ea0e77e4915ce01427b73be56f570cdd731e413b2a4a980a8f64623705cf19bde3253164660b1981bc762e85d4dff785b560bc1a29ae991ed6b494b014404eb51f24e5c44eb84e24c0a242cfced8e4ab07ba5ca564cea238c304c113f0975c7adce6cb88bf2697d43b1497023e7cb9ad3c1ce3b730e9af7e9428d2d45c35846063e1305d56cfaa8edd2085a09a90e2e79e4ac8799a69cfb8cf3bd0bacdea4ba680ac425abb33a78737cbe80edbb6ee964856537329539d7f787a25ec0c664883a6d9bcb482ca42531139af5472f863a01b47e35e8b4b566726fa2c4cb76cc3bfe281e3b0900e8b02b318692e449c0c2980fc960eca428ef49fcfc482db2bc5a8ffba4a95a57c3f9bc30a5b682534f72fc5047b90978909d8a6d8c08675de28ed77010053c5dc10b142c37736785a85036fcdcab5afd3220c3fe1bbb659fb769a62707bec4ad673975ccc47bef31c0cbe9b156ef79114713bdb2e50b8572d2ee8e70f2e3ab980f72d1e6182d8eee6803b1809514e5292a29c8a272d55ffd02c47d19f215d3948cc3d8b3228a924b5b845f507dcd36e1e0a1b288d61b55208eccb53522ba79029c788b246e5776033e730742d0a4cb0f8adbcde4423fbd18c4fd11f137889eee690fb04adac09aecfb852d5d4ae51d4051c8077cb1b77deeaac99e7e3a105fc59ef8bb8bed685433308b436fdfd23f96d6a81762706d2be65cdddf51ec549262595b1bdfa6f536bd25128bdbe3516b2d33e3398b32e7c9612b95b82b6d80d490a04499682bd2f9fdf694d76a459b1bc918a2f584318a937a80dbb7b73ce149f99764ddda581b0f8bc6084e5430c1d4464719ddf5ccd3fb3ccd3e6cd12f9f0447128a8f31703b01f640a91f7283a4885419b869170a888a7f8947350597db7596c145f12b8bd0225f755d1a89da94b0bd26792f22fe24ce9637ac76adadc1b9bac42cacd6b4d209e36b3f475b007906632529a9d836ad60ebcaec4274fa5c97358cce8c1754652689b297bfe02cab9639e552513e771f84f23301c44162205117e93e9b10d6ba608b1d23ae4b05d3b7fcc12aec79979a46f8ed989608948a867a0e4924d5e25d289ad0c16244891ee9cc3951e3be3d67bc9b45607f26a62b7d105365f6d3807916509c2c493761553489f613b43c2cf748c639f5bcf6a64f9c037a44d47b1715d3543c18ea8117288572e8e061da2285cdcce65503f2fd8b18973f034983ac4f264aaec98eb38a381895e59df71c39d899e384171a2f78c0014a5f2ee4a18b710e32d0bf4311b0f2d8a8b784440ce7f070dac91c8522479f4217f69b46f39eee558e62205dcd9c26d200ce82de91e23a45dbd2f9af393fab1216d6f70fc105c59bc8ee7c6dd789e085c15e5570feecb463294d30b0b2f5004023fdbe0674c80a6bdf769352410e980232b99bc7712c2cdbef57d358d1057fd553744c4f5ad10d9d856bf5db66ac5f991155dc2d6614a076ed98e2b29acd280d53dbe99bbd7fd853b72173beca0bc46cced95ae1a78bfd68c1193aab8347c01bd382b29ea2a4812a79527d649cc8e6e572ac92a644e943fc30311c6ad6d6aa8bdfcd03c007d05943f3de7130e64368b84c7a788f7b6b75b051e066f5fb345fc8b8da7f0522ee33d690785c8260cb948a19ec55b2152c1fec8e0d887780f2faeb700c955f9c28f67c36e21770b5e31be58931d39113c7992a22cdcef18d6ca16ee58a5db34fcce3308685f16c32ddc8ff2bce3f0e1a4a9044250f238105b3fe7746065080fccf0e13d88668b98b46a5bd669d2ce0049896a1a28ced40ff02c853c65f65727b44350f462e9f2f584a0be2fb7c1e25850831f86871ae69d6c2449426dfe1f382cc3b2a288557c2de466461f2a62d2713dd03ca87b9e5b420ea5ddc550d746ab862eb8986e4c785b057ffbddcfd6e2c363ceb791711e885f8264e60f4bcd06889a211dd"}) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) unshare(0x22020600) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xf94}) dup(r2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x401, 0x8001, 0x1, 0x4, 0x9, 0x5, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x80005, 0x3, 0x2, 0x2, 0xfff, 0x3, 0x3, 0x3, 0x1, 0xfffffffa, 0x2, 0x6, 0xe8b, 0x4, 0x7, 0x5, 0x100000, 0xea7, 0x7, 0x70cb, 0xe, 0x2b12, 0x100, 0x6, 0x1bfc, 0x1b, 0x7, 0x3ff, 0x6, 0x1, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xffffffff, 0x7, 0xfffffffb, 0x101, 0xd7, 0x1fa0860a, 0xbd, 0xac, 0x81, 0x0, 0x180000, 0xfefffe00, 0x8b, 0x5, 0x2ac, 0xf4, 0x80000000, 0x2, 0x6, 0x9, 0x4, 0x1060, 0x4009, 0x0, 0x3, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x8, 0xfdfffffb, 0x2, 0x1, 0x84, 0x100, 0x5, 0x252, 0x69a2, 0xb, 0x5, 0x20006, 0x5, 0x2, 0x1e, 0x2, 0xd9d, 0xd, 0x40002a2, 0xfffffffd, 0x59f, 0x2, 0x8a, 0x5, 0x37fe, 0x4, 0x1, 0x40, 0x8, 0x80004, 0x10002, 0x411, 0x66cd, 0x8, 0x5, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030f0000000000000000070000e10b0002"], 0x20}}, 0x0) (async) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 28.61504657s ago: executing program 1 (id=9596): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x210, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xcd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='veth1_macvtap\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x248, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x1c4, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4444f839}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cf745b2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68ced142}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66db12b2}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70bf950a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61611944}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa804dff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c65ae5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xac40959}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x194367b4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x538b2624}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x245c0b8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59efa31a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32863ed5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3da45938}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ada6358}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7383fd00}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a0a3e12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e87ea59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d8ba2df}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x303b6fbd}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30d59c29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78ccb527}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43bccdd1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x496774f9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55f4162a}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ec4fc4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f0ae054}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x248}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0), r2) ioctl$KDDELIO(r1, 0x4b35, 0x2cbe) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r4 = fcntl$dupfd(r1, 0x406, r1) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r3, 0x8, 0x80010, r4, 0x0) accept(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000580)=0x80) r5 = dup3(r1, r1, 0x80000) ioctl$KDGETLED(r5, 0x4b31, &(0x7f00000005c0)) ioctl$KDGKBLED(r5, 0x4b64, &(0x7f0000000600)) syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f00000006c0)={0x81, 0x1, 0xf}) pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000740)=[@increfs_done={0x40106308, 0x2}], 0x75, 0x0, &(0x7f0000000780)="e13fae523e060e0c84fab4895548e0d350cd230f4d94a16e23fa4002fa1a1259ba385bf992cfda3d01def022f9b6b2990835a9cd342f132029b326cefa0030ef6f867d70f74ffa6718e2e9ebdaebc44336857952f3c554cf1204a314757503f1b45f5ad1a1bdc3e8a1a606cd0190a0529ea98aa457"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x5) r8 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x4006880}, 0x4010) preadv(r4, &(0x7f0000001d80)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/146, 0x92}, {&(0x7f0000001a40)=""/125, 0x7d}, {&(0x7f0000001ac0)=""/66, 0x42}, {&(0x7f0000001b40)=""/146, 0x92}, {&(0x7f0000001c00)=""/226, 0xe2}, {&(0x7f0000001d00)=""/102, 0x66}], 0x7, 0xfffffff9, 0x4) ioctl$PTP_SYS_OFFSET_EXTENDED(r6, 0xc4c03d09, &(0x7f0000001e00)={0x9}) eventfd2(0x8001, 0x80800) ioctl$TCGETS(r7, 0x5401, &(0x7f00000022c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000002300)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000002380)={'sit0\x00', &(0x7f0000002340)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, 0x5, 0x17}}) 28.086034041s ago: executing program 1 (id=9603): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, 0x0, 0x0) write$FUSE_INIT(r5, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x1) waitid(0x2, 0xffffffffffffffff, 0x0, 0x4000000b, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 28.021238732s ago: executing program 42 (id=9603): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, 0x0, 0x0) write$FUSE_INIT(r5, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x1) waitid(0x2, 0xffffffffffffffff, 0x0, 0x4000000b, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 12.107099049s ago: executing program 5 (id=9770): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, 0x0, &(0x7f0000000040)) (async) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000b1d000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006f2000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0) (async) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000400)='cpuacct.usage_user\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r1, r5, 0x0, 0xe74e) (async) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="b32ddeb5f307ca9dfc66", 0xa}, {&(0x7f0000000240)="af19533a8164630d8af6477a11580150e07fc7490c596c8ec42578e64bae27897c71e2e18e64991ee0f42da3a9d8ce4f862c73d829dbdc2d81c77d4c0e932f77f0451dc26de1fa30c143eecabad636aa395d038ae1881162b0e773d61f8f8cb2ede73950da03ccf2a06e20ec02a321eed3dba4cfeb205f541fe99165875073b398fd89a32471730c740dc0b229ff9dc264959500e7601b01e53894ab84c4a31028cedb88c80d54dacd4d1b4ab3ee80cc185d87752db22cab38c9b990122906bc80525d", 0xc3}, {&(0x7f0000000340)="71a5cc930a59df6b56f89a681459d8c92fc074408b6b514d22e6bd57769319e32c06d180e89d6022fda616ff85357b0e309bdf376868b701508d527220c78b7c805f65eba5f2c4982b55ee5a2ff984e6bc9304cbc59543186c678e84e58909f45d3267648a554c32e180", 0x6a}], 0x3, 0xfff, 0x6, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 11.965571162s ago: executing program 5 (id=9774): r0 = socket$unix(0x1, 0x1, 0x0) (async) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x4004480d, 0x0) unshare(0x60000600) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$unix(0x1, 0x5, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/4111, 0x100f}, {&(0x7f0000003180)=""/161, 0xa1}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/203, 0xcb}, {&(0x7f0000000a80)=""/200, 0xc8}, {&(0x7f00000035c0)=""/63, 0x3f}, {&(0x7f0000000140)=""/236, 0xec}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000080)=""/93, 0x5d}], 0x9}, 0x81}], 0x3, 0x2142, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) (async) connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_batadv\x00'}) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) close_range(r3, r0, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000001080)={0x28, 0x0, 0x0, @local}, 0x10) (async) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000001e00)=""/4096) (async) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1a1341, 0x0) write(r4, &(0x7f0000000400)="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"/4089, 0xffffff4c) 11.822243895s ago: executing program 5 (id=9776): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async, rerun: 32) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x4, 0x200) (async) write(r0, &(0x7f0000000400)="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", 0x1f000) 11.725744097s ago: executing program 5 (id=9777): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x0, 0x20}}}, 0x10, 0x0}, 0x4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r4) recvmmsg(r4, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000007c0)=""/4100, 0x1004}, {&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000200)=""/241, 0xf1}, {&(0x7f00000005c0)=""/132, 0x84}, {&(0x7f00000003c0)=""/148, 0x94}], 0x5, 0x0, 0x37}, 0x2}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1f, 0x0, &(0x7f00000003c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0xb8, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x88, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000380)=@gcm_256={{0x303}, "ea786d1549aed6cc", "1c57952fc2619063c5e4c7b8eff31d8dc7cea72f5b19996dee2c860bd9920a77", "8144d325", "a8c9ef72d97b213b"}, 0x38) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 11.598187519s ago: executing program 5 (id=9779): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380), 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$tun(r1, 0x0, 0x76) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xa0, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000980)=""/4096, 0x1000, 0x2, 0x29}, @fda={0x66646185, 0x1, 0x2, 0x35}, @fda={0x66646185, 0x9, 0x0, 0x4}}, &(0x7f0000000100)={0x0, 0x28, 0x48}}}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c"], 0xb4}}, 0x0) unshare(0x22020600) r3 = socket$unix(0x1, 0x2, 0x0) flistxattr(r3, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r1, 0x92676000) syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 11.592106829s ago: executing program 7 (id=9780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000080)={0x18, 0x6a, 0x15, 0x8000000, 0xffffffff, "", [@generic="894150da2e"]}, 0x18}], 0x1}, 0x8000) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x2) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup3(r1, r1, 0x80000) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x100}}, 0x0}}], 0x0, 0x0, 0x0}) 11.460330592s ago: executing program 0 (id=9781): r0 = syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201200001018610f4205ae06d6c010203010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x814) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000e00)={0x40, 0x31, 0x86, "1df36fab4c989968c292b2310070d5ff0fca67e5306b8b29512ef1909e0a2e83e211246b09bc895b865d3de3f8201299b081d83c2c737051d07737c4c7d2719b23bd47d91ab19b6ee81479ce8b569a4379b88b45ef7d99be3ed00f852c8757beb65dbf393854da957c1d6cc86c4142e61bc91491a60ab280f2b79af2fbd315b86b35d5cc259e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000540)={0xc0, 0xa1, 0x4, 0x9}, 0x0, &(0x7f0000000880)={0xc0, 0xa2, 0x2f, "b63824dbe06bdd0d3d1ee84745523b764985e69e8148e1feee93e0ad981a69a1fa0523db7a706ce23b07643680ffdd"}}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x8008770b, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 11.362213314s ago: executing program 7 (id=9782): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x180) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x1000000, &(0x7f00000003c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x10, 0x1a, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xd8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) 11.362012534s ago: executing program 7 (id=9783): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x85, 0x0, 0x7ffffffb}]}) (async) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x9, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc9, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, '\x00'}, @local=@item_4={0x3, 0x2, 0xa, "2aae239a"}]}}, 0x0}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) r3 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r3], 0x20}}, 0x40816) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) fadvise64(r4, 0x7, 0xbc, 0x5) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x12) (async) mmap(&(0x7f0000837000/0x1000)=nil, 0x1000, 0x1000002, 0x8012, r4, 0x4580b000) 8.947075973s ago: executing program 6 (id=9784): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000200)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r2, 0x80407000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x38a}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x18, &(0x7f0000000000)=0x800, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 8.929076633s ago: executing program 6 (id=9785): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x10201, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000040)={0xcb}) pwritev2(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000080)="5abe60258957063bae27ebc09909c8a866f389bdc2371965f6fa2fbc475354dc4ab683ccb591a9bc5c1835d78b92a05eef76345c6c31a64904978225fe3888bf5076c245fe784315c58ad22a6bef806a03ca64224121870c2d6c2e1d1dae2228722c61d8ff04140aeb3a9e806b843b8a01ceef", 0x73}, {&(0x7f0000000100)="e0839ce22965b8d67b31a583a7da402766cf19c43f18ed7824e6de9fb5e96adc386053bb2f3637073171911332d553a005f177ad0e995818665b1556c335c1c3db8445a2391fc50cb50992d8e3afc24bc3a758a0cc8171ac3705ae792e3b0021b9e8765529803567513cc1f93a4d9b29eb2185b2a474462e58b6f06014158d02ac9c3c7a81c8b853aeb95ab0d4164817591742719c2cc1985d11b11b848351a7e742d3b7a65fdd6ffca5bfbd85dff2c048ccb7374bd7d64b88063185ea22a04200e1e56009b9a824e46e4725f2dff0c0232c23f9ea41aec99cef5408f58bca0e83c4613043ba0ff6364152ea", 0xec}, {&(0x7f0000000200)="bb09bac067a9a68e91b5f9d9b67c6a65ef151d66d29ef34334579d3f4f9af57d6a9cf2affd2c10577ed64c5b16ae8a22b46de871dfca5f7f0e92a75653489f1394c52395fc2bd63205e56a935437269a6a01db4172d0f507", 0x58}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="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", 0xfb}, {&(0x7f0000001380)="acb7718ab6593b31deb9e8ab9f9a38a151043c7aad78a1b94edfadc6e5e9b6", 0x1f}, {&(0x7f00000013c0)="670d422beec04c3b89a1aff59eb9ae3fca2e41bc7db52a2d75d67bb7efad63378d905a197a3a3fb8af9f96114cbf5dbf2a1f00ce154fbace573eef39e970f080208935c6ab8d4357baffd542ef00c62e0cdbbbc9ffba9e9add8a6a016c049793bad3ec6dc77c69583388c3adb3264bb8c80e103aa02830d259ad972718878e58dec984c16276c33176863e739df027c401590cab1c2d116ad6ba59c61efd2989e922c054b5a9084bde4bc2650d4ac2005935f3fb612efbc33241152d15c92566eca1a83a85e59d982834fa6ea9d334ff15f10c272859f2e5613d988f57dd27ebc9c336f2b1a6d6f178c7bc4f1b62bfcd0e426997a9409ca134", 0xf9}, {&(0x7f00000014c0)="18428aaafc48ddc4b358b4f049ed1a95187a147179b5012fa84e4454a8fa3323051b0eff0c2f43b7cec31be010c79f480d55ac45cedd864796b79162313b011a5e6fbb5e6ea067b22b2a9ca216011e770e9cf58c2ecb98a17ece9c64ace2109281f4befce0e4fbcc500c200b8941a4e22c73eae87a17e5d4ab7a03fb", 0x7c}, {&(0x7f0000001540)="dce2c59bbafe2276b71f04bcdbed64bd08511d676b17041fed326fe23b24e1b9cb3b538710621517a97af6f3496def40ca3b6172e2e0db5c25c9dc681ea5a3c48e63a02e2733b97cb0cfd73dfe1387d465c6e21da2af5980730c8d3585b828e4c4dc201a1faa47488b5fee171570f7c1a1dcbd9d6ea159e1b1ba6c6bfdfc5361cb0bc80e57047115f49f03683d4c2d5c5e", 0x91}], 0x9, 0x5, 0x9900, 0xa) syncfs(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000001880)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0xd4, r2, 0x804, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x50}, 0x80) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000001900)={0x8, 0x8, '\x00', 0x0, &(0x7f00000018c0)=[0x0]}) pipe(&(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r3, r1, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000001980)={0x9, 0x3}) readlinkat(r3, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)=""/185, 0xb9) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x32}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0xc29634cc, 0x3]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x34, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x80000001, 0x25}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000002000)={&(0x7f0000001d40), 0xc, &(0x7f0000001fc0)={&(0x7f0000001dc0)={0x1d4, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xb8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4f6099d92253c821"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x100}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fd25ac6fc11e89457d6d8faf24e60201ffcb3fdcf4286a43"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7e8c8d762ebce36a5263d373fed6fce9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e9f75ac92e3c7e9f4f72a7856e17b50c55082d0ec0ea1be5923cbb049f162c6d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f75aa6fe8dc1953d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c14f780f7d4b1c97c0eee5e6000d5a81d8cc683f49154f12"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d113298319606ca95d1b051f0c0c4aaecb32344574fbb0e0d257c85f7416e174"}]}, @NL80211_ATTR_REKEY_DATA={0xa8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c31a6946dbb16e8fd957cf006510a6c486eb7d8e9ecfbd65"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="aaa95f87c7408602cc683b2c40172581"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="768f41bd58cc5957ff8628569b356300"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "798fe2344d384d8f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="50eb238d596ab630aaefa8c40a84fbed"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="268570428fa77a2f5ecc0a1ce67ed004ad1af90376a86720"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="257b46cb8d7f29027629db17962f2872b7db4813bbdf1a6e"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6879045d75c9e7de03e0e8ebf631565d1b5034c3320312cc"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="866d13f68684448833623c13512e364665d9c8633813b67a850727eea76addbe"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="448d13f1b29e8ee89167560c19d8b948"}]}]}, 0x1d4}}, 0x40) ioctl$BLKSSZGET(r3, 0x1268, &(0x7f0000002040)) sendmsg(r4, &(0x7f0000002840)={&(0x7f0000002080)=@l2tp6={0xa, 0x0, 0x129, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002100)="a9135ecd47d2d5d370eb7db463e613cc817c67b7d340efe5a4e7132c373db2f18328258e50396bd693f50514aaf7da16aeb5c8c9225f46181eb0e56a86aae2fc2134f2af1e55267a11", 0x49}, {&(0x7f0000002180)="526db93a871558c44a521359d4a1310dd6512ffdb703a4f858b13d170d898446f8685827fa6def97b582fcc43b8f6472f79ef84b3a846bdc3a50a9c540ced13672b5093f6abad3f222d3ede12a4316f5f8799d6a8a6b0b3b10cd25878bc5f8d024bfaf9650c4bf3a23c62d667bb67a59dd2695ef", 0x74}, {&(0x7f0000002200)="8b3f2bde2d013c6147bbe82764b0269d13a39ba952bbedf83447818024a10652d5ede886677a1660103f193ac00a048dbf6216f5e6ec810da115dcc68e514468", 0x40}, {&(0x7f0000002240)="900c6becf5ad01941ba3d747e21c33130a147165978ddd0d8f735349bcedba9fa82a11e4fe39ad7336aa3607fa6643c6c9ad94ecc15e6ba97d026c4aeb2cca799efb8efa50b9e4158d164a59828273099eaf0b3ff7ddc43d904793f1cc896f3afbd764589c1f5f2efb34ce7d328a1edd2180a7b404b3a4c572750d783df344cf7c003be4f6840e77519d8fc5bcbe02b5967553bff8d4ac9c9121d69ae345aafe1c019c0a5e84b9a3cdcd9c84edbf8f8d2d5617bab6427e61c2c2bcb83dc397999014457e966244d357ec4c9cae744f722ef1f99899eae4c5ebd0de3793b00a2a1feedbef5034", 0xe6}, {&(0x7f0000002340)="b76a06e01b3926fc3ce2001d87ffe784187f38ced213fd286c17300e2092c87b5477e3acbe9707bf4a54533c34764b3f2234dfa0d0fa529bb298aafc373caae53751125531b10dd66980ea202980c489c79fe53eccb24cfdabf0de65da0a90b4e6b988a9f76506e426e095375ee90a5e3629a927ca5448dd0f9a88f45ac3d80912c3faa99fc95e1f9fbf7884d35c11207f5df30b82c48ab3b575acc8afaa7edc202bd54260528be89ab0204e7c2ff0", 0xaf}, {&(0x7f0000002400)="8174da132830a880bd334a4166d618362f5e2d98bd58f0a2ce1834d6e8a084d0417d4570cca53ae09b01afaad788bc30ab4ff246945ecba3a9f08e003d1f9270b778e8c5f9386fbfcbce0b9fee04568bb229b684f80c4a32f1e549ade60339237642f1e85eae8702dbd04147ae7dd4dd3e72f2994064a322918aeb4627b8fcb3b76eebe97635c187b59af81d9eb0f048d1f3446ba4a5579f90df43b8bccf873ea4e7431a3875507fe0fb6043bb8594cc2ca4a1e3a833ea2cfd7f7bb7d11e052a211397def6134f12d64238f305ad367e0cc5", 0xd2}], 0x6, &(0x7f0000002580)=[{0x70, 0x10f, 0x7, "5b80e7633f72883184bdb1324793bc5687575a4e498d3848a1360b34582881486a16020cd9f086769501d93292bc07becb5404e7e4b2d83be7779af888d2ad690902b8cd679395bd493eed7763d21d6e0202cb9b23924c4ceee54ea5"}, {0xd8, 0x104, 0x0, "9499af9a2eff0552daae572d767a9e5b6e8b2eb89f7ba7310fdbf06ff8d3b5a0f9a95590769fec7ab39fbe1135d17f15b5c542b91d4fa309713a8c1a020a8b2955a922b9f4cfbe9e130598622cbe5e18672e5920a07fbd096f8e28dc82fd6f8b938047f0c427dc68743a8d1fbf2069167557509c68fa48c7d304cc9affb79e0b144a1b3b1d1144322695e8d7dfaa9f9d4167a24e0bb9833227e1151edcc0ad7910f5f97169527c4e8a9d6eb1b1987016db081ba5e732f7d05a5b3cc6240c9b473829"}, {0x28, 0x102, 0x0, "0e6713bd17660ccc5fc33cf1f33167f31e5830"}, {0xf8, 0x1, 0x4, "7163b2a2822b87335435cd124a8883517a620e858f26d648c2f9b694f924513d776c77cef01faa5d45b9fe165ef079c4ac2fcc0789a3cf04ee486202e0e17d49460a4e9c90910d919b776dc54c888cff83e03b56a69e244f96604369c7262bc6a1e5dc0d489ee9f5f9531248f50cdd3084bd114bf1b7968727f9282c406dc25ffb40519206f57cd6c6722d39720ddfa297b0d010a77f189e783321deafa9c69bb1423e8c99f702af37dca6266439fd2eda4c57c2c921d45ec81d3d46285833236fb30863486552d0b085d9b5220f4bd5c94156f4cbd1e5665be917062aed7c642788e06707"}, {0x28, 0xb2acaecf5824cb35, 0x80, "395ce4aaec5e260d293d4e0553c8ea27713d"}], 0x290}, 0x10) fcntl$getownex(r4, 0x10, &(0x7f0000002880)={0x0, 0x0}) write$P9_RGETLOCK(r3, &(0x7f00000028c0)={0x24, 0x37, 0x1, {0x0, 0xb, 0x7, r8, 0x6, 'wlan1\x00'}}, 0x24) r9 = accept4$tipc(r3, &(0x7f0000002900)=@name, &(0x7f0000002940)=0x10, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r9, 0x10f, 0x85) r10 = socket$vsock_stream(0x28, 0x1, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000002980), 0x10000, 0x0) ioctl$TUNGETVNETHDRSZ(r11, 0x800454d7, &(0x7f00000029c0)) syz_genetlink_get_family_id$team(&(0x7f0000002a00), r3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000002c00)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002a40)=""/167, 0xa7, 0x1, &(0x7f0000002b00)=""/204, 0xcc}, &(0x7f0000002c40)=0x40) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000002cc0)={'tunl0\x00', &(0x7f0000002c80)=@ethtool_ts_info}) 8.870209424s ago: executing program 6 (id=9786): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4000, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'vcan0\x00', 0x1}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000100)=0x7, 0x4) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.412658793s ago: executing program 5 (id=9787): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x90580, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x201, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x40003, 0x0, [0x80000000000004, 0x800, 0x401, 0x8, 0x5, 0x400009, 0x4004, 0x7fffffff]}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000240)="660f177100c1cc330f23230fc72e9a00200000530066b8db008ee8c74424000a000000c744240200700000c7442406000000000f011424c4c3557d908f000000930f78a79bed00000f01d1", 0x4b}], 0x1, 0x23, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = epoll_create(0x3) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, 0x0) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000480)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000004a40)=ANY=[@ANYBLOB="941b00005a5ad5628b992cc5587537204db70dd393064a924a883c3f12da5cf5e0ec499a323ab0d2dc02d930d800aedd51c68d30dd9c8482978cc0817d7dc47b0200000000000000d206bb89bab8964f540b596b2efc7c77c6373112f4a1b9cd4e", @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf250800000064010280f90005000d4ba8098f5409a2e30bbce5a593f90bdb3a91072c1c7b63c6e9d7530be6fe01d76cbb9fb215e1a68e32c0d6d0bc00bae05a5344300d4884073f9205721f9ab72c0c5234351147fd73117ccd46b0286a561fec54fbc8999f2b26b5e35bcfa6e1d2569042cef83fba739f8e345f243103dcf9847b5f4fbe8d35f2836b916cd23c0de6d272cbe2cee013f654b79571be9e0ae61e6262098a60d6736b96d1963fe69bca2f3a54bd9c0433004a277e8b674b4d10365b3bc0792efb64f8b99c7e1cd1beb8ba166f2a40f5a1e735b360b512df73aa9868c6a16333c8508e5faae224917fcb42ffdeaf0910590f4287b800471c4da9c340d80000006100050018daa0db7961b79e10902b2e108bbd837380cf9e3e1a9f95b83bb72972f8233594c10bd35a34f90e09058c0c553577dbb82cc7588ae0c584dc368fbd384e2c31f8f436096de9a224d51c5fbf164136843cc0459ec485b79b3327902be70000003812028008000200060000003c01038024000180170002002e2f62696e64657266732f62696e64657231000004000300040003003400018005000200000000000800010006000000060002003a000000080001005500000008000100feffffff08000100060000001c0001800800010001000000040003000400030008000100000000004800018004000300170002002e2f62696e64657266732f62696e6465723100000800010000020000040003000d0002002f6465762f6b766d0000000005000200000000000400030020000180170002002e2f62696e64657266732f62696e646572310000040003005c000180170002002e2f62696e64657266732f62696e6465723100000d0002002f6465762f6b766d00000000080001000700000008000100ff0100000d0002002f6465762f6b766d00000000040003000400030008000100bff5000040000500ae2d591dc85327c5cc0044a0c957ab8ce6d566a1c10c25f118551cecf28f448f279201fd2ff6f4c4ddda43c396de25a496e89f386f15ce1744a11d319c00038040000180170002002e2f62696e64657266732f62696e646572310000050002000000000004000300080001000100000008000100f7ffffff05000200000000000c0001800800010009000000100001800800010000000000040003003000018004000300040003000d0002002f6465762f6b766d000000000d0002002f6465762f6b766d00000000040003000c000180080001000800000004100500f8d4e52f5e77972fbd09370548b2e3789b190704e3f79498185daef1dc7d43108a629557fa71f1f269d8c2c8d9618297be09a0e40064eed5645529544aa5e7fce3b1a32a33287a7b4781888d16d65d2d52d8557a18a510d7543e60476645e85c81d68e6a18238738c63000eba054cc10249df084fa1a1ae6e935ac25ef0b48f6a77089470604c8c469dbf9b56fd0d179ba6399bfc0841535b8cc139e9ac23b30b6199c7ab1709b5f1a029aafa615e5df7900ebdcc50278db32beee047aed4e92e9a4b5126aa7dad600410b68e20d8b740ce9b0e52be8062ea4ac456b84a8fed3ba6efae923a12cd8909ce36fae6dacf66377266fdc0b2ce283d1e1f355a5f10824c46ac2b4731055938d41f20c24b4d75cd1504cb0c54b700c2e754301bd9330bcf2462821eced882ba65f2fb501c513d34a5183c8dcf291cb39c7f52f8c67d0c8f5b3a5519f04d23c0bc5a17abbfb58ad4abf8d62b8025e22cdfef870b1c26d24fcac0987f8bd266af7721a4a9e1bbf0eaf8ba24330ec85812d53c35ca6e6a7a17de1d1ff4eaed2d024e0bd53b037d127da807c2dc14077f2c3f8c10996959d79ff0463176c10fc0b1f6dd4aac0b45385d3058f0af600c2f11cffcaa69ad9c3b9bcc481baeaa70fc3d1f75e194805923407d623c0fac37441f390438ad6e5142e4b52b3fb8a3b09edf2c0c9a43fe8b9b066b1ab19f175129d9d926484fc28f18bf31cf7716955df6ec4b2ed0e8e6ed862076c3bb346ea5947c7cf71bd619161aae1814020c6fdb589d039ab7e37863119057d739465736fe5098273e7d562ce5cc505a56af35bf14d76c76ee3acaf975feecf46df739e5bc98225e0b209f2f32c92791e04fae7c0675ad246aa542a5e862b008f001c91d68319e84e978dafa622a40686143423555e43f62c25de3ea4b04261e235ed231327f9792b623bad1a83cb05b3a4a73c87f97a500f9867c4e775ce791d082743653a6b67d41a931c352a143e1eb3922fc6f3f107a01e72abfd60aa41be9cd4d1914470f6e669623ead03bd4edd2788bf2d503ba9ff145b509f78c80a123710c0f4d600905b8cdf6f9ed24de0631bb4518f15384d397a6adca1f177cfe1f9e944879d5cc82ddb5c21577d171ad6e28d1cea9a522fb17f49d59d4b5bc7ad2827f5a262ce3cbe537c0b409f14efa115c03d040bc87931e093ccc5468335e2b197d6dec32e691c13d5b5d45ccab183b9f0c832e80b75320566e14ec57ddf29e34f6af4eedc9ed4043d84e651cd54217beea5bc7de3489e505da182f17327cf6306c5ee8f253925b98caf069a63e7b3813ac05f1eed9af4e75d935a644358686ca7065f54f773c1c05ad4e8e421d80116c64eae5cad85b17336532be4b5b7814f9f17b0f446b5644605194c7b417b400d4ba6a1b5242d4a97a133668783397c9e67ffb1f048fcb295aaf9c99e7d2b217e480ccb1344d43b1b4033f571d8dceb5a1c7743ab1402f3d3532d965eb5f989cca1f9085994bae176e0ef555e543adad0a6025edd2a96b988655e04e89d0ec2376430e2952298e0fe3b36bca651c009938ad3daa29e2dfe2d088458b9637aa64c067644a2761c77ab81ae17dbc80664caa34910f9b77d339396c88c3047befff0e105f3c528881c0c8a6f9eecce40e886ef5d8ac6ff563073b22cfe48f71992c2bef7136456931dd268230ff569aac62620958ae244cd4cfdd951c0edde615c6253676eb9273d1d15eab95b14e4b1d91da79cd1c745fb1d3f22dc75cfeb3bcbb672f576f3ea73da4385aac98edc23b12d305ece9a2f508f8544bbb6318d37de24dbeff82c405894195a926e98189b3449c2ad47377b19eecf38755d0ab0f7907d89e26a35b3b421657e518d409f74955e9d333d79507b2443b58df213ad31616290d352998729aa15d805d7ccf2b046d3f85907e2267e24bf6dda090987b4dcbde41ae813efd7a7680aaa76cf89447490918e14a06ba3f7d4cdd82b2ef59fe8f2e78ee4632968fc7c693313e7f8f4e726e68367c201e6dc9917cb0eb2dc6f56a9c4f36853403137c43f7873817ddaca2a989cbb42ce73a6f2873d7fd9a6ed63b6ef527e955876d2b3df28173ecd0845accc48554b57fb415b99d10a2868062cc7c36419b510e34c7be0a4cee9f7ba9ed17c61849b2d0f2c66f28b442d768fa5eced907cbb352337ed199f1ff989f5a3852a3a44f09f0219efee4276907119b1fa97700af4bc2c8c2422635a12c131472f9539d6b0ea18fb267fcbcccfbbdf81e1043ee962a69a13c5771b15764c29d0c96242c39b9639bf550ea2a354f7142e8fdfc46d4cb7619964f2634ce2e6730ef83527c6fd15e2aafb95a0082cc91311168999e8a95a4c19d7c323378068cf708ff4456c0ffae3f161da6d1bb1f5bb2c4c57c8198a5ae1e418d0d3726072e503e17c9f9507813e5f40499732d6fc2426d1a1dc3f315e451f28a19e1848df0ab80700004c35128b0a697b6b595ffcccf826b1c00d7ed47408cccb37bed969518c1b244e2b190c4057ffa7deedc602897c5dc98fc6db2f4ae1958a0281aed73db6c5827773c0898221113fda8dfe5be658f7ed99f46b2ebd1704a84a575b414a375897693850f0d96cae019732454e8ce7ba250b2dc123c55b81d1495aa8f36d0cb23fd3d918b2362058802e4ca2ad2b4dacb95b6e04f32b5319e77d3abbef2c5df03d27fbe865a530d2da506dfcda76f098da9f5c79b13748294c23e0a7a05e72ae49c71338247f90ce65b536e4b2ca32006246dff339a5f8c966b1390e613c8e25a55fab3f087ea152f2d9ddfa154ea3e7fb64b284de28a669eabf67bc1b71b4b760b57daad4561aed01cdcc0ee7c8fd9f96e464759e0e08749c8f525254e3f3dfaa18820f64b00e2097d9ea9a49c0fa500f8da16b4b430497781b606aa0ccb315fa84d2944ed63d69d209dc279c3bf4a618000dcb375c35003956185a06a092254043e54b677019b1d5b373c0616e12fabdb11e48343d554c53cf8029ffed5e631ba9a75ad1502b4e0d1577d0389859fa43bb8f0e3ce92439f7a028d69851b178e7fd4c0e060c1b425c5e0dacd5a027f461481bb715f1c9533534622e2d21a686d2b1504791ad5ec7f519f29c86223f76ed3329bad3374408e97a2b830e8294954225e2762df8fa076b0a0631228fcb6ee912ab62a1a2e293b63fbcc36d2446d80fc161c86689243c09f3eb30cf2c883e51485ed8f7ed2ddd10384d35dd5757f1e402f35e598f70e2e1b840480d81304ba8c3a3dcf049c8def40a3a5d804ca177f0a49522aaaa844d2eabf15d8ec69e54f239b530da6efede07eb51bb325443f4a665361f5641c6b16b93b61527fec744e54ec1b9c0703ce4e8948cdd11ee8a3748e8cb2a898b3cfd2b409583b37c4a27f3e184d6a5b3e5b5508ec44f0eee5edb72b67c19905efa6314859e83bdf0499e11db697acc1e11c48db3b94ff60cf9be5d99980c9181a0cbea687ab1bb15dbcb91ff72740ced2e2f104fc2e50a93d47f4ac64bdbf0f390c536361cd9ae5b2f4ef0b12ad5a28012e284a6c6f65e80800995e4fb1008d174bce3233b96395ebc21786b3b13ffafb3715fea9b8c8f41dad2066480835788bc9292471dff001057ba38c4f52c035259d7941bc7a2849ba6d5aa5303ab5b919bbbb8d1044fac23339ddca229734b50136e0d96670ccf437efe0a6fe48a86f45bffabd3f939842ff3dad90adad52e5eb66241bee50af91ade715d675d2569ce90d4bed32ed59d0c3f99c4ea54166e8e22b5188baa364f669144acc576d3ace21cb8bf2db5608b029576dc7f81b376c65e34ba2cdfa424501589e2f627d1eae5cfe67700731abe0807b76f7ce2cc49e6cef49b6b91799f1979f675385a43c4373b3b458820fa7e638e173bd9d588c5152d88655e0db42b5fd4164c3cbf31e2bdc36f4092529b978574e251b19c1002d124a9f1465269b7e0e48ed3c8b2cdc15e76a88a528722aecfb8c8052f1e53bb9b90a60cbecb2c8295a599e01a3a2225fd59c4e29b4dea3250098fe855b6a44d3d2551fa74957173f3fc435e3e6a90fd6f8d1d62f9c737395882cf466847db77b4d16b38f809d790dc21d8dccd6834659f41981b8206f28b2965863500444e6f32ac84def830af223f832f3e590dfec0f2dc51600ae939fdedbb837e62f65141abc123a311e8e7b4cef73bdb129fd8f53c78cac8714207a3eb94fad7a3afe74127cab77a04dd850848404f9f3ba76b5786e4f93431ee44f6e9416cd8fa0efff6aaed8cc909d72fe9dc3f00cdb7f266e6c079410d04e2caa474fee5f2b5b78c4ff3815023f9e249a89043d27ce9be2d92a39c0f116bf80d7e93ab758e453cbebaf08d87f84d3892b5824e038f510b0f474b60c7dc29987a87b1e3964a0af0dda338dfde6ba891ab6ab2599f73e366be76c1fa0975360bcecf2f1474ae99516a3fb0e1ed08fd855679142a8834c7eb9f63344764b355f80ae7e896599dd2fa6c86be76d6b3e2248a8e32fe10da38ab9fe00aee6556e247dcd256dc5fd167cd594fd461e9e8c717b87d7bebc6f362ec7d459daa6cf79d4a6d17a8a9d046b6e7cd37ab9eb988ad7b3b21825df16235c919b6d2fb888aa9da7b9147e2043af35116f97a3bfc85df673eab882eee314fcebbe11362acb97f6962317e521b804f6b692d45f5346eeda9061abafee0dc1987a1721edaf8509614a052af47b34f5fb607146197377ba3e59727f88a21aee88900f6f62bd30f1947b6f5449a89dc64dad12574d3c626eaddc3da5bc82fd30a3bd39a66a72071bd442830df95ab510ff469909a6beb4fc89fc3afb4bde73d616613c8b5596b40901f342531dc30b8531ba73bf4da54237e817a9f8c817674d8f5206adf83597101cc56db98c1e66590ddf9dd055ce8d9eb54bacfcf993a9d3cf7cac9dcf2c3e3affe5010ff4b322e3a3e64311708e2650174db4a3881859eafea4c6d7944ba3c8ea00764870893f2a783384c6256da81bb58fcba1477205e47f21208d5cc9b066f19642c670bad5027a00f66a33606bea2671e3129ba2e2d202860a5a510bda5b0f44cf2afb4d6838c01c9c93cd655fd2e1b1ce892ffe7eef6ca0e8ef85bcb6969e8db816864631bbce880aae383f5dce648319234456840cfcac0929eb6e0ca08b58237d841bae58a978ac61bb7ca195306edb974b112950f3d870c2daa7d5748d61e565a294c2d79202103563d51b87822d4b773346b82c46262f29bbbb77dbbf8092b8223cc8164b598584abeee0202ad3609353735cacc4f53bbd80fd21ee5b924eae44348d4efa6377baacafbc0680577643b887ffa1adaa198787cbc385d0b5bc3e0921e57981b700be44ff89d60192e396397e2cc9d4763433ac7adbcc8972b52967448882ca041e76abfb4631e2896df182dfe0f3da5e6ad110f2da308107ec7dafa01e515ee5f0c445f996a21eb16ce4fa1170b4da6b89cc4c561ffd7aaad64cb9639db400dc488c9f5e1abd0a89463af5696b2e978ca930d903d7546487ab0e550c5b8ac38f70687d224cd730fd03c35b91ed46d2c09a9a11407612df3589c002801714b1752e8a36525203cdffd16e07cd734b77a16172f294d6b002f181951fd11cf5c9587d7c562e1a15b7ed365f3b2f6d7bc374fff006a2fac462bde159ee08845be35dfee26c45f9bbea869d8a8cc81a93b026eecd4150a8bdf9d2aa9416c41d315c1159672cd9f3abad8aae8455706f74cb886508e3dc1f969b6f5c6fb4afd73a9972569a023a198118366faecd1128480f6691eda2da263616e04000100040001000800020008000000080102800800020076000000f70004009f461c58d364c2dbebf580cd52159a5565fc50c434d4fb6f5ca6be53f9df6dc9134ee0dc657aa36b147de6e00cde9d164477d4c2c0017ff10c3daad636f5467ff611367d4adcea9be816f83c59a54a436fce8f081860657b4398941d3725fa9a250633b332c24d5eba3de19a1d27268da52dea56ddb6aba7ad98816e47fe6bb6cb8383b334e452c7b075988245420c98a31ba771ddfec302f4f9faca5d06c52a26ce83aeb4549edeacee053578b4b1522a4a5a33c4032d0c12d86aace511d00f7d3fc4a7a0bf2afe3014c9c2fc52fd7872428652356d4a3e34a6012bb77213e8d5ee0b69d9d3741eab457714ef3a4f7a722cd30004000100200001800800030002000000140002006d61637674617030000000000000000078050280280005007422200f3a805a09c81a785a14ec296e6ce46339a6f07df7b757f05a2d549d6cf993d44078010380500001800800010003000000040003000d0002002f6465762f6b766d000000000800010000000000080001000800000006000200e7000000080001000080000004000300080002005c5d3a00040003005c0001800d0002002f6465762f6b766d0000000009000200407d3a2a00000000080001000800000005000200000000000d0002002f6465762f6b766d0000000004000300060002002a00000004000300040003000800010009000000100001800400030008000100090000002c0001800c0002005b2c272d3a28250008000100070000000b0002002640242c5e230000070002005d5c000048000180080001000500000008000100060000000800010090b300000c000200407d5c292e2d26000800010002000000170002002e2f62696e64657266732f62696e646572310000440001800600020040000000170002002e2f62696e64657266732f62696e646572310000170002002e2f62696e64657266732f62696e6465723100000800010008000000e10005001f401e22838fb2d1a5788458dda0679bdcbec2ddbad4d87e0f801ff81841ae821bdc7f7fde2d7f100910baa73f0a5fcf6cf7760f83fd3361c1cf65b4d3eddad7d76775e0abaf1268ff6bb90be9fb23a079bcafe9a67260ff8d11fdef541929d5db930b8aa30064bc46744ad4ac8b9d16e99c08d7035d250feb7cfdbca9bf89b2cf10c66042e38759de6b66ea0a636f42b3bd9419f423c4ad20e3e4cf99d9708b66b662b0d1e34023b0089976a1e49bf5419b57ed3ae7f8c25ad947338222dcd18cfd30a9d1de4b6ebbb6aede93101b2beaa208470ff14dc7150f2dc0e600000008000200060000003c01038018000180040003000a0002005b2d5c2941000000040003004c000180080001007d0f0000170002002e2f62696e64657266732f62696e646572310000040003000800010003000000080001000700000004000300060002003a000000060002000b00000008000180040003001400018007000200292a000004000300040003000c00018004000300040003003c0001800d0002002f6465762f6b766d000000000800010002000000170002002e2f62696e64657266732f62696e646572310000040003000400030048000180170002002e2f62696e64657266732f62696e64657231000004000300050002007d0000000400030004000300040003000d0002002f6465762f6b766d00000000040003002800018004000300080001000300000004000300090002007b215b2d00000000060002005b00000004000100a801038054000180080001000400000008000100faffffff170002002e2f62696e64657266732f62696e6465723100000d0002002f6465762f6b766d000000000400030008000100be0a000008000100020000000400030068000180170002002e2f62696e64657266732f62696e646572310000080001001af9ffff0d0002002f6465762f6b766d00000000040003000c0002005d26212d27275e0008000100512900000d0002002f6465762f6b766d0000000005000200000000000400030038000180170002002e2f62696e64657266732f62696e6465723100000500020000000000040003000d000200337b3a2d5d285ec5000000003000018008000100090000000d0002002f6465762f6b766d00000000040003000800010081000000080001008000000048000180040003000500020000000000080001000600000009000200262d29ac00000000090002002e215d40000000000d0002002f6465762f6b766d00000000080001000fe900002c000180040003000800010001000100080002002a267b00040003000900020023292a7b00000000040003000c000180040003000400030044010280180003801400018005000200000000000800010004000000ab0004004659352cda9274cbfd11695341943c0d9470c7e123f8d496b4c2ba0c36d107f19e77051888e0dd3e1e276957c70f1f4767463dc772661fb75f8de4329d3825cbf69eed76e03e2d3e4b521848cf3d61b2e88b7ce9593cf3a61969474713a8c73c29a7b00a4dfb7838f9df956528fe27f6d5d69c7da8e2545700d7cc6c44f2a2f9a2eb13d113a7f86a4980b37f2ca18a98b5fbe2c3923ba11e1a86a31c03ccf932b90f345f587e4e0063000500c67499e4d010de3dada96ddf1f14b764fc64b9be9342d9bfffe9ee96a06a09200db519109207d5a6725bbe33382c38be2d6f5f691c4d256d8840599139e3a17d9a2ea067743daa7a286b1fb2b7f01b45b836a862624313fa042458db3a7db10016000500788a4703586bfb094deb0a6e3e79ac7853ad0000"], 0x1b94}, 0x1, 0x0, 0x0, 0x1}, 0xba05140aeb0e39ac) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r5) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r6, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000801) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = eventfd(0x1008c69) writev(r7, &(0x7f0000000380)=[{&(0x7f0000000100)="c9d2fd7cedcad16f228e21da7f00731647c96b908320f392044ad53a3cb35a4b7cb4a1f726b29b0cf8dcbd4cebcaa3affe29b2acdab0dfa3d3e9b6b47095c232249aa7d41a312cb7608c7ccba83ab060a898842c1f671b9b77cec456be0426db62f7d5b53ed60724452669ce652864db1d602bf2cfebaec5784dd93ef7159043c6878e33453e1fd3d3b8dd5b698599594daa5cae7e9cd03e6989", 0x9a}, {&(0x7f00000001c0)="03fdaa029e5938deba51c6b30d83b4beaa1f4f9e8ddc396486d8fa71c054d1e5bf3ce944f000ee71ff5a94d28ea5001273c30356956b41d07e99a1f99cd95e5df5e0aabd196c1720493ed4ac05222d503dd2021f3c48e4ae50c3e9b572ce941f676391678c4d818eed09d525319e48882dbe299d9238b93a63bf2214249249103127d468553f2ad7dc654061281ed377fe60efd9d2b1f2e0d8bb718bdeee182096dda757a79dfe371d664d6c2ec2ca81d82fb1cdbd2f44a9bad37e29ce8a8fe1f35a1a9f2b61849f6607916557ca79c230e61247e02c594af209faae6fb4e87231a76580", 0xe4}, {&(0x7f0000000040)="dc5ce7f7a39fd39a4b165f6c98beeb40f3e256a090868cfa60e654db8d50ae", 0x1f}, {&(0x7f00000002c0)="f3875a9695f6a1bd3d3451ffa485c7829babecc1dda693639d12749c6573766c8a8e1f45844abe7bc7ae644f25534dff685409760945497492699aa639f8a180348137cc7d5f0be05e371933b7164579328d477a7ca99d4d65a62410c3f8b36dda8dbb64767b848fea0a630a479c2387fe2f13b904fb673d9f0b7cf3e2e11c70e6d7d1390bd1c1b875afe476", 0x8c}], 0x4) statx(r5, &(0x7f00000006c0)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r10, 0x0) mount$9p_fd(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x1934000, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{}, {@dfltgid={'dfltgid', 0x3d, r9}}, {@msize={'msize', 0x3d, 0x220}}], [{@appraise}, {@subj_role={'subj_role', 0x3d, ':[!\'-&]%*+\\#&['}}]}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x87, 0xb, 0x2, 0x4}, {0x6}]}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000080)={0x8, 0x0, 0x4, r8}) r11 = userfaultfd(0x801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r12 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201000000000008961b04000000000000b121e6573ea8191d0000090400050103000000492100000001220500090581030501000000a30cf74d6b9b49b55c93d57d8f09c05caa2dda9819b32bab67995b6c92b2fd09e66ade5e06b2f2ceb0f01ec32e8cf4623527d073f7e526d7d4e74b7f563cca2de4dc08f95ec23e0117d41c07eb0ecd3bf6c4d26e77"], 0x0) syz_usb_control_io(r12, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) userfaultfd(0x80001) 8.361795784s ago: executing program 6 (id=9788): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r0}, 0x81, 0xc74a, 0x1}) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) (async) mknod(&(0x7f0000000180)='./bus\x00', 0x20, 0x17965b2c) (async) r2 = socket$pptp(0x18, 0x1, 0x2) poll(&(0x7f0000000240)=[{r2, 0x502}], 0x1, 0x7) (async) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0xffffffffffffffff) (async) r4 = open(&(0x7f0000000100)='./file0\x00', 0x2900, 0x132) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x13, 0x1, 0x0, 0x25dfdbff, {0x7}}, 0x14}}, 0x20000000) (async, rerun: 64) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="c0", 0x1}], 0x1, 0x5) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r6, 0x200, &(0x7f0000000200)={0x0}) (async) getpgrp(r6) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 8.270212916s ago: executing program 6 (id=9789): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r4 = fcntl$dupfd(r1, 0x0, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00000b0000/0x2000)=nil, 0x2000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000000) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000140)={0xf, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 8.232817666s ago: executing program 0 (id=9790): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) unshare(0x62040200) r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0xd8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 8.218567127s ago: executing program 6 (id=9791): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/246}) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='(&@#\x00', 0xfffffffffffffffe) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r5) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r6, 0x1, 0x703d28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000841}, 0x24004084) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=@deltfilter={0x24, 0x2d, 0x319, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x8}, {0x4, 0xfff1}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008055}, 0x4040854) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x2, 0x5, 0xb, 0xa, 0x2, 0x0, 0x70bd23}, 0x10}}, 0x84) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x1aa) getdents64(r8, &(0x7f0000000140)=""/81, 0x51) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 8.106169729s ago: executing program 7 (id=9792): syz_open_dev$loop(&(0x7f00000002c0), 0x7, 0x180922) (async) r0 = syz_open_dev$loop(&(0x7f00000002c0), 0x7, 0x180922) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x40000, 0x2d) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000240)={0x0, "a210e934d3283b6c85a6791f3418385754316cbe789e72a4bced1c2b824cb858608a613f1c50774e23eca273962b4a8d92b55c030afbdea215e62e36963ffa6b", 0x3d}, 0x48, r2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6(0xa, 0x2, 0x3a) (async) r4 = socket$inet6(0xa, 0x2, 0x3a) unshare(0x60000600) (async) unshare(0x60000600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fstat(r4, &(0x7f0000000340)) (async) fstat(r4, &(0x7f0000000340)) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffc, @local, 0x4}, 0x1c) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x200) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000180)={0x0, 0x59, &(0x7f00000003c0)={&(0x7f0000000400)={0x2c, r7, 0x1, 0x20, 0x25dfdbfd, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000180)={0x0, 0x59, &(0x7f00000003c0)={&(0x7f0000000400)={0x2c, r7, 0x1, 0x20, 0x25dfdbfd, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 8.105965489s ago: executing program 0 (id=9793): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000240)=@usbdevfs_driver={0x1, 0xfffffffe, &(0x7f0000000200)}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x1b7}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 8.105791719s ago: executing program 0 (id=9794): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x7aa7000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, r1, 0x7) r2 = getpgid(r1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x1d, 0x4, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) utimensat(r4, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={{r5, r6/1000+60000}, {r7, r8/1000+10000}}, 0x100) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) ioprio_set$uid(0x3, 0x0, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) writev(r12, &(0x7f0000000740)=[{&(0x7f0000000480)='9\x00\x00', 0x3}], 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r13, 0x89f0, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_channels={0x3c, 0x3, 0xfffffffb, 0xaa0, 0xff, 0x1, 0x101, 0x0, 0x1000}}) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r10, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r14, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xfffffffffffffdaa}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c0c1) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) 1.05682ms ago: executing program 7 (id=9795): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600040000fc7f00000000000003003e00ecfffbff360300040000000040000000009c41638d00000000000000000000002c8f380001"], 0x78) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001e00210000000000000000000a00000005000000000000000a000a00"], 0x28}}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001d40)=""/243, 0xf3}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000000780)=""/4130, 0x1022}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/144, 0x90}, {&(0x7f0000000140)=""/132, 0x84}, {&(0x7f0000000300)=""/153, 0x99}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f00000019c0)=""/267, 0x10b}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0x2c2}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}], 0x8, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000000)={0x2}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r3, 0xffffffffffffffff, 0x0) 488.701µs ago: executing program 0 (id=9796): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0xe, 0x0, &(0x7f0000000680)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x802, 0x0) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) (async) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="800000001e00210000000000fddbdf250a0000000500020000000000620003"], 0x80}, 0x1, 0x0, 0x0, 0x48}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) r4 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r5, 0x0, 0x0, 0x100, &(0x7f0000003400)={0x0, 0x989680}) (async) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000038c0)={0x20, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@generic="f4837e629eda4a7ea9"]}, 0x20}}, 0x0) (async) sendmsg$key(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000014c0)={0x2, 0x16, 0x43, 0x5, 0x2c, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_key={0x1e, 0x9, 0x730, 0x0, "1e3520220be5880ece595ec90dfad6f531715e476def3026b29ef5749d58df262fdfa162794b8a75b21d8aae68141dec08a5cb14df7f6a2bb79483bb0a11e79b6d501ec92fa370793f6a087081aeffb82ced6d9663afada973692d7d1344a8ebae2392d27586a20dfcd0df7fa94af0c009c8cc76875ca9360d71fd1258d5083a72959be918b726fcaa3485fa8bde355aeda60f706d384e8e6b444a32c20cc43548c3b202c86073234afb82b30fcfbc63f78088eb9dfa842005579246af6e4996dea02578417526c531887c4a00610b3d0cf1768e53dd06a653dfc21b3759f18b4f64459bd5ae"}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d6}, @sadb_sa={0x2, 0x1, 0x4d6, 0x40, 0x5, 0xc0, 0x3}, @sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x0, 0x3, {0x6, 0x3c, 0xc, 0x1f, 0x0, 0x1, 0x0, @in6=@empty, @in6=@empty}}]}, 0x160}}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x5c, 0x1, 0x4, 0xbdae8d7063e6e185, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10001}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r7, &(0x7f00000004c0)={'#! ', './file0', [{0x20, 'incremental-fs\x00'}, {0x20, '!:'}, {0x20, '/dev/snd/timer\x00'}], 0xa, "151a3bb6c0d98cb9c83cf1a9a8453d082cd675fea285aea2380da6a805c87ac19b024317769a5ef8e38fc4297bafe60301effff08131b1c3eb4da43cb01ec7ee3bc6454bb920f7e276380680b54830ade328f370ad845f60cdf8a989fa31bf326c74262c01cb815fc126c104fa0b1e76cc75a296cccdfd734e85e0cd0bc135fa637c0eaa12baa4d970a439fdf1fb741efab633fa31162ee8c23581181a9b0bdaa972d986228a41725585facc64a5b75c5397d911"}, 0xe2) (async) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7265616461686561643d303013300f003032db5c353964000c6517cbdf64193d"]) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0x9, 0x3, 0x1000}}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000280)={0x50000000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000400)=[@exit_looper, @acquire_done={0x40106309, 0x1}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0x1280}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 257.241µs ago: executing program 0 (id=9797): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000000)={@val={0xa, 0x88a8}, @void, @eth={@random="0fb387ec738f", @remote, @void, {@arp={0x806, @generic={0x302, 0x4, 0x6, 0x0, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, "", @multicast, '\\'}}}}}, 0x27) socket$inet_udp(0x2, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=9798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r1, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6f}]}, 0x38}, 0x1, 0x0, 0x0, 0x28991e874b262f61}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000180)=0xfffffff6, 0x4) listen(r2, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000000)={0x24, @none={0x300, 0x1}}, 0x14) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r4, 0x4008af75, &(0x7f0000000000)={0x3, 0x5}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f0000000000)={{0x1d8, 0x6}, 0x100, './file0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@private, @local, 0x0}, &(0x7f0000000180)=0xc) sendmsg(r6, &(0x7f0000001940)={&(0x7f00000001c0)=@ll={0x11, 0x9, r7, 0x1, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)="788caeca76ca0f009972e7e72ab475c0355c4136b7e4b79f145bf5dc25ce888c1aab13a39033e486c82dc4389f5502ff002ef2aa70873b475892f5aade54a4", 0x3f}, {&(0x7f0000000280)="12c3ad3cbfdaffd868a6dbc2fdb977688a9ff9d9c23794ecfb26dd54986d6f2366ca65c1fdc036f7f4a098b02c264187", 0x30}, {&(0x7f00000002c0)="2a1a06b0492b40c7a94a1393e4c8912ab979c8bb057497700283bb54be42fed50c2a66abd741b8f0f55ceee590dfb024f39898b51872c885fde2d2e0bc7474329521ca08154c8b5f7fa228d9e145ebea5459b22ac16758a72355fe1b2863a179f44da97d783fea6d488cbc268951dcab1583f5206ee918c9e71dfbb90dca6257e60737d7943b220332cb8a5e5efb60c25908d1c2b8dbb374d5eb469a7292f008e5750d73dd4001eb4d08655fa4bd559b0b1e84ec302b073895458ea5424ae72bf46f5ba4078b5b53ccc2997f0fcd96d75ea134888ceef01c39a9d87f", 0xdc}], 0x3, &(0x7f0000000400)=[{0x80, 0xff, 0xfffffffa, "919e7c7bc68ae48d8ad7f64613ddf811f77cd944f6fdc4531ef40d6590a795ccc37df007ee0a262b4c4c730fdcf2c95135dd86b4414350d63d94406cd06947bfcb763107c15f2678b3bb3f80aa2346362d28e68f662c41cd538bd9761b412bf58bcd799b6bd01b2948bf13833f"}, {0xb0, 0x10c, 0x40, "7cf4e17922f6715d222484c839bbe007c7cc2302164d3782e7c560f5c409ec032c1db9c7f45b31c95e89068a4980b4f32b743137de76335953dd6451ea7e8d2c77ce9e181a61865ae28b382e4e23e4b43146cd4a4baa6b40a7d05a08c31a21c21e19a51d0593c4b5f2f8f2259f959522c273a759b61f337005c46c1847a6c2468353e27921652dd1e3eaf16a83fcaaa2b66b5a9ea2eedfb233ab4283a1e5ccd2"}, {0x80, 0x129, 0x0, "83df421eed3096229b65f049627e032ad515fce648926701363301d0009a215e0ca0b6665effbcb4a5518eb1f4282a01044a7f790ecc6e5136138eb57895ea21d992eb534be9d5fd0d7d6b639c1c64d31a9116db117e779dcde0386f322f4feb7411fc98f7bc2811e7a72ce7a7db"}, {0xe0, 0x116, 0x97c, "a6fbf4aad0935fcd4053aa165910c0bb1f43a737167cace5e5d39a249d3343c528d4d7d9e1abc663cf227ad38a70d4fc47ecbd534f2932033a8c0537a1d7125e270cd80029fc34d0b826f43e32b8151a93325ecc3dda008276bb583f281494f71ddac95fffdd603dac8e0374c0fe46ac354d3ec9c76fd210d40b0127f42a6eed78a8ca9a3def23d71399d2a84414dcc00672d6167af610cd323a26da6fa1a3d2102bcc678ded91a1b3cc26fff99fb2afc75be528ac3503e7ca435610b3317f9684aeb97c49f612af1021a39932cf26"}, {0x1010, 0x102, 0x9, "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"}, {0x78, 0x7eed8d2f7b7b21c9, 0x7, "da36b0bfc2d1993fbedb7aedbe9ef5a24d35e4728cd3fd5b5d940e975ac2545d86f97c66f4e62ccc0b6ee8f031e961d2401501b641b8f66e7c25f18679f4f8abd3cad03415e523304a0e1d9ff1a1a529bd66dae4d94b277d131300bf12dc322088d6ec95efa6a3da"}, {0xc0, 0x110, 0x3, "c83b747cba51c26572ee666bb9075161fee74116644d2fa9feeb6ed1fc07eceb5b04e0e1940b065dd78f97f1419ca6a8f685a2530b94b3f2e8a0122ee9071140f89f444b2e0402aa4ecfc1b308aab0af5fe50409d29deb7aa3c60213ece20eea4f30f2757f08e3c2d827d2a75c4368be9f5e98c313caa082b8e31f3e8b9636aeb2575ed1e2c03948be9b39b6d3996a1afc29e6b522f8b6d516a3e806dd24b3f570e2ec1b786e4bbab303689adcb3fe"}, {0xf0, 0xff, 0x6, "af42c45b099573a708b84747dbe150fe23fb6479af76863a17bd442e57d7ea54cadb44f4dc551e78d540aa9289922cacd8128f38e3a8719517099f07f0917409b33754c1d4418da61ee776e85b2c08669660a6c282e3462460813522ed667706043b9f304f82f27883b4f9a5ddd4fdf1c41bd7b3fa416983c26888f3f88649ea3b732a2e524d2424cc0d90fa44fb8cad6e0c6642f85ca9dd056d416fd6cd630fcaf96e59ceba478c7a9707554be52d7118c53962441b583e475335f6fc99e025fc8c77bd4e6246a79bb996c3df91da4178f270d137878884ba9ec9b447a0"}, {0x48, 0x3a, 0x9, "7249c9618859e81cbc0169577fe3f8d84e607d95742c954d5ef52d94446492b02c76d4a06f5cc26ad94d4445d34fbf967d4619079ad9"}], 0x1510}, 0x4000) vmsplice(r6, &(0x7f0000001ac0)=[{&(0x7f0000001980)="899e168e", 0x4}, {&(0x7f00000019c0)="f2c3ff48872be062904b9f62363f0506a3ae63625c4d176d85192c3aeda04cfb8f0e19604a2e6c1e684da25eb8f0606c15e6fb2a1a993a41d7395185547fcc009522a59b4a069163cca9f422db78547d83827a6426190f20d7d163d0d12c2992ce897d4fc80d471ee3e09d6968a725e552812892313b40517635b376ab30b82fcd90fb5584f5e419dfeac2404e2f765d1e28e741fc59716fbdeecd1363f659cb49eec42b76d1797a54a7db77e2777f28c805ccceb6f2eef703d3ff515789634c8df609103444044e5cfb099f1054a7b0d66d575743406e9bff3caaa15dec33a3fd55c4f7175758527b00f57083f2f82aae91783e8061c63513", 0xf9}], 0x2, 0xa) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000001b00)={{r6}, {@void, @actul_num={@val=0x2b, 0x6}}}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000001b40)={0x0, "8f19ccc651d53f2a77295a14520105ed"}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000002b40)={r8, "72f7a24140b52e2e77b26a765be2d8cb"}) writev(r6, &(0x7f0000003d00)=[{&(0x7f0000003b40)="37125fd3487a4571d97cd074de7f89a2204daecc856687a416f8a842458d156602f89da83be3c735d82981e7a934b79ebd81b8b239c5a71be0c84644ade3e71c2060881a25d9dae90826037fe887bbead4d48c5585950974a39b1a02b8f1722dce0b9f16dde3954b55f561b51c14955e4dba6892ee030c6453f023656a2776f9f804a493ce5c9419a388f199d144ecd22cf70c", 0x93}, {&(0x7f0000003c00)="7745c0dea8a2e52cb9c91c5ec48b1c064b9a96a6db1dbe72c50cd01a496785ce356eb902086f7432282056e7a554e79aecd50cf62a19ed318997b97ba3af07ea311d6efbdc7499fddac0ae857a31c62175f70212b426f18ebb32bb4aee6cea6540893d5a0ed943b516be1917d153b219e985e6b90e07a7db846781d85e5b625694a5bc07e8eedc2b21e85b10ad1ae26b62b1beb033e91a7edf9aba82c49d3e5e896380dfbbe4b35228da7936d63536bc400c42f9d7661b7e46b8ee4d8a1be8af562ab1166e2162c9", 0xc8}], 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000003d40)=0x5) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003dc0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r9, &(0x7f0000003e80)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003e40)={&(0x7f0000003e00)={0x38, r10, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2c}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c025}, 0x88000) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000003f00), r9) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000003fc0)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003f80)={&(0x7f0000003f40)={0x2c, r11, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1133}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000080) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000005400)={&(0x7f0000004000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000052c0)=[{&(0x7f0000004080)=""/89, 0x59}, {&(0x7f0000004100)=""/3, 0x3}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000005140)=""/18, 0x12}, {&(0x7f0000005180)=""/78, 0x4e}, {&(0x7f0000005200)=""/150, 0x96}], 0x6, &(0x7f0000005340)=""/166, 0xa6}, 0x3) kernel console output (not intermixed with test programs): pid:656 [ 566.127329][T24152] rust_binder: Write failure EINVAL in pid:659 [ 566.422450][T24166] netlink: 393 bytes leftover after parsing attributes in process `syz.9.7825'. [ 566.441412][T24166] can0: slcan on ttyS3. [ 566.515158][T24166] can0 (unregistered): slcan off ttyS3. [ 566.726676][T24209] pim6reg1: entered promiscuous mode [ 566.738825][T24209] pim6reg1: entered allmulticast mode [ 566.803663][T24211] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 566.817893][T24211] rust_binder: Write failure EINVAL in pid:29 [ 567.681602][T24235] incfs: Options parsing error. -22 [ 567.693084][T24235] incfs: mount failed -22 [ 567.697663][T24235] incfs: Options parsing error. -22 [ 567.703173][T24235] incfs: mount failed -22 [ 567.707883][T24235] incfs: Options parsing error. -22 [ 567.713378][T24235] incfs: mount failed -22 [ 567.717888][T24235] incfs: Options parsing error. -22 [ 567.723331][T24235] incfs: mount failed -22 [ 567.727805][T24235] incfs: Options parsing error. -22 [ 567.733033][T24235] incfs: mount failed -22 [ 567.737635][T24235] incfs: Options parsing error. -22 [ 567.742898][T24235] incfs: mount failed -22 [ 567.747503][T24235] incfs: Options parsing error. -22 [ 567.748515][T24234] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 567.752784][T24234] rust_binder: Error while translating object. [ 567.752818][T24235] incfs: mount failed -22 [ 567.763699][T24234] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 567.769850][T24235] incfs: Options parsing error. -22 [ 567.774396][T24234] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:201 [ 567.783662][T24235] incfs: mount failed -22 [ 567.802378][T24235] incfs: Options parsing error. -22 [ 567.807705][T24235] incfs: mount failed -22 [ 567.812312][T24235] incfs: Options parsing error. -22 [ 567.817598][T24235] incfs: mount failed -22 [ 567.822166][T24235] incfs: Options parsing error. -22 [ 567.827410][T24235] incfs: mount failed -22 [ 567.831965][T24235] incfs: Options parsing error. -22 [ 567.837226][T24235] incfs: mount failed -22 [ 567.841746][T24235] incfs: Options parsing error. -22 [ 567.847049][T24235] incfs: mount failed -22 [ 567.851649][T24235] incfs: Options parsing error. -22 [ 567.856920][T24235] incfs: mount failed -22 [ 567.861443][T24235] incfs: Options parsing error. -22 [ 567.866720][T24235] incfs: mount failed -22 [ 567.871175][T24235] incfs: Options parsing error. -22 [ 567.876476][T24235] incfs: mount failed -22 [ 567.881061][T24235] incfs: Options parsing error. -22 [ 567.886428][T24235] incfs: mount failed -22 [ 567.890978][T24235] incfs: Options parsing error. -22 [ 567.896266][T24235] incfs: mount failed -22 [ 567.900809][T24235] incfs: Options parsing error. -22 [ 567.906123][T24235] incfs: mount failed -22 [ 567.910686][T24235] incfs: Options parsing error. -22 [ 567.916223][T24235] incfs: mount failed -22 [ 567.920842][T24235] incfs: Options parsing error. -22 [ 567.926225][T24235] incfs: mount failed -22 [ 567.930713][T24235] incfs: Options parsing error. -22 [ 567.936013][T24235] incfs: mount failed -22 [ 567.940852][T24235] incfs: Options parsing error. -22 [ 567.946228][T24235] incfs: mount failed -22 [ 567.950811][T24235] incfs: Options parsing error. -22 [ 567.956070][T24235] incfs: mount failed -22 [ 567.960474][ T36] audit: type=1400 audit(1758196315.981:8845): avc: denied { listen } for pid=24239 comm="syz.3.7841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 567.964357][T24235] incfs: Options parsing error. -22 [ 567.986186][T24235] incfs: mount failed -22 [ 567.990930][T24235] incfs: Options parsing error. -22 [ 567.996193][T24235] incfs: mount failed -22 [ 568.000716][T24235] incfs: Options parsing error. -22 [ 568.007251][T24235] incfs: mount failed -22 [ 568.011813][T24235] incfs: Options parsing error. -22 [ 568.017108][T24235] incfs: mount failed -22 [ 568.021618][T24235] incfs: Options parsing error. -22 [ 568.027692][T24235] incfs: mount failed -22 [ 568.032209][T24235] incfs: Options parsing error. -22 [ 568.037579][T24235] incfs: mount failed -22 [ 568.042039][T24235] incfs: Options parsing error. -22 [ 568.047357][T24235] incfs: mount failed -22 [ 568.051833][T24235] incfs: Options parsing error. -22 [ 568.057106][T24235] incfs: mount failed -22 [ 568.061571][T24235] incfs: Options parsing error. -22 [ 568.067004][T24235] incfs: mount failed -22 [ 568.071900][T24235] incfs: Options parsing error. -22 [ 568.077308][T24235] incfs: mount failed -22 [ 568.081870][T24235] incfs: Options parsing error. -22 [ 568.087193][T24235] incfs: mount failed -22 [ 568.091786][T24235] incfs: Options parsing error. -22 [ 568.097060][T24235] incfs: mount failed -22 [ 568.101599][T24235] incfs: Options parsing error. -22 [ 568.106893][T24235] incfs: mount failed -22 [ 568.111741][T24235] incfs: Options parsing error. -22 [ 568.117120][T24235] incfs: mount failed -22 [ 568.121787][T24235] incfs: Options parsing error. -22 [ 568.127014][T24235] incfs: mount failed -22 [ 568.131544][T24235] incfs: Options parsing error. -22 [ 568.136778][T24235] incfs: mount failed -22 [ 568.141469][T24235] incfs: Options parsing error. -22 [ 568.146824][T24235] incfs: mount failed -22 [ 568.151370][T24235] incfs: Options parsing error. -22 [ 568.156602][T24235] incfs: mount failed -22 [ 568.161080][T24235] incfs: Options parsing error. -22 [ 568.166392][T24235] incfs: mount failed -22 [ 568.170960][T24235] incfs: Options parsing error. -22 [ 568.176239][T24235] incfs: mount failed -22 [ 568.180693][T24235] incfs: Options parsing error. -22 [ 568.186021][T24235] incfs: mount failed -22 [ 568.190816][T24235] incfs: Options parsing error. -22 [ 568.196106][T24235] incfs: mount failed -22 [ 568.200569][T24235] incfs: Options parsing error. -22 [ 568.205927][T24235] incfs: mount failed -22 [ 568.210456][T24235] incfs: Options parsing error. -22 [ 568.215752][T24235] incfs: mount failed -22 [ 568.220293][T24235] incfs: Options parsing error. -22 [ 568.225521][T24235] incfs: mount failed -22 [ 568.230021][T24235] incfs: Options parsing error. -22 [ 568.235272][T24235] incfs: mount failed -22 [ 568.240137][T24235] incfs: Options parsing error. -22 [ 568.245590][T24235] incfs: mount failed -22 [ 568.250456][T24235] incfs: Options parsing error. -22 [ 568.255708][T24235] incfs: mount failed -22 [ 568.260295][T24235] incfs: Options parsing error. -22 [ 568.265536][T24235] incfs: mount failed -22 [ 568.270360][T24235] incfs: Options parsing error. -22 [ 568.275586][T24235] incfs: mount failed -22 [ 568.280101][T24235] incfs: Options parsing error. -22 [ 568.285335][T24235] incfs: mount failed -22 [ 568.289777][T24235] incfs: Options parsing error. -22 [ 568.295145][T24235] incfs: mount failed -22 [ 568.299611][T24235] incfs: Options parsing error. -22 [ 568.304890][T24235] incfs: mount failed -22 [ 568.309351][T24235] incfs: Options parsing error. -22 [ 568.314672][T24235] incfs: mount failed -22 [ 568.319134][T24235] incfs: Options parsing error. -22 [ 568.324446][T24235] incfs: mount failed -22 [ 568.328907][T24235] incfs: Options parsing error. -22 [ 568.334169][T24235] incfs: mount failed -22 [ 568.338627][T24235] incfs: Options parsing error. -22 [ 568.343917][T24235] incfs: mount failed -22 [ 568.348380][T24235] incfs: Options parsing error. -22 [ 568.353612][T24235] incfs: mount failed -22 [ 568.358211][T24235] incfs: Options parsing error. -22 [ 568.363445][T24235] incfs: mount failed -22 [ 568.367971][T24235] incfs: Options parsing error. -22 [ 568.373191][T24235] incfs: mount failed -22 [ 568.377688][T24235] incfs: Options parsing error. -22 [ 568.382936][T24235] incfs: mount failed -22 [ 568.444451][T24248] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 568.445851][T24248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:205 [ 568.482216][T24250] can0: slcan on ttyS3. [ 568.601782][T24250] can0 (unregistered): slcan off ttyS3. [ 568.808821][T24281] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 568.808847][T24281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:210 [ 569.255581][T24298] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7854'. [ 569.615281][T24316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:682 [ 569.615388][T24316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 569.625375][T24316] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2048 [ 569.639550][T24316] rust_binder: Write failure EINVAL in pid:682 [ 569.684238][T24328] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 569.698919][T24328] rust_binder: Write failure EINVAL in pid:690 [ 569.990760][T24345] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1814 sclass=netlink_xfrm_socket pid=24345 comm=syz.5.7869 [ 570.589238][T24355] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7873'. [ 570.599523][T24355] rust_binder: inc_ref_done called when no active inc_refs [ 570.599555][T24355] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 570.607056][T24355] rust_binder: Read failure Err(EFAULT) in pid:223 [ 570.761965][T24363] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 570.786114][T24359] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.793687][T24363] rust_binder: Write failure EINVAL in pid:227 [ 570.806220][T24359] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.821319][T24359] bridge_slave_0: entered allmulticast mode [ 570.828092][T24359] bridge_slave_0: entered promiscuous mode [ 570.841591][T24359] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.848903][T24359] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.856008][T24359] bridge_slave_1: entered allmulticast mode [ 570.862863][T24359] bridge_slave_1: entered promiscuous mode [ 570.937803][T24368] tmpfs: Bad value for 'nr_inodes' [ 570.991639][T24359] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.998927][T24359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.006522][T24359] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.013569][T24359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.035333][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.043047][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.055862][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.062992][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.070931][T24379] veth0_virt_wifi: entered allmulticast mode [ 571.077797][T24379] veth0_virt_wifi: left allmulticast mode [ 571.085004][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.092103][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.119647][T24359] veth0_vlan: entered promiscuous mode [ 571.132036][T24359] veth1_macvtap: entered promiscuous mode [ 571.199819][T24381] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 571.262480][T24381] rust_binder: Error in use_page_slow: ESRCH [ 571.269006][T24381] rust_binder: use_range failure ESRCH [ 571.275201][T24381] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 571.280689][T24381] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 571.288991][T24381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2 [ 571.348731][T19172] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 571.442599][T24399] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 571.449724][T24398] rust_binder: got new transaction with bad transaction stack [ 571.449749][T24398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57 [ 571.542452][T19172] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.563047][T19172] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.573044][T19172] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 571.582513][T19172] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.592840][T19172] usb 10-1: config 0 descriptor?? [ 571.616095][ T548] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 571.788209][ T548] usb 6-1: config 127 has an invalid interface number: 54 but max is 1 [ 571.796532][ T548] usb 6-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 571.805756][ T548] usb 6-1: config 127 has no interface number 0 [ 571.812117][ T548] usb 6-1: config 127 interface 54 has no altsetting 0 [ 571.819045][ T548] usb 6-1: New USB device found, idVendor=1b3f, idProduct=2002, bcdDevice=fc.57 [ 571.828385][ T548] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.053048][ T548] usb 6-1: string descriptor 0 read error: -71 [ 572.060698][ T548] usb 6-1: Found UVC 0.00 device (1b3f:2002) [ 572.067887][ T548] usb 6-1: No valid video chain found. [ 572.074319][ T548] usb 6-1: USB disconnect, device number 62 [ 572.471603][T19172] hid-led 0003:27B8:01ED.0020: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.9-1/input0 [ 572.486789][T19172] hid-led 0003:27B8:01ED.0020: ThingM blink(1) initialized [ 572.687185][T19172] usb 10-1: USB disconnect, device number 11 [ 572.899964][T24418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 572.900116][T24418] rust_binder: Error while translating object. [ 572.906675][T24418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 572.912994][T24418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15 [ 572.990409][T24427] rust_binder: Write failure EINVAL in pid:700 [ 573.037751][T24438] rust_binder: Write failure EFAULT in pid:26 [ 573.509128][T19172] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 573.680228][T19172] usb 10-1: Using ep0 maxpacket: 32 [ 573.686581][T19172] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.697634][T19172] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.707579][T19172] usb 10-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 573.718253][T19172] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.727265][T19172] usb 10-1: config 0 descriptor?? [ 573.955063][T19172] usbhid 10-1:0.0: can't add hid device: -71 [ 573.961722][T19172] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 573.970600][T19172] usb 10-1: USB disconnect, device number 12 [ 581.207911][T24476] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 581.235618][ T36] audit: type=1326 audit(1758196328.398:8846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24482 comm="syz.3.7912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb092d8eba9 code=0x0 [ 581.434260][ T452] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 581.594665][ T452] usb 10-1: Using ep0 maxpacket: 32 [ 581.601077][ T452] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 581.609602][ T452] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 581.618353][ T452] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 581.627487][ T452] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 581.637239][ T452] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 581.647024][ T452] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 581.660120][ T452] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 581.669253][ T452] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.678194][ T452] usb 10-1: config 0 descriptor?? [ 581.901176][ T452] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 581.913472][ T452] usb 10-1: USB disconnect, device number 13 [ 581.920347][ T452] usblp0: removed [ 582.364789][ T452] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 582.525353][ T452] usb 10-1: Using ep0 maxpacket: 32 [ 582.531806][ T452] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 582.540312][ T452] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 582.549080][ T452] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 582.558204][ T452] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 582.567984][ T452] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 582.577709][ T452] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 582.590783][ T452] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 582.599925][ T452] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.608659][ T452] usb 10-1: config 0 descriptor?? [ 582.829275][ T452] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 583.044413][ T452] usb 10-1: USB disconnect, device number 14 [ 583.052194][ T452] usblp0: removed [ 594.151081][T24494] fuse: Unknown parameter 'Ø4s(mode900000000000000-00060000' [ 594.324625][T24524] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 594.334288][T24524] rust_binder: Write failure EFAULT in pid:83 [ 594.396876][T19172] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 594.575091][T17872] rust_binder: 24532: removing orphan mapping 0:24 [ 594.589497][T19172] usb 6-1: Invalid ep0 maxpacket: 32 [ 594.728362][T19172] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 594.827474][T24564] bridge0: entered allmulticast mode [ 594.860983][T24567] netlink: 'syz.9.7940': attribute type 27 has an invalid length. [ 594.888770][T19172] usb 6-1: Invalid ep0 maxpacket: 32 [ 594.894364][T19172] usb usb6-port1: attempt power cycle [ 595.263135][T19172] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 595.284878][T19172] usb 6-1: Invalid ep0 maxpacket: 32 [ 595.423547][T19172] usb 6-1: new low-speed USB device number 66 using dummy_hcd [ 595.441240][T24578] rust_binder: 295: no such ref 1 [ 595.446394][T24578] rust_binder: 295: no such ref 2 [ 595.456239][T19172] usb 6-1: Invalid ep0 maxpacket: 32 [ 595.469122][T19172] usb usb6-port1: unable to enumerate USB device [ 595.494566][T24585] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 595.494609][T24585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:728 [ 595.567939][T24592] rust_binder: Write failure EFAULT in pid:101 [ 595.616242][ T36] audit: type=1400 audit(1758196341.843:8847): avc: denied { accept } for pid=24595 comm="syz.3.7949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 595.616742][T24596] loop4: detected capacity change from 0 to 248 [ 595.667382][T24599] syzkaller1: entered promiscuous mode [ 595.676221][T24599] syzkaller1: entered allmulticast mode [ 595.882455][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.882489][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.893238][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.900607][T24617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 595.907340][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.916792][T24617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:743 [ 595.923339][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.932856][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.939876][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.946565][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.953280][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.959969][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.966936][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.973681][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.980394][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.986906][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.993707][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.000395][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.007086][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.013779][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.020475][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.027244][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.033922][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.040441][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.047194][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.053697][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.060446][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.067136][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.073650][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.080431][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.087102][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.093596][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.100328][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.106843][T24615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.130942][T24619] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24619 comm=syz.0.7956 [ 596.152112][T24619] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24619 comm=syz.0.7956 [ 596.356061][ T36] audit: type=1400 audit(1758196342.535:8848): avc: denied { listen } for pid=24625 comm="syz.0.7959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 596.581670][T24643] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 596.596801][T24643] SELinux: security_context_str_to_sid () failed with errno=-22 [ 596.596801][T24642] SELinux: security_context_str_to_sid () failed with errno=-22 [ 596.685612][ T31] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 596.824611][ T31] usb 10-1: device descriptor read/64, error -71 [ 597.092005][ T31] usb 10-1: device descriptor read/64, error -71 [ 597.125006][T14296] bridge_slave_1: left allmulticast mode [ 597.130695][T14296] bridge_slave_1: left promiscuous mode [ 597.136566][T14296] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.144466][T14296] bridge_slave_0: left allmulticast mode [ 597.150372][T14296] bridge_slave_0: left promiscuous mode [ 597.156072][T14296] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.258671][T24655] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.266027][T24655] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.273215][T24655] bridge_slave_0: entered allmulticast mode [ 597.279828][T24655] bridge_slave_0: entered promiscuous mode [ 597.287088][T14296] veth1_macvtap: left promiscuous mode [ 597.292671][T14296] veth0_vlan: left promiscuous mode [ 597.341283][T24655] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.348685][T24655] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.355887][T24655] bridge_slave_1: entered allmulticast mode [ 597.361921][ T31] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 597.368560][T24655] bridge_slave_1: entered promiscuous mode [ 597.435679][T24655] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.442812][T24655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.450157][T24655] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.457234][T24655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.484267][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.492484][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.506268][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.508397][T24673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:764 [ 597.513403][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.531763][ T31] usb 10-1: device descriptor read/64, error -71 [ 597.540427][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.547543][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.589545][T24655] veth0_vlan: entered promiscuous mode [ 597.601839][T24655] veth1_macvtap: entered promiscuous mode [ 597.699576][T24685] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 597.699609][T24685] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 597.706203][T24685] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 597.787206][ T31] usb 10-1: device descriptor read/64, error -71 [ 597.921898][ T31] usb usb10-port1: attempt power cycle [ 598.082061][T24717] rust_binder: Write failure EFAULT in pid:15 [ 598.199364][T24729] can0: slcan on ttyS3. [ 598.256206][T24739] rust_binder: Write failure EFAULT in pid:77 [ 598.294102][ T31] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 598.298084][T24748] /dev/rnullb0: Can't lookup blockdev [ 598.327431][ T31] usb 10-1: device descriptor read/8, error -71 [ 598.429716][T24758] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.436922][T24758] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.444854][T24758] bridge0: entered promiscuous mode [ 598.450103][T24758] bridge0: entered allmulticast mode [ 598.457037][T24758] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.464139][T24758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.471537][T24758] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.478625][T24758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.483483][ T31] usb 10-1: device descriptor read/8, error -71 [ 598.578619][ T548] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 598.739156][ T31] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 598.740759][ T548] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.757983][ T548] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.761719][ T31] usb 10-1: device descriptor read/8, error -71 [ 598.767888][T19172] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 598.781500][ T548] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 598.790673][ T548] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.799698][ T548] usb 6-1: config 0 descriptor?? [ 598.922003][ T31] usb 10-1: device descriptor read/8, error -71 [ 598.953046][T19172] usb 2-1: Invalid ep0 maxpacket: 32 [ 599.049370][ T31] usb usb10-port1: unable to enumerate USB device [ 599.092025][T19172] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 599.252461][T19172] usb 2-1: Invalid ep0 maxpacket: 32 [ 599.257950][T19172] usb usb2-port1: attempt power cycle [ 599.502026][T24752] netlink: 'syz.5.8002': attribute type 27 has an invalid length. [ 599.519779][T24752] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.527007][T24752] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.626789][T19172] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 599.649565][T19172] usb 2-1: Invalid ep0 maxpacket: 32 [ 599.780206][ T548] hid-led 0003:27B8:01ED.0021: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0 [ 599.791708][T19172] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 599.802241][ T548] hid-led 0003:27B8:01ED.0021: ThingM blink(1) initialized [ 599.830327][T19172] usb 2-1: Invalid ep0 maxpacket: 32 [ 599.835799][T19172] usb usb2-port1: unable to enumerate USB device [ 599.926790][T24636] can0 (unregistered): slcan off ttyS3. [ 600.003940][ T548] usb 6-1: USB disconnect, device number 67 [ 600.236622][ T31] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 600.397859][ T31] usb 10-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 600.409640][ T31] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 600.420776][ T31] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 600.432149][ T31] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 600.441338][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.450618][T24783] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 600.672963][T24783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.681630][T24783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.699148][ T31] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 600.709657][ T31] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input49 [ 600.736648][ T31] usb 10-1: USB disconnect, device number 19 [ 600.742753][ C1] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 600.749878][T24805] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 600.761700][T24805] SELinux: failed to load policy [ 600.836167][T24811] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 600.863335][T24817] rust_binder: Write failure EINVAL in pid:323 [ 600.863401][T24818] rust_binder: Read failure Err(EAGAIN) in pid:102 [ 600.863810][T24817] rust_binder: Write failure EINVAL in pid:323 [ 600.890442][T24820] 9pnet_fd: Insufficient options for proto=fd [ 600.917154][T24826] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 600.917176][T24826] rust_binder: Error while translating object. [ 600.929305][T24826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 600.935758][T24826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106 [ 601.221809][T24829] rust_binder: 24824 RLIMIT_NICE not set [ 601.231342][T24824] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 601.237067][T24824] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 601.246690][T24824] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:327 [ 601.325822][T24835] rust_binder: Write failure EINVAL in pid:782 [ 601.424063][T24844] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 601.446568][T24844] 9pnet_fd: Insufficient options for proto=fd [ 601.725185][T24849] /dev/rnullb0: Can't lookup blockdev [ 601.773044][T24857] can0: slcan on ttyS3. [ 601.908983][T24857] can0 (unregistered): slcan off ttyS3. [ 601.934244][T24883] rust_binder: Write failure EFAULT in pid:42 [ 602.026966][T24896] kvm: kvm [24895]: vcpu2, guest rIP: 0x9140 Unhandled WRMSR(0x11e) = 0x340b [ 602.044552][T24896] kvm: kvm [24895]: vcpu2, guest rIP: 0x9140 Unhandled WRMSR(0x186) = 0x360b [ 602.053544][T24896] kvm: kvm [24895]: vcpu2, guest rIP: 0x9140 Unhandled WRMSR(0x187) = 0x340b [ 602.064574][T24896] kvm_intel: kvm [24895]: vcpu2, guest rIP: 0x9140 Unhandled WRMSR(0x1d9) = 0x360b [ 602.225689][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 602.386101][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 602.392401][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.403431][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.413265][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 602.422626][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.431605][ T31] usb 2-1: config 0 descriptor?? [ 602.437918][ T31] hub 2-1:0.0: USB hub found [ 602.439764][T17872] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 602.589394][T17872] usb 10-1: device descriptor read/64, error -71 [ 602.651504][ T31] hub 2-1:0.0: 1 port detected [ 602.846018][T17872] usb 10-1: device descriptor read/64, error -71 [ 603.102807][T17872] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 603.241728][T17872] usb 10-1: device descriptor read/64, error -71 [ 603.296152][ T452] hub 2-1:0.0: activate --> -90 [ 603.498441][T17872] usb 10-1: device descriptor read/64, error -71 [ 603.515244][T24920] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 603.523516][T24920] rust_binder: Write failure EINVAL in pid:129 [ 603.556106][T24922] netlink: 'syz.5.8041': attribute type 4 has an invalid length. [ 603.570159][T24922] netlink: 'syz.5.8041': attribute type 6 has an invalid length. [ 603.577991][T24922] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.8041'. [ 603.616283][T17872] usb usb10-port1: attempt power cycle [ 603.642590][T24923] rust_binder: 24922 RLIMIT_NICE not set [ 603.642832][T24922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:131 [ 603.724709][T24888] rust_binder: Error while translating object. [ 603.733946][T24888] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 603.740151][T24888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:44 [ 603.750239][T24927] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 603.762612][T24928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.779896][T24928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.796349][ T31] usb 2-1: USB disconnect, device number 11 [ 603.829713][ T548] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 603.844147][ T548] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 603.915948][T24939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=24939 comm=syz.5.8046 [ 603.990753][T17872] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 604.013044][T17872] usb 10-1: device descriptor read/8, error -71 [ 604.111704][T24944] rust_binder: 146: no such ref 3 [ 604.116794][T24944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:146 [ 604.116969][T24944] rust_binder: Write failure EINVAL in pid:146 [ 604.151825][T17872] usb 10-1: device descriptor read/8, error -71 [ 604.205884][ T36] audit: type=1400 audit(1758196349.875:8849): avc: denied { execute } for pid=24949 comm="syz.5.8049" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 604.418191][T17872] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 604.451373][T17872] usb 10-1: device descriptor read/8, error -71 [ 604.590338][T17872] usb 10-1: device descriptor read/8, error -71 [ 604.707633][T17872] usb usb10-port1: unable to enumerate USB device [ 604.726116][T24965] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 604.828541][T24975] binder: Bad value for 'stats' [ 604.977123][T24985] fuse: Bad value for 'fd' [ 605.400677][T24995] rust_binder: Error while translating object. [ 605.400757][T24995] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 605.407404][T24995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:341 [ 605.417157][T24995] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 605.426621][T24995] rust_binder: Read failure Err(EFAULT) in pid:341 [ 605.484462][T24999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:345 [ 605.491723][T24999] rust_binder: 345: no such ref 128 [ 605.506765][T24999] rust_binder: Read failure Err(EAGAIN) in pid:345 [ 605.531204][T25003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25003 comm=syz.5.8068 [ 605.744899][T25015] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 605.959142][T25023] 9pnet_fd: Insufficient options for proto=fd [ 606.271175][T25040] rust_binder: Error while translating object. [ 606.271238][T25040] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 606.277653][T25040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:74 [ 606.297412][T25041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.321551][T25046] veth0_virt_wifi: entered allmulticast mode [ 606.393650][T25055] rust_binder: Error while translating object. [ 606.393698][T25055] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 606.400044][T25054] rust_binder: Error while translating object. [ 606.416287][T25055] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 606.422714][T25054] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 606.431850][T25054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:184 [ 606.466775][T25045] veth0_virt_wifi: left allmulticast mode [ 606.501626][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.501659][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.521295][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.521332][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.529685][T25064] rust_binder: 352: no such ref 2 [ 606.545762][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.545792][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.560509][T25062] rust_binder: Error in use_page_slow: ESRCH [ 606.566976][T25062] rust_binder: use_range failure ESRCH [ 606.573611][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.579389][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.585880][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.592651][T25062] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 606.599112][T25062] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 606.607582][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.617132][T25062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:188 [ 606.623838][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.633157][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.639714][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.646534][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.653076][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.659894][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.666604][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.673245][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.682948][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.689744][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.696516][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.703112][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.709870][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.716384][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.722982][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.729534][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.736306][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.742813][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.749330][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.755835][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.762505][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.768993][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.775529][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.782066][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.788575][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.795087][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.801670][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.808159][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.814686][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.821201][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.827768][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.834271][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.840773][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.847252][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.853750][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.860246][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.866724][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.873201][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.879764][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.886268][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.892838][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.899340][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.906649][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.913173][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.919725][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.926258][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.932794][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.939295][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.947633][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.954221][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.960747][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.967267][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.973781][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.980351][T25061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 607.016159][T25081] can0: slcan on ttyS3. [ 607.052461][T25087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 607.107970][T25097] rust_binder: 25087 RLIMIT_NICE not set [ 607.121802][ T4295] rust_binder: 25085: removing orphan mapping 0:4248 [ 607.159035][T25079] can0 (unregistered): slcan off ttyS3. [ 607.185536][T25108] rust_binder: 198: no such ref 0 [ 607.190832][T25108] rust_binder: 198: no such ref 0 [ 607.196181][T25108] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 607.208097][T25108] rust_binder: 198: no such ref 64 [ 607.213546][T25108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:198 [ 607.475592][ T36] audit: type=1400 audit(1758196352.932:8850): avc: denied { mounton } for pid=25131 comm="syz.9.8102" path="/dev/udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 607.498415][ T548] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 607.547064][T25149] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8108'. [ 607.563775][T25145] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 607.587219][T25145] rust_binder: Write failure EFAULT in pid:88 [ 607.680205][ T548] usb 6-1: Using ep0 maxpacket: 8 [ 607.693688][ T548] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.707916][ T548] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 607.708598][T25166] rust_binder: Error while translating object. [ 607.717146][T25166] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 607.717265][ T548] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.723868][T25166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:375 [ 607.732917][ T548] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 607.761055][ T548] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.771628][ T548] hub 6-1:1.0: bad descriptor, ignoring hub [ 607.787157][ T548] hub 6-1:1.0: probe with driver hub failed with error -5 [ 607.796298][ T548] cdc_wdm 6-1:1.0: skipping garbage [ 607.802215][ T548] cdc_wdm 6-1:1.0: skipping garbage [ 607.807616][ T548] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 607.950489][T25185] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 607.950525][T25185] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 607.984598][T25180] fuse: root generation should be zero [ 607.992110][T25113] incfs: Options parsing error. -22 [ 607.997242][T25192] rust_binder: Write failure EFAULT in pid:99 [ 608.002139][T25113] incfs: mount failed -22 [ 608.129547][ T10] usb 6-1: USB disconnect, device number 68 [ 608.289903][T19172] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 608.450425][T19172] usb 2-1: Using ep0 maxpacket: 8 [ 608.457124][T19172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.468931][T19172] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 608.478163][T19172] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 608.486341][T19172] usb 2-1: Product: syz [ 608.491195][T19172] usb 2-1: config 0 descriptor?? [ 608.718473][T19172] usbhid 2-1:0.0: can't add hid device: -71 [ 608.724533][T19172] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 608.735167][T19172] usb 2-1: USB disconnect, device number 12 [ 608.894520][T25216] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8130'. [ 609.092032][ T4295] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 609.156155][ T10] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 609.200506][T25232] can0: slcan on ttyS3. [ 609.252415][ T4295] usb 10-1: Using ep0 maxpacket: 16 [ 609.263091][T25232] can0 (unregistered): slcan off ttyS3. [ 609.285483][ T4295] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 609.294723][ T4295] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.322689][ T4295] usb 10-1: Product: syz [ 609.327010][ T4295] usb 10-1: Manufacturer: syz [ 609.332549][ T4295] usb 10-1: SerialNumber: syz [ 609.338110][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 609.349301][ T4295] usb 10-1: config 0 descriptor?? [ 609.356764][ T4295] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 609.358743][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 609.375889][ T4295] usb 10-1: Detected FT232H [ 609.393483][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 609.423544][ T10] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 609.427611][T25246] rust_binder: Error in use_page_slow: ESRCH [ 609.432645][T25246] rust_binder: use_range failure ESRCH [ 609.439354][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.442413][T25246] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 609.453207][T25246] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 609.455839][ T10] usb 6-1: config 0 descriptor?? [ 609.466517][T25246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:106 [ 609.500643][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 609.577047][T25218] netlink: 17 bytes leftover after parsing attributes in process `syz.9.8131'. [ 609.593702][T25280] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 609.606189][T25280] SELinux: failed to load policy [ 609.615476][ T4295] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 609.626296][ T4295] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 609.643587][T25280] rust_binder: Error while translating object. [ 609.643626][T25280] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 609.647498][ T4295] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 609.650107][T25280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:115 [ 609.664597][ T4295] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 609.698291][ T4295] usb 10-1: USB disconnect, device number 24 [ 609.716654][ T4295] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 609.738945][ T4295] ftdi_sio 10-1:0.0: device disconnected [ 609.743091][T25216] 9pnet_fd: Insufficient options for proto=fd [ 609.752110][ T36] audit: type=1400 audit(1758196355.045:8851): avc: denied { create } for pid=25214 comm="syz.5.8130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 609.776513][T19172] usb 6-1: USB disconnect, device number 69 [ 609.783269][T25297] rust_binder: Error while translating object. [ 609.783306][T25297] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 609.790804][T25297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117 [ 609.800336][T25297] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 609.809547][T25297] rust_binder: Read failure Err(EFAULT) in pid:117 [ 610.002455][T25315] can0: slcan on ttyS3. [ 610.077153][T25315] can0 (unregistered): slcan off ttyS3. [ 610.116048][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.116082][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.135269][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.144511][T25331] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 610.151281][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.181825][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.195824][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.202309][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.219519][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.220573][T25346] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 610.226300][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.242505][T25346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 610.249338][T25346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:405 [ 610.257793][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.266830][T25350] can0: slcan on ttyS3. [ 610.274508][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.278540][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.288090][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.294736][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.306060][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.312782][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.330636][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.331036][ T36] audit: type=1400 audit(1758196355.597:8852): avc: denied { map } for pid=25353 comm="syz.9.8157" path="socket:[123586]" dev="sockfs" ino=123586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 610.348526][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.372246][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.382589][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.389630][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.396212][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.404979][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.414037][T25360] rust_binder: 410: no such ref 2 [ 610.426656][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.426685][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.427407][T25350] can0 (unregistered): slcan off ttyS3. [ 610.434575][T25360] rust_binder: 410: no such ref 0 [ 610.450600][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.450628][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.457140][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.465930][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.476356][T25360] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 610.496882][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.496911][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.503503][T25329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.511329][T25360] rust_binder: 410: no such ref 64 [ 610.523466][T25360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:410 [ 625.096393][T25383] fuse: Unknown parameter 'rYotmode' [ 625.103014][T25377] kvm: user requested TSC rate below hardware speed [ 625.127362][T25377] rust_binder: 218: no such ref 5 [ 625.132529][T25377] rust_binder: Write failure EINVAL in pid:218 [ 625.279826][T25398] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 625.294897][T25398] rust_binder: Write failure EINVAL in pid:925 [ 625.358504][T25409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 625.364766][T25409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:232 [ 625.380730][T19172] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 625.542144][T25423] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8177'. [ 625.551317][T25422] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8177'. [ 625.561333][T25425] rust_binder: Error while translating object. [ 625.561377][T25425] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 625.567866][T25425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:422 [ 625.576118][T19172] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 625.602773][T19172] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.612950][T19172] usb 2-1: config 0 has no interface number 0 [ 625.621140][T19172] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 625.630318][T19172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.638445][T19172] usb 2-1: Product: syz [ 625.642732][T19172] usb 2-1: Manufacturer: syz [ 625.647364][T19172] usb 2-1: SerialNumber: syz [ 625.652802][T19172] usb 2-1: config 0 descriptor?? [ 625.688224][T25429] rust_binder: Write failure EINVAL in pid:244 [ 625.710134][ T36] audit: type=1326 audit(1758196369.977:8853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25434 comm="syz.5.8181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cc038eba9 code=0x7ff00000 [ 625.740049][ T36] audit: type=1326 audit(1758196369.977:8854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25434 comm="syz.5.8181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cc038eba9 code=0x7ff00000 [ 625.764124][ T36] audit: type=1326 audit(1758196369.977:8855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25434 comm="syz.5.8181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cc038eba9 code=0x7ff00000 [ 625.788572][ T36] audit: type=1326 audit(1758196369.977:8856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25434 comm="syz.5.8181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cc038eba9 code=0x7ff00000 [ 625.812225][ T36] audit: type=1326 audit(1758196369.977:8857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25434 comm="syz.5.8181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cc038eba9 code=0x7ff00000 [ 625.836177][ T36] audit: type=1326 audit(1758196369.977:8858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25434 comm="syz.5.8181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cc038eba9 code=0x7ff00000 [ 625.859803][ T36] audit: type=1326 audit(1758196369.977:8859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25434 comm="syz.5.8181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cc038eba9 code=0x7ff00000 [ 625.883563][ T36] audit: type=1326 audit(1758196369.977:8860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25434 comm="syz.5.8181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cc038eba9 code=0x7ff00000 [ 625.907145][ T36] audit: type=1326 audit(1758196369.977:8861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25434 comm="syz.5.8181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cc038eba9 code=0x7ff00000 [ 625.930865][ T36] audit: type=1326 audit(1758196369.977:8862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25434 comm="syz.5.8181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6cc038eba9 code=0x7ff00000 [ 626.017272][T25382] binder: Bad value for 'defcontext' [ 626.022921][T25438] binder: Bad value for 'defcontext' [ 626.089410][T23051] usb 2-1: USB disconnect, device number 13 [ 626.412251][T25458] binder: Binderfs stats mode cannot be changed during a remount [ 626.428876][T19172] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 626.604209][T19172] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 626.612003][T19172] usb 6-1: can't read configurations, error -71 [ 626.618039][T25466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:434 [ 626.623954][T23051] rust_binder: 25464: removing orphan mapping 0:8 [ 626.657655][T25470] overlayfs: missing 'lowerdir' [ 627.341605][T25491] overlayfs: missing 'lowerdir' [ 627.346648][T25491] rust_binder: 275: no such ref 3 [ 627.571572][T25505] netlink: 'syz.1.8202': attribute type 32 has an invalid length. [ 627.710373][T25512] fuse: Unknown parameter 'grou8¦pÉ‹WH00000000000000000000' [ 627.787649][T19172] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 627.959323][T19172] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.970430][T19172] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.980355][T19172] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 627.989498][T19172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.998255][T19172] usb 6-1: config 0 descriptor?? [ 628.865159][T19172] hid-led 0003:27B8:01ED.0023: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0 [ 628.889255][T19172] hid-led 0003:27B8:01ED.0023: ThingM blink(1) initialized [ 628.974371][ T548] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 629.092002][T19172] usb 6-1: USB disconnect, device number 72 [ 629.134793][ T4295] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 629.135953][ T548] usb 2-1: config index 0 descriptor too short (expected 162, got 34) [ 629.150924][ T548] usb 2-1: config 127 has an invalid interface number: 54 but max is 0 [ 629.159896][ T548] usb 2-1: config 127 has no interface number 0 [ 629.166221][ T548] usb 2-1: New USB device found, idVendor=1b3f, idProduct=2002, bcdDevice=fc.57 [ 629.175285][ T548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.296474][ T4295] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 629.305279][ T4295] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.315514][ T4295] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 629.324619][ T4295] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 629.338830][ T4295] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 629.347998][ T4295] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 629.356138][ T4295] usb 10-1: Product: syz [ 629.360444][ T4295] usb 10-1: Manufacturer: syz [ 629.368075][ T4295] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 629.400101][ T548] usb 2-1: string descriptor 0 read error: -71 [ 629.407861][ T548] usb 2-1: USB disconnect, device number 14 [ 629.583219][ T4295] usb 10-1: USB disconnect, device number 25 [ 629.971277][T25550] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 630.258363][T25555] rust_binder: Write failure EFAULT in pid:455 [ 630.841895][T25566] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2048 [ 630.856071][T25566] rust_binder: Write failure EINVAL in pid:167 [ 630.879212][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 630.893100][T25568] rust_binder: Write failure EFAULT in pid:169 [ 631.386106][T25577] rust_binder: 960: no such ref 3 [ 631.397841][T25577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:960 [ 631.398736][T25577] rust_binder: Error while translating object. [ 631.408231][T25577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 631.414705][T25577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:960 [ 631.424943][T25578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 631.607630][T25596] overlayfs: failed to resolve './file0': -2 [ 632.781846][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.781881][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.791718][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.799261][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.805958][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.812416][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.818965][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.825439][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.832000][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.838906][T25611] rust_binder: Error while translating object. [ 632.845470][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.851703][T25611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 632.858272][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.867700][T25611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:469 [ 632.872294][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.883343][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.890072][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.891969][T25613] random: crng reseeded on system resumption [ 632.896599][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.909512][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.916427][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.923261][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.929768][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.936550][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.943438][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.950001][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.956726][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.963374][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.970048][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.976677][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.983138][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.989831][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.996458][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.002913][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.009746][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.016204][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.022908][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.029523][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.035977][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.042688][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.049319][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.055783][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.062473][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.068959][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.075665][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.082299][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.088754][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.095451][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 633.102687][T25569] Bluetooth: hci0: command 0x1003 tx timeout [ 633.108594][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.114054][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.114937][T25615] netlink: 'syz.5.8241': attribute type 1 has an invalid length. [ 633.127196][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.138605][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.145253][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.154395][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.167724][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.174193][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.182383][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.188903][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.195355][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.201981][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.208471][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.213311][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 633.213335][ T36] audit: type=1400 audit(1758196376.990:8937): avc: denied { execheap } for pid=25624 comm="syz.5.8244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 633.215200][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.225058][T25625] rust_binder: 25625 RLIMIT_NICE not set [ 633.228027][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.259305][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.266082][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.272628][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.279147][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.285611][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.292226][T25610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.306026][T25625] rust_binder: Read failure Err(EFAULT) in pid:288 [ 633.346851][T25632] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:178 [ 633.354349][ T36] audit: type=1400 audit(1758196377.130:8938): avc: denied { mounton } for pid=25631 comm="syz.5.8246" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 633.458440][T25641] rust_binder: Failed to allocate buffer. len:4294970960, is_oneway:false [ 633.458467][T25641] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 633.467146][T25641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:292 [ 633.502792][T25646] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 633.520200][T25646] rust_binder: Write failure EINVAL in pid:297 [ 633.522429][T14296] Bluetooth: hci0: Frame reassembly failed (-84) [ 633.522873][T25646] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 633.531489][T14296] Bluetooth: hci0: Frame reassembly failed (-84) [ 633.535956][T25646] rust_binder: Write failure EINVAL in pid:297 [ 634.282723][T25660] rust_binder: Write failure EINVAL in pid:487 [ 634.283592][T25661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=529 sclass=netlink_route_socket pid=25661 comm=syz.1.8258 [ 634.289316][T25662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=529 sclass=netlink_route_socket pid=25662 comm=syz.1.8258 [ 634.323067][T25661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25661 comm=syz.1.8258 [ 634.343773][T25663] rust_binder: 487: no such ref 3 [ 634.348848][T25663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:487 [ 634.880021][T25698] rust_binder: 25697 RLIMIT_NICE not set [ 635.341118][T25732] rust_binder: Error while translating object. [ 635.346904][T25732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 635.353344][T25732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1015 [ 635.408033][T25733] veth0_vlan: entered allmulticast mode [ 635.427589][T25733] veth0_vlan: left promiscuous mode [ 635.433458][T25733] veth0_vlan: entered promiscuous mode [ 635.755077][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 635.793358][T25746] rust_binder: Got transaction with invalid offset. [ 635.793410][T25746] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 635.800796][T25746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:212 [ 635.863623][T25749] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 635.888008][T25749] rust_binder: Error while translating object. [ 635.921475][T25749] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 635.931005][T25749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 636.333511][ T36] audit: type=1326 audit(1758196379.916:8939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.9.8286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26d098eba9 code=0x0 [ 636.556356][T25790] SELinux: policydb magic number 0x80fd does not match expected magic number 0xf97cff8c [ 636.566338][T25790] SELinux: failed to load policy [ 636.625255][ T1918] Bluetooth: hci0: Frame reassembly failed (-84) [ 636.760420][ T4295] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 636.910187][ T4295] usb 2-1: device descriptor read/64, error -71 [ 637.166840][ T4295] usb 2-1: device descriptor read/64, error -71 [ 637.423529][ T4295] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 637.562593][ T4295] usb 2-1: device descriptor read/64, error -71 [ 637.829953][ T4295] usb 2-1: device descriptor read/64, error -71 [ 637.947733][ T4295] usb usb2-port1: attempt power cycle [ 638.311472][ T4295] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 638.333771][ T4295] usb 2-1: device descriptor read/8, error -71 [ 638.483496][ T4295] usb 2-1: device descriptor read/8, error -71 [ 638.739316][ T4295] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 638.761630][ T4295] usb 2-1: device descriptor read/8, error -71 [ 638.824596][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 638.830671][T25569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 638.911309][ T4295] usb 2-1: device descriptor read/8, error -71 [ 639.028275][ T4295] usb usb2-port1: unable to enumerate USB device [ 639.035328][T25815] rust_binder: 25814 RLIMIT_NICE not set [ 639.765472][T25823] rust_binder: Error while translating object. [ 639.771630][T25823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 639.778139][T25823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:248 [ 639.884506][T25833] overlayfs: failed to resolve './file0/file0': -2 [ 639.905505][T25840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8308'. [ 639.915368][T25841] rust_binder: 25828 RLIMIT_NICE not set [ 639.922793][T25843] binder: Bad value for 'max' [ 639.934032][T25840] can0: slcan on ttyS3. [ 639.954494][T25849] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 639.954522][T25849] rust_binder: Error while translating object. [ 639.964567][T25849] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 639.973607][T25852] overlayfs: failed to set uuid (178/file1, err=-1); falling back to uuid=null. [ 639.986973][T25849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:263 [ 639.992635][T25852] overlayfs: failed to verify upper root origin [ 640.016158][T25840] can0 (unregistered): slcan off ttyS3. [ 640.018197][T25833] rust_binder: Read failure Err(EFAULT) in pid:512 [ 640.418178][ T548] usb 6-1: new low-speed USB device number 73 using dummy_hcd [ 640.535878][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 640.590413][ T548] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 640.601620][ T548] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.611505][ T548] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 640.620698][ T548] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.629405][ T548] usb 6-1: config 0 descriptor?? [ 640.697390][ T10] usb 2-1: config 0 has no interfaces? [ 640.704347][ T10] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 640.713482][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.721585][ T10] usb 2-1: Product: syz [ 640.725763][ T10] usb 2-1: Manufacturer: syz [ 640.730535][ T10] usb 2-1: SerialNumber: syz [ 640.736153][ T10] usb 2-1: config 0 descriptor?? [ 640.928013][T25897] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 640.935433][T25897] rust_binder: Write failure EINVAL in pid:522 [ 640.957079][T25891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8317'. [ 641.201292][T23051] usb 2-1: USB disconnect, device number 19 [ 641.280468][ T548] usb 6-1: USB disconnect, device number 73 [ 641.282494][T25909] __vm_enough_memory: pid: 25909, comm: syz.9.8322, bytes: 18014402804453376 not enough memory for the allocation [ 641.287811][T25876] SELinux: policydb magic number 0x53b20 does not match expected magic number 0xf97cff8c [ 641.313812][T25876] SELinux: failed to load policy [ 641.319244][T25911] rust_binder: Error in use_page_slow: ESRCH [ 641.319268][T25911] rust_binder: use_range failure ESRCH [ 641.327261][T25911] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 641.330783][T25911] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 641.338846][T25911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:534 [ 641.375627][T25916] rust_binder: validate_parent_fixup: new_min_offset=562949953421369, sg_entry.length=238 [ 641.384824][T25916] rust_binder: Error while translating object. [ 641.395065][T25916] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 641.401332][T25916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:539 [ 641.424173][T25918] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 641.797952][ T4295] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 641.908024][T25929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8330'. [ 641.958320][ T4295] usb 10-1: Using ep0 maxpacket: 32 [ 641.965053][ T4295] usb 10-1: unable to get BOS descriptor or descriptor too short [ 641.973632][ T4295] usb 10-1: config 5 has an invalid interface number: 38 but max is 1 [ 641.981864][ T4295] usb 10-1: config 5 has an invalid interface number: 35 but max is 1 [ 641.990147][ T4295] usb 10-1: config 5 has no interface number 0 [ 641.996433][ T4295] usb 10-1: config 5 has no interface number 1 [ 642.002848][ T4295] usb 10-1: config 5 interface 38 has no altsetting 0 [ 642.009635][ T4295] usb 10-1: config 5 interface 35 has no altsetting 0 [ 642.017872][ T4295] usb 10-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=17.89 [ 642.027066][ T4295] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.035190][ T4295] usb 10-1: Product: syz [ 642.039453][ T4295] usb 10-1: Manufacturer: syz [ 642.044189][ T4295] usb 10-1: SerialNumber: syz [ 642.271078][ T4295] usb 10-1: unknown interface protocol 0x37, assuming v1 [ 642.278173][ T4295] usb 10-1: cannot find UAC_HEADER [ 642.285030][ T4295] snd-usb-audio 10-1:5.38: probe with driver snd-usb-audio failed with error -22 [ 642.296199][ T4295] usb 10-1: USB disconnect, device number 26 [ 642.303885][T25388] udevd[25388]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:5.38/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 642.729989][T25934] rust_binder: Write failure EFAULT in pid:277 [ 642.744120][T25938] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 642.750431][T25938] rust_binder: Error while translating object. [ 642.762664][T25938] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 642.768853][T25938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:283 [ 642.891159][T25951] overlayfs: failed to resolve './file0/file0': -2 [ 642.896734][T25953] rust_binder: Write failure EFAULT in pid:554 [ 642.909376][T25951] overlayfs: failed to set uuid (120/file1, err=-1); falling back to uuid=null. [ 642.924939][T25951] overlayfs: failed to verify upper root origin [ 642.932937][T25957] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 642.942611][T25957] SELinux: failed to load policy [ 642.981320][T25968] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 642.981353][T25968] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 642.988347][T25971] rust_binder: Read failure Err(EAGAIN) in pid:565 [ 643.008753][T25976] rust_binder: Read failure Err(EAGAIN) in pid:336 [ 643.015380][T25976] rust_binder: got new transaction with bad transaction stack [ 643.022384][T25976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:336 [ 643.072231][T19172] rust_binder: 0: removing orphan mapping 0:4248 [ 643.163186][T25988] overlayfs: failed to resolve './file0/file0': -2 [ 643.171303][T25988] overlayfs: failed to set uuid (126/file1, err=-1); falling back to uuid=null. [ 643.180521][T25988] overlayfs: failed to verify upper root origin [ 643.263094][ T4295] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 643.389614][ T36] audit: type=1400 audit(1758196386.508:8940): avc: denied { mounton } for pid=25992 comm="syz.1.8352" path="/89/file0" dev="tmpfs" ino=490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 643.434244][ T4295] usb 10-1: Using ep0 maxpacket: 16 [ 643.440892][ T4295] usb 10-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 643.451730][ T4295] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 643.462426][ T4295] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 643.471744][ T4295] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.479876][ T4295] usb 10-1: Product: syz [ 643.484176][ T4295] usb 10-1: Manufacturer: syz [ 643.488899][ T4295] usb 10-1: SerialNumber: syz [ 643.565325][T26000] /dev/rnullb0: Can't lookup blockdev [ 643.756906][ T4295] usb 10-1: 0:2 : does not exist [ 643.764196][ T4295] usb 10-1: 5:0: cannot get min/max values for control 4 (id 5) [ 643.774433][ T4295] usb 10-1: 5:0: cannot get min/max values for control 5 (id 5) [ 643.784671][ T4295] usb 10-1: 5:0: cannot get min/max values for control 5 (id 5) [ 643.794738][ T4295] usb 10-1: 5:0: failed to get current value for ch 1 (-22) [ 643.805963][ T4295] usb 10-1: USB disconnect, device number 27 [ 643.813310][T25388] udevd[25388]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 644.438566][T26010] rust_binder: Error while translating object. [ 644.438616][T26010] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 644.448421][T26010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:576 [ 644.696251][ T4295] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 644.867456][ T4295] usb 10-1: Using ep0 maxpacket: 8 [ 644.874376][ T4295] usb 10-1: unable to get BOS descriptor or descriptor too short [ 644.884439][ T4295] usb 10-1: config 0 has an invalid interface number: 88 but max is 0 [ 644.892759][ T4295] usb 10-1: config 0 has no interface number 0 [ 644.899004][ T4295] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 644.910139][ T4295] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 644.920069][ T4295] usb 10-1: config 0 interface 88 has no altsetting 0 [ 644.930230][ T4295] usb 10-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 644.939536][ T4295] usb 10-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 644.948397][ T4295] usb 10-1: config 0 descriptor?? [ 644.953795][ T4295] usb 10-1: can't set config #0, error -71 [ 644.960316][ T4295] usb 10-1: USB disconnect, device number 28 [ 645.481868][T26027] pim6reg1: entered promiscuous mode [ 645.487190][T26027] pim6reg1: entered allmulticast mode [ 645.606801][T26032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:585 [ 645.606845][T26032] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 645.616075][T26032] rust_binder: Read failure Err(EFAULT) in pid:585 [ 645.849066][T26036] rust_binder: Error while translating object. [ 645.855806][T26036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 645.862108][T26036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:370 [ 646.688094][T26056] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 646.704605][T26056] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1053 [ 646.766557][T26058] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 646.824800][T26059] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 647.411330][T26078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:309 [ 647.604592][T26101] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8385'. [ 648.197585][ T452] rust_binder: 26076: removing orphan mapping 0:24 [ 648.355757][T26116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:324 [ 648.515905][T26121] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8393'. [ 648.568553][T26129] overlayfs: failed to clone upperpath [ 648.587904][T26133] cgroup: No subsys list or none specified [ 649.583772][T26207] overlayfs: failed to resolve './file0/file0': -2 [ 649.591436][T26207] overlayfs: failed to clone upperpath [ 649.626745][ T452] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 649.650511][T26209] 9pnet_fd: Insufficient options for proto=fd [ 649.712599][T26211] 9pnet_fd: Insufficient options for proto=fd [ 649.788424][ T452] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 649.800353][ T452] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 649.813455][ T452] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 649.823647][ T452] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 649.837003][ T452] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 649.846180][ T452] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.858629][ T452] usb 10-1: config 0 descriptor?? [ 649.984113][T26235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8426'. [ 649.993661][T26235] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 649.993689][T26235] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 650.001672][T26235] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:335 [ 650.922205][ T4295] rust_binder: get_current_thread was called from the wrong process. [ 651.120991][T26273] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 651.129770][T26274] rust_binder: Error while translating object. [ 651.136870][T26274] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 651.143560][T26274] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:350 [ 651.181002][T26276] rust_binder: Write failure EFAULT in pid:353 [ 651.255803][ T4295] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 651.286571][ T4295] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 651.586312][T26293] fuse: Invalid rootmode [ 651.844556][T26317] overlayfs: failed to clone upperpath [ 652.043994][T26327] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 652.122092][T26333] binder: Unknown parameter '00000000000000000004' [ 652.390186][ T36] audit: type=1400 audit(1758196394.933:8941): avc: denied { link } for pid=26342 comm="syz.1.8464" name="#9b" dev="tmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 652.412912][ T36] audit: type=1400 audit(1758196394.933:8942): avc: denied { rename } for pid=26342 comm="syz.1.8464" name="#9c" dev="tmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 652.584679][ T452] usbhid 10-1:0.0: can't add hid device: -71 [ 652.597617][ T452] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 652.622334][ T452] usb 10-1: USB disconnect, device number 29 [ 652.683843][T26366] overlayfs: failed to resolve './file0/file0': -2 [ 652.747083][T26370] overlayfs: failed to set uuid (211/file1, err=-1); falling back to uuid=null. [ 652.756304][T26370] overlayfs: failed to verify upper root origin [ 652.995710][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 653.113409][T25569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 653.118133][T26385] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 653.119572][T26385] rust_binder: Error while translating object. [ 653.128714][T26385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 653.134991][T26385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:632 [ 653.166852][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 653.183698][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.197423][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.207722][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 653.221616][T26393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8479'. [ 653.236829][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 653.246506][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.259173][ T10] usb 2-1: config 0 descriptor?? [ 653.415347][T26401] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 653.415410][T26401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1073 [ 653.633373][T26412] tipc: Started in network mode [ 653.647818][T26412] tipc: Node identity , cluster identity 4711 [ 653.660464][T26412] tipc: Failed to obtain node identity [ 653.666195][T26412] tipc: Enabling of bearer rejected, failed to enable media [ 653.680315][T26404] tipc: Started in network mode [ 653.685385][T26404] tipc: Node identity , cluster identity 4711 [ 653.694968][T26419] 9pnet_fd: p9_fd_create_tcp (26419): problem connecting socket to 127.0.0.1 [ 653.701080][T26404] tipc: Failed to obtain node identity [ 653.705662][ T10] microsoft 0003:045E:07DA.0026: invalid report_count -452586717 [ 653.709397][T26404] tipc: Enabling of bearer rejected, failed to enable media [ 653.727534][ T36] audit: type=1107 audit(1758196396.176:8943): pid=26418 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 653.729430][ T10] microsoft 0003:045E:07DA.0026: item 0 4 1 9 parsing failed [ 653.748806][ T10] microsoft 0003:045E:07DA.0026: parse failed [ 653.755111][ T10] microsoft 0003:045E:07DA.0026: probe with driver microsoft failed with error -22 [ 653.921573][T26369] rust_binder: Write failure EINVAL in pid:389 [ 653.922263][ T452] usb 2-1: USB disconnect, device number 20 [ 653.980251][T23051] rust_binder: get_current_thread was called from the wrong process. [ 653.994464][T26429] overlayfs: failed to resolve './file0/file0': -2 [ 654.011320][T26429] overlayfs: failed to set uuid (346/file1, err=-1); falling back to uuid=null. [ 654.020693][T26429] overlayfs: failed to verify upper root origin [ 654.040585][T26431] rust_binder: 26431 RLIMIT_NICE not set [ 654.060720][ T10] rust_binder: 26430: removing orphan mapping 0:144 [ 654.071046][T26433] netlink: 'syz.0.8494': attribute type 1 has an invalid length. [ 654.477483][T26446] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 654.486311][T26446] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 654.495193][T26446] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 654.503083][T26446] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 654.518778][T26449] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8500'. [ 654.555040][T26455] overlayfs: failed to resolve './file0/file0': -2 [ 654.562674][T26455] overlayfs: failed to clone upperpath [ 654.760457][T19172] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 654.920843][T19172] usb 2-1: Using ep0 maxpacket: 16 [ 654.927311][T19172] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.937530][T19172] usb 2-1: config 1 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.950595][T19172] usb 2-1: config 1 interface 0 has no altsetting 0 [ 654.958006][T19172] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 654.967149][T19172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 654.975188][T19172] usb 2-1: SerialNumber: syz [ 655.201858][T19172] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 655.210023][T19172] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 655.217242][T19172] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 655.227720][T19172] usb 2-1: USB disconnect, device number 21 [ 655.365455][T26474] overlayfs: failed to clone upperpath [ 655.423206][T26483] futex_wake_op: syz.5.8512 tries to shift op by 144; fix this program [ 655.750147][T26487] netlink: 'syz.1.8514': attribute type 1 has an invalid length. [ 655.758373][T26487] SELinux: security_context_str_to_sid () failed with errno=-22 [ 655.911672][T26497] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 655.911705][T26497] rust_binder: Error while translating object. [ 655.923842][T26497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 655.930074][T26497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:664 [ 656.117051][T26513] pim6reg1: entered promiscuous mode [ 656.132101][T26513] pim6reg1: entered allmulticast mode [ 656.790260][T26536] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26536 comm=syz.9.8529 [ 656.803745][T26536] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 657.327276][ T452] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 657.490498][ T452] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 657.499753][ T452] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.507867][ T452] usb 10-1: Product: syz [ 657.512242][ T452] usb 10-1: Manufacturer: syz [ 657.516948][ T452] usb 10-1: SerialNumber: syz [ 657.541208][ T4295] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 657.680246][ T4295] usb 2-1: device descriptor read/64, error -71 [ 657.738315][ T10] usb 10-1: USB disconnect, device number 30 [ 657.936899][ T4295] usb 2-1: device descriptor read/64, error -71 [ 658.159654][T26606] veth0_to_team: entered allmulticast mode [ 658.166131][T26605] veth0_to_team: left allmulticast mode [ 658.193588][ T4295] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 658.265554][T26611] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 658.343321][ T4295] usb 2-1: device descriptor read/64, error -71 [ 658.581272][T26626] overlayfs: failed to resolve './file0/file0': -2 [ 658.588901][T26626] overlayfs: failed to clone upperpath [ 658.599996][ T4295] usb 2-1: device descriptor read/64, error -71 [ 658.717751][ T4295] usb usb2-port1: attempt power cycle [ 659.081314][ T4295] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 659.103697][ T4295] usb 2-1: device descriptor read/8, error -71 [ 659.242850][ T4295] usb 2-1: device descriptor read/8, error -71 [ 659.498420][ T4295] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 659.520841][ T4295] usb 2-1: device descriptor read/8, error -71 [ 659.659897][ T4295] usb 2-1: device descriptor read/8, error -71 [ 659.756081][T26636] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8562'. [ 659.776549][ T4295] usb usb2-port1: unable to enumerate USB device [ 660.587436][T26648] netlink: 'syz.1.8566': attribute type 12 has an invalid length. [ 660.637641][T26652] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 660.637688][T26652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1100 [ 660.887167][T26686] pim6reg1: entered promiscuous mode [ 660.901988][T26686] pim6reg1: entered allmulticast mode [ 660.986481][T26693] netlink: 5308 bytes leftover after parsing attributes in process `syz.0.8577'. [ 661.008153][T26695] overlayfs: failed to resolve './file0/file0': -2 [ 661.209598][ T31] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 661.359342][ T31] usb 2-1: device descriptor read/64, error -71 [ 661.616042][ T31] usb 2-1: device descriptor read/64, error -71 [ 661.872721][ T31] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 661.937719][T26730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=26730 comm=syz.9.8590 [ 662.012467][ T31] usb 2-1: device descriptor read/64, error -71 [ 662.100672][T26737] netlink: 115 bytes leftover after parsing attributes in process `syz.9.8592'. [ 662.109817][T26738] netlink: 115 bytes leftover after parsing attributes in process `syz.9.8592'. [ 662.254102][T26750] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 662.268458][ T31] usb 2-1: device descriptor read/64, error -71 [ 662.418591][ T31] usb usb2-port1: attempt power cycle [ 662.430817][ T36] audit: type=1326 audit(1758196404.323:8944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26757 comm="syz.0.8600" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc3538eba9 code=0x0 [ 662.469471][T26760] overlayfs: failed to resolve './file0/file0': -2 [ 662.477372][T26760] overlayfs: failed to clone upperpath [ 662.485160][T26761] rust_binder: Write failure EFAULT in pid:1141 [ 662.749917][T26781] Invalid ELF header len 1 [ 662.792529][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 662.815067][ T31] usb 2-1: device descriptor read/8, error -71 [ 662.953968][ T31] usb 2-1: device descriptor read/8, error -71 [ 663.152996][T26787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8611'. [ 663.209736][ T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 663.232259][ T31] usb 2-1: device descriptor read/8, error -71 [ 663.363193][T26799] 9pnet_fd: Insufficient options for proto=fd [ 663.369743][T26799] fuse: Unknown parameter 'ÿÿÿÿ' [ 663.372580][T26803] binder: Unknown parameter 'É' [ 663.376599][ T31] usb 2-1: device descriptor read/8, error -71 [ 663.486722][ T10] kernel read not supported for file inotify (pid: 10 comm: kworker/0:1) [ 663.498625][ T31] usb usb2-port1: unable to enumerate USB device [ 663.633159][T26828] rust_binder: Write failure EFAULT in pid:1151 [ 663.766864][T26837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1155 [ 663.897421][T26854] overlayfs: failed to clone upperpath [ 664.087854][T26873] overlayfs: failed to resolve './file0/file0': -2 [ 664.099542][T26875] erofs: dax options not supported [ 664.164245][T26883] overlayfs: failed to set uuid (140/file1, err=-1); falling back to uuid=null. [ 664.174370][T26883] overlayfs: failed to verify upper root origin [ 664.234623][T26887] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8644'. [ 664.499484][T26900] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 664.584451][T26908] erofs: dax options not supported [ 664.589878][T26910] rust_binder: Write failure EFAULT in pid:1178 [ 664.648954][T26932] EXT4-fs: Conflicting test_dummy_encryption options [ 664.733926][T26940] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 664.733967][T26940] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1188 [ 664.996062][T26948] rust_binder: Fixups oob 165 172 361 173 [ 665.005464][T26948] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 665.011345][T26948] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 665.019854][T26948] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:444 [ 665.092548][T26952] netlink: 'syz.5.8663': attribute type 4 has an invalid length. [ 665.110649][T26952] netlink: 'syz.5.8663': attribute type 4 has an invalid length. [ 665.195765][ T36] audit: type=1400 audit(1758196406.895:8945): avc: denied { create } for pid=26968 comm="syz.5.8669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 665.227467][T26974] overlayfs: failed to resolve './file0/file0': -2 [ 665.235127][T26974] overlayfs: failed to clone upperpath [ 665.295180][ T548] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 665.456848][ T548] usb 2-1: config 26 has an invalid interface number: 102 but max is 1 [ 665.465179][ T548] usb 2-1: config 26 has an invalid interface number: 124 but max is 1 [ 665.473523][ T548] usb 2-1: config 26 has no interface number 0 [ 665.479770][ T548] usb 2-1: config 26 has no interface number 1 [ 665.486059][ T548] usb 2-1: config 26 interface 102 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 8 [ 665.497118][ T548] usb 2-1: config 26 interface 124 altsetting 9 endpoint 0x1 is Bulk; changing to Interrupt [ 665.512974][ T548] usb 2-1: config 26 interface 124 altsetting 9 endpoint 0x1 has invalid wMaxPacketSize 0 [ 665.523004][ T548] usb 2-1: config 26 interface 124 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 665.533998][ T548] usb 2-1: config 26 interface 102 has no altsetting 0 [ 665.540870][ T548] usb 2-1: config 26 interface 124 has no altsetting 0 [ 665.549974][ T548] usb 2-1: string descriptor 0 read error: -22 [ 665.556302][ T548] usb 2-1: New USB device found, idVendor=12d1, idProduct=9e5d, bcdDevice=f4.8f [ 665.565446][ T548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.632358][T27000] rust_binder: validate_parent_fixup: new_min_offset=62, sg_entry.length=0 [ 665.632413][T27000] rust_binder: Error while translating object. [ 665.641221][T27000] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 665.647447][T27000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1191 [ 665.671741][T27002] overlayfs: failed to resolve './file0/file0': -2 [ 665.692486][T27002] overlayfs: failed to set uuid (386/file1, err=-1); falling back to uuid=null. [ 665.706258][T27002] overlayfs: failed to verify upper root origin [ 665.708730][ T36] audit: type=1400 audit(1758196407.381:8946): avc: denied { create } for pid=27005 comm="syz.9.8681" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 665.735442][ T36] audit: type=1400 audit(1758196407.381:8947): avc: denied { map } for pid=27005 comm="syz.9.8681" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=134226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 665.753933][T27009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8682'. [ 665.761364][ T36] audit: type=1400 audit(1758196407.381:8948): avc: denied { read write } for pid=27005 comm="syz.9.8681" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=134226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 665.797911][ T548] usb 2-1: USB disconnect, device number 30 [ 665.844938][T27014] rust_binder: Write failure EFAULT in pid:1200 [ 665.899145][T27018] rust_binder: 1204: no such ref 1 [ 665.910691][T27018] rust_binder: 1204: no such ref 2 [ 665.915929][T27018] rust_binder: 1204: no such ref 2 [ 665.921128][T27018] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 665.928428][T27018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1204 [ 666.347573][T27026] rust_binder: Write failure EFAULT in pid:448 [ 666.357880][T27026] rust_binder: Write failure EFAULT in pid:448 [ 666.390943][T27031] binder: Unknown parameter '}' [ 666.611562][T27033] 9pnet_fd: Insufficient options for proto=fd [ 666.634579][T27035] netlink: 'syz.9.8693': attribute type 15 has an invalid length. [ 666.643748][ T36] audit: type=1400 audit(1758196408.260:8949): avc: denied { ioctl } for pid=27034 comm="syz.9.8693" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=132965 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 666.648911][T27035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=27035 comm=syz.9.8693 [ 666.796571][ T36] audit: type=1400 audit(1758196408.400:8950): avc: denied { ioctl } for pid=27043 comm="syz.9.8697" path="socket:[132980]" dev="sockfs" ino=132980 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=sock_file permissive=1 [ 667.351510][T27061] overlayfs: failed to resolve './file0/file0': -2 [ 667.360247][T27061] overlayfs: failed to set uuid (148/file1, err=-1); falling back to uuid=null. [ 667.370057][T27061] overlayfs: failed to verify upper root origin [ 667.396179][ T36] audit: type=1400 audit(1758196408.961:8951): avc: denied { read } for pid=27062 comm="syz.1.8702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 668.424507][T27086] netlink: 277 bytes leftover after parsing attributes in process `syz.1.8709'. [ 668.600831][T27093] overlayfs: failed to resolve './file0/file0': -2 [ 668.615371][T27093] overlayfs: failed to set uuid (153/file1, err=-1); falling back to uuid=null. [ 668.625166][T27093] overlayfs: failed to verify upper root origin [ 668.673720][T27095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:484 [ 668.907762][T27111] netlink: 'syz.1.8718': attribute type 3 has an invalid length. [ 668.942320][T27111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8718'. [ 669.002918][T27113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=27113 comm=syz.1.8719 [ 669.028116][T27113] binder: Unknown parameter 'defcontext01777777777777777777777' [ 669.177999][T27118] overlayfs: failed to resolve './file0/file0': -2 [ 669.200839][T27118] overlayfs: failed to set uuid (161/file1, err=-1); falling back to uuid=null. [ 669.210328][T27118] overlayfs: failed to verify upper root origin [ 669.242828][T27120] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8722'. [ 669.267882][T27120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=27120 comm=syz.9.8722 [ 669.334140][T27129] rust_binder: Write failure EFAULT in pid:507 [ 669.355188][T27132] rust_binder: Write failure EINVAL in pid:510 [ 669.583439][T27142] overlayfs: failed to resolve './file0/file0': -2 [ 669.597281][T27142] overlayfs: failed to clone upperpath [ 669.744374][T23051] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 669.906103][T23051] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 669.916390][T23051] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 669.925452][T23051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.935948][T23051] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 670.150506][T23051] usb 2-1: USB disconnect, device number 31 [ 670.645880][T27161] fuse: Bad value for 'rootmode' [ 671.500482][T27211] overlayfs: failed to clone upperpath [ 671.552742][T27208] netlink: 76 bytes leftover after parsing attributes in process `syz.9.8754'. [ 672.145440][T27224] overlayfs: failed to clone upperpath [ 672.422595][ T36] audit: type=1326 audit(1758196413.655:8952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27242 comm="syz.5.8766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cc038eba9 code=0x0 [ 672.588759][T27249] rust_binder: Error while translating object. [ 672.588806][T27249] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 672.595138][T27249] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:525 [ 672.726871][T27259] rust_binder: Write failure EFAULT in pid:531 [ 672.858908][T27264] rust_binder: Write failure EFAULT in pid:1221 [ 672.953320][T27266] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 672.959862][T27266] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 672.968032][T27266] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 672.974779][T27266] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 672.981322][T27266] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 673.038477][ T548] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 673.209622][ T548] usb 2-1: Using ep0 maxpacket: 16 [ 673.216969][ T548] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 673.226960][ T548] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0 [ 673.236862][ T548] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 0 [ 673.247128][ T548] usb 2-1: config 1 interface 0 has no altsetting 0 [ 673.263126][ T548] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 673.272683][ T548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.285980][ T548] usb 2-1: Product: syz [ 673.290244][ T548] usb 2-1: Manufacturer: М [ 673.295949][ T548] usb 2-1: SerialNumber: syz [ 673.305079][T27262] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 673.315277][ T36] audit: type=1400 audit(1758196414.496:8953): avc: denied { map } for pid=27306 comm="syz.0.8790" path="/407" dev="tmpfs" ino=2265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 673.381694][T27318] netlink: 'syz.5.8793': attribute type 1 has an invalid length. [ 673.389509][T27318] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8793'. [ 673.533634][ T548] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 4 proto 2 vid 0x0525 pid 0xA4A8 [ 673.547617][ T548] usb 2-1: USB disconnect, device number 32 [ 673.554861][ T548] usblp0: removed [ 674.272529][T27356] rust_binder: Error while translating object. [ 674.272577][T27356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 674.278935][T27356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1259 [ 674.335672][T27360] 9pnet_fd: Insufficient options for proto=fd [ 674.357747][T27360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 674.357805][T27360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:542 [ 674.439739][ T36] audit: type=1400 audit(1758196415.525:8954): avc: denied { sys_admin } for pid=27361 comm="syz.1.8810" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 674.526201][T27367] overlayfs: failed to clone upperpath [ 674.543055][T27371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8813'. [ 674.565902][T27379] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8815'. [ 674.775834][T27419] netlink: 'syz.0.8832': attribute type 4 has an invalid length. [ 674.830025][T27422] pim6reg1: entered promiscuous mode [ 674.835386][T27422] pim6reg1: entered allmulticast mode [ 674.867476][ T4295] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 675.027802][ T4295] usb 2-1: Using ep0 maxpacket: 32 [ 675.034604][ T4295] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.045824][ T4295] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.057188][ T4295] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 675.066324][ T4295] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 675.074803][ T4295] usb 2-1: Product: syz [ 675.079161][ T4295] usb 2-1: Manufacturer: syz [ 675.086245][ T4295] hub 2-1:4.0: USB hub found [ 675.305914][ T4295] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 675.312139][T27440] fuse: Bad value for 'group_id' [ 675.318676][T27440] fuse: Bad value for 'group_id' [ 675.409342][T27462] overlayfs: failed to clone upperpath [ 675.525362][T27385] __vm_enough_memory: pid: 27385, comm: syz.1.8818, bytes: 18014402804453376 not enough memory for the allocation [ 675.648177][ T10] usb 2-1: USB disconnect, device number 33 [ 677.050009][T27485] rust_binder: 27485 RLIMIT_NICE not set [ 677.050292][T27487] rust_binder: 559: no such ref 128 [ 677.061262][T27487] rust_binder: Read failure Err(EAGAIN) in pid:559 [ 677.086172][ T36] audit: type=1326 audit(1758196418.021:8955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27490 comm="syz.1.8856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09d238eba9 code=0x7ec00000 [ 677.116692][T23051] rust_binder: 0: removing orphan mapping 0:1048 [ 677.495904][T27495] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 677.495933][T27495] rust_binder: Read failure Err(EFAULT) in pid:567 [ 677.832709][T27509] tipc: Started in network mode [ 677.844522][T27509] tipc: Node identity , cluster identity 4711 [ 677.850604][T27509] tipc: Failed to obtain node identity [ 677.856145][T27509] tipc: Enabling of bearer rejected, failed to enable media [ 677.864529][T27510] tipc: Started in network mode [ 677.869475][T27510] tipc: Node identity , cluster identity 4711 [ 677.875601][T27510] tipc: Failed to obtain node identity [ 677.881124][T27510] tipc: Enabling of bearer rejected, failed to enable media [ 678.302122][T27517] rust_binder: 27517 RLIMIT_NICE not set [ 678.327592][T23051] rust_binder: 27515: removing orphan mapping 0:1024 [ 678.439465][T27524] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 678.482929][T27523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1299 [ 678.536134][T27526] overlayfs: failed to resolve './file1': -2 [ 678.553728][T27526] overlayfs: failed to resolve './file1': -2 [ 678.672854][ T36] audit: type=1400 audit(1758196419.498:8956): avc: granted { setsecparam } for pid=27538 comm="syz.1.8875" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 678.728086][T27560] rust_binder: Write failure EFAULT in pid:1316 [ 678.886609][T27590] sit0: entered promiscuous mode [ 678.904898][T27590] netlink: 'syz.5.8890': attribute type 1 has an invalid length. [ 678.912896][T27590] netlink: 1 bytes leftover after parsing attributes in process `syz.5.8890'. [ 679.307042][T27604] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 679.314389][T27604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:595 [ 679.593356][T27612] overlayfs: failed to clone lowerpath [ 679.609332][T27612] fuse: Bad value for 'fd' [ 679.902083][T27621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8900'. [ 680.532353][T27719] can0: slcan on ttyS3. [ 680.792532][ T31] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 680.847332][T27741] netlink: 120 bytes leftover after parsing attributes in process `syz.9.8940'. [ 680.856466][T27741] netlink: 96 bytes leftover after parsing attributes in process `syz.9.8940'. [ 680.954100][ T31] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 680.962350][ T31] usb 2-1: config 1 has no interface number 0 [ 680.968493][ T31] usb 2-1: config 1 interface 105 has no altsetting 0 [ 680.976840][ T31] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 680.985931][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.993944][ T31] usb 2-1: Product: syz [ 680.998162][ T31] usb 2-1: Manufacturer: syz [ 681.002917][ T31] usb 2-1: SerialNumber: syz [ 681.225482][T27748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8943'. [ 681.331672][ T36] audit: type=1326 audit(1758196421.986:8957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27754 comm="syz.5.8946" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cc038eba9 code=0x0 [ 681.669420][T27762] overlayfs: failed to clone upperpath [ 682.081239][ T31] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 682.111151][ T31] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 682.341762][T27813] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 682.876482][ T148] aqc111 2-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -71 [ 682.878316][T19172] usb 2-1: USB disconnect, device number 34 [ 682.886600][ T148] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -19 [ 682.892020][T19172] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 682.899202][ T148] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 682.917701][ T148] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 682.925846][ T148] aqc111 2-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 682.933875][ T148] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 682.942040][ T148] aqc111 2-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 682.950398][ T148] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19 [ 682.959027][ T148] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19 [ 682.968251][ T148] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19 [ 682.976922][ T148] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19 [ 682.990656][T19172] aqc111 2-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 683.006009][T19172] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 683.025037][T19172] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 683.035029][T27719] can0 (unregistered): slcan off ttyS3. [ 683.038516][T19172] aqc111 2-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 683.114148][T19172] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 683.124650][T27831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8969'. [ 683.148264][T19172] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 683.177582][T19172] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 683.237068][T27817] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.262643][T27817] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.281919][T27817] bridge_slave_0: entered allmulticast mode [ 683.294535][T27817] bridge_slave_0: entered promiscuous mode [ 683.302712][T27851] sit0: entered promiscuous mode [ 683.317102][T27851] netlink: 'syz.1.8970': attribute type 1 has an invalid length. [ 683.336202][T27851] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8970'. [ 683.345535][T27817] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.352921][T27817] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.363566][T27817] bridge_slave_1: entered allmulticast mode [ 683.379619][T27817] bridge_slave_1: entered promiscuous mode [ 683.535869][T27817] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.542992][T27817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.550366][T27817] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.557491][T27817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.586393][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.594130][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.616643][ T1918] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.623744][ T1918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.631752][ T1918] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.638829][ T1918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.665574][T27817] veth0_vlan: entered promiscuous mode [ 683.679198][T27817] veth1_macvtap: entered promiscuous mode [ 684.151043][ T31] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 684.311212][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 684.318668][ T31] usb 3-1: config index 0 descriptor too short (expected 25953, got 27) [ 684.327140][ T31] usb 3-1: config 9 has an invalid interface number: 144 but max is 0 [ 684.335382][ T31] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 684.346056][ T31] usb 3-1: config 9 has no interface number 0 [ 684.352208][ T31] usb 3-1: config 9 interface 144 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 684.365571][ T31] usb 3-1: config 9 interface 144 has no altsetting 0 [ 684.373728][ T31] usb 3-1: New USB device found, idVendor=045e, idProduct=0927, bcdDevice=4b.68 [ 684.383015][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.391096][ T31] usb 3-1: Product: syz [ 684.395278][ T31] usb 3-1: Manufacturer: syz [ 684.399930][ T31] usb 3-1: SerialNumber: syz [ 684.407259][ T31] r8152-cfgselector 3-1: Unknown version 0x0000 [ 684.448303][T27901] rust_binder: Write failure EFAULT in pid:618 [ 684.606073][ T36] audit: type=1400 audit(1758196425.052:8958): avc: denied { add_name } for pid=27915 comm="syz.5.8982" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 684.630868][T27883] netlink: 'syz.2.8971': attribute type 40 has an invalid length. [ 684.634321][ T36] audit: type=1400 audit(1758196425.052:8959): avc: denied { create } for pid=27915 comm="syz.5.8982" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 684.662994][ T36] audit: type=1400 audit(1758196425.052:8960): avc: denied { map } for pid=27915 comm="syz.5.8982" path="/" dev="configfs" ino=1230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 684.663698][ T31] r8152 3-1:9.144: Expected endpoints are not found [ 684.696738][ T31] r8152-cfgselector 3-1: USB disconnect, device number 46 [ 684.775372][T27929] rust_binder: 27924 RLIMIT_NICE not set [ 684.775687][T27924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:9 [ 685.113429][ T31] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 685.285006][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 685.291372][ T31] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.302748][ T31] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.313651][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 685.322778][ T31] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 685.331233][ T31] usb 3-1: Product: syz [ 685.335435][ T31] usb 3-1: Manufacturer: syz [ 685.342766][ T31] hub 3-1:4.0: USB hub found [ 685.499792][T27941] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8989'. [ 685.517795][T27941] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8989'. [ 685.526862][T27941] netlink: 'syz.1.8989': attribute type 6 has an invalid length. [ 685.530083][T27947] overlayfs: failed to set uuid (435/file1, err=-1); falling back to uuid=null. [ 685.534733][T27941] netlink: 'syz.1.8989': attribute type 5 has an invalid length. [ 685.551635][T27941] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8989'. [ 685.555805][T27950] netlink: 'syz.5.8993': attribute type 6 has an invalid length. [ 685.562251][ T31] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 685.569170][T27947] overlayfs: failed to verify upper root origin [ 685.604508][T27956] pim6reg1: entered allmulticast mode [ 685.658377][T27962] overlay: ./file0 is not a directory [ 685.682170][T27966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8998'. [ 685.904879][ T4295] usb 3-1: USB disconnect, device number 47 [ 686.056018][T27995] overlayfs: failed to clone upperpath [ 686.442584][T28023] netlink: 260 bytes leftover after parsing attributes in process `syz.2.9013'. [ 690.898061][T28044] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 690.920165][T28044] rust_binder: Write failure EINVAL in pid:25 [ 690.976249][T28040] can0: slcan on ttyS3. [ 691.486766][T28079] 9pnet_fd: Insufficient options for proto=fd [ 691.602516][ T36] audit: type=1400 audit(1758196431.588:8961): avc: denied { getattr } for pid=28081 comm="syz.0.9028" path="net:[4026532392]" dev="nsfs" ino=4026532392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 691.733775][T28086] 9pnet_fd: Insufficient options for proto=fd [ 692.386810][T28116] fuse: Bad value for 'group_id' [ 692.416386][T28116] fuse: Bad value for 'group_id' [ 692.492666][T28119] binder: Unknown parameter 'fscontext?}' [ 693.014210][T28129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 693.155722][T28142] /dev/rnullb0: Can't lookup blockdev [ 693.222918][T28152] rust_binder: Fixups oob 165 172 319 173 [ 693.222940][T28152] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 693.228746][T28152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 693.237205][T28152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:661 [ 693.256223][T28153] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 693.266593][T28153] rust_binder: Read failure Err(EFAULT) in pid:52 [ 693.315229][T28157] rust_binder: Error in use_page_slow: ESRCH [ 693.321743][T28157] rust_binder: use_range failure ESRCH [ 693.328349][T28157] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 693.333950][T28157] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 693.342062][T28157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:666 [ 693.352065][T28159] rust_binder: Read failure Err(EAGAIN) in pid:55 [ 693.361609][T28160] rust_binder: 55: no such ref 128 [ 693.373328][T28160] rust_binder: Read failure Err(EAGAIN) in pid:55 [ 693.414302][T28164] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 693.440172][T28168] fuse: Bad value for 'fd' [ 693.479908][T28176] overlayfs: missing 'lowerdir' [ 693.494893][T28178] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 693.494919][T28178] rust_binder: Error while translating object. [ 693.501934][T28180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9064'. [ 693.504076][T28178] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 693.518803][T28178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 693.528745][T28182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.808543][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 693.904296][T28202] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 693.948671][T28214] fuse: Bad value for 'fd' [ 694.001025][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 694.008661][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 694.022960][ T10] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 694.032487][ T10] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 694.043157][ T10] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 694.052663][ T10] usb 3-1: config 128 has no interface number 0 [ 694.059223][ T10] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 694.070769][ T10] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 694.081123][ T10] usb 3-1: config 128 interface 127 has no altsetting 0 [ 694.090575][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 694.100333][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.108699][ T10] usb 3-1: Product: syz [ 694.113136][ T10] usb 3-1: Manufacturer: syz [ 694.117977][ T10] usb 3-1: SerialNumber: syz [ 694.354398][T28186] incfs_lookup_dentry err:-111 [ 694.359233][T28186] incfs: Can't find or create .index dir in ./file0 [ 694.386082][T28186] incfs: mount failed -111 [ 694.481112][ T10] usb 3-1: USB disconnect, device number 48 [ 694.505007][T25388] udevd[25388]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 694.645426][T28227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9078'. [ 695.307409][T28267] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 695.307452][T28267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:86 [ 695.467871][T28270] can0 (unregistered): slcan off ttyS3. [ 695.636413][T28300] binfmt_misc: register: failed to install interpreter file ./cgroup [ 696.813957][T28353] rust_binder: Write failure EFAULT in pid:108 [ 696.832683][T28355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:110 [ 696.870458][T28357] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 696.880082][T28357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:112 [ 696.954311][T28360] overlayfs: missing 'lowerdir' [ 697.206899][ T4295] rust_binder: 28370: removing orphan mapping 0:24 [ 697.392733][T28378] usb usb8: selecting invalid altsetting 6 [ 697.439198][T28382] rust_binder: Write failure EFAULT in pid:137 [ 697.460513][T28384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9118'. [ 697.495755][T28389] rust_binder: Write failure EFAULT in pid:144 [ 697.575304][ T36] audit: type=1400 audit(1758196437.185:8962): avc: denied { listen } for pid=28396 comm="syz.2.9122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 697.690621][T28406] rust_binder: Write failure EFAULT in pid:156 [ 697.968959][ T4295] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 697.999150][T28417] netlink: 'syz.2.9129': attribute type 16 has an invalid length. [ 698.017962][T28417] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.9129'. [ 698.193535][ T4295] usb 2-1: Using ep0 maxpacket: 16 [ 698.205477][ T4295] usb 2-1: unable to get BOS descriptor or descriptor too short [ 698.215680][ T4295] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 8 [ 698.236176][ T4295] usb 2-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 698.257872][ T4295] usb 2-1: config 1 interface 0 has no altsetting 0 [ 698.270216][ T4295] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 698.286542][ T4295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.306666][ T4295] usb 2-1: Product: syz [ 698.310891][ T4295] usb 2-1: Manufacturer: syz [ 698.332569][ T4295] usb 2-1: SerialNumber: syz [ 698.342241][T28408] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 698.353987][T28408] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 698.396765][ T452] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 698.569103][ T452] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.581543][ T452] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.592615][ T452] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 698.602243][ T452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.611960][ T452] usb 3-1: config 0 descriptor?? [ 698.662441][ T4295] usb 2-1: USB disconnect, device number 35 [ 698.723925][ T36] audit: type=1400 audit(1758196438.251:8963): avc: denied { watch_reads } for pid=28441 comm="syz.5.9136" path="/434/file0" dev="tmpfs" ino=2422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 698.888775][T28449] cgroup: Bad value for 'name' [ 698.894925][T28449] 9pnet: Could not find request transport: fd=rfg [ 699.184450][T28462] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 699.193808][ T36] audit: type=1326 audit(1758196438.690:8964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28461 comm="syz.0.9142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc3538eba9 code=0x0 [ 699.302382][T28463] __vm_enough_memory: pid: 28463, comm: syz.0.9142, bytes: 18014402804453376 not enough memory for the allocation [ 699.488351][ T452] hid-led 0003:27B8:01ED.0027: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 699.503119][ T452] hid-led 0003:27B8:01ED.0027: ThingM blink(1) initialized [ 699.606175][T28470] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 699.704840][T19172] usb 3-1: USB disconnect, device number 49 [ 700.116139][T28492] .N: renamed from veth0_to_bond (while UP) [ 700.155303][T28499] devpts: called with bogus options [ 700.284143][T28505] rust_binder: Write failure EFAULT in pid:171 [ 700.361310][T28517] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 700.393713][T28519] tipc: Enabled bearer , priority 0 [ 700.496159][T28534] random: crng reseeded on system resumption [ 700.697267][T28550] rust_binder: Failed to allocate buffer. len:8815263377109862632, is_oneway:false [ 700.697301][T28550] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 700.706710][T28550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1441 [ 700.706766][T28549] netlink: 'syz.1.9173': attribute type 4 has an invalid length. [ 700.728188][T28551] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 700.736916][T28549] netlink: 'syz.1.9173': attribute type 4 has an invalid length. [ 700.767519][T28559] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28559 comm=syz.2.9175 [ 701.198906][T23051] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 701.348638][ T452] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 701.361157][T23051] usb 3-1: not running at top speed; connect to a high speed hub [ 701.369812][T23051] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 701.381636][T23051] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 701.394199][T23051] usb 3-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.40 [ 701.403637][T23051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.411831][T23051] usb 3-1: Product: syz [ 701.416180][T23051] usb 3-1: Manufacturer: â  [ 701.420795][T23051] usb 3-1: SerialNumber: syz [ 701.427087][T28569] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 701.434452][T28569] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 701.509067][ T452] usb 2-1: Using ep0 maxpacket: 32 [ 701.515765][ T452] usb 2-1: config 0 has an invalid interface number: 13 but max is 0 [ 701.523951][ T452] usb 2-1: config 0 has no interface number 0 [ 701.530501][ T452] usb 2-1: config 0 interface 13 has no altsetting 0 [ 701.538589][ T452] usb 2-1: New USB device found, idVendor=54d5, idProduct=953f, bcdDevice=82.82 [ 701.547766][ T452] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.555924][ T452] usb 2-1: Product: syz [ 701.560188][ T452] usb 2-1: Manufacturer: syz [ 701.564885][ T452] usb 2-1: SerialNumber: syz [ 701.570310][ T452] usb 2-1: config 0 descriptor?? [ 701.576444][ T452] usb-storage 2-1:0.13: USB Mass Storage device detected [ 701.661309][T23051] usbhid 3-1:1.0: can't add hid device: -71 [ 701.667269][T23051] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 701.676284][T23051] usb 3-1: USB disconnect, device number 50 [ 701.757940][T28584] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=2286868747 (4573737494 ns) > initial count (823655952 ns). Using initial count to start timer. [ 701.792218][ T452] usb 2-1: USB disconnect, device number 36 [ 702.372278][T28596] __vm_enough_memory: pid: 28596, comm: syz.1.9186, bytes: 18014402804453376 not enough memory for the allocation [ 702.455811][T28606] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 702.455840][T28606] rust_binder: Error while translating object. [ 702.458923][T28608] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 702.466784][T28606] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 702.473210][T28609] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 702.479514][T28606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:712 [ 702.497775][T28610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 702.510050][T28614] /dev/rnullb0: Can't lookup blockdev [ 702.539156][T28620] 9pnet_fd: Insufficient options for proto=fd [ 702.827286][T28634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:206 [ 702.835890][ T10] rust_binder: 28632: removing orphan mapping 0:24 [ 702.848677][T28623] netlink: 1351 bytes leftover after parsing attributes in process `syz.0.9194'. [ 703.124069][ T548] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 703.285919][ T548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.296951][ T548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.306873][ T548] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 703.316013][ T548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.324809][ T548] usb 3-1: config 0 descriptor?? [ 703.814938][T28671] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 703.858029][T28673] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 703.864949][T28673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1506 [ 703.977057][T28680] rust_binder: Write failure EFAULT in pid:1513 [ 704.090960][T28689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 704.254207][ T548] hid-led 0003:27B8:01ED.0028: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 704.284246][ T548] hid-led 0003:27B8:01ED.0028: ThingM blink(1) initialized [ 704.464289][T28704] bridge0: port 3(veth0_to_bridge) entered blocking state [ 704.471474][T28704] bridge0: port 3(veth0_to_bridge) entered disabled state [ 704.479145][T28704] veth0_to_bridge: entered allmulticast mode [ 704.485599][T28704] veth0_to_bridge: entered promiscuous mode [ 704.516325][ T548] usb 3-1: USB disconnect, device number 51 [ 705.148106][T28716] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 705.221437][T28719] rust_binder: 28718 RLIMIT_NICE not set [ 705.228781][T28718] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 705.234903][T28718] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 705.244703][T28718] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1525 [ 705.260892][T28718] rust_binder: 1525: no such ref 3 [ 705.274546][T28718] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 705.282058][T28718] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 705.289610][T28718] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1024 [ 705.297137][T28718] rust_binder: 1525: no such ref 0 [ 705.566098][T28731] /dev/rnullb0: Can't lookup blockdev [ 705.806177][ T36] audit: type=1107 audit(1758196444.871:8965): pid=28752 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ø¡6ë~‡õÎ΀Ð,J!’Q-þÀ§Ü?§F㇫L‚Šc„¶ýÓ+78®¡âtifî`»fÝõu¡[f×/R†ŸëŽM=F:¬Ô²‹ÆºÍ ²¾Á-+?¼’DÖ£÷Ù›,Ío¯÷.±ëÅGÀ¦ÎÈïA[çz•œCw`úut/»¤¢«5?6ɵ%*¸CRäLñmeO¹¸Àdz¬Ø€ ˆÏ7¼Vc€ÿr…3(m<¥¢Ñ–zãŸê¡VÒ(æEXý/®%놇' [ 705.985815][T28757] fuse: Unknown parameter '{ootmode' [ 705.992323][T28758] netlink: 'syz.5.9242': attribute type 6 has an invalid length. [ 706.119191][T28774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 706.119299][T28773] rust_binder: Error in use_page_slow: ESRCH [ 706.125820][T28773] rust_binder: use_range failure ESRCH [ 706.132017][T28773] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 706.137567][T28773] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 706.145526][T28773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:731 [ 706.216104][T28782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9248'. [ 706.248884][T28786] rust_binder: Write failure EFAULT in pid:231 [ 706.252794][T28786] rust_binder: Error while translating object. [ 706.259080][T28786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 706.265272][T28786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231 [ 706.314710][T28789] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 706.323950][T28789] rust_binder: Error while translating object. [ 706.336303][T28789] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 706.342560][T28789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233 [ 706.370698][T28791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9253'. [ 706.418623][T28793] netlink: 'syz.1.9252': attribute type 12 has an invalid length. [ 706.542163][T28802] pim6reg1: entered promiscuous mode [ 706.547603][T28802] pim6reg1: entered allmulticast mode [ 706.709388][T28813] netlink: 'syz.0.9261': attribute type 11 has an invalid length. [ 706.718342][T28813] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9261'. [ 706.728596][T28813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1557 [ 706.788467][ T548] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 706.807624][ T548] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 706.841972][T28817] fido_id[28817]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 706.968516][T28841] incfs: Error accessing: ./bus. [ 706.973538][T28841] incfs: mount failed -2 [ 706.978687][T28841] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 706.989597][T28841] overlayfs: missing 'lowerdir' [ 706.999935][T28845] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:741 [ 707.031802][T28853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9275'. [ 707.057552][T28855] rust_binder: Write failure EFAULT in pid:745 [ 707.081278][T23051] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 707.126977][T28863] rust_binder: Error while translating object. [ 707.127031][T28863] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 707.135345][T28863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:749 [ 707.263108][T23051] usb 3-1: device descriptor read/64, error -71 [ 707.353276][T28875] rust_binder: Error while translating object. [ 707.353324][T28875] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 707.359812][T28875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:755 [ 707.530643][T23051] usb 3-1: device descriptor read/64, error -71 [ 707.797880][T23051] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 707.936863][T23051] usb 3-1: device descriptor read/64, error -71 [ 708.048867][T28891] fuse: Unknown parameter 'æ' [ 708.055247][T28891] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 708.064953][T28891] SELinux: failed to load policy [ 708.083525][T28893] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 708.083545][T28893] rust_binder: Read failure Err(EFAULT) in pid:1587 [ 708.104528][ T36] audit: type=1326 audit(1758196447.021:8966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28894 comm="syz.0.9291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc3538eba9 code=0x0 [ 708.204284][T23051] usb 3-1: device descriptor read/64, error -71 [ 708.322002][T23051] usb usb3-port1: attempt power cycle [ 708.423292][T28907] can0: slcan on ttyS3. [ 708.476445][T28918] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 708.559885][T28933] netlink: 'syz.1.9298': attribute type 20 has an invalid length. [ 708.685685][T23051] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 708.709895][T23051] usb 3-1: device descriptor read/8, error -71 [ 708.722398][T28957] /dev/rnullb0: Can't lookup blockdev [ 708.847146][T23051] usb 3-1: device descriptor read/8, error -71 [ 708.864172][T28969] binder: Bad value for 'max' [ 708.882404][T28971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:809 [ 708.923211][T28973] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 708.932482][T28973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:811 [ 709.058438][T28979] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 709.070384][T28979] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 709.086914][T28979] rust_binder: 1593: no such ref 1 [ 709.116606][T23051] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 709.120322][T28983] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 709.137746][T28987] fuse: Unknown parameter 'rootmo*CÚÙ7#Z' [ 709.146595][T23051] usb 3-1: device descriptor read/8, error -71 [ 709.156635][T28983] rust_binder: 28983 RLIMIT_NICE not set [ 709.245066][ T548] rust_binder: 28982: removing orphan mapping 0:1024 [ 709.297381][T23051] usb 3-1: device descriptor read/8, error -71 [ 709.423613][T23051] usb usb3-port1: unable to enumerate USB device [ 710.155681][T29030] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 710.162982][T29030] rust_binder: Write failure EINVAL in pid:828 [ 710.356648][T29052] rust_binder: Write failure EINVAL in pid:842 [ 710.381681][T29056] tipc: Enabling of bearer rejected, failed to enable media [ 710.411804][T29058] binfmt_misc: register: failed to install interpreter file ./file0 [ 710.420548][T29059] binfmt_misc: register: failed to install interpreter file ./file0 [ 710.476009][T29061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.485677][T29061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.679731][T29076] rust_binder: 29076 RLIMIT_NICE not set [ 710.728316][ T452] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 710.900531][ T452] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 710.910787][ T452] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 710.919826][ T452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.930173][ T452] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 711.105522][T29084] incfs: Error accessing: ./file0. [ 711.110685][T29084] incfs: mount failed -20 [ 711.159017][ T452] usb 2-1: USB disconnect, device number 37 [ 711.521471][T23051] rust_binder: 29074: removing orphan mapping 0:1048 [ 711.535718][T29089] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 711.640751][ T36] audit: type=1400 audit(1758196450.331:8967): avc: denied { ioctl } for pid=29090 comm="syz.2.9351" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 711.790672][T29101] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 711.799034][T29101] rust_binder: Write failure EINVAL in pid:855 [ 711.827219][T29105] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 711.841274][T29105] SELinux: failed to load policy [ 711.994856][T29107] 9p: Unknown uid 00000000004294967295 [ 712.024937][T29107] /dev/rnullb0: Can't lookup blockdev [ 712.061472][T29112] rust_binder: Write failure EFAULT in pid:274 [ 712.101861][T19172] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 712.249424][T29124] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 712.317096][T19172] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 712.332564][T19172] usb 2-1: config 179 has no interface number 0 [ 712.349695][T19172] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 712.371730][T19172] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 712.405380][T19172] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 712.450263][T19172] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 712.459170][T29149] rust_binder: Error while translating object. [ 712.461686][T29149] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 712.468243][T29149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:294 [ 712.488203][T19172] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 712.542097][T19172] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 712.572835][T19172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.596298][T29161] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 712.611220][T29105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 712.636650][T19172] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 712.675933][ T452] hid-generic 0006:0004:0009.002A: unknown main item tag 0x0 [ 712.679527][T19172] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 712.685814][ T452] hid-generic 0006:0004:0009.002A: unknown main item tag 0x0 [ 712.699644][ T452] hid-generic 0006:0004:0009.002A: unknown main item tag 0x0 [ 712.707192][ T452] hid-generic 0006:0004:0009.002A: unknown main item tag 0x0 [ 712.714850][T29166] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 712.714874][T29166] rust_binder: Read failure Err(EFAULT) in pid:1610 [ 712.717830][ T452] hid-generic 0006:0004:0009.002A: unknown main item tag 0x0 [ 712.737611][ T452] hid-generic 0006:0004:0009.002A: unknown main item tag 0x0 [ 712.748002][ T452] hid-generic 0006:0004:0009.002A: unknown main item tag 0x0 [ 712.755907][ T452] hid-generic 0006:0004:0009.002A: unknown main item tag 0x0 [ 712.763695][ T452] hid-generic 0006:0004:0009.002A: unknown main item tag 0x0 [ 712.776466][ T452] hid-generic 0006:0004:0009.002A: unknown main item tag 0x0 [ 712.784139][ T452] hid-generic 0006:0004:0009.002A: unknown main item tag 0x0 [ 712.791859][ T452] hid-generic 0006:0004:0009.002A: unknown main item tag 0x0 [ 712.799345][T29171] 8021q: VLANs not supported on ip_vti0 [ 712.805479][ T452] hid-generic 0006:0004:0009.002A: unknown main item tag 0x0 [ 712.806785][T29173] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 712.813001][ T452] hid-generic 0006:0004:0009.002A: unknown main item tag 0x0 [ 712.830320][ T452] hid-generic 0006:0004:0009.002A: unknown main item tag 0x0 [ 712.837973][ T452] hid-generic 0006:0004:0009.002A: unknown main item tag 0x0 [ 712.845550][ T452] hid-generic 0006:0004:0009.002A: unknown main item tag 0x0 [ 712.861890][ T452] hid-generic 0006:0004:0009.002A: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 712.919258][T29178] fido_id[29178]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 712.956114][T29186] tipc: Started in network mode [ 712.961496][T29186] tipc: Node identity 9618a7da60f2, cluster identity 4711 [ 712.969100][T29186] tipc: Enabled bearer , priority 0 [ 712.983106][T29186] netlink: 'syz.2.9385': attribute type 4 has an invalid length. [ 712.991167][T29186] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.9385'. [ 713.004078][T29190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9386'. [ 713.021437][T29190] 9pnet_fd: p9_fd_create_unix (29190): problem connecting socket: ./file0: -111 [ 713.032759][ T452] usb 2-1: USB disconnect, device number 38 [ 713.045228][T29186] tipc: Disabling bearer [ 713.663066][T29195] __vm_enough_memory: pid: 29195, comm: syz.1.9388, bytes: 18014402804453376 not enough memory for the allocation [ 713.774089][T29201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:315 [ 713.774312][T29201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:315 [ 713.817024][T29213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=29213 comm=syz.1.9394 [ 713.869215][T29222] FAULT_INJECTION: forcing a failure. [ 713.869215][T29222] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 713.882900][T29222] CPU: 1 UID: 0 PID: 29222 Comm: syz.1.9398 Not tainted syzkaller #0 8557b6f4d128b4a4d63f70857eed3e16fdb6808e [ 713.882941][T29222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 713.882960][T29222] Call Trace: [ 713.882969][T29222] [ 713.882984][T29222] __dump_stack+0x21/0x30 [ 713.883028][T29222] dump_stack_lvl+0x10c/0x190 [ 713.883061][T29222] ? __cfi_dump_stack_lvl+0x10/0x10 [ 713.883094][T29222] ? check_stack_object+0x82/0x140 [ 713.883246][T29222] dump_stack+0x19/0x20 [ 713.883280][T29222] should_fail_ex+0x3d9/0x530 [ 713.883388][T29222] should_fail+0xf/0x20 [ 713.883411][T29222] should_fail_usercopy+0x1e/0x30 [ 713.883437][T29222] _copy_from_user+0x22/0xb0 [ 713.883494][T29222] memdup_user+0x81/0x180 [ 713.883654][T29222] ? strndup_user+0x40/0xd0 [ 713.883688][T29222] strndup_user+0x6c/0xd0 [ 713.883720][T29222] __se_sys_mount+0x9f/0x480 [ 713.883806][T29222] ? ksys_write+0x1ef/0x250 [ 713.883856][T29222] ? __x64_sys_mount+0xf0/0xf0 [ 713.883880][T29222] __x64_sys_mount+0xc3/0xf0 [ 713.883904][T29222] x64_sys_call+0x2021/0x2ee0 [ 713.883941][T29222] do_syscall_64+0x58/0xf0 [ 713.883965][T29222] ? clear_bhb_loop+0x50/0xa0 [ 713.883999][T29222] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 713.884031][T29222] RIP: 0033:0x7f09d238eba9 [ 713.884053][T29222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.884076][T29222] RSP: 002b:00007f09d31d0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 713.884103][T29222] RAX: ffffffffffffffda RBX: 00007f09d25d5fa0 RCX: 00007f09d238eba9 [ 713.884123][T29222] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 713.884141][T29222] RBP: 00007f09d31d0090 R08: 0000200000000280 R09: 0000000000000000 [ 713.884159][T29222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.884175][T29222] R13: 00007f09d25d6038 R14: 00007f09d25d5fa0 R15: 00007ffc4727ae78 [ 713.884197][T29222] [ 713.899479][T29226] x_tables: duplicate underflow at hook 1 [ 714.013422][T29238] input: syz0 as /devices/virtual/input/input55 [ 714.161509][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 714.183784][ T36] audit: type=1400 audit(1758196452.706:8968): avc: denied { create } for pid=29249 comm="syz.1.9407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 714.321902][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 714.333336][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 714.341732][ T10] usb 3-1: config 0 has no interface number 0 [ 714.347965][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 714.356318][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 714.365540][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.373656][ T10] usb 3-1: Product: syz [ 714.377897][ T10] usb 3-1: Manufacturer: syz [ 714.382553][ T10] usb 3-1: SerialNumber: syz [ 714.387938][ T10] usb 3-1: config 0 descriptor?? [ 714.393811][ T10] smsc75xx v1.0.0 [ 714.589347][T23051] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 714.761842][T23051] usb 2-1: unable to get BOS descriptor or descriptor too short [ 714.769943][T23051] usb 2-1: not running at top speed; connect to a high speed hub [ 714.780554][T23051] usb 2-1: config 1 has an invalid interface number: 138 but max is 0 [ 714.788899][T23051] usb 2-1: config 1 has no interface number 0 [ 714.795056][T23051] usb 2-1: config 1 interface 138 has no altsetting 0 [ 714.803374][T23051] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 714.812451][T23051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.820511][T23051] usb 2-1: Product: syz [ 714.824727][T23051] usb 2-1: Manufacturer: syz [ 714.829344][T23051] usb 2-1: SerialNumber: syz [ 714.987758][ T36] audit: type=1400 audit(1758196453.463:8969): avc: denied { connect } for pid=29257 comm="syz.5.9410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 714.987907][T29258] netlink: 'syz.5.9410': attribute type 16 has an invalid length. [ 715.016558][T29258] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.9410'. [ 715.038668][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 715.051068][T29253] binder: Bad value for 'max' [ 715.052999][T29261] overlayfs: failed to clone upperpath [ 715.061334][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 715.066916][T23051] usb 2-1: USB disconnect, device number 39 [ 715.081002][T28465] udevd[28465]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.138/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 715.289202][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 715.302551][T29280] netlink: 'syz.5.9417': attribute type 4 has an invalid length. [ 715.310379][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 715.320249][T29280] netlink: 17 bytes leftover after parsing attributes in process `syz.5.9417'. [ 715.329302][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 715.341445][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 715.504469][T29201] rust_binder: Write failure EINVAL in pid:315 [ 715.504917][T23051] usb 3-1: USB disconnect, device number 56 [ 716.091693][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 716.147342][T29328] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 716.147384][T29328] rust_binder: Error while translating object. [ 716.159695][T29328] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 716.165972][T29328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:317 [ 716.238424][T29339] tipc: Enabling of bearer rejected, already enabled [ 716.289862][T23051] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 716.462774][T23051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.462960][T29362] netlink: 'syz.0.9446': attribute type 46 has an invalid length. [ 716.473826][T23051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.491570][T23051] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 716.501080][T23051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.510175][T23051] usb 2-1: config 0 descriptor?? [ 716.985785][T14296] bridge_slave_1: left allmulticast mode [ 716.991581][T14296] bridge_slave_1: left promiscuous mode [ 716.997390][T14296] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.005335][T14296] bridge_slave_0: left allmulticast mode [ 717.011359][T14296] bridge_slave_0: left promiscuous mode [ 717.017259][T14296] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.137472][T29383] tipc: Enabling of bearer rejected, failed to enable media [ 717.220431][T14296] tipc: Left network mode [ 717.285530][T14296] veth1_macvtap: left promiscuous mode [ 717.291100][T14296] veth0_vlan: left promiscuous mode [ 717.373554][T23051] hid-led 0003:27B8:01ED.002B: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 717.389653][T23051] hid-led 0003:27B8:01ED.002B: ThingM blink(1) initialized [ 717.589399][ T10] usb 2-1: USB disconnect, device number 40 [ 717.755114][T29398] tmpfs: Unknown parameter 'noinode32' [ 718.190821][T29409] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 718.190861][T29409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 718.198901][T29409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:931 [ 718.232699][T29413] rust_binder: validate_parent_fixup: new_min_offset=25, sg_entry.length=0 [ 718.241985][T29413] rust_binder: Error while translating object. [ 718.250654][T29413] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 718.256870][T29413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:935 [ 718.266938][T29414] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 718.282826][T29415] rust_binder: validate_parent_fixup: new_min_offset=25, sg_entry.length=0 [ 718.282851][T29415] rust_binder: Error while translating object. [ 718.291615][T29415] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 718.297927][T29415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:935 [ 718.311198][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 718.318826][T25569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 718.331331][T29417] 9pnet_fd: Insufficient options for proto=fd [ 718.354648][T29419] rust_binder: Error while translating object. [ 718.354697][T29419] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 718.360920][T29419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:321 [ 718.555125][T29444] overlayfs: failed to clone upperpath [ 718.575290][T29446] rust_binder: Error while translating object. [ 718.575326][T29446] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 718.581634][T29446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:950 [ 718.591547][T29447] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 718.932238][T14304] bridge_slave_1: left allmulticast mode [ 718.944593][T14304] bridge_slave_1: left promiscuous mode [ 718.950313][T14304] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.958506][T14304] bridge_slave_0: left allmulticast mode [ 718.964707][T14304] bridge_slave_0: left promiscuous mode [ 718.970561][T14304] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.021686][T29467] syz.1.9485 (29467) used obsolete PPPIOCDETACH ioctl [ 719.027790][T23051] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 719.037046][T29461] 9pnet_fd: Insufficient options for proto=fd [ 719.069881][T29459] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.077051][T29459] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.084257][T29459] bridge_slave_0: entered allmulticast mode [ 719.090689][T29459] bridge_slave_0: entered promiscuous mode [ 719.097647][T29459] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.104801][T29459] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.111919][T29459] bridge_slave_1: entered allmulticast mode [ 719.118624][T29459] bridge_slave_1: entered promiscuous mode [ 719.128014][T14304] tipc: Left network mode [ 719.133664][T14304] veth1_macvtap: left promiscuous mode [ 719.139303][T14304] veth0_vlan: left promiscuous mode [ 719.231154][T29459] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.238280][T29459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.245636][T29459] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.252710][T29459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.274762][T14296] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.282024][T14296] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.291537][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.298638][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.308209][T14296] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.315308][T14296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.341215][T29459] veth0_vlan: entered promiscuous mode [ 719.352634][T29459] veth1_macvtap: entered promiscuous mode [ 719.450127][T29485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9489'. [ 719.543255][T29499] incfs: Error accessing: ./file0. [ 719.548423][T29499] incfs: mount failed -20 [ 719.690342][T29517] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 720.187837][T29540] overlayfs: failed to clone upperpath [ 720.279738][T29551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9508'. [ 720.775562][T29580] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 720.817977][T29586] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 720.857089][T29589] /dev/rnullb0: Can't lookup blockdev [ 720.987370][T29602] netlink: 188 bytes leftover after parsing attributes in process `syz.6.9524'. [ 721.196902][T29618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9529'. [ 721.240237][T29622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9530'. [ 721.759014][T29627] netlink: 'syz.1.9532': attribute type 6 has an invalid length. [ 721.766896][T29627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9532'. [ 721.825274][T29629] __vm_enough_memory: pid: 29629, comm: syz.1.9533, bytes: 18014402804453376 not enough memory for the allocation [ 721.906793][ T36] audit: type=1400 audit(1758196459.934:8970): avc: denied { lock } for pid=29630 comm="syz.1.9534" path="socket:[148067]" dev="sockfs" ino=148067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 722.092921][T29639] 9pnet_fd: Insufficient options for proto=fd [ 722.113478][T29644] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000004' [ 722.527309][T29653] rust_binder: 29653 RLIMIT_NICE not set [ 722.527503][T29653] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 722.533235][T29653] rust_binder: Failure BR_FAILED_REPLY { source: ENOMEM } during reply - delivering BR_FAILED_REPLY to sender. [ 722.568056][T29653] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:54 [ 722.585787][T23051] rust_binder: 29652: removing orphan mapping 0:1048 [ 722.596283][T29655] netlink: 'syz.6.9541': attribute type 4 has an invalid length. [ 722.611021][T29655] netlink: 'syz.6.9541': attribute type 4 has an invalid length. [ 722.632170][T29655] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 722.721219][T29657] rust_binder: 58: no such ref 3 [ 722.732851][T29657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58 [ 722.734722][T29657] rust_binder: Error while translating object. [ 722.743902][T29657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 722.750171][T29657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58 [ 722.845835][T29665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:63 [ 722.951438][T29667] binder: Bad value for 'stats' [ 723.027774][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 723.166838][ T10] usb 2-1: device descriptor read/64, error -71 [ 723.195833][ T36] audit: type=1400 audit(1758196461.130:8971): avc: denied { append } for pid=29678 comm="syz.6.9551" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 723.423481][ T10] usb 2-1: device descriptor read/64, error -71 [ 723.680180][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 723.819215][ T10] usb 2-1: device descriptor read/64, error -71 [ 723.828631][T29691] overlayfs: failed to clone upperpath [ 724.075913][ T10] usb 2-1: device descriptor read/64, error -71 [ 724.178651][T29712] overlayfs: failed to clone upperpath [ 724.193653][ T10] usb usb2-port1: attempt power cycle [ 724.557306][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 724.579607][ T10] usb 2-1: device descriptor read/8, error -71 [ 724.718829][ T10] usb 2-1: device descriptor read/8, error -71 [ 724.889066][T29722] overlayfs: failed to clone upperpath [ 724.974271][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 725.007594][ T10] usb 2-1: device descriptor read/8, error -71 [ 725.166148][ T10] usb 2-1: device descriptor read/8, error -71 [ 725.284560][ T10] usb usb2-port1: unable to enumerate USB device [ 725.408832][T29780] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 725.417623][T29780] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 726.020606][T29790] rust_binder: Read failure Err(EFAULT) in pid:985 [ 726.086396][T29800] /dev/rnullb0: Can't lookup blockdev [ 726.125007][T29802] netlink: 148 bytes leftover after parsing attributes in process `syz.5.9597'. [ 726.145092][T29803] netlink: 148 bytes leftover after parsing attributes in process `syz.5.9597'. [ 726.172422][T27922] can0 (unregistered): slcan off ttyS3. [ 726.385380][T29825] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9600'. [ 726.982664][T14296] bridge_slave_1: left allmulticast mode [ 726.988447][T14296] bridge_slave_1: left promiscuous mode [ 726.994163][T14296] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.001831][T14296] bridge_slave_0: left allmulticast mode [ 727.007560][T14296] bridge_slave_0: left promiscuous mode [ 727.013166][T14296] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.068203][T29857] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.075349][T29857] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.082537][T29857] bridge_slave_0: entered allmulticast mode [ 727.088837][T29857] bridge_slave_0: entered promiscuous mode [ 727.095474][T29857] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.102517][T29857] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.109667][T29857] bridge_slave_1: entered allmulticast mode [ 727.116236][T29857] bridge_slave_1: entered promiscuous mode [ 727.123297][T14296] veth1_macvtap: left promiscuous mode [ 727.128881][T14296] veth0_vlan: left promiscuous mode [ 727.236726][T29890] fuseblk: Bad value for 'source' [ 727.275095][T29857] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.282199][T29857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.289634][T29857] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.296709][T29857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.333531][T14304] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.343095][T14304] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.358018][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.365141][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.382664][T29914] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9617'. [ 727.394759][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.401854][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.427708][T29929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9620'. [ 727.446074][T29929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9620'. [ 727.462604][T29857] veth0_vlan: entered promiscuous mode [ 727.467437][T29936] overlayfs: failed to clone upperpath [ 727.478134][T29857] veth1_macvtap: entered promiscuous mode [ 727.528259][T29933] rust_binder: Read failure Err(EFAULT) in pid:81 [ 727.569462][T29955] overlayfs: failed to clone upperpath [ 727.806657][T29959] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.813803][T29959] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.821132][T29959] bridge_slave_0: entered allmulticast mode [ 727.827466][T29959] bridge_slave_0: entered promiscuous mode [ 727.834165][T29959] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.841327][T29959] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.848485][T29959] bridge_slave_1: entered allmulticast mode [ 727.855068][T29959] bridge_slave_1: entered promiscuous mode [ 727.911918][T29959] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.919034][T29959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.926379][T29959] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.933583][T29959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.957281][T14304] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.964652][T14304] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.974445][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.981556][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.992774][T14304] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.999864][T14304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.014312][T14296] veth0_to_bridge: left allmulticast mode [ 728.020175][T14296] veth0_to_bridge: left promiscuous mode [ 728.026009][T14296] bridge0: port 3(veth0_to_bridge) entered disabled state [ 728.033788][T14296] bridge_slave_1: left allmulticast mode [ 728.039668][T14296] bridge_slave_1: left promiscuous mode [ 728.045700][T14296] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.053309][T14296] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.132908][T29959] veth0_vlan: entered promiscuous mode [ 728.144901][T29959] veth1_macvtap: entered promiscuous mode [ 728.383143][T29983] rust_binder: 7: no such ref 3 [ 728.388271][T29983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:7 [ 728.388487][T29983] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 728.397672][T29983] rust_binder: Error while translating object. [ 728.408532][T29983] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 728.414612][T29985] overlayfs: empty lowerdir [ 728.414738][T29983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 728.522035][T29995] rust_binder: Failed copying remainder into alloc: EFAULT [ 728.531290][T29995] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 728.538965][T29995] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 728.547329][T29995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:94 [ 728.584134][T29999] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 728.593313][T29999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:96 [ 728.717629][ T10] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 728.899440][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 728.905961][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.917097][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 728.930131][ T10] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 728.939229][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.947923][ T10] usb 6-1: config 0 descriptor?? [ 729.045176][ T452] rust_binder: 30007: removing orphan mapping 0:4208 [ 729.094425][T30015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9645'. [ 729.160215][ T548] rust_binder: 30014: removing orphan mapping 0:4208 [ 729.175621][ T10] hid-rmi 0003:06CB:81A7.002C: unknown main item tag 0x0 [ 729.179576][T30018] rust_binder: Write failure EFAULT in pid:114 [ 729.183702][ T10] hid-rmi 0003:06CB:81A7.002C: unknown main item tag 0x0 [ 729.197298][ T10] hid-rmi 0003:06CB:81A7.002C: unknown main item tag 0x0 [ 729.205263][ T10] hid-rmi 0003:06CB:81A7.002C: unknown main item tag 0x0 [ 729.212620][ T10] hid-rmi 0003:06CB:81A7.002C: unknown main item tag 0x0 [ 729.219733][ T10] hid-rmi 0003:06CB:81A7.002C: unknown main item tag 0x0 [ 729.227006][ T10] hid-rmi 0003:06CB:81A7.002C: unknown main item tag 0x0 [ 729.234283][ T10] hid-rmi 0003:06CB:81A7.002C: unknown main item tag 0x0 [ 729.241384][ T10] hid-rmi 0003:06CB:81A7.002C: unbalanced collection at end of report description [ 729.251468][ T10] hid-rmi 0003:06CB:81A7.002C: parse failed [ 729.257537][ T10] hid-rmi 0003:06CB:81A7.002C: probe with driver hid-rmi failed with error -22 [ 729.268474][T30023] binder: Bad value for 'stats' [ 729.273314][ T10] usb 6-1: USB disconnect, device number 74 [ 729.335357][T30037] /dev/rnullb0: Can't lookup blockdev [ 729.830903][T14296] bridge_slave_1: left allmulticast mode [ 729.836697][T14296] bridge_slave_1: left promiscuous mode [ 729.842392][T14296] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.849896][T14296] bridge_slave_0: left allmulticast mode [ 729.855622][T14296] bridge_slave_0: left promiscuous mode [ 729.861292][T14296] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.869334][T14296] tipc: Resetting bearer [ 729.961353][T14296] tipc: Disabling bearer [ 730.088280][T30048] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.095986][T30048] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.103557][T30048] bridge_slave_0: entered allmulticast mode [ 730.110419][T30048] bridge_slave_0: entered promiscuous mode [ 730.117134][T30048] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.124538][T30048] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.125496][T30061] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 730.131712][T30048] bridge_slave_1: entered allmulticast mode [ 730.148342][T30061] rust_binder: Error in use_page_slow: EFAULT [ 730.148366][T30061] rust_binder: use_range failure EFAULT [ 730.148777][T30048] bridge_slave_1: entered promiscuous mode [ 730.161531][T30061] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 730.166485][T14296] tipc: Disabling bearer [ 730.172456][T30061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 730.180272][T14296] tipc: Left network mode [ 730.183160][T30061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:20 [ 730.267317][T14296] veth1_macvtap: left promiscuous mode [ 730.282881][T14296] veth0_vlan: left promiscuous mode [ 730.401802][T30048] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.408921][T30048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.416276][T30048] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.423424][T30048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.459277][T14281] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.473450][T14281] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.487362][T14304] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.494479][T14304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.515597][T14304] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.522680][T14304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.548809][T30048] veth0_vlan: entered promiscuous mode [ 730.563919][T30048] veth1_macvtap: entered promiscuous mode [ 730.632416][T30080] rust_binder: Write failure EFAULT in pid:2 [ 730.647630][T30082] binder: Unknown parameter 'fscontext?}' [ 730.835359][ T10] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 730.901355][T30084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9667'. [ 730.910403][ T36] audit: type=1400 audit(2000000005.581:8972): avc: denied { accept } for pid=30087 comm="syz.7.9668" path="socket:[151132]" dev="sockfs" ino=151132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 730.965943][T30088] rust_binder: Error while translating object. [ 730.965991][T30088] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 730.972322][T30088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 730.995701][ T10] usb 6-1: device descriptor read/64, error -71 [ 731.177044][T30104] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 731.198534][ T36] audit: type=1400 audit(2000000005.853:8973): avc: denied { relabelfrom } for pid=30105 comm="syz.0.9672" name="UNIX-STREAM" dev="sockfs" ino=151152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 731.198548][T30106] SELinux: Context system_u:object_r:initrc_exec_t:s0 is not valid (left unmapped). [ 731.232851][ T36] audit: type=1400 audit(2000000005.890:8974): avc: denied { relabelto } for pid=30105 comm="syz.0.9672" name="UNIX-STREAM" dev="sockfs" ino=151152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 731.258233][T30108] /dev/rnullb0: Can't lookup blockdev [ 731.295141][ T10] usb 6-1: device descriptor read/64, error -71 [ 731.551851][ T10] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 731.590988][ T36] audit: type=1400 audit(2000000006.217:8975): avc: denied { mounton } for pid=30126 comm="syz.0.9679" path="/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=151451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 731.690890][ T10] usb 6-1: device descriptor read/64, error -71 [ 731.744421][T30129] binder: Unknown parameter 'maxµÅ [ 731.744421][T30129] È-¨ùä tµ¶’û!ç –Fi¾S—‘ã醇î˜S' [ 731.947547][ T10] usb 6-1: device descriptor read/64, error -71 [ 732.065325][ T10] usb usb6-port1: attempt power cycle [ 732.429168][ T10] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 732.462022][ T10] usb 6-1: device descriptor read/8, error -71 [ 732.601856][ T10] usb 6-1: device descriptor read/8, error -71 [ 732.856855][ T10] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 732.879350][ T10] usb 6-1: device descriptor read/8, error -71 [ 733.018169][ T10] usb 6-1: device descriptor read/8, error -71 [ 733.134908][ T10] usb usb6-port1: unable to enumerate USB device [ 733.602099][T30142] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 733.602129][T30142] rust_binder: Error while translating object. [ 733.610915][T30142] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 733.617149][T30142] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 733.806284][ T36] audit: type=1400 audit(2000000008.293:8976): avc: denied { setattr } for pid=30154 comm="syz.6.9688" name="CAN_RAW" dev="sockfs" ino=150310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 733.808607][T30155] /dev/rnullb0: Can't lookup blockdev [ 733.819577][T30157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:31 [ 733.887582][T30163] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 733.941043][T30166] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 734.067950][T30177] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 734.067990][T30177] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 734.107679][T30179] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 734.117052][T30180] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 734.130894][T30181] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:166 [ 734.131051][T30180] rust_binder: inc_ref_done called when no active inc_refs [ 734.255455][T30207] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 734.271004][T30207] rust_binder: Write failure EINVAL in pid:67 [ 734.271999][T30207] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 734.286897][T30207] rust_binder: Write failure EINVAL in pid:67 [ 734.302551][T30211] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 734.310000][T30211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:71 [ 734.317132][T30211] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 734.801882][T30216] /dev/rnullb0: Can't lookup blockdev [ 735.222846][T30248] /dev/rnullb0: Can't lookup blockdev [ 735.242110][T30251] 9pnet_fd: Insufficient options for proto=fd [ 736.217064][ T36] audit: type=1326 audit(2000000010.546:8977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30274 comm="syz.6.9728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2bd18eba9 code=0x0 [ 736.247218][T19172] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 736.324564][T30276] fuse: Bad value for 'fd' [ 736.335075][ T10] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 736.354068][ T10] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 736.406472][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.408632][T19172] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 736.414047][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.422287][T19172] usb 6-1: config 0 has no interface number 0 [ 736.430112][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.435932][T19172] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.443473][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.454547][T19172] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.461841][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.471440][T19172] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 736.479068][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.487877][T19172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.495407][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.510584][T19172] usb 6-1: config 0 descriptor?? [ 736.510772][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.523032][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.530515][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.538032][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.545550][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.553004][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.560472][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.568006][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.575511][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.583088][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.590580][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.598007][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.605455][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.613184][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.620625][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.628609][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.636142][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.643634][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.651056][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.658621][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.666070][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.673483][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.680938][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.688383][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.695831][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.703300][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.710755][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.718239][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.725657][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.733109][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.740602][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.748046][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.755495][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.762940][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.770360][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.777930][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.785750][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.793257][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.800701][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.808144][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.815578][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.822983][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.830437][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.837875][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.845287][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.852736][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.860202][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.867638][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.875052][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.882488][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.889937][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.897343][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.904776][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.912218][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.919624][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.927080][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.934534][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.942047][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.947895][T19172] usbhid 6-1:0.1: can't add hid device: -71 [ 736.949499][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.958809][T19172] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 736.962777][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.976757][T19172] usb 6-1: USB disconnect, device number 80 [ 736.978001][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.991257][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 736.998724][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.006143][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.013563][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.021006][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.028436][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.035839][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.043270][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.050713][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.058107][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.065572][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.073003][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.080430][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.087939][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.095377][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.102839][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.110337][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.117793][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.125229][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.132611][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.140105][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.147667][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.155053][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.162482][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.169907][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.177296][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.184726][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.192159][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.199582][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.206981][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.214425][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.221928][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.229532][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.237033][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.244479][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.251872][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.259331][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.266790][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.274238][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.281638][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.289091][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.296537][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.303924][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.311560][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.318996][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.326413][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.333838][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.341270][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.348692][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.356091][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.363516][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.370933][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.378317][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.385729][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.393390][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.400801][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.408266][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.415721][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.423119][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.430671][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.438104][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.445522][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.452922][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.460718][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.468495][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.475879][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.483987][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.491501][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.498945][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.506541][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.514288][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.521769][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.529191][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.533099][T30284] binder: Bad value for 'stats' [ 737.536875][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.549168][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.556856][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.558433][T30290] SELinux: security_context_str_to_sid () failed with errno=-22 [ 737.564816][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.580029][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.587815][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.595264][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.602682][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.610120][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.617551][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.624956][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.632501][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.639936][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.647321][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.654760][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.662249][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.669772][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.677189][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.684639][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.692110][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.699519][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.707002][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.714435][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.721819][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.729340][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.736945][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.744378][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.751806][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.759263][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.766749][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.774151][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.781581][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.789015][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.796416][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.803845][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.811276][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.818677][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.826099][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.833527][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.840596][T19172] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 737.840956][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.855906][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.863336][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.870738][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.878172][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.885804][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.893196][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.900648][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.908082][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.915518][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.923314][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.930754][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.938575][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.946066][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.953512][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.960946][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.968331][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.975770][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.983216][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.990655][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 737.998149][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 738.005610][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 738.012925][T19172] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 738.013115][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 738.021147][T19172] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 738.028560][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 738.040486][T19172] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 738.047455][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 738.058651][T19172] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 738.065718][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 738.077328][T19172] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 738.084422][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 738.097448][T19172] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 738.104777][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 738.113959][T19172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.121192][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 738.133702][T19172] usb 6-1: config 0 descriptor?? [ 738.136595][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 738.142071][T30290] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 738.148930][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 738.163418][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 738.170839][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 738.178308][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 738.185774][ T452] hid-generic FFF9:000A:0001.002E: unknown main item tag 0x0 [ 738.193961][ T452] hid-generic FFF9:000A:0001.002E: hidraw1: HID v0.03 Device [syz1] on syz0 [ 738.219335][T30291] fido_id[30291]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 738.250581][T30293] /dev/rnullb0: Can't lookup blockdev [ 738.327752][T30297] 9pnet_fd: Insufficient options for proto=fd [ 738.536749][T30306] overlayfs: overlapping lowerdir path [ 738.586585][T19172] plantronics 0003:047F:FFFF.002F: unknown main item tag 0xd [ 738.595450][T19172] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 738.604771][T19172] plantronics 0003:047F:FFFF.002F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 738.674350][ T36] audit: type=1326 audit(2000000012.837:8978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30309 comm="syz.0.9737" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12aa18eba9 code=0x0 [ 738.698335][ T36] audit: type=1326 audit(2000000012.837:8979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30309 comm="syz.0.9737" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12aa18eba9 code=0x0 [ 738.892464][T19172] usb 6-1: USB disconnect, device number 81 [ 739.689708][T30333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 739.690662][T30333] rust_binder: 111: no such ref 2 [ 739.702253][T30333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 739.735293][T30335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:113 [ 740.699569][ T36] audit: type=1400 audit(2000000014.744:8980): avc: denied { getattr } for pid=30337 comm="syz.5.9747" name="/" dev="incremental-fs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 741.601952][T30343] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 741.602000][T30342] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 741.608605][T30343] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 741.615108][T30343] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:120 [ 742.047694][T30358] tipc: Started in network mode [ 742.061948][T30358] tipc: Node identity 5f000001, cluster identity 4711 [ 742.068797][T30358] tipc: Enabling of bearer rejected, failed to enable media [ 742.110380][T30361] rust_binder: 76: no such ref 0 [ 742.115536][T30361] rust_binder: 76: no such ref 3 [ 742.120836][T30361] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 742.128170][T30361] rust_binder: Write failure EINVAL in pid:76 [ 742.128398][T30361] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 742.141811][T30361] rust_binder: Write failure EINVAL in pid:76 [ 742.142554][T30363] rust_binder: Write failure EINVAL in pid:76 [ 742.285387][T30378] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 742.290306][T30380] virtiofs: Unknown parameter 'always' [ 742.314236][T30386] rust_binder: Error while translating object. [ 742.314285][T30386] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 742.314469][T30387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:95 [ 742.320593][T30386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95 [ 742.339668][T30378] rust_binder: Read failure Err(EAGAIN) in pid:131 [ 742.349353][T30378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131 [ 742.420560][T30393] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 742.467651][T30404] tipc: Started in network mode [ 742.468549][T30406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 742.472632][T30406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:229 [ 742.472658][T30404] tipc: Node identity 7e0e09b8e8a6, cluster identity 4711 [ 742.499970][T30404] tipc: Enabled bearer , priority 0 [ 742.537048][T30403] tipc: Disabling bearer [ 742.604676][T30414] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 742.604712][T30414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:36 [ 742.951123][T30437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 743.035084][T30442] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 743.043591][T30442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155 [ 743.051436][T30439] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 743.067857][T30439] rust_binder: Write failure EINVAL in pid:48 [ 743.262116][ T548] rust_binder: 30444: removing orphan mapping 0:24 [ 743.276890][T30452] overlayfs: failed to set uuid (18/file1, err=-1); falling back to uuid=null. [ 743.285977][T30452] overlayfs: failed to verify upper root origin [ 743.305936][T17872] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 743.469676][T17872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.480840][T17872] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 743.489991][T17872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.498791][T17872] usb 6-1: config 0 descriptor?? [ 743.933361][T17872] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 743.943156][T17872] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0030/input/input58 [ 744.020451][T17872] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 744.570100][ T36] audit: type=1400 audit(2000000018.363:8981): avc: denied { read } for pid=30458 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK [ 744.849766][T30457] /dev/rnullb0: Can't lookup blockdev Stopping crond: stopped /usr/sbin/crond (pid 193) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 147) Stopping network: [ 745.016274][ T36] audit: type=1400 audit(2000000018.765:8982): avc: denied { read write } for pid=30479 comm="ip" path="/dev/console" dev="rootfs" ino=104 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 745.047618][ T36] audit: type=1400 audit(2000000018.802:8983): avc: denied { unlink } for pid=148 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 OK Stopping iptables: [ 745.125792][ T36] audit: type=1400 audit(2000000018.877:8984): avc: denied { read write } for pid=30483 comm="iptables" path="/dev/console" dev="rootfs" ino=104 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK [ 745.152448][ T36] audit: type=1400 audit(2000000018.877:8985): avc: denied { search } for pid=30483 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system [ 745.174986][ T36] audit: type=1400 audit(2000000018.877:8986): avc: denied { write } for pid=30483 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 message bus: [ 745.198428][ T36] audit: type=1400 audit(2000000018.877:8987): avc: denied { add_name } for pid=30483 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 745.220558][ T36] audit: type=1400 audit(2000000018.877:8988): avc: denied { create } for pid=30483 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 745.242353][ T36] audit: type=1400 audit(2000000018.877:8989): avc: denied { read open } for pid=30483 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=10466 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 745.266871][ T36] audit: type=1400 audit(2000000018.877:8990): avc: denied { lock } for pid=30483 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=10466 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 done killall: can't kill pid 25541: No such process Stopping klogd: OK Stopping acpid: [ 746.250368][T17872] usb 6-1: USB disconnect, device number 82 OK [ 746.542162][T30526] rust_binder: Write failure EFAULT in pid:103 [ 746.602699][T30531] pim6reg1: entered promiscuous mode [ 746.615558][T30531] pim6reg1: entered allmulticast mode Stopping syslogd: [ 746.626415][T30534] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.631612][T30534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=30534 comm=syz.0.9796 stopped /sbin/syslogd (pid 91) OK [ 746.655777][T30535] incfs: Options parsing error. -22 [ 746.661040][T30535] incfs: mount failed -22 [ 746.691489][T30542] can0: slcan on ttyS3. [ 746.760399][T17872] usb 6-1: new high-speed USB device number 83 using dummy_hcd umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: can't remount devtmpfs read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.0.49 closed by remote host. Sent SIGTERM to all processes [ 747.011489][T30542] can0 (unregistered): slcan off ttyS3. [ 747.597031][T14304] bridge_slave_1: left allmulticast mode [ 747.602705][T14304] bridge_slave_1: left promiscuous mode [ 747.608380][T14304] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.615872][T14304] bridge_slave_0: left allmulticast mode [ 747.621620][T14304] bridge_slave_0: left promiscuous mode [ 747.627361][T14304] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.635141][T14304] bridge_slave_1: left allmulticast mode [ 747.640883][T14304] bridge_slave_1: left promiscuous mode [ 747.646501][T14304] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.654144][T14304] bridge_slave_0: left allmulticast mode [ 747.659978][T14304] bridge_slave_0: left promiscuous mode [ 747.665630][T14304] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.862349][T14304] tipc: Left network mode Sent SIGKILL to all processes Requesting system poweroff [ 748.045484][T14304] veth1_macvtap: left promiscuous mode [ 748.051012][T14304] veth0_vlan: left promiscuous mode [ 748.056702][T14304] veth1_macvtap: left promiscuous mode [ 748.062320][T14304] veth0_vlan: left promiscuous mode [ 749.063502][T30548] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 749.070733][T30548] ACPI: PM: Preparing to enter system sleep state S5 [ 749.077760][T30548] kvm: exiting hardware virtualization [ 749.083301][T30548] reboot: Power down serialport: VM disconnected.